summaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
...
* Unfortunately, pre-1.7 krshd fails to support keyed checksums becauseSam Hartman2009-04-031-2/+2
| | | | | | | | | | | | | | | | it uses the wrong API and wrong key usage. So, if the auth_context has an explicit checksum type set, then respect that. kcmd sets such a checksum type. Also, because other applications may have the same problem, allow the config file variable if set to override the default checksum. * kcmd.c: Force use of rsa_md5 * init_ctx.c: do not default to md5 * mk_req_ext.c: allow auth_context to override ticket: 1624 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22160 dc483132-0cff-0310-8789-dd5450dbe970
* Use the preferred checksum for non-DES keys in the kdc_req path andSam Hartman2009-04-011-1/+2
| | | | | | | | | | | | all the time in the ap_req checksum path. This breaks code to support DCE versions prior to 1.1 but uses the correct checksum for protocol compatibility. ticket: 1624 Target_version: 1.7 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22154 dc483132-0cff-0310-8789-dd5450dbe970
* Document alias support in LDAP back endGreg Hudson2009-03-151-0/+20
| | | | | | | | | | | | Add a few paragraphs to the LDAP instructions on creating aliases through direct manipulation of the LDAP data, and briefly explain when aliases will be used. ticket: 6419 tags: pullup target_version: 1.7 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22089 dc483132-0cff-0310-8789-dd5450dbe970
* Improve LDAP admin documentationGreg Hudson2009-03-141-86/+101
| | | | | | | | | | | | | | | | | | Use dc=example,dc=com as the example base DN instead of more archaic forms. Provide a little more cross-referencing of concepts and mechanisms. Add additional steps in the OpenLDAP setup instructions for choosing DNs for the Kerberos container, KDC service, and kadmin service. Explain a little bit about what the Kerberos container and realm container are. Be clearer that using separate subtrees from the realm container for principals is an option, not a necessity, and don't use the base DN as an example of a separate subtree (it's confusing). ticket: 6418 target_version: 1.7 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22088 dc483132-0cff-0310-8789-dd5450dbe970
* fix merge of new openldap noticeKen Raeburn2009-01-051-3/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21698 dc483132-0cff-0310-8789-dd5450dbe970
* Merge mskrb-integ onto trunkSam Hartman2009-01-031-0/+63
| | | | | | | | | | | | | | | | | | | | | | | | The mskrb-integ branch includes support for the following projects: Projects/Aliases * Projects/PAC and principal APIs * Projects/AEAD encryption API * Projects/GSSAPI DCE * Projects/RFC 3244 In addition, it includes support for enctype negotiation, and a variety of GSS-API extensions. In the KDC it includes support for protocol transition, constrained delegation and a new authorization data interface. The old authorization data interface is also supported. This commit merges the mskrb-integ branch on to the trunk. Additional review and testing is required. Merge commit 'mskrb-integ' into trunk ticket: new status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21690 dc483132-0cff-0310-8789-dd5450dbe970
* Remove documentation references to krb4 functionality we no longerGreg Hudson2008-12-1812-7086/+2
| | | | | | | | | have. Remove the krb425 transition guide since we no longer have compatibility code to assist with a transition. ticket: 6303 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21545 dc483132-0cff-0310-8789-dd5450dbe970
* another diff test 4Tom Yu2008-12-171-7/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21519 dc483132-0cff-0310-8789-dd5450dbe970
* another diff test 3Tom Yu2008-12-171-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21518 dc483132-0cff-0310-8789-dd5450dbe970
* another diff test 2Tom Yu2008-12-171-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21517 dc483132-0cff-0310-8789-dd5450dbe970
* another diff testTom Yu2008-12-171-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21516 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffs 6Tom Yu2008-12-171-7/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21515 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffs 5Tom Yu2008-12-171-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21514 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffs 4Tom Yu2008-12-171-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21513 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffs 3Tom Yu2008-12-171-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21512 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffs 2Tom Yu2008-12-171-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21511 dc483132-0cff-0310-8789-dd5450dbe970
* test mailing diffsTom Yu2008-12-171-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21510 dc483132-0cff-0310-8789-dd5450dbe970
* Note kprop doesn't do IPv6 yet eitherKen Raeburn2008-11-171-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21135 dc483132-0cff-0310-8789-dd5450dbe970
* Add _with_password credential acquisition functions to KIM APIAlexandra Ellwood2008-11-0320-29/+194
| | | | | | | | Needed for kinit password option. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20963 dc483132-0cff-0310-8789-dd5450dbe970
* PKINIT specs, draft 9 and final standardKen Raeburn2008-10-102-0/+1247
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20859 dc483132-0cff-0310-8789-dd5450dbe970
* Updated documentation to reflect new APIs and re-ran DoxygenAlexandra Ellwood2008-10-0120-296/+601
| | | | | | ticket: 6055 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20806 dc483132-0cff-0310-8789-dd5450dbe970
* Added command line UI support.Alexandra Ellwood2008-09-2221-494/+148
| | | | | | | | | | | Added change password and acquire credentials UI harness support. API changes to the change password support to reflect these changes. Removed callback prompter interfaces since there is now plugin support. Updated documentation. ticket: 6055 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20745 dc483132-0cff-0310-8789-dd5450dbe970
* Removed kim_identity_get_gss_name and updated documentationAlexandra Ellwood2008-09-1822-1778/+1334
| | | | | | ticket: 6055 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20729 dc483132-0cff-0310-8789-dd5450dbe970
* some comments from LoveKen Raeburn2008-08-041-0/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20604 dc483132-0cff-0310-8789-dd5450dbe970
* note lack of policy propagationKen Raeburn2008-07-311-0/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20592 dc483132-0cff-0310-8789-dd5450dbe970
* Add Apple Inc. to copyright listsAlexandra Ellwood2008-07-221-0/+36
| | | | | | | ticket: new owner: tlyu git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20568 dc483132-0cff-0310-8789-dd5450dbe970
* Merge from branch sun-ipropKen Raeburn2008-06-243-2/+265
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20465 dc483132-0cff-0310-8789-dd5450dbe970
* Added kim documentationAlexandra Ellwood2008-05-0730-0/+8143
| | | | | | ticket: 5960 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20315 dc483132-0cff-0310-8789-dd5450dbe970
* Add documentation for error codes used for flow controlAlexandra Ellwood2007-10-0328-2300/+3537
| | | | | | ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20084 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed macro for cc_ccache_unlock and updated documentationAlexandra Ellwood2007-09-1026-37/+34
| | | | | | ticket: 4644 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19930 dc483132-0cff-0310-8789-dd5450dbe970
* Missing ../ in relative pathAlexandra Ellwood2007-08-271-1/+1
| | | | | | ticket: 5670 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19883 dc483132-0cff-0310-8789-dd5450dbe970
* Updated so that paths are now relative and don't contain my homedir.Alexandra Ellwood2007-08-271-6/+6
| | | | | | | | Oops. ticket: 5670 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19882 dc483132-0cff-0310-8789-dd5450dbe970
* Add documentation for CCAPIAlexandra Ellwood2007-08-2330-0/+6143
| | | | | | | | | Added Doxygen-based documentation to CredentialsCache.h and checked in a copy of the html output of that documentation. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19849 dc483132-0cff-0310-8789-dd5450dbe970
* Get rid of some old SunOS 4 config stuffKen Raeburn2007-08-081-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19762 dc483132-0cff-0310-8789-dd5450dbe970
* Add missing @end quotationKen Raeburn2007-08-041-0/+1
| | | | | | ticket: 5617 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19752 dc483132-0cff-0310-8789-dd5450dbe970
* Add PKINIT supportKevin Coffman2007-08-013-6/+464
| | | | | | | | | | | | | | | | Pull up PKINIT support onto the trunk. Changes from the version in branch users/coffman/pkinit are: - Update the preauth plugin interface version to avoid conflict with any existing plugins. - Add a pkcs11.h locally to the pkinit code rather than depending on opensc being installed. ticket: new Target_Version: 1.6.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19745 dc483132-0cff-0310-8789-dd5450dbe970
* Recommend snprintf/asprintf. Specify 'static inline'. Use @code for ↵Ken Raeburn2007-07-121-1/+39
| | | | | | in6addr_any git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19707 dc483132-0cff-0310-8789-dd5450dbe970
* initial draft contribution guidelinesTom Yu2007-06-201-0/+70
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19599 dc483132-0cff-0310-8789-dd5450dbe970
* Remove unused old .cvsignore filesKen Raeburn2007-04-213-37/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19519 dc483132-0cff-0310-8789-dd5450dbe970
* update copyrights and team membersTom Yu2007-04-131-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19467 dc483132-0cff-0310-8789-dd5450dbe970
* Add some notes on -Bsymbolic on ELF, and why we can't use itKen Raeburn2007-04-071-2/+19
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19405 dc483132-0cff-0310-8789-dd5450dbe970
* ideas for passing error msg info across kadm5 apiKen Raeburn2007-01-231-0/+59
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19109 dc483132-0cff-0310-8789-dd5450dbe970
* Document what the kadmind ACL is forRuss Allbery2007-01-051-4/+6
| | | | | | | | | | | | | Add a sentence documenting the purpose of the kadmind ACL to the node explaining how to create it. Ticket: 5279 Component: krb5-doc Version_Reported: 1.5.1 Target_Version: 1.6 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19036 dc483132-0cff-0310-8789-dd5450dbe970
* Document KDC behavior without stash fileRuss Allbery2007-01-041-0/+4
| | | | | | | | | | | | | After the discussion of the optional stash file, document the effects of not creating a stash file. ticket: new Component: krb5-doc Version_Reported: 1.5.1 Target_Version: 1.6 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19035 dc483132-0cff-0310-8789-dd5450dbe970
* Fix typo in user-guide.texinfoRuss Allbery2006-12-281-1/+1
| | | | | | | | | | | | Typo fix (network instead of netword). Thanks, Matt Zagrabelny. Ticket: new Component: krb5-doc Version_Reported: 1.4.4 Target_Version: 1.6 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19020 dc483132-0cff-0310-8789-dd5450dbe970
* don't split HTML output from makeinfoTom Yu2006-12-211-1/+1
| | | | | | | | | | | * doc/Makefile (HTML): To avoid generating excessively long filenames, don't split HTML output. ticket: new target_version: 1.6 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19002 dc483132-0cff-0310-8789-dd5450dbe970
* misc cleanups in admin guide ldap sectionsKen Raeburn2006-12-201-55/+98
| | | | | | | | | | | | | | | | | | | | There are a bunch of instances of incorrect punctuation, inconsistent use of @-commands with option names, typos in names of principal flags, and a couple spelling errors. I only fixed what I noticed; I haven't subjected the rest to careful review. Also, the long section names for eDirectory-specific documentation cause the tar files generated for snapshots (which include generated html docs) to reach the 100-character limit for file names in traditional tar format; GNU tar can create archives holding them, but older tar implementations cannot read the archives properly. So, several eDirectory-related section names have been shortened. ticket: new target: 1.6 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19001 dc483132-0cff-0310-8789-dd5450dbe970
* Restore inadvertently deleted section. Minor editorial changesTom Yu2006-12-181-70/+127
| | | | | | ticket: 5027 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18957 dc483132-0cff-0310-8789-dd5450dbe970
* pull up r18933 to trunkTom Yu2006-12-181-55/+1158
| | | | | | | | | | | | | | | r18933@cathode-dark-space: rsavitha | 2006-12-08 04:37:01 -0500 ticket: new subject: admin guide changes for the LDAP backend Target_Version: 1.6 Tags: pullup Added LDAP backend related information to the admin guide ticket: 5027 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18956 dc483132-0cff-0310-8789-dd5450dbe970
* update for krb5-1.6-beta1Tom Yu2006-12-012-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18904 dc483132-0cff-0310-8789-dd5450dbe970