summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Update to 1.12 betaNalin Dahyabhai2013-11-194-140/+17
|
* BuildRequire: pkgconfig and package pkgconfig dataNalin Dahyabhai2013-11-191-2/+5
|
* Drop backports for RT#7656 and RT#7657Nalin Dahyabhai2013-11-194-293/+1
|
* Update for 1.12's removal of krb5_xfree()Nalin Dahyabhai2013-11-192-12/+12
|
* Drop OTP backportNalin Dahyabhai2013-11-193-5400/+1
|
* Untweak for 1.11.3Nalin Dahyabhai2013-11-192-0/+131
|
* Drop backport for RT#7590 and partial for RT#7680Nalin Dahyabhai2013-11-193-150/+1
|
* Drop backport for RT#7709Nalin Dahyabhai2013-11-192-58/+1
|
* Drop backports for RT#7682Nalin Dahyabhai2013-11-193-80/+1
|
* Drop obsolete patches to skip GSSRPC-over-UDP testNalin Dahyabhai2013-11-193-289/+3
| | | | | | - drop patches from master to not test GSSRPC-over-UDP and to not depend on the portmapper, which are areas where our build systems often give us trouble, too; obsolete
* Drop backport for RT#7643Nalin Dahyabhai2013-11-192-124/+1
|
* Drop backport for RT#7642Nalin Dahyabhai2013-11-192-494/+1
|
* Drop backport for RT#7172Nalin Dahyabhai2013-11-192-87/+1
|
* Drop backport for RT#7598Nalin Dahyabhai2013-11-192-133/+1
|
* Drop patch to teach config.* about aarch64-linuxNalin Dahyabhai2013-11-192-413/+1
|
* Drop obsolete patch fixing a test use-before-initNalin Dahyabhai2013-11-192-14/+1
|
* Update for 1.12Nalin Dahyabhai2013-11-193-31/+28
|
* Update for 1.12Nalin Dahyabhai2013-11-192-3/+3
|
* Update for 1.12Nalin Dahyabhai2013-11-192-3/+3
|
* Update for 1.12Nalin Dahyabhai2013-11-192-98/+62
|
* Update patch for 1.12Nalin Dahyabhai2013-11-192-20/+20
|
* Drop backport for RT#7689Nalin Dahyabhai2013-11-192-321/+1
|
* Drop backported patchNalin Dahyabhai2013-11-192-3323/+1
|
* Start rebasing to 1.12 alpha1Nalin Dahyabhai2013-11-191-8/+10
|
* Pull in keyring expiration from RT#7769krb5-1.11.4-2.fc21Nalin Dahyabhai2013-11-182-0/+131
| | | | | - pull in fix to set expiration times on keyrings used for storing keyring credential caches (RT#7769, #1031724)
* Pull in keyring offset storage from RT#7768Nalin Dahyabhai2013-11-182-1/+318
| | | | | - pull in fix to store KDC time offsets in keyring credential caches (RT#7768, #1030607)
* Note where CVE-2013-6800 was fixedNalin Dahyabhai2013-11-181-2/+3
| | | | | | CVE-2013-6800 appears to be fixed by the same patch that fixes CVE-2013-1418, so mention the first in changelog entries that refer to the second.
* Whoops, include the new sources, tookrb5-1.11.4-1.fc21Nalin Dahyabhai2013-11-122-3/+6
|
* Bump the release to 1Nalin Dahyabhai2013-11-121-1/+1
|
* Drop patch for CVE-2013-1418, included in 1.11.4Nalin Dahyabhai2013-11-122-37/+1
|
* Drop patch for RT#7706, obsoleted as RT#7723Nalin Dahyabhai2013-11-122-133/+1
|
* Drop patch for RT#7650, included in 1.11.4Nalin Dahyabhai2013-11-122-49/+1
|
* Start updating to 1.11.4Nalin Dahyabhai2013-11-121-3/+6
|
* Switch to the upstream patch for #1029110krb5-1.11.3-31.fc21krb5-1.11.3-31.fc20Nalin Dahyabhai2013-11-122-9/+18
| | | | | Switch to the simplified version of the patch for #1029110 that ended up being committed upstream (RT#7764).
* Fix a typo in a changelog entrykrb5-1.11.3-30.fc21krb5-1.11.3-30.fc20Nalin Dahyabhai2013-11-111-1/+1
|
* Catch more strtol() failures when using KEYRINGsNalin Dahyabhai2013-11-112-1/+43
| | | | | | - check more thorougly for errors when resolving KEYRING ccache names of type "persistent", which should only have a numeric UID as the next part of the name (#1029110)
* Point to the RT for the patch for the right branchkrb5-1.11.3-29.fc21krb5-1.11.3-29.fc20Nalin Dahyabhai2013-11-051-2/+2
|
* Switch to 1.11 backport of the CVE-2013-1418 patchNalin Dahyabhai2013-11-041-11/+11
|
* Incorporate patch for RT#7755 (CVE-2013-1418)Nalin Dahyabhai2013-11-042-1/+42
| | | | | - incorporate upstream patch for remote crash of KDCs which serve multiple realms simultaneously (RT#7755, CVE-2013-1418)
* Drop call-access()-more patch for ksuNalin Dahyabhai2013-11-042-50/+6
| | | | | | - drop patch to add additional access() checks to ksu - they add to breakage when non-FILE: caches are in use (#1026099), shouldn't be resulting in any benefit, and clash with proposed changes to fix its cache handling
* Expand on comments in the daemon wrapper scriptskrb5-1.11.3-27.fc21krb5-1.11.3-27.fc20Nalin Dahyabhai2013-10-223-1/+13
| | | | | - add some minimal description to the top of the wrapper scripts we use when starting krb5kdc and kadmind to describe why they exist (tooling)
* Create and own /etc/gss (#1019937)krb5-1.11.3-26.fc21krb5-1.11.3-26.fc20Nalin Dahyabhai2013-10-161-1/+10
|
* Pull up fix for reimporting ccaches in gssapikrb5-1.11.3-25.fc21krb5-1.11.3-25.fc20Nalin Dahyabhai2013-10-152-1/+138
| | | | | - pull up fix for importing previously-exported credential caches in the gssapi library (RT# 7706, #1019420)
* Finish fixing the don't-call-NULL-prompters bugkrb5-1.11.3-24.fc21krb5-1.11.3-24.fc20Nalin Dahyabhai2013-10-142-0/+58
| | | | - extract the rest of the fix #965721/#1016690 from the changes for RT#7680
* Use the prompter callback for PEM filesNalin Dahyabhai2013-10-142-1/+98
| | | | | - backport the callback to use the libkrb5 prompter when we can't load PEM files for PKINIT (RT#7590, includes part of #965721/#1016690)
* fix trigger's invocation of sed (#1016945)Nalin Dahyabhai2013-10-141-2/+5
| | | | - fix trigger scriptlet's invocation of sed (#1016945)
* - rebuild with keyutils 1.5.8 (part of #1012043)krb5-1.11.3-22.fc21Nalin Dahyabhai2013-10-041-3/+6
| | | | | | | | Rebuild against a keyutils which tags the new symbols we're using with a newer symbol version, so that RPM can tell the difference between versions of the package which contain a shared library that doesn't include them and versions of the package which contain a shared library which does.
* Updated persistent-keyring changes, set as defaultkrb5-1.11.3-21.fc21krb5-1.11.3-21.fc20Nalin Dahyabhai2013-10-024-1091/+1923
| | | | | | - switch to the version of persistent-keyring that was just merged to master (RT#7711), along with related changes to kinit (RT#7689) - go back to setting default_ccache_name to a KEYRING type
* pull up fix to call kdb check-transited-path firstkrb5-1.11.3-20.fc21krb5-1.11.3-20.fc20Nalin Dahyabhai2013-09-302-1/+64
| | | | | | - pull up fix for not calling a kdb plugin's check-transited-path method before calling the library's default version, which only knows how to read what's in the configuration file (RT#7709, #1013664)
* configure --without-krb5-configkrb5-1.11.3-19.fc21krb5-1.11.3-19.fc20Nalin Dahyabhai2013-09-261-1/+7
| | | | | | - configure --without-krb5-config so that we don't pull in the old default ccache name when we want to stop setting a default ccache name at configure- time