summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Respin with updated version of patch for RT#7650krb5-1.11.2-10.fc20krb5-1.11.2-10.fc19Nalin Dahyabhai2013-05-311-1/+4
| | | | | Respin with updated version of patch for RT#7650, and don't forget to keep track of the bug ID (#969331).
* Update to version from master (differs only in ID)Nalin Dahyabhai2013-05-311-1/+1
| | | | | Update this patch to the version from upstream's master branch, which only changes the commit ID.
* Back out the krb5-1.11-run_user_0.patchkrb5-1.11.2-9.fc20Nalin Dahyabhai2013-05-301-6/+0
| | | | | | It's not a complete fix, and it may only muddy things further on systems that are having the kind of trouble it's trying to avoid, so hold off. For now, at least.
* Pull a fix for kinit going on an only-masters pathNalin Dahyabhai2013-05-302-0/+52
| | | | | | - pull in proposed fix for attempts to get initial creds, which end up following referrals, incorrectly trying to always use master KDCs if they talked to a master at any point (should fix RT#7650)
* Add a hackish attempt at a workaround for #961235Nalin Dahyabhai2013-05-302-0/+40
| | | | | | | | | Add a patch to create /run/user/0 if we're trying to resolve a DIR: ccache somewhere below it and neither the target location nor /run/user/0 exist yet. The better workaround is to set the location's owner to "linger" via logind, since even after we do what we're doing here, if the user logs in and logs back out, our location is still removed.
* Label DIR: ccache directories when we create themNalin Dahyabhai2013-05-302-1/+31
| | | | | - don't forget to set the SELinux label when creating the directory for a DIR: ccache
* Turn off some tests that master stopped doingkrb5-1.11.2-8.fc20Nalin Dahyabhai2013-05-304-17/+295
| | | | | | - pull in patches from master to not test GSSRPC-over-UDP and to not depend on the portmapper, which are areas where our build systems often give us trouble, too
* Actually bump the release numberkrb5-1.11.2-7.fc20Nalin Dahyabhai2013-05-281-1/+1
|
* Add proposed fix for handling AS client clock skewNalin Dahyabhai2013-05-283-0/+267
| | | | | | In addition to basing the contents of an encrypted-timestamp preauth data item on the server's idea of the current time, go ahead and do the same for the times in the request.
* Switch to upstream cherry-pick for this patchNalin Dahyabhai2013-05-281-8/+9
|
* Fix handling of empty passwords in get-init-credsNalin Dahyabhai2013-05-283-0/+620
|
* Fix transited realm checks in GSSAPI serversNalin Dahyabhai2013-05-282-0/+86
| | | | | - backport fix for not being able to verify the list of transited realms in GSS acceptors (RT#7639, #959685)
* Note the corresponding EL6 bug ID for referenceNalin Dahyabhai2013-05-281-1/+1
|
* fix to make some use of DIR::... KRB5CCNAME valueskrb5-1.11.2-6.fc20krb5-1.11.2-6.fc19Nalin Dahyabhai2013-05-212-1/+114
| | | | | | - pull in upstream fix to start treating a KRB5CCNAME value that begins with DIR:: the same as it would a DIR: value with just one ccache file in it (RT#7172, #965574)
* pull up fix for kpasswd service ping-pong attackkrb5-1.11.2-5.fc20krb5-1.11.2-5.fc19Nalin Dahyabhai2013-05-132-1/+71
| | | | | - pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443, #962531,#962534)
* Update otp patch; add keycheck patchNathaniel McCallum2013-05-036-1315/+1534
|
* make the default ccname change affect f19, tookrb5-1.11.2-3.fc20krb5-1.11.2-3.fc19Nalin Dahyabhai2013-04-231-3/+8
| | | | | | - pull the changing of the compiled-in default ccache location to DIR:/run/user/%%{uid}/krb5cc back into F19, in line with SSSD and the most recent pam_krb5 build
* correct some configuration file pathskrb5-1.11.2-2.fc20krb5-1.11.2-2.fc19Nalin Dahyabhai2013-04-172-1/+23
| | | | | Correct some configuration file paths which the KDC_DIR patch inadvertently changed.
* keep track of the message type of FAST requestskrb5-1.11.2-1.fc20krb5-1.11.2-1.fc19Nalin Dahyabhai2013-04-152-0/+32
| | | | | - pull in fix for keeping track of the message type when parsing FAST requests in the KDC (RT#7605, #951843)
* update to 1.11.2Nalin Dahyabhai2013-04-153-11/+16
| | | | | | - update to 1.11.2 - drop pulled in patch for RT#7586, included in this release - drop pulled in patch for RT#7592, included in this release
* included in 1.11.2Nalin Dahyabhai2013-04-152-147/+0
|
* set DEFCCNAME to DIR:/run/user/%{uid}/krb5ccNalin Dahyabhai2013-04-121-1/+9
| | | | | - move the compiled-in default ccache location from the previous default of FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)
* Update otp plugin backport patchesNathaniel McCallum2013-04-096-3895/+4037
|
* trying to get more of the tests to run on builderskrb5-1.11.1-7.fc20krb5-1.11.1-7.fc19Nalin Dahyabhai2013-04-032-2/+24
| | | | | | - when testing the RPC library, treat denials from the local portmapper the same as a portmapper-not-running situation, to allow other library tests to be run while building the package
* add RT number for most recent patchNalin Dahyabhai2013-04-011-1/+1
|
* teach gss_acquire_cred_from() about "client_keytab"krb5-1.11.1-6.fc20krb5-1.11.1-6.fc19Nalin Dahyabhai2013-03-282-0/+135
| | | | | - pull in Simo's patch to recognize "client_keytab" as a key type which can be passed in to gss_acquire_cred_from()
* package the right client keytab directoryNalin Dahyabhai2013-03-281-4/+11
| | | | | | | - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user, since that's what the libraries actually look for - add buildrequires on nss-myhostname, in an attempt to get more of the tests to run properly during builds
* pull in arm 64 (aarch64) build tweakskrb5-1.11.1-5.fc20krb5-1.11.1-5.fc19Nalin Dahyabhai2013-03-262-3/+419
| | | | | - go back to using reconf to run autoconf and autoheader (part of #925640) - add temporary patch to use newer config.guess/config.sub (more of #925640)
* specify backup suffixes, like we doNalin Dahyabhai2013-03-261-4/+3
|
* pull up patch to mark imported gss contexts rightNalin Dahyabhai2013-03-262-1/+112
| | | | | - pull up Simo's patch to mark the correct mechanism on imported GSSAPI contexts (RT#7592)
* tweak buildrequires conditionals for el7 buildsNalin Dahyabhai2013-03-181-1/+5
| | | | | - fix a version comparison to expect newer texlive build requirements when %%{_rhel} > 6 rather than when it's > 7
* first round of the otp pluginkrb5-1.11.1-4.fc20krb5-1.11.1-4.fc19Nathaniel McCallum2013-03-114-1/+5056
|
* fix a memory leak when obtaining creds via keytabskrb5-1.11.1-3.fc19Nalin Dahyabhai2013-02-282-1/+48
| | | | - fix a memory leak when acquiring credentials using a keytab (RT#7586, #911110)
* escape uses of macros in comments (more of 884065)Nalin Dahyabhai2013-02-271-2/+3
| | | | escape uses of macros in comments (more of #884065)
* drop the kerberos-iv portreserve fileNalin Dahyabhai2013-02-273-17/+15
| | | | | | drop the kerberos-iv portreserve file (long overdue), and drop the rest on systemd systems, since we don't currently poke portreserve when we're starting a service
* prebuild PDF docs to reduce multilib differencesNalin Dahyabhai2013-02-272-3/+14
| | | | prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
* update to 1.11.1krb5-1.11.1-1.fc19Nalin Dahyabhai2013-02-253-24/+10
| | | | | | update to 1.11.1 - drop patch for noticing negative timeouts being passed to the poll() wrapper in the client transmit functions
* set "rdns = false" in the default krb5.confNalin Dahyabhai2013-02-082-1/+5
| | | | set "rdns = false" in the default krb5.conf (#908323)
* update to 1.11 releasekrb5-1.11-1.fc19Nalin Dahyabhai2012-12-183-9/+15
| | | | | | - update to the 1.11 final release - drop the rawbuild tag from a couple of patches which we don't actually need to apply to get things to compile the way the package expects
* update to 1.11 beta 2krb5-1.11-0.fc19.beta2.0Nalin Dahyabhai2012-12-133-7/+12
|
* move a non-system libverto to the -libs subpackageNalin Dahyabhai2012-12-131-4/+6
| | | | | - when building with our bundled copy of libverto, package it in with -libs rather than with -server (#886049)
* update to 1.11 beta 1krb5-1.11-0.fc19.beta1.0Nalin Dahyabhai2012-11-213-17/+20
|
* packaging tweaksNalin Dahyabhai2012-11-162-1/+25
| | | | | | - handle releases where texlive packaging wasn't yet as complicated as it is in Fedora 18 - fix an uninitialized-variable error building one of the test programs
* more tweaks to try to get doc building workingkrb5-1.11-0.fc19.alpha1.0Nalin Dahyabhai2012-11-161-0/+7
|
* just drop package-level deps on tex altogetherNalin Dahyabhai2012-11-161-5/+4
|
* sure, okay.Nalin Dahyabhai2012-11-161-2/+2
|
* require pdflatex and makeindexNalin Dahyabhai2012-11-161-0/+2
|
* don't dummy up required stylesheets, require themNalin Dahyabhai2012-11-161-1/+14
|
* also note the multilib impact in the docsNalin Dahyabhai2012-11-161-1/+2
|
* drop a pair of obsoleted patchesNalin Dahyabhai2012-11-162-44/+0
|
generated by cgit (git 2.34.1) at 2024-06-09 17:19:20 +0000