summaryrefslogtreecommitdiffstats
path: root/doc
Commit message (Collapse)AuthorAgeFilesLines
...
* Add a note about how to apply/remove policiesBrad Davis2013-08-161-0/+9
| | | | | | | | | Put a note in the the policies section of the documentation for how to apply policies to principals. [kaduk@mit.edu: reformat commit message] ticket: 7693 (new)
* Document hostrealm interfaceGreg Hudson2013-08-153-0/+66
| | | | ticket: 7687
* Remove redundant domain_realm mappingsBen Kaduk2013-08-121-7/+11
| | | | | | | | | | | | | | | | | | | This fixes a long-standing documentation bug where we claimed that a domain_realm mapping for a host name would not affect entries under that domain name. The code has always had the behavior where a host name mapping implies the corresponding domain name mapping, since the 1.0 release. While here, replace media-lab with csail in example files, as the media lab realm is no longer in use. Also strip port 88 from KDC specifications, and drop the harmful default_{tgs,tkt}_enctypes lines from src/util/profile/krb5.conf. Further cleanup on these files to remove defunct realms may be in order. ticket: 7690 (new) tags: pullup target_version: 1.11.4
* Fix doc build after PKINIT responder changesGreg Hudson2013-07-182-0/+6
| | | | Add new types and constants to the apiref index files.
* Add non-JSON APIs for PKINIT responder itemsNalin Dahyabhai2013-07-172-0/+19
| | | | | | | | | | | | | | | | | Add wrappers for the JSON-oriented APIs for PKINIT responder items, modeled after the API we provide for OTP items: * krb5_responder_pkinit_get_challenge() returns the list of identities for which we need PINs * krb5_responder_pkinit_challenge_free() frees the structure that was returned by krb5_responder_pkinit_get_challenge() * krb5_responder_pkinit_set_answer() sets the answer to the PIN for one of the identities [ghudson@mit.edu: style cleanup; added comment pointing to main body of PKINIT module] ticket: 7680
* Add kadmin support for principals without keysGreg Hudson2013-07-151-2/+8
| | | | | | | | | Add kadmin support for "addprinc -nokey", which creates a principal with no keys, and "purgekeys -all", which deletes all keys from a principal. The KDC was modified by #7630 to support principals without keys. ticket: 7679 (new)
* Add server-side otp preauth pluginNathaniel McCallum2013-07-113-0/+152
| | | | | | | | | | This plugin implements the proposal for providing OTP support by proxying requests to RADIUS. Details can be found inside the provided documentation as well as on the project page. http://k5wiki.kerberos.org/wiki/Projects/OTPOverRADIUS ticket: 7678
* Mention old preauth header file in docsGreg Hudson2013-07-102-2/+4
| | | | | | | The previous commit updated the header file references for 1.12 in the clpreauth and kdcpreauth plugin interface documentation. Add a parenthetical so that the reference is still useful for prior releases.
* Reference correct preauth header filesGreg Hudson2013-07-032-2/+2
| | | | | | The clpreauth and kdcpreauth header files are split up for 1.12. In clpreauth.rst and kdcpreauth.rst, reference the correct header files for each.
* Document dict_file formatGreg Hudson2013-07-011-3/+4
| | | | | Briefly describe the format of the kadmin dictionary file in kdc_conf.rst.
* Rely on module ordering for localauthGreg Hudson2013-06-272-19/+19
| | | | | | | Register built-in localauth modules in the order we want them used by default, and document accordingly. ticket: 7665
* Provide plugin module ordering guaranteesGreg Hudson2013-06-271-0/+6
| | | | | | | | Rewrite the plugin internals so that modules have a well-defined order--either the order of enable_only tags, or dynamic modules followed by the built-in modules in order of registration. ticket: 7665 (new)
* Clean up dangling antecedent in allow_weak_cryptoBen Kaduk2013-05-311-6/+6
| | | | | | | | | | The "previous three lists" are not previous any more. Say explicitly which three lists, and make the parenthetical bind to the correct noun. ticket: 7655 (new) tags: pullup target_version: 1.11.4
* Clarify retiring-des based on user feedbackBen Kaduk2013-05-311-2/+18
| | | | | | | | | Explain why DES keys should be removed from principals, and clarify that allow_weak_crypto overrides all other configuration. ticket: 7654 (new) tags: pullup target_version: 1.11.4
* Document preauth flags for service principalsBen Kaduk2013-05-311-2/+8
| | | | | | | | | These flags are overloaded to mean different things for clients and servers; previously we only documented the client behavior. ticket: 7653 (new) tags: pullup target_version: 1.11.4
* Add AES-NI support on LinuxGreg Hudson2013-05-241-0/+3
| | | | | | | If yasm and cpuid.h are present on a Linux i686 or x64 system, compile the modified Intel AES-NI assembly sources. In the builtin AES enc provider, check at runtime whether the CPU supports AES-NI instructions and use the assembly functions if so.
* Add Intel AESNI assembly filesGreg Hudson2013-05-241-0/+38
| | | | | | Add assembly files from the Intel AESNI Sample Library, version 1.2, which implement AES encryption using AES-NI instructions. Trailing whitespace was removed.
* Clarify that kdc.conf and krb5.conf are mergedBen Kaduk2013-05-202-1/+14
| | | | These two files are merged into the profile for KDC applications
* Don't use portmapper in RPC testsGreg Hudson2013-05-011-3/+0
| | | | | | | | On many Linux systems, due to what is arguably a bug in rpcbind, the portmapper doesn't allow service registration from non-root processes. This causes the RPC tests to be frequently skipped. Modify the tests so that they don't need the portmapper, by grabbing the port number from the server process and passing it to the client.
* Fix doc buildBen Kaduk2013-04-181-0/+1
| | | | | | The addition of the KRB5_PADATA_AS_CHECKSUM macro in d7d74867952f caused the doxygen bridge to emit a new RST file. This file was not included in the API reference toctree, causing a build failure in maintainer-mode.
* Add a krb5-config man pageBen Kaduk2013-04-033-0/+87
| | | | Missed when converting the old nroff man pages.
* Add krb5_kt_dup API and use it in two placesGreg Hudson2013-04-011-0/+1
| | | | | | | Add an API to duplicate keytab handles, mirroring krb5_cc_dup. Use it to simplify the krb5 GSS acquire_cred code. ticket: 7599 (new)
* Replace "First introduced" with concise "New"Zhanna Tsitkov2013-03-255-13/+10
|
* Rebuild NOTICE for 2013Ben Kaduk2013-03-211-2/+2
| | | | | | Also exclude copyright.rst from the notice.txt build, as maintainer-mode builds error out due to the "document isn't included in any toctree" warning otherwise produced.
* Documentation Copyrights notice dates: 1985-2013Zhanna Tsitkov2013-03-203-3/+3
|
* Add support for k5srvutil -e keysaltsAlex Dehnert2013-03-111-1/+4
| | | | | | | | | | | k5srvutil is a little more convenient to use for rolling keys than kadmin is. When migrating off 1DES, though, it may be desirable to explicitly specify the desired keysalts. This adds an option, -e, to k5srvutil to specify desired keysalts. [ghudson@mit.edu: style fix; make whitespace in keysalt list work] ticket: 7589 (new)
* Document localauth interfaceGreg Hudson2013-03-093-0/+79
| | | | ticket: 7583
* Add krb5_free_enctypes APIGreg Hudson2013-02-271-0/+1
| | | | | | | Rename krb5_free_ktypes to krb5_free_enctypes and add it to the public API. ticket: 7584
* Remove -b6 and -old dump formatsGreg Hudson2013-02-041-21/+5
| | | | | | | Get rid of the code to dump and load -b6 and -old format dump files. Loading these versions hasn't worked since at least 1.3. ticket: 7564 (new)
* Refactor rellinks formatting in layout.htmlTom Yu2013-01-311-23/+15
|
* Reduce copied code in layout.htmlTom Yu2013-01-311-30/+20
| | | | | | layout.html unneccesarily copied code from the parent agogo/layout.html content block just to alter the sidebar. Override various subblocks of the sidebar instead.
* Consolidate style settings in kerb.cssTom Yu2013-01-312-8/+11
| | | | | | Move style settings that were previously in layout.html to kerb.css. Rename kerb.css kerb.css_t, making it a template, to allow parameterized style settings to remain parameterized.
* Fix "search" accesskey in layout.htmlTom Yu2013-01-311-1/+1
| | | | | | | | | The accesskey for the "search" link conflicted with the one for the "contents" link. ticket: 7559 (new) target_version: 1.11.1 tags: pullup
* Fix typos in layout.htmlTom Yu2013-01-311-3/+3
| | | | | | | | There were multiple misplaced semicolons, etc. ticket: 7558 (new) target_version: 1.11.1 tags: pullup
* Fix h1 end tag in Sphinx header titlesTom Yu2013-01-312-2/+8
| | | | | | | | | | A </h1> end tag was incorrectly written as <h1>. Also adjust style settings so that the resulting computed style remains the same for div.rel. ticket: 7557 (new) target_version: 1.11.1 tags: pullup
* New section: Contributing to Kerb documentationZhanna Tsitkov2013-01-311-14/+17
|
* Note which release -x debug was added inGreg Hudson2013-01-293-2/+5
|
* Add LDAP debug DB optionGreg Hudson2013-01-283-0/+17
| | | | | | | Add a DB option in the LDAP KDB module to turn on debugging messages. Adapted from a patch by Zoran Pericic <zpericic@inet.hr>. ticket: 7551 (new)
* Revert previous ("Sphinx doc: consolidate...")Tom Yu2013-01-162-14/+13
| | | | | | | | This reverts commit 87634edc472cebde4a37d002b7006ed38a1b25c2. That commit is not neutral with respect to the rendering of the HTML, and causes the version built with the logo to look unacceptably disordered.
* Sphinx doc: consolidate style markup in kerb.cssZhanna Tsitkov2013-01-162-13/+14
|
* Help Sphinx to diff C-types for better x-referenceZhanna Tsitkov2013-01-141-0/+4
| | | | | | In some cases Doxygen xml output does not provide accurate classification of the various C-types, thus preventing the full documentation x-referencing. Give some hints to the Doxy/RST bridge.
* Flesh out responder context doxygen markupGreg Hudson2013-01-112-1/+2
|
* Modify rst toolkit to handle "linebreak" tagZhanna Tsitkov2013-01-111-0/+3
|
* Fix label conflicts in Sphinx documentationZhanna Tsitkov2013-01-115-8/+8
|
* Update the Copyright year to 2012-2013Zhanna Tsitkov2013-01-111-1/+1
|
* Reconfigure MIT Kerb Features doc: dont use tablesZhanna Tsitkov2013-01-107-96/+100
| | | | Also, update references to the existing documents.
* Update release numbers, refs in feature list docZhanna Tsitkov2013-01-091-3/+3
| | | | | | At the moment the latest release number is 1.11 and the supported releases are 1.10 and 1.9. Also, update some references to the documents and fix typos.
* In MIT feature list doc update release number,refsZhanna Tsitkov2013-01-091-7/+8
|
* Document "first introduced version" in conf filesZhanna Tsitkov2013-01-072-6/+10
| | | | | For the config options that were introduced starting from release 1.9, specify the release number.
* Add release string to index.rst page headingTom Yu2012-12-171-2/+2
| | | | | | ticket: 7515 (new) target_version: 1.11 tags: pullup
generated by cgit (git 2.34.1) at 2025-09-25 16:40:02 +0000