Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Update otp plugin backport patches | Nathaniel McCallum | 2013-04-09 | 6 | -3895/+4037 | |
| | ||||||
* | trying to get more of the tests to run on builderskrb5-1.11.1-7.fc20krb5-1.11.1-7.fc19 | Nalin Dahyabhai | 2013-04-03 | 2 | -2/+24 | |
| | | | | | | - when testing the RPC library, treat denials from the local portmapper the same as a portmapper-not-running situation, to allow other library tests to be run while building the package | |||||
* | add RT number for most recent patch | Nalin Dahyabhai | 2013-04-01 | 1 | -1/+1 | |
| | ||||||
* | teach gss_acquire_cred_from() about "client_keytab"krb5-1.11.1-6.fc20krb5-1.11.1-6.fc19 | Nalin Dahyabhai | 2013-03-28 | 2 | -0/+135 | |
| | | | | | - pull in Simo's patch to recognize "client_keytab" as a key type which can be passed in to gss_acquire_cred_from() | |||||
* | package the right client keytab directory | Nalin Dahyabhai | 2013-03-28 | 1 | -4/+11 | |
| | | | | | | | - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user, since that's what the libraries actually look for - add buildrequires on nss-myhostname, in an attempt to get more of the tests to run properly during builds | |||||
* | pull in arm 64 (aarch64) build tweakskrb5-1.11.1-5.fc20krb5-1.11.1-5.fc19 | Nalin Dahyabhai | 2013-03-26 | 2 | -3/+419 | |
| | | | | | - go back to using reconf to run autoconf and autoheader (part of #925640) - add temporary patch to use newer config.guess/config.sub (more of #925640) | |||||
* | specify backup suffixes, like we do | Nalin Dahyabhai | 2013-03-26 | 1 | -4/+3 | |
| | ||||||
* | pull up patch to mark imported gss contexts right | Nalin Dahyabhai | 2013-03-26 | 2 | -1/+112 | |
| | | | | | - pull up Simo's patch to mark the correct mechanism on imported GSSAPI contexts (RT#7592) | |||||
* | tweak buildrequires conditionals for el7 builds | Nalin Dahyabhai | 2013-03-18 | 1 | -1/+5 | |
| | | | | | - fix a version comparison to expect newer texlive build requirements when %%{_rhel} > 6 rather than when it's > 7 | |||||
* | first round of the otp pluginkrb5-1.11.1-4.fc20krb5-1.11.1-4.fc19 | Nathaniel McCallum | 2013-03-11 | 4 | -1/+5056 | |
| | ||||||
* | fix a memory leak when obtaining creds via keytabskrb5-1.11.1-3.fc19 | Nalin Dahyabhai | 2013-02-28 | 2 | -1/+48 | |
| | | | | - fix a memory leak when acquiring credentials using a keytab (RT#7586, #911110) | |||||
* | escape uses of macros in comments (more of 884065) | Nalin Dahyabhai | 2013-02-27 | 1 | -2/+3 | |
| | | | | escape uses of macros in comments (more of #884065) | |||||
* | drop the kerberos-iv portreserve file | Nalin Dahyabhai | 2013-02-27 | 3 | -17/+15 | |
| | | | | | | drop the kerberos-iv portreserve file (long overdue), and drop the rest on systemd systems, since we don't currently poke portreserve when we're starting a service | |||||
* | prebuild PDF docs to reduce multilib differences | Nalin Dahyabhai | 2013-02-27 | 2 | -3/+14 | |
| | | | | prebuild PDF docs to reduce multilib differences (internal tooling, #884065) | |||||
* | update to 1.11.1krb5-1.11.1-1.fc19 | Nalin Dahyabhai | 2013-02-25 | 3 | -24/+10 | |
| | | | | | | update to 1.11.1 - drop patch for noticing negative timeouts being passed to the poll() wrapper in the client transmit functions | |||||
* | set "rdns = false" in the default krb5.conf | Nalin Dahyabhai | 2013-02-08 | 2 | -1/+5 | |
| | | | | set "rdns = false" in the default krb5.conf (#908323) | |||||
* | update to 1.11 releasekrb5-1.11-1.fc19 | Nalin Dahyabhai | 2012-12-18 | 3 | -9/+15 | |
| | | | | | | - update to the 1.11 final release - drop the rawbuild tag from a couple of patches which we don't actually need to apply to get things to compile the way the package expects | |||||
* | update to 1.11 beta 2krb5-1.11-0.fc19.beta2.0 | Nalin Dahyabhai | 2012-12-13 | 3 | -7/+12 | |
| | ||||||
* | move a non-system libverto to the -libs subpackage | Nalin Dahyabhai | 2012-12-13 | 1 | -4/+6 | |
| | | | | | - when building with our bundled copy of libverto, package it in with -libs rather than with -server (#886049) | |||||
* | update to 1.11 beta 1krb5-1.11-0.fc19.beta1.0 | Nalin Dahyabhai | 2012-11-21 | 3 | -17/+20 | |
| | ||||||
* | packaging tweaks | Nalin Dahyabhai | 2012-11-16 | 2 | -1/+25 | |
| | | | | | | - handle releases where texlive packaging wasn't yet as complicated as it is in Fedora 18 - fix an uninitialized-variable error building one of the test programs | |||||
* | more tweaks to try to get doc building workingkrb5-1.11-0.fc19.alpha1.0 | Nalin Dahyabhai | 2012-11-16 | 1 | -0/+7 | |
| | ||||||
* | just drop package-level deps on tex altogether | Nalin Dahyabhai | 2012-11-16 | 1 | -5/+4 | |
| | ||||||
* | sure, okay. | Nalin Dahyabhai | 2012-11-16 | 1 | -2/+2 | |
| | ||||||
* | require pdflatex and makeindex | Nalin Dahyabhai | 2012-11-16 | 1 | -0/+2 | |
| | ||||||
* | don't dummy up required stylesheets, require them | Nalin Dahyabhai | 2012-11-16 | 1 | -1/+14 | |
| | ||||||
* | also note the multilib impact in the docs | Nalin Dahyabhai | 2012-11-16 | 1 | -1/+2 | |
| | ||||||
* | drop a pair of obsoleted patches | Nalin Dahyabhai | 2012-11-16 | 2 | -44/+0 | |
| | ||||||
* | update sources for 1.11-alpha1 | Nalin Dahyabhai | 2012-11-16 | 2 | -3/+4 | |
| | ||||||
* | more packaging fixups | Nalin Dahyabhai | 2012-11-16 | 1 | -5/+17 | |
| | | | | | | | | - move the rather large pile of html and pdf docs to -workstation, so that just having something that links to the libraries won't drag them onto a system - actually create %%{_var}/kerberos/kdc/user, so that it can be packaged - correct the list of packaged man pages | |||||
* | drop patches to fixup paths in man pages | Nalin Dahyabhai | 2012-11-16 | 5 | -131/+32 | |
| | ||||||
* | own /var/kerberos/kdc/user | Nalin Dahyabhai | 2012-11-16 | 1 | -0/+3 | |
| | ||||||
* | append camellia to the kdc supported enctypes list | Nalin Dahyabhai | 2012-11-16 | 1 | -1/+1 | |
| | ||||||
* | drop the only-weak-keys checker | Nalin Dahyabhai | 2012-11-16 | 3 | -204/+0 | |
| | ||||||
* | update heed-nsaccountlock patch | Nalin Dahyabhai | 2012-11-16 | 2 | -36/+27 | |
| | | | | | We lost explicit support for eDirectory per se, so just add a toggle to enable heeding the one native attribute that 389 adds to the mix. | |||||
* | update selinux labeling patch | Nalin Dahyabhai | 2012-11-16 | 2 | -83/+90 | |
| | ||||||
* | update the paths-in-man-pages patch | Nalin Dahyabhai | 2012-11-15 | 5 | -203/+61 | |
| | ||||||
* | drop backported fix for clock skew errors | Nalin Dahyabhai | 2012-11-15 | 2 | -59/+2 | |
| | | | | | - drop backported fix for avoiding spurious clock skew when a TGT is decrypted long after the KDC sent it to the client which decrypts it | |||||
* | drop backports of patch for keytab-based kinit | Nalin Dahyabhai | 2012-11-15 | 4 | -579/+3 | |
| | | | | | | - drop backported patches to make keytab-based authentication attempts work better when the client tells the KDC that it supports a particular cipher, but doesn't have a key for it in the keytab | |||||
* | drop backported PKINIT fix: directly-trusted KDCs | Nalin Dahyabhai | 2012-11-15 | 2 | -42/+4 | |
| | | | | | | | - drop backported fix for teaching PKINIT clients which trust the KDC's certificate directly to verify signed-data messages that are signed with the KDC's certificate, when the blobs don't include a copy of the KDC's certificate | |||||
* | drop backported patch for disabling replay caches | Nalin Dahyabhai | 2012-11-15 | 2 | -19/+2 | |
| | | | | | - drop backported fix for disabling use of a replay cache when verifying initial credentials | |||||
* | drop backported build patch | Nalin Dahyabhai | 2012-11-15 | 2 | -15/+2 | |
| | ||||||
* | the new docs system generates PDFs, so we can stop | Nalin Dahyabhai | 2012-11-15 | 2 | -77/+2 | |
| | ||||||
* | drop backported patches for RT #7406,#7407,#7408 | Nalin Dahyabhai | 2012-11-15 | 4 | -413/+6 | |
| | | | | | | - drop backported patch for RT #7406 - drop backported patch for RT #7407 - drop backported patch for RT #7408 | |||||
* | start moving to 1.11 | Nalin Dahyabhai | 2012-11-15 | 2 | -9/+9 | |
| | ||||||
* | tag a couple more patches for %%{?_rawbuild}krb5-1.10.3-7.fc19krb5-1.10.3-7.fc18 | Nalin Dahyabhai | 2012-10-17 | 1 | -4/+8 | |
| | | | | | - tag a couple of other patches which we still need to be applied during %%{?_rawbuild} builds (zmraz) | |||||
* | - actually pull up the patch for RT#7063, and not some other ticket (#773496)krb5-1.10.3-6.fc19krb5-1.10.3-6.fc18 | Nalin Dahyabhai | 2012-09-25 | 2 | -50/+50 | |
| | ||||||
* | revise Filip's patch so that it more closely mimics the select() pathkrb5-1.10.3-5.fc19krb5-1.10.3-5.fc18 | Nalin Dahyabhai | 2012-09-10 | 2 | -15/+18 | |
| | ||||||
* | abort the current transmit attempt if our timeout is negative | Nalin Dahyabhai | 2012-09-10 | 2 | -1/+21 | |
| | | | | | - add patch from Filip Krska to abort a transmit attempt when we've given poll() a negative timeout (#838548) | |||||
* | more backported fixes for keytab-doesn't-have-all-key-types cases | Nalin Dahyabhai | 2012-09-07 | 3 | -0/+250 | |
| | | | | | | | | - add a backport of more patches to set the client's list of supported enctypes when using a keytab to be the list of types of keys in the keytab, plus the list of other types the client supports but for which it doesn't have keys, in that order, so that KDCs have a better chance of being able to issue tickets with session keys of types that the client can use (#837855) |