summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Update otp plugin backport patchesNathaniel McCallum2013-04-096-3895/+4037
|
* trying to get more of the tests to run on builderskrb5-1.11.1-7.fc20krb5-1.11.1-7.fc19Nalin Dahyabhai2013-04-032-2/+24
| | | | | | - when testing the RPC library, treat denials from the local portmapper the same as a portmapper-not-running situation, to allow other library tests to be run while building the package
* add RT number for most recent patchNalin Dahyabhai2013-04-011-1/+1
|
* teach gss_acquire_cred_from() about "client_keytab"krb5-1.11.1-6.fc20krb5-1.11.1-6.fc19Nalin Dahyabhai2013-03-282-0/+135
| | | | | - pull in Simo's patch to recognize "client_keytab" as a key type which can be passed in to gss_acquire_cred_from()
* package the right client keytab directoryNalin Dahyabhai2013-03-281-4/+11
| | | | | | | - create and own /var/kerberos/krb5/user instead of /var/kerberos/kdc/user, since that's what the libraries actually look for - add buildrequires on nss-myhostname, in an attempt to get more of the tests to run properly during builds
* pull in arm 64 (aarch64) build tweakskrb5-1.11.1-5.fc20krb5-1.11.1-5.fc19Nalin Dahyabhai2013-03-262-3/+419
| | | | | - go back to using reconf to run autoconf and autoheader (part of #925640) - add temporary patch to use newer config.guess/config.sub (more of #925640)
* specify backup suffixes, like we doNalin Dahyabhai2013-03-261-4/+3
|
* pull up patch to mark imported gss contexts rightNalin Dahyabhai2013-03-262-1/+112
| | | | | - pull up Simo's patch to mark the correct mechanism on imported GSSAPI contexts (RT#7592)
* tweak buildrequires conditionals for el7 buildsNalin Dahyabhai2013-03-181-1/+5
| | | | | - fix a version comparison to expect newer texlive build requirements when %%{_rhel} > 6 rather than when it's > 7
* first round of the otp pluginkrb5-1.11.1-4.fc20krb5-1.11.1-4.fc19Nathaniel McCallum2013-03-114-1/+5056
|
* fix a memory leak when obtaining creds via keytabskrb5-1.11.1-3.fc19Nalin Dahyabhai2013-02-282-1/+48
| | | | - fix a memory leak when acquiring credentials using a keytab (RT#7586, #911110)
* escape uses of macros in comments (more of 884065)Nalin Dahyabhai2013-02-271-2/+3
| | | | escape uses of macros in comments (more of #884065)
* drop the kerberos-iv portreserve fileNalin Dahyabhai2013-02-273-17/+15
| | | | | | drop the kerberos-iv portreserve file (long overdue), and drop the rest on systemd systems, since we don't currently poke portreserve when we're starting a service
* prebuild PDF docs to reduce multilib differencesNalin Dahyabhai2013-02-272-3/+14
| | | | prebuild PDF docs to reduce multilib differences (internal tooling, #884065)
* update to 1.11.1krb5-1.11.1-1.fc19Nalin Dahyabhai2013-02-253-24/+10
| | | | | | update to 1.11.1 - drop patch for noticing negative timeouts being passed to the poll() wrapper in the client transmit functions
* set "rdns = false" in the default krb5.confNalin Dahyabhai2013-02-082-1/+5
| | | | set "rdns = false" in the default krb5.conf (#908323)
* update to 1.11 releasekrb5-1.11-1.fc19Nalin Dahyabhai2012-12-183-9/+15
| | | | | | - update to the 1.11 final release - drop the rawbuild tag from a couple of patches which we don't actually need to apply to get things to compile the way the package expects
* update to 1.11 beta 2krb5-1.11-0.fc19.beta2.0Nalin Dahyabhai2012-12-133-7/+12
|
* move a non-system libverto to the -libs subpackageNalin Dahyabhai2012-12-131-4/+6
| | | | | - when building with our bundled copy of libverto, package it in with -libs rather than with -server (#886049)
* update to 1.11 beta 1krb5-1.11-0.fc19.beta1.0Nalin Dahyabhai2012-11-213-17/+20
|
* packaging tweaksNalin Dahyabhai2012-11-162-1/+25
| | | | | | - handle releases where texlive packaging wasn't yet as complicated as it is in Fedora 18 - fix an uninitialized-variable error building one of the test programs
* more tweaks to try to get doc building workingkrb5-1.11-0.fc19.alpha1.0Nalin Dahyabhai2012-11-161-0/+7
|
* just drop package-level deps on tex altogetherNalin Dahyabhai2012-11-161-5/+4
|
* sure, okay.Nalin Dahyabhai2012-11-161-2/+2
|
* require pdflatex and makeindexNalin Dahyabhai2012-11-161-0/+2
|
* don't dummy up required stylesheets, require themNalin Dahyabhai2012-11-161-1/+14
|
* also note the multilib impact in the docsNalin Dahyabhai2012-11-161-1/+2
|
* drop a pair of obsoleted patchesNalin Dahyabhai2012-11-162-44/+0
|
* update sources for 1.11-alpha1Nalin Dahyabhai2012-11-162-3/+4
|
* more packaging fixupsNalin Dahyabhai2012-11-161-5/+17
| | | | | | | | - move the rather large pile of html and pdf docs to -workstation, so that just having something that links to the libraries won't drag them onto a system - actually create %%{_var}/kerberos/kdc/user, so that it can be packaged - correct the list of packaged man pages
* drop patches to fixup paths in man pagesNalin Dahyabhai2012-11-165-131/+32
|
* own /var/kerberos/kdc/userNalin Dahyabhai2012-11-161-0/+3
|
* append camellia to the kdc supported enctypes listNalin Dahyabhai2012-11-161-1/+1
|
* drop the only-weak-keys checkerNalin Dahyabhai2012-11-163-204/+0
|
* update heed-nsaccountlock patchNalin Dahyabhai2012-11-162-36/+27
| | | | | We lost explicit support for eDirectory per se, so just add a toggle to enable heeding the one native attribute that 389 adds to the mix.
* update selinux labeling patchNalin Dahyabhai2012-11-162-83/+90
|
* update the paths-in-man-pages patchNalin Dahyabhai2012-11-155-203/+61
|
* drop backported fix for clock skew errorsNalin Dahyabhai2012-11-152-59/+2
| | | | | - drop backported fix for avoiding spurious clock skew when a TGT is decrypted long after the KDC sent it to the client which decrypts it
* drop backports of patch for keytab-based kinitNalin Dahyabhai2012-11-154-579/+3
| | | | | | - drop backported patches to make keytab-based authentication attempts work better when the client tells the KDC that it supports a particular cipher, but doesn't have a key for it in the keytab
* drop backported PKINIT fix: directly-trusted KDCsNalin Dahyabhai2012-11-152-42/+4
| | | | | | | - drop backported fix for teaching PKINIT clients which trust the KDC's certificate directly to verify signed-data messages that are signed with the KDC's certificate, when the blobs don't include a copy of the KDC's certificate
* drop backported patch for disabling replay cachesNalin Dahyabhai2012-11-152-19/+2
| | | | | - drop backported fix for disabling use of a replay cache when verifying initial credentials
* drop backported build patchNalin Dahyabhai2012-11-152-15/+2
|
* the new docs system generates PDFs, so we can stopNalin Dahyabhai2012-11-152-77/+2
|
* drop backported patches for RT #7406,#7407,#7408Nalin Dahyabhai2012-11-154-413/+6
| | | | | | - drop backported patch for RT #7406 - drop backported patch for RT #7407 - drop backported patch for RT #7408
* start moving to 1.11Nalin Dahyabhai2012-11-152-9/+9
|
* tag a couple more patches for %%{?_rawbuild}krb5-1.10.3-7.fc19krb5-1.10.3-7.fc18Nalin Dahyabhai2012-10-171-4/+8
| | | | | - tag a couple of other patches which we still need to be applied during %%{?_rawbuild} builds (zmraz)
* - actually pull up the patch for RT#7063, and not some other ticket (#773496)krb5-1.10.3-6.fc19krb5-1.10.3-6.fc18Nalin Dahyabhai2012-09-252-50/+50
|
* revise Filip's patch so that it more closely mimics the select() pathkrb5-1.10.3-5.fc19krb5-1.10.3-5.fc18Nalin Dahyabhai2012-09-102-15/+18
|
* abort the current transmit attempt if our timeout is negativeNalin Dahyabhai2012-09-102-1/+21
| | | | | - add patch from Filip Krska to abort a transmit attempt when we've given poll() a negative timeout (#838548)
* more backported fixes for keytab-doesn't-have-all-key-types casesNalin Dahyabhai2012-09-073-0/+250
| | | | | | | | - add a backport of more patches to set the client's list of supported enctypes when using a keytab to be the list of types of keys in the keytab, plus the list of other types the client supports but for which it doesn't have keys, in that order, so that KDCs have a better chance of being able to issue tickets with session keys of types that the client can use (#837855)