summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* configure --without-krb5-configkrb5-1.11.3-19.fc21krb5-1.11.3-19.fc20Nalin Dahyabhai2013-09-261-1/+7
| | | | | | - configure --without-krb5-config so that we don't pull in the old default ccache name when we want to stop setting a default ccache name at configure- time
* - fix broken dependency on awk (rdieter)krb5-1.11.3-18.fc21krb5-1.11.3-18.fc20Nalin Dahyabhai2013-09-251-2/+5
| | | | - fix broken dependency on awk (should be gawk, rdieter)
* add missing dependency on newer keyutils-libskrb5-1.11.3-17.fc21krb5-1.11.3-17.fc20Nalin Dahyabhai2013-09-251-2/+6
| | | | - add missing dependency on newer keyutils-libs (#1012034)
* Back to DIR: caches by default, for nowkrb5-1.11.3-16.fc21krb5-1.11.3-16.fc20Nalin Dahyabhai2013-09-241-14/+34
| | | | | - back out setting default_ccache_name to the new default for now, resetting it to the old default while the kernel/keyutils bits get sorted (sgallagh)
* buildrequire the newest keyutilskrb5-1.11.3-15.fc21krb5-1.11.3-15.fc20Nalin Dahyabhai2013-09-231-2/+6
| | | | | - add explicit build-time dependency on a version of keyutils that's new enough to include keyctl_get_persistent() (more of #991148)
* pull in an updated persistent_keyring.patchkrb5-1.11.3-14.fc21krb5-1.11.3-14.fc20Nalin Dahyabhai2013-09-192-188/+184
| | | | | - incorporate Simo's updated backport of his updated persistent-keyring changes (more of #991148)
* Don't break during %%check with revoked keyringskrb5-1.11.3-13.fc21krb5-1.11.3-13.fc20Nalin Dahyabhai2013-09-131-6/+10
| | | | | If the session keyring is revoked, we'll to walk the ccache collections. Work around that so that we don't have to go and disable more tests.
* pull the newer F21 defaults back to F20 (sgallagh)krb5-1.11.3-12.fc21krb5-1.11.3-12.fc20Nalin Dahyabhai2013-09-131-4/+7
|
* Only create /run/user/0 on releases where we use itNalin Dahyabhai2013-09-091-0/+7
| | | | | - only apply the patch to autocreate /run/user/0 when we're hard-wiring the default ccache location to be under it; otherwise it's unnecessary
* Don't pass a "script" to ldconfigkrb5-1.11.3-11.fc21Nalin Dahyabhai2013-09-091-3/+7
| | | | | - don't let comments intended for one scriptlet become part of the "script" that gets passed to ldconfig as part of another one (Mattias Ellert, #1005675)
* Conditional triggerun to set default_ccache_namekrb5-1.11.3-10.fc21Nalin Dahyabhai2013-09-061-0/+36
| | | | | | | - on releases where we expect krb5.conf to be configured with a default_ccache_name, add it whenever we upgrade from an older version of the package that wouldn't have included it in its default configuration file (#991148)
* Set the default ccname via config, not at buildNalin Dahyabhai2013-09-061-3/+25
| | | | | - restore build-time default DEFCCNAME on Fedora 21 and later and EL, and instead set it in the default krb5.conf's [libdefaults] section (#991148)
* - restore build-time default DEFCCNAME on F21, ELNalin Dahyabhai2013-09-061-1/+2
| | | | - restore build-time default DEFCCNAME on Fedora 21 and later and EL (#991148)
* - incorporate backported persistent-keyring (Simo)Nalin Dahyabhai2013-09-062-1/+2806
| | | | - incorporate Simo's backport of his persistent-keyring changes (#991148)
* ship an nss_wrappers snapshot, not a git repokrb5-1.11.3-9.fc21krb5-1.11.3-9.fc20krb5-1.11.3-9.fc19Nalin Dahyabhai2013-08-233-2/+6
| | | | | | - switch to just the snapshot of nss_wrapper we were using, since we no longer need to carry anything that isn't in the cwrap.org repository (ssorce)
* UnversionedDocdirs, take twoNalin Dahyabhai2013-08-231-5/+9
| | | | | - take another stab at accounting for UnversionedDocdirs for the -libs subpackage (spotted by ssorce)
* Do the horrible hostname check _before_ faking itNalin Dahyabhai2013-08-151-6/+7
|
* Fix error detection when starting kpropd/kadmindkrb5-1.11.3-8.fc20krb5-1.11.3-8.fc19Nalin Dahyabhai2013-08-155-7/+41
| | | | | | | | | - drop a patch we're not applying - wrap kadmind and kpropd in scripts which check for the presence/absence of files which dictate particular exit codes before exec'ing the actual binaries, instead of trying to use ConditionPathExists in the unit files to accomplish that, so that we exit with failure properly when what we expect isn't actually in effect on the system (#800343)
* Assume 32 when __isa_bits isn't definedkrb5-1.11.3-7.fc20Nalin Dahyabhai2013-07-291-1/+1
|
* fixup for UnversionedDocdirsNalin Dahyabhai2013-07-291-3/+10
| | | | - attempt to account for UnversionedDocdirs for the -libs subpackage
* tweak configs used by testskrb5-1.11.3-6.fc19Nalin Dahyabhai2013-07-263-16/+82
| | | | | | - tweak configuration files used during tests to try to reduce the number of conflicts encountered when builds for multiple arches land on the same builder
* Backport from RT#7682Nalin Dahyabhai2013-07-223-1/+85
| | | | - pull up changes to allow GSSAPI modules to provide more functions (RT#7682, #986564/#986565)
* Add that missing new source fileNalin Dahyabhai2013-07-192-0/+87
|
* Use LD_PRELOAD to be able to run more self-testsNalin Dahyabhai2013-07-192-6/+42
| | | | | | Use nss_wrapper (from cwrap.org) to be able to run more of the self-tests during %%check. Help it along a little bit by being more emphatic about cutting off access to DNS.
* Use %%{?_isa} when hard-coding deps on krb5-libskrb5-1.11.3-3.fc20krb5-1.11.3-3.fc19Nalin Dahyabhai2013-07-011-7/+11
| | | | | - specify dependencies on the same arch of krb5-libs by using the %%{?_isa} suffix, to avoid dragging 32-bit libraries onto 64-bit systems (#980155)
* Bring back "Back out the krb5-1.11-run_user_0.patch"krb5-1.11.3-2.fc20krb5-1.11.3-2.fc19Nalin Dahyabhai2013-06-131-1/+9
| | | | | | | | | This reverts commit 8a5a8d492cc94cccf9b1a5b55377485f00807b7d. Special-case /run/user/0, attempting to create it when resolving a directory cache below it fails due to ENOENT and we find that it doesn't already exist, either, before attempting to create the directory cache (maybe helping, maybe just making things more confusing for #961235).
* update .gitignorekrb5-1.11.3-1.fc20krb5-1.11.3-1.fc19Nalin Dahyabhai2013-06-041-0/+3
|
* update to 1.11.3Nalin Dahyabhai2013-06-046-185/+43
| | | | | | | | - update to 1.11.3 - drop patch for RT#7605, fixed in this release - drop patch for CVE-2002-2443, fixed in this release - drop patch for RT#7369, fixed in this release - pull upstream fix for breaking t_skew.py by adding the patch for #961221
* Respin with updated version of patch for RT#7650krb5-1.11.2-10.fc20krb5-1.11.2-10.fc19Nalin Dahyabhai2013-05-311-1/+4
| | | | | Respin with updated version of patch for RT#7650, and don't forget to keep track of the bug ID (#969331).
* Update to version from master (differs only in ID)Nalin Dahyabhai2013-05-311-1/+1
| | | | | Update this patch to the version from upstream's master branch, which only changes the commit ID.
* Back out the krb5-1.11-run_user_0.patchkrb5-1.11.2-9.fc20Nalin Dahyabhai2013-05-301-6/+0
| | | | | | It's not a complete fix, and it may only muddy things further on systems that are having the kind of trouble it's trying to avoid, so hold off. For now, at least.
* Pull a fix for kinit going on an only-masters pathNalin Dahyabhai2013-05-302-0/+52
| | | | | | - pull in proposed fix for attempts to get initial creds, which end up following referrals, incorrectly trying to always use master KDCs if they talked to a master at any point (should fix RT#7650)
* Add a hackish attempt at a workaround for #961235Nalin Dahyabhai2013-05-302-0/+40
| | | | | | | | | Add a patch to create /run/user/0 if we're trying to resolve a DIR: ccache somewhere below it and neither the target location nor /run/user/0 exist yet. The better workaround is to set the location's owner to "linger" via logind, since even after we do what we're doing here, if the user logs in and logs back out, our location is still removed.
* Label DIR: ccache directories when we create themNalin Dahyabhai2013-05-302-1/+31
| | | | | - don't forget to set the SELinux label when creating the directory for a DIR: ccache
* Turn off some tests that master stopped doingkrb5-1.11.2-8.fc20Nalin Dahyabhai2013-05-304-17/+295
| | | | | | - pull in patches from master to not test GSSRPC-over-UDP and to not depend on the portmapper, which are areas where our build systems often give us trouble, too
* Actually bump the release numberkrb5-1.11.2-7.fc20Nalin Dahyabhai2013-05-281-1/+1
|
* Add proposed fix for handling AS client clock skewNalin Dahyabhai2013-05-283-0/+267
| | | | | | In addition to basing the contents of an encrypted-timestamp preauth data item on the server's idea of the current time, go ahead and do the same for the times in the request.
* Switch to upstream cherry-pick for this patchNalin Dahyabhai2013-05-281-8/+9
|
* Fix handling of empty passwords in get-init-credsNalin Dahyabhai2013-05-283-0/+620
|
* Fix transited realm checks in GSSAPI serversNalin Dahyabhai2013-05-282-0/+86
| | | | | - backport fix for not being able to verify the list of transited realms in GSS acceptors (RT#7639, #959685)
* Note the corresponding EL6 bug ID for referenceNalin Dahyabhai2013-05-281-1/+1
|
* fix to make some use of DIR::... KRB5CCNAME valueskrb5-1.11.2-6.fc20krb5-1.11.2-6.fc19Nalin Dahyabhai2013-05-212-1/+114
| | | | | | - pull in upstream fix to start treating a KRB5CCNAME value that begins with DIR:: the same as it would a DIR: value with just one ccache file in it (RT#7172, #965574)
* pull up fix for kpasswd service ping-pong attackkrb5-1.11.2-5.fc20krb5-1.11.2-5.fc19Nalin Dahyabhai2013-05-132-1/+71
| | | | | - pull up fix for UDP ping-pong flaw in kpasswd service (CVE-2002-2443, #962531,#962534)
* Update otp patch; add keycheck patchNathaniel McCallum2013-05-036-1315/+1534
|
* make the default ccname change affect f19, tookrb5-1.11.2-3.fc20krb5-1.11.2-3.fc19Nalin Dahyabhai2013-04-231-3/+8
| | | | | | - pull the changing of the compiled-in default ccache location to DIR:/run/user/%%{uid}/krb5cc back into F19, in line with SSSD and the most recent pam_krb5 build
* correct some configuration file pathskrb5-1.11.2-2.fc20krb5-1.11.2-2.fc19Nalin Dahyabhai2013-04-172-1/+23
| | | | | Correct some configuration file paths which the KDC_DIR patch inadvertently changed.
* keep track of the message type of FAST requestskrb5-1.11.2-1.fc20krb5-1.11.2-1.fc19Nalin Dahyabhai2013-04-152-0/+32
| | | | | - pull in fix for keeping track of the message type when parsing FAST requests in the KDC (RT#7605, #951843)
* update to 1.11.2Nalin Dahyabhai2013-04-153-11/+16
| | | | | | - update to 1.11.2 - drop pulled in patch for RT#7586, included in this release - drop pulled in patch for RT#7592, included in this release
* included in 1.11.2Nalin Dahyabhai2013-04-152-147/+0
|
* set DEFCCNAME to DIR:/run/user/%{uid}/krb5ccNalin Dahyabhai2013-04-121-1/+9
| | | | | - move the compiled-in default ccache location from the previous default of FILE:/tmp/krb5cc_%{uid} to DIR:/run/user/%{uid}/krb5cc (part of #949588)
generated by cgit (git 2.34.1) at 2025-09-28 11:56:08 +0000