| 
							
							
								 Nicolas Williams | 4f5dbf2f81 | Two patches from Roland Dowdeswell to make n_keys/new_keys args optional. | 2011-07-22 16:07:09 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | c818890dd7 | Re-write _kadm5_set_keys2() to handle key history. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 1eb56edd86 | Introduce Keys ::= SEQUENCE OF Key in hdb.asn1 so we can get convenience utils. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 689d4f4dd9 | Another HDB_F_DECRYPT-isn't-critical fix. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 5335559845 | Oops, HDB_F_DECRYPT isn't critical; making it so breaks tests. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | a246c394d2 | Fix warnings. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | e020dc25b8 | Fix a double free in ank.c. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | f2897efd09 | Make the KDC path work. | 2011-07-22 16:07:08 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | e23c7a7daf | How on earth did this build breaking thinko get through? | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 9d6d3ee5f3 | Fixed a likely bug in modify_principal() where the memset() of ent happens after early error checking. | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 07370612bd | Remove policy name checking against krb5.conf code. | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 87742e8118 | Add missing KADM5_AUTH_GET_KEYS error and use it. | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | ed511e06f9 | Updated kadmind.8 and kadmin.8. | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 909653e50f | Add comment and assert about key history to kadm5_log_replay_modify() | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | b16ca34642 | Fix incorrect key history check optimization. (NOT TESTED) | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 784e6a69df | Avoid useless work related to keepold. | 2011-07-22 16:07:07 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 9adb40a06e | Forgot to export the kadm5 policy functions. | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 31974aa24c | More s/int/size_t/ for iterators.  Also fixed a stupid bug. | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | f2bb83c088 | Add default to policy prompt and fix harmless bug in edit_policy() | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | a1203a703d | Re-fix an earlier mistake that fell out in a branch switcheroo. | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 0d90e0c4d0 | Complete --keepold support and fix crasher in kadmin cpw -r --keepold. | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 2510d2d8fc | Oops, reverse sense of get-keys check... | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | f15745c60c | Forgot to save edits to kadmin/server.c to use the new get-keys authorization. | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 558a8d05a6 | Forgot to export kadm5_store_principal_ent_nokeys(). | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | fad463bbd9 | Fix policy validation bug (parse_policy() should return success when the policy name is OK!) | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | a35ea4955a | create_principal() must memset(ent, 0, ...) before ever returning (fixes core dump) | 2011-07-22 16:07:06 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | cf1c898e95 | Undo a s/size_t/int/.  Iterators must be unsigned. | 2011-07-22 16:07:05 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 0674e4b13a | Ooops!  Mind those tags when re-ordering ASN.1 SEQUENCEs! (hdb_keyset) | 2011-07-22 16:07:05 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 4b0245d096 | Export the new kadm5 functions. | 2011-07-22 16:07:05 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | e16360e2db | Add --keepold option to cpw. | 2011-07-22 16:07:05 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | acc8cd4b22 | Duh, act on keepold in randkey! | 2011-07-22 16:06:25 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | af23757829 | Trivial policy bug fix. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | e7ea698366 | Fixed dumb bug that caused keys to not accumulate in history. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 53ea8ac59b | Make changes to hdb_keyset type be backward-compatible. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | a280ed4d4c | Forgot a file for the hdb_keyset backwards-compat extention. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | fac34871be | More kadmin support for kvno diff policy. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 3794d8b37b | Changed lib/hdb/Makefile.am to use --sequence=HDB-Ext-KeySet | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 355ae357eb | Moved set_time field of hdb_keyset to end and add extensibility marker. | 2011-07-22 16:06:01 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | c2ec368c36 | Add HDB extension for storing policy regarding what historic keys may be used for | 2011-07-22 16:06:00 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 308e53a4a8 | Initial support for filtering out "dead" historical keys. | 2011-07-22 16:05:21 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 7e0a801e28 | Changed decrypt key history logic and added HDB_F_ALL_KVNOS. | 2011-07-22 16:05:21 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 1f349a6aba | kadmin support for policies. | 2011-07-22 16:05:21 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | a04721b737 | Added basic policy support, w/ policy names listed in krb5.conf | 2011-07-22 16:05:21 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | c338446ede | More kadm5 policy stub stuff. | 2011-07-22 16:04:53 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 26f9924bb3 | Added stubs for the kadm5 policy functions. | 2011-07-22 16:04:53 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 56259efbac | Added dummy kadm5_get_policies() | 2011-07-22 16:04:52 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | abd94953e2 | Fixes to lock nesting code. | 2011-07-22 16:04:52 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 58d72035f1 | Added kadm5_lock() and unlock. | 2011-07-22 16:04:52 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 109607a355 | Fix uninitialized variable. | 2011-07-22 16:04:52 -05:00 |  | 
			
				
					| 
							
							
								 Nicolas Williams | 45294a93a7 | Added a disting get-keys authorization for kadmind. | 2011-07-22 16:04:52 -05:00 |  |