Nicolas Williams
|
c818890dd7
|
Re-write _kadm5_set_keys2() to handle key history.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
1eb56edd86
|
Introduce Keys ::= SEQUENCE OF Key in hdb.asn1 so we can get convenience utils.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
689d4f4dd9
|
Another HDB_F_DECRYPT-isn't-critical fix.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
5335559845
|
Oops, HDB_F_DECRYPT isn't critical; making it so breaks tests.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
a246c394d2
|
Fix warnings.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
e020dc25b8
|
Fix a double free in ank.c.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
f2897efd09
|
Make the KDC path work.
|
2011-07-22 16:07:08 -05:00 |
|
Nicolas Williams
|
e23c7a7daf
|
How on earth did this build breaking thinko get through?
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
9d6d3ee5f3
|
Fixed a likely bug in modify_principal() where the memset() of ent happens after early error checking.
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
07370612bd
|
Remove policy name checking against krb5.conf code.
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
87742e8118
|
Add missing KADM5_AUTH_GET_KEYS error and use it.
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
ed511e06f9
|
Updated kadmind.8 and kadmin.8.
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
909653e50f
|
Add comment and assert about key history to kadm5_log_replay_modify()
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
b16ca34642
|
Fix incorrect key history check optimization. (NOT TESTED)
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
784e6a69df
|
Avoid useless work related to keepold.
|
2011-07-22 16:07:07 -05:00 |
|
Nicolas Williams
|
9adb40a06e
|
Forgot to export the kadm5 policy functions.
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
31974aa24c
|
More s/int/size_t/ for iterators. Also fixed a stupid bug.
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
f2bb83c088
|
Add default to policy prompt and fix harmless bug in edit_policy()
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
a1203a703d
|
Re-fix an earlier mistake that fell out in a branch switcheroo.
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
0d90e0c4d0
|
Complete --keepold support and fix crasher in kadmin cpw -r --keepold.
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
2510d2d8fc
|
Oops, reverse sense of get-keys check...
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
f15745c60c
|
Forgot to save edits to kadmin/server.c to use the new get-keys authorization.
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
558a8d05a6
|
Forgot to export kadm5_store_principal_ent_nokeys().
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
fad463bbd9
|
Fix policy validation bug (parse_policy() should return success when the policy name is OK!)
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
a35ea4955a
|
create_principal() must memset(ent, 0, ...) before ever returning (fixes core dump)
|
2011-07-22 16:07:06 -05:00 |
|
Nicolas Williams
|
cf1c898e95
|
Undo a s/size_t/int/. Iterators must be unsigned.
|
2011-07-22 16:07:05 -05:00 |
|
Nicolas Williams
|
0674e4b13a
|
Ooops! Mind those tags when re-ordering ASN.1 SEQUENCEs! (hdb_keyset)
|
2011-07-22 16:07:05 -05:00 |
|
Nicolas Williams
|
4b0245d096
|
Export the new kadm5 functions.
|
2011-07-22 16:07:05 -05:00 |
|
Nicolas Williams
|
e16360e2db
|
Add --keepold option to cpw.
|
2011-07-22 16:07:05 -05:00 |
|
Nicolas Williams
|
acc8cd4b22
|
Duh, act on keepold in randkey!
|
2011-07-22 16:06:25 -05:00 |
|
Nicolas Williams
|
af23757829
|
Trivial policy bug fix.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
e7ea698366
|
Fixed dumb bug that caused keys to not accumulate in history.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
53ea8ac59b
|
Make changes to hdb_keyset type be backward-compatible.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
a280ed4d4c
|
Forgot a file for the hdb_keyset backwards-compat extention.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
fac34871be
|
More kadmin support for kvno diff policy.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
3794d8b37b
|
Changed lib/hdb/Makefile.am to use --sequence=HDB-Ext-KeySet
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
355ae357eb
|
Moved set_time field of hdb_keyset to end and add extensibility marker.
|
2011-07-22 16:06:01 -05:00 |
|
Nicolas Williams
|
c2ec368c36
|
Add HDB extension for storing policy regarding what historic keys may be used for
|
2011-07-22 16:06:00 -05:00 |
|
Nicolas Williams
|
308e53a4a8
|
Initial support for filtering out "dead" historical keys.
|
2011-07-22 16:05:21 -05:00 |
|
Nicolas Williams
|
7e0a801e28
|
Changed decrypt key history logic and added HDB_F_ALL_KVNOS.
|
2011-07-22 16:05:21 -05:00 |
|
Nicolas Williams
|
1f349a6aba
|
kadmin support for policies.
|
2011-07-22 16:05:21 -05:00 |
|
Nicolas Williams
|
a04721b737
|
Added basic policy support, w/ policy names listed in krb5.conf
|
2011-07-22 16:05:21 -05:00 |
|
Nicolas Williams
|
c338446ede
|
More kadm5 policy stub stuff.
|
2011-07-22 16:04:53 -05:00 |
|
Nicolas Williams
|
26f9924bb3
|
Added stubs for the kadm5 policy functions.
|
2011-07-22 16:04:53 -05:00 |
|
Nicolas Williams
|
56259efbac
|
Added dummy kadm5_get_policies()
|
2011-07-22 16:04:52 -05:00 |
|
Nicolas Williams
|
abd94953e2
|
Fixes to lock nesting code.
|
2011-07-22 16:04:52 -05:00 |
|
Nicolas Williams
|
58d72035f1
|
Added kadm5_lock() and unlock.
|
2011-07-22 16:04:52 -05:00 |
|
Nicolas Williams
|
109607a355
|
Fix uninitialized variable.
|
2011-07-22 16:04:52 -05:00 |
|
Nicolas Williams
|
45294a93a7
|
Added a disting get-keys authorization for kadmind.
|
2011-07-22 16:04:52 -05:00 |
|
Nicolas Williams
|
3d0019d3ce
|
Added kadm5_setkey_principal*() and kadm5_decrypt_key().
|
2011-07-22 16:04:52 -05:00 |
|