<feed xmlns='http://www.w3.org/2005/Atom'>
<title>krb5.git/src/windows/installer, branch keyring</title>
<subtitle>MIT Kerberos patches</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/'/>
<entry>
<title>Use new-style variable expansion for light.exe</title>
<updated>2013-10-04T18:21:21+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2013-06-28T22:08:21+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=abeed0da177a5c58eb3fa0a72e473fed294ae884'/>
<id>abeed0da177a5c58eb3fa0a72e473fed294ae884</id>
<content type='text'>
With WiX 3.x, the preprocessor candle.exe expands variables using
$(); the linker light.exe expands localization and similar variables
using !(), though it accepts the $() form and prints a warning.

Switch to using the expected form to silence the warnings.

ticket: 7390
tags: pullup
target_version 1.11.4
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
With WiX 3.x, the preprocessor candle.exe expands variables using
$(); the linker light.exe expands localization and similar variables
using !(), though it accepts the $() form and prints a warning.

Switch to using the expected form to silence the warnings.

ticket: 7390
tags: pullup
target_version 1.11.4
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove redundant domain_realm mappings</title>
<updated>2013-08-12T19:28:07+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2013-08-12T17:47:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=8f5ce824012f2caab6770df464f096c38dc4cb2e'/>
<id>8f5ce824012f2caab6770df464f096c38dc4cb2e</id>
<content type='text'>
This fixes a long-standing documentation bug where we claimed that
a domain_realm mapping for a host name would not affect entries
under that domain name.  The code has always had the behavior where
a host name mapping implies the corresponding domain name mapping,
since the 1.0 release.

While here, replace media-lab with csail in example files, as the
media lab realm is no longer in use.  Also strip port 88 from KDC
specifications, and drop the harmful default_{tgs,tkt}_enctypes
lines from src/util/profile/krb5.conf.

Further cleanup on these files to remove defunct realms may be in order.

ticket: 7690 (new)
tags: pullup
target_version: 1.11.4
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This fixes a long-standing documentation bug where we claimed that
a domain_realm mapping for a host name would not affect entries
under that domain name.  The code has always had the behavior where
a host name mapping implies the corresponding domain name mapping,
since the 1.0 release.

While here, replace media-lab with csail in example files, as the
media lab realm is no longer in use.  Also strip port 88 from KDC
specifications, and drop the harmful default_{tgs,tkt}_enctypes
lines from src/util/profile/krb5.conf.

Further cleanup on these files to remove defunct realms may be in order.

ticket: 7690 (new)
tags: pullup
target_version: 1.11.4
</pre>
</div>
</content>
</entry>
<entry>
<title>Require Windows Installer 4.5 or higher</title>
<updated>2013-06-28T17:10:33+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2013-06-26T20:30:41+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=35602228f3c49a0fa0c096236c9653af8d72f42e'/>
<id>35602228f3c49a0fa0c096236c9653af8d72f42e</id>
<content type='text'>
As advised by the VC 11 merge modules.

Windows Installer 4.5 requires Windows Server 2008, Windows Vista, Windows XP
with Service Pack 2 (SP2) and later, or Windows Server 2003 with Service
Pack 1 (SP1) and later.  I believe we already enforce these restrictions
manually elsewhere, so this should not restrict our set of valid target
machines.

ticket: 7667 (new)
queue: kfw
tags: pullup
target_version: 1.11.4
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
As advised by the VC 11 merge modules.

Windows Installer 4.5 requires Windows Server 2008, Windows Vista, Windows XP
with Service Pack 2 (SP2) and later, or Windows Server 2003 with Service
Pack 1 (SP1) and later.  I believe we already enforce these restrictions
manually elsewhere, so this should not restrict our set of valid target
machines.

ticket: 7667 (new)
queue: kfw
tags: pullup
target_version: 1.11.4
</pre>
</div>
</content>
</entry>
<entry>
<title>WiX support for building with VS 2012</title>
<updated>2013-06-28T17:10:33+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2013-06-26T19:11:37+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=03b2650337de03e2cd54896c2e86b0f76e1491fe'/>
<id>03b2650337de03e2cd54896c2e86b0f76e1491fe</id>
<content type='text'>
The merge modules need to reference VC110 paths.
Use a variable for VC100 versus VC110 so that we don't copy a lot
of boilerplate around.

ticket: 7666 (new)
queue: kfw
tags: pullup
target_version: 1.11.4
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The merge modules need to reference VC110 paths.
Use a variable for VC100 versus VC110 so that we don't copy a lot
of boilerplate around.

ticket: 7666 (new)
queue: kfw
tags: pullup
target_version: 1.11.4
</pre>
</div>
</content>
</entry>
<entry>
<title>Remove NSIS installs when upgrading to 64-bit</title>
<updated>2012-09-18T21:53:18+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2012-09-18T21:53:18+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=4d3200ca369b47e8cf6966ae7670823d57ef2b3f'/>
<id>4d3200ca369b47e8cf6966ae7670823d57ef2b3f</id>
<content type='text'>
The NSIS installer appears to have only ever existed as a 32-bit
software.  As such, unconditionally check the 32-bit registry tree
for an uninstall string; the architecture of the current package
being installed is not relevant to what was previously installed.

ticket: 7362 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The NSIS installer appears to have only ever existed as a 32-bit
software.  As such, unconditionally check the 32-bit registry tree
for an uninstall string; the architecture of the current package
being installed is not relevant to what was previously installed.

ticket: 7362 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Improve LEASHAUTOINIT description</title>
<updated>2012-09-12T19:44:02+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2012-09-12T18:17:59+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=d9af383d069b571457849dea77dbef01ccb55370'/>
<id>d9af383d069b571457849dea77dbef01ccb55370</id>
<content type='text'>
This installer option determines whether the -autoinit argument
is passed to the MIT Kerberos executable.
On startup, if this argument is passed, and if there are no tickets
in the default cache, and if no useful tickets can be imported from
the LSA cache, MIT Kerberos will open the get ticket dialog and prompt
for a password; this option does not appear to have any other effect.

ticket: 7357 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This installer option determines whether the -autoinit argument
is passed to the MIT Kerberos executable.
On startup, if this argument is passed, and if there are no tickets
in the default cache, and if no useful tickets can be imported from
the LSA cache, MIT Kerberos will open the get ticket dialog and prompt
for a password; this option does not appear to have any other effect.

ticket: 7357 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Use separate components for shortcuts</title>
<updated>2012-08-31T19:32:55+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2012-08-31T17:41:26+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=fe9a1d24c5ce9dd415658493c1811aa9e54aebce'/>
<id>fe9a1d24c5ce9dd415658493c1811aa9e54aebce</id>
<content type='text'>
Since the Start Menu and Desktop are different folders, we should
use different components for the shortcuts in those folders, given
that components operate at directory granularity.

Take the opportunity to use the newer style for installing shortcuts
and registry keys, and make the names more descriptive.

Increment the buildlevel to ensure new files are installed.

ticket: 7348 (new)
subject: Use more meaningfully named registry keys for shortcuts
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Since the Start Menu and Desktop are different folders, we should
use different components for the shortcuts in those folders, given
that components operate at directory granularity.

Take the opportunity to use the newer style for installing shortcuts
and registry keys, and make the names more descriptive.

Increment the buildlevel to ensure new files are installed.

ticket: 7348 (new)
subject: Use more meaningfully named registry keys for shortcuts
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix KfW startup shortcut installation</title>
<updated>2012-08-29T20:34:46+00:00</updated>
<author>
<name>Kevin Wasserman</name>
<email>kevin.wasserman@painless-security.com</email>
</author>
<published>2012-08-21T17:48:32+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=626c4055d65e5f0089b634c9fe4a4f6cad21dece'/>
<id>626c4055d65e5f0089b634c9fe4a4f6cad21dece</id>
<content type='text'>
Signed-off-by: Kevin Wasserman &lt;kevin.wasserman@painless-security.com&gt;

ticket: 7341 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Kevin Wasserman &lt;kevin.wasserman@painless-security.com&gt;

ticket: 7341 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Replace NIM with "MIT Kerberos" in installer text</title>
<updated>2012-08-29T20:34:45+00:00</updated>
<author>
<name>Kevin Wasserman</name>
<email>kevin.wasserman@painless-security.com</email>
</author>
<published>2012-08-17T16:15:53+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=7b3773358f2876d0f36ef2659824d6accc93c82c'/>
<id>7b3773358f2876d0f36ef2659824d6accc93c82c</id>
<content type='text'>
Signed-off-by: Kevin Wasserman &lt;kevin.wasserman@painless-security.com&gt;

ticket: 7338 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Kevin Wasserman &lt;kevin.wasserman@painless-security.com&gt;

ticket: 7338 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
<entry>
<title>Kill running processes on upgrades/uninstalls</title>
<updated>2012-08-29T20:34:38+00:00</updated>
<author>
<name>Ben Kaduk</name>
<email>kaduk@mit.edu</email>
</author>
<published>2012-08-16T20:03:48+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/simo/public_git/krb5.git/commit/?id=79e5540860d077693e70b340db4d69d5e15107b7'/>
<id>79e5540860d077693e70b340db4d69d5e15107b7</id>
<content type='text'>
The InstallValidate action of the windows installer will bring up
a dialog informing us that some currently running processes must
be terminated before installation may proceed, and offers to do so,
but does not actually kill the processes.  We have our own code to
kill running processes which did not execute, for two reasons:
it was sequenced after InstallValidate, and we did not have a current
list of processes to look for.

Add the right processes to look for and kill, and use our own
process-killing code since it actually works.

ticket: 7343 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The InstallValidate action of the windows installer will bring up
a dialog informing us that some currently running processes must
be terminated before installation may proceed, and offers to do so,
but does not actually kill the processes.  We have our own code to
kill running processes which did not execute, for two reasons:
it was sequenced after InstallValidate, and we did not have a current
list of processes to look for.

Add the right processes to look for and kill, and use our own
process-killing code since it actually works.

ticket: 7343 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
</pre>
</div>
</content>
</entry>
</feed>
