krb5/kdc.conf

12 lines
694 B
Plaintext
Raw Normal View History

auto-import changelog data from krb5-1.2.1-8.src.rpm Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com> - fix summaries and descriptions - switched the default transfer protocol from PORT to PASV as proposed on bugzilla (#16134), and to match the regular ftp package's behavior Wed Jul 19 2000 Jeff Johnson <jbj@redhat.com> - rebuild to compress man pages. Sat Jul 15 2000 Bill Nottingham <notting@redhat.com> - move initscript back Fri Jul 14 2000 Nalin Dahyabhai <nalin@redhat.com> - disable servers by default to keep linuxconf from thinking they need to be started when they don't Thu Jul 13 2000 Prospector <bugzilla@redhat.com> - automatic rebuild Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com> - change cleanup code in post to not tickle chkconfig - add grep as a Prereq: for -libs Thu Jul 06 2000 Nalin Dahyabhai <nalin@redhat.com> - move condrestarts to postun - make xinetd configs noreplace - add descriptions to xinetd configs - add /etc/init.d as a prereq for the -server package - patch to properly truncate $TERM in krlogind Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com> - update to 1.2.1 - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update - start using the official source tarball instead of its contents Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not compatible with other stuff in 6.2, so no need) Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak graceful start/stop logic in post and preun Mon Jun 26 2000 Nalin Dahyabhai <nalin@redhat.com> - update to the 1.2 release - ditch a lot of our patches which went upstream - enable use of DNS to look up things at build-time - disable use of DNS to look up things at run-time in default krb5.conf - change ownership of the convert-config-files script to root.root - compress PS docs - fix some typos in the kinit man page - run condrestart in server post, and shut down in preun Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com> - only remove old krb5server init script links if the init script is there Sat Jun 17 2000 Nalin Dahyabhai <nalin@redhat.com> - disable kshell and eklogin by default Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com> - patch mkdir/rmdir problem in ftpcmd.y - add condrestart option to init script - split the server init script into three pieces and add one for kpropd Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com> - make sure workstation servers are all disabled by default - clean up krb5server init script Fri Jun 09 2000 Nalin Dahyabhai <nalin@redhat.com> - apply second set of buffer overflow fixes from Tom Yu - fix from Dirk Husung for a bug in buffer cleanups in the test suite - work around possibly broken rev binary in running test suite - move default realm configs from /var/kerberos to /var/kerberos Tue Jun 06 2000 Nalin Dahyabhai <nalin@redhat.com> - make ksu and v4rcp owned by root Sat Jun 03 2000 Nalin Dahyabhai <nalin@redhat.com> - use %{_infodir} to better comply with FHS - move .so files to -devel subpackage - tweak xinetd config files (bugs #11833, #11835, #11836, #11840) - fix package descriptions again Wed May 24 2000 Nalin Dahyabhai <nalin@redhat.com> - change a LINE_MAX to 1024, fix from Ken Raeburn - add fix for login vulnerability in case anyone rebuilds without krb4 compat - add tweaks for byte-swapping macros in krb.h, also from Ken - add xinetd config files - make rsh and rlogin quieter - build with debug to fix credential forwarding - add rsh as a build-time req because the configure scripts look for it to determine paths Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com> - fix config_subpackage logic Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com> - remove setuid bit on v4rcp and ksu - apply patches from Jeffrey Schiller to fix overruns Chris Evans found - reintroduce configs subpackage for use in the errata - add PreReq: sh-utils Mon May 15 2000 Nalin Dahyabhai <nalin@redhat.com> - fix double-free in the kdc (patch merged into MIT tree) - include convert-config-files script as a documentation file Wed May 03 2000 Nalin Dahyabhai <nalin@redhat.com> - patch ksu man page because the -C option never works - add access() checks and disable debug mode in ksu - modify default ksu build arguments to specify more directories in CMD_PATH and to use getusershell() Wed May 03 2000 Bill Nottingham <notting@redhat.com> - fix configure stuff for ia64 Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com> - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653) - change Requires: for/in subpackages to include 1.2.1 Wed Apr 05 2000 Nalin Dahyabhai <nalin@redhat.com> - add man pages for kerberos(1), kvno(1), .k5login(5) - add kvno to -workstation Mon Apr 03 2000 Nalin Dahyabhai <nalin@redhat.com> - Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as a %config file anyway. - Make krb5.conf a noreplace config file. Thu Mar 30 2000 Nalin Dahyabhai <nalin@redhat.com> - Make klogind pass a clean environment to children, like NetKit's rlogind does. Wed Mar 08 2000 Nalin Dahyabhai <nalin@redhat.com> - Don't enable the server by default. - Compress info pages. - Add defaults for the PAM module to krb5.conf Mon Mar 06 2000 Nalin Dahyabhai <nalin@redhat.com> - Correct copyright: it's exportable now, provided the proper paperwork is filed with the government. Fri Mar 03 2000 Nalin Dahyabhai <nalin@redhat.com> - apply Mike Friedman's patch to fix format string problems - don't strip off argv[0] when invoking regular rsh/rlogin Thu Mar 02 2000 Nalin Dahyabhai <nalin@redhat.com> - run kadmin.local correctly at startup Mon Feb 28 2000 Nalin Dahyabhai <nalin@redhat.com> - pass absolute path to kadm5.keytab if/when extracting keys at startup Sat Feb 19 2000 Nalin Dahyabhai <nalin@redhat.com> - fix info page insertions Wed Feb 09 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak server init script to automatically extract kadm5 keys if /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet - adjust package descriptions Thu Feb 03 2000 Nalin Dahyabhai <nalin@redhat.com> - fix for potentially gzipped man pages Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com> - fix comments in krb5-configs Fri Jan 07 2000 Nalin Dahyabhai <nalin@redhat.com> - move /usr/kerberos/bin to end of PATH Tue Dec 28 1999 Nalin Dahyabhai <nalin@redhat.com> - install kadmin header files Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com> - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h - add installation of info docs - remove krb4 compat patch because it doesn't fix workstation-side servers Mon Dec 20 1999 Nalin Dahyabhai <nalin@redhat.com> - remove hesiod dependency at build-time Sun Dec 19 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - rebuild on 1.1.1 Thu Oct 07 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - clean up init script for server, verify that it works [jlkatz] - clean up rotation script so that rc likes it better - add clean stanza Mon Oct 04 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - backed out ncurses and makeshlib patches - update for krb5-1.1 - add KDC rotation to rc.boot, based on ideas from Michael's C version Sun Sep 26 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added -lncurses to telnet and telnetd makefiles Mon Jul 05 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added krb5.csh and krb5.sh to /etc/profile.d Tue Jun 22 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - broke out configuration files Mon Jun 14 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - fixed server package so that it works now Sat May 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - started changelog - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6 - added --force to makeinfo commands to skip errors during build
2004-09-09 07:05:48 +00:00
[kdcdefaults]
acl_file = /var/kerberos/krb5kdc/kadm5.acl
auto-import changelog data from krb5-1.2.2-4.src.rpm Fri Mar 30 2001 Nalin Dahyabhai <nalin@redhat.com> - add in glue code to make sure that libkrb5 continues to provide a weak copy of stat() Thu Mar 15 2001 Nalin Dahyabhai <nalin@redhat.com> - build alpha with -O0 for now Thu Mar 08 2001 Nalin Dahyabhai <nalin@redhat.com> - fix the kpropd init script Mon Mar 05 2001 Nalin Dahyabhai <nalin@redhat.com> - update to 1.2.2, which fixes some bugs relating to empty ETYPE-INFO - re-enable optimization on Alpha Thu Feb 08 2001 Nalin Dahyabhai <nalin@redhat.com> - build alpha with -O0 for now - own /var/kerberos Tue Feb 06 2001 Nalin Dahyabhai <nalin@redhat.com> - own the directories which are created for each package (#26342) Tue Jan 23 2001 Nalin Dahyabhai <nalin@redhat.com> - gettextize init scripts Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com> - add some comments to the ksu patches for the curious - re-enable optimization on alphas Mon Jan 15 2001 Nalin Dahyabhai <nalin@redhat.com> - fix krb5-send-pr (#18932) and move it from -server to -workstation - buildprereq libtermcap-devel - temporariliy disable optimization on alphas - gettextize init scripts Tue Dec 05 2000 Nalin Dahyabhai <nalin@redhat.com> - force -fPIC Fri Dec 01 2000 Nalin Dahyabhai <nalin@redhat.com> - rebuild in new environment Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com> - add bison as a BuildPrereq (#20091) Mon Oct 30 2000 Nalin Dahyabhai <nalin@redhat.com> - change /usr/dict/words to /usr/share/dict/words in default kdc.conf (#20000) Thu Oct 05 2000 Nalin Dahyabhai <nalin@redhat.com> - apply kpasswd bug fixes from David Wragg Wed Oct 04 2000 Nalin Dahyabhai <nalin@redhat.com> - make krb5-libs obsolete the old krb5-configs package (#18351) - don't quit from the kpropd init script if there's no principal database so that you can propagate the first time without running kpropd manually - don't complain if /etc/ld.so.conf doesn't exist in the -libs %post Tue Sep 12 2000 Nalin Dahyabhai <nalin@redhat.com> - fix credential forwarding problem in klogind (goof in KRB5CCNAME handling) (#11588) - fix heap corruption bug in FTP client (#14301)
2004-09-09 07:06:10 +00:00
dict_file = /usr/share/dict/words
auto-import changelog data from krb5-1.2.1-8.src.rpm Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com> - fix summaries and descriptions - switched the default transfer protocol from PORT to PASV as proposed on bugzilla (#16134), and to match the regular ftp package's behavior Wed Jul 19 2000 Jeff Johnson <jbj@redhat.com> - rebuild to compress man pages. Sat Jul 15 2000 Bill Nottingham <notting@redhat.com> - move initscript back Fri Jul 14 2000 Nalin Dahyabhai <nalin@redhat.com> - disable servers by default to keep linuxconf from thinking they need to be started when they don't Thu Jul 13 2000 Prospector <bugzilla@redhat.com> - automatic rebuild Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com> - change cleanup code in post to not tickle chkconfig - add grep as a Prereq: for -libs Thu Jul 06 2000 Nalin Dahyabhai <nalin@redhat.com> - move condrestarts to postun - make xinetd configs noreplace - add descriptions to xinetd configs - add /etc/init.d as a prereq for the -server package - patch to properly truncate $TERM in krlogind Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com> - update to 1.2.1 - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update - start using the official source tarball instead of its contents Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not compatible with other stuff in 6.2, so no need) Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak graceful start/stop logic in post and preun Mon Jun 26 2000 Nalin Dahyabhai <nalin@redhat.com> - update to the 1.2 release - ditch a lot of our patches which went upstream - enable use of DNS to look up things at build-time - disable use of DNS to look up things at run-time in default krb5.conf - change ownership of the convert-config-files script to root.root - compress PS docs - fix some typos in the kinit man page - run condrestart in server post, and shut down in preun Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com> - only remove old krb5server init script links if the init script is there Sat Jun 17 2000 Nalin Dahyabhai <nalin@redhat.com> - disable kshell and eklogin by default Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com> - patch mkdir/rmdir problem in ftpcmd.y - add condrestart option to init script - split the server init script into three pieces and add one for kpropd Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com> - make sure workstation servers are all disabled by default - clean up krb5server init script Fri Jun 09 2000 Nalin Dahyabhai <nalin@redhat.com> - apply second set of buffer overflow fixes from Tom Yu - fix from Dirk Husung for a bug in buffer cleanups in the test suite - work around possibly broken rev binary in running test suite - move default realm configs from /var/kerberos to /var/kerberos Tue Jun 06 2000 Nalin Dahyabhai <nalin@redhat.com> - make ksu and v4rcp owned by root Sat Jun 03 2000 Nalin Dahyabhai <nalin@redhat.com> - use %{_infodir} to better comply with FHS - move .so files to -devel subpackage - tweak xinetd config files (bugs #11833, #11835, #11836, #11840) - fix package descriptions again Wed May 24 2000 Nalin Dahyabhai <nalin@redhat.com> - change a LINE_MAX to 1024, fix from Ken Raeburn - add fix for login vulnerability in case anyone rebuilds without krb4 compat - add tweaks for byte-swapping macros in krb.h, also from Ken - add xinetd config files - make rsh and rlogin quieter - build with debug to fix credential forwarding - add rsh as a build-time req because the configure scripts look for it to determine paths Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com> - fix config_subpackage logic Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com> - remove setuid bit on v4rcp and ksu - apply patches from Jeffrey Schiller to fix overruns Chris Evans found - reintroduce configs subpackage for use in the errata - add PreReq: sh-utils Mon May 15 2000 Nalin Dahyabhai <nalin@redhat.com> - fix double-free in the kdc (patch merged into MIT tree) - include convert-config-files script as a documentation file Wed May 03 2000 Nalin Dahyabhai <nalin@redhat.com> - patch ksu man page because the -C option never works - add access() checks and disable debug mode in ksu - modify default ksu build arguments to specify more directories in CMD_PATH and to use getusershell() Wed May 03 2000 Bill Nottingham <notting@redhat.com> - fix configure stuff for ia64 Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com> - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653) - change Requires: for/in subpackages to include 1.2.1 Wed Apr 05 2000 Nalin Dahyabhai <nalin@redhat.com> - add man pages for kerberos(1), kvno(1), .k5login(5) - add kvno to -workstation Mon Apr 03 2000 Nalin Dahyabhai <nalin@redhat.com> - Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as a %config file anyway. - Make krb5.conf a noreplace config file. Thu Mar 30 2000 Nalin Dahyabhai <nalin@redhat.com> - Make klogind pass a clean environment to children, like NetKit's rlogind does. Wed Mar 08 2000 Nalin Dahyabhai <nalin@redhat.com> - Don't enable the server by default. - Compress info pages. - Add defaults for the PAM module to krb5.conf Mon Mar 06 2000 Nalin Dahyabhai <nalin@redhat.com> - Correct copyright: it's exportable now, provided the proper paperwork is filed with the government. Fri Mar 03 2000 Nalin Dahyabhai <nalin@redhat.com> - apply Mike Friedman's patch to fix format string problems - don't strip off argv[0] when invoking regular rsh/rlogin Thu Mar 02 2000 Nalin Dahyabhai <nalin@redhat.com> - run kadmin.local correctly at startup Mon Feb 28 2000 Nalin Dahyabhai <nalin@redhat.com> - pass absolute path to kadm5.keytab if/when extracting keys at startup Sat Feb 19 2000 Nalin Dahyabhai <nalin@redhat.com> - fix info page insertions Wed Feb 09 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak server init script to automatically extract kadm5 keys if /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet - adjust package descriptions Thu Feb 03 2000 Nalin Dahyabhai <nalin@redhat.com> - fix for potentially gzipped man pages Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com> - fix comments in krb5-configs Fri Jan 07 2000 Nalin Dahyabhai <nalin@redhat.com> - move /usr/kerberos/bin to end of PATH Tue Dec 28 1999 Nalin Dahyabhai <nalin@redhat.com> - install kadmin header files Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com> - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h - add installation of info docs - remove krb4 compat patch because it doesn't fix workstation-side servers Mon Dec 20 1999 Nalin Dahyabhai <nalin@redhat.com> - remove hesiod dependency at build-time Sun Dec 19 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - rebuild on 1.1.1 Thu Oct 07 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - clean up init script for server, verify that it works [jlkatz] - clean up rotation script so that rc likes it better - add clean stanza Mon Oct 04 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - backed out ncurses and makeshlib patches - update for krb5-1.1 - add KDC rotation to rc.boot, based on ideas from Michael's C version Sun Sep 26 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added -lncurses to telnet and telnetd makefiles Mon Jul 05 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added krb5.csh and krb5.sh to /etc/profile.d Tue Jun 22 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - broke out configuration files Mon Jun 14 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - fixed server package so that it works now Sat May 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - started changelog - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6 - added --force to makeinfo commands to skip errors during build
2004-09-09 07:05:48 +00:00
admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
auto-import changelog data from krb5-1.2.2-24.src.rpm Fri Mar 21 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-24 - fix double-free of enc_part2 in krb524d - update to latest patch kit for MITKRB5-SA-2003-004 Thu Mar 20 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-23 - make the default kdc.conf list the same enctypes we use for 1.2.7 Wed Mar 19 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-22 - add patch included in MITKRB5-SA-2003-003 (CAN-2003-0028) Mon Mar 17 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-21 - add patches from patchkit from MITKRB5-SA-2003-004 (CAN-2003-0138 and CAN-2003-0139) Thu Mar 06 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-20 - fix buffer underrun in unparsing certain principals (CAN-2003-0082) Wed Feb 26 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-19 - add patch to fix server-side crashes when principals have no components (CAN-2003-0072) Mon Feb 24 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-18 - add patch from Matt Crawford for encoding transited realms properly Wed Feb 05 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-17 - sync compiler flags for configure and make with other versions Tue Feb 04 2003 Nalin Dahyabhai <nalin@redhat.com> - add patch to document the reject-bad-transited option in kdc.conf - add backported symbol namespacing fix from 1.2.3 to clear up clashes with glib - add backported fix for hangs in kadmin client when principal contains an escaped @ symbol Thu Jan 30 2003 Nalin Dahyabhai <nalin@redhat.com> - add candidate backports for CAN-2002-0036, CAN-2002-058, CAN-2002-059 (CAN-2002-060 was fixed in 1.1.1-7 or so) Thu Jan 23 2003 Nalin Dahyabhai <nalin@redhat.com> 1.2.2-16 - add patch from Mark Cox for exploitable bugs in ftp client - add patch to avoid buffer read overruns when configuring via DNS - add patch to properly include <errno.h>
2004-09-09 07:09:20 +00:00
v4_mode = nopreauth
auto-import changelog data from krb5-1.2.1-8.src.rpm Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com> - fix summaries and descriptions - switched the default transfer protocol from PORT to PASV as proposed on bugzilla (#16134), and to match the regular ftp package's behavior Wed Jul 19 2000 Jeff Johnson <jbj@redhat.com> - rebuild to compress man pages. Sat Jul 15 2000 Bill Nottingham <notting@redhat.com> - move initscript back Fri Jul 14 2000 Nalin Dahyabhai <nalin@redhat.com> - disable servers by default to keep linuxconf from thinking they need to be started when they don't Thu Jul 13 2000 Prospector <bugzilla@redhat.com> - automatic rebuild Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com> - change cleanup code in post to not tickle chkconfig - add grep as a Prereq: for -libs Thu Jul 06 2000 Nalin Dahyabhai <nalin@redhat.com> - move condrestarts to postun - make xinetd configs noreplace - add descriptions to xinetd configs - add /etc/init.d as a prereq for the -server package - patch to properly truncate $TERM in krlogind Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com> - update to 1.2.1 - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update - start using the official source tarball instead of its contents Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not compatible with other stuff in 6.2, so no need) Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak graceful start/stop logic in post and preun Mon Jun 26 2000 Nalin Dahyabhai <nalin@redhat.com> - update to the 1.2 release - ditch a lot of our patches which went upstream - enable use of DNS to look up things at build-time - disable use of DNS to look up things at run-time in default krb5.conf - change ownership of the convert-config-files script to root.root - compress PS docs - fix some typos in the kinit man page - run condrestart in server post, and shut down in preun Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com> - only remove old krb5server init script links if the init script is there Sat Jun 17 2000 Nalin Dahyabhai <nalin@redhat.com> - disable kshell and eklogin by default Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com> - patch mkdir/rmdir problem in ftpcmd.y - add condrestart option to init script - split the server init script into three pieces and add one for kpropd Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com> - make sure workstation servers are all disabled by default - clean up krb5server init script Fri Jun 09 2000 Nalin Dahyabhai <nalin@redhat.com> - apply second set of buffer overflow fixes from Tom Yu - fix from Dirk Husung for a bug in buffer cleanups in the test suite - work around possibly broken rev binary in running test suite - move default realm configs from /var/kerberos to /var/kerberos Tue Jun 06 2000 Nalin Dahyabhai <nalin@redhat.com> - make ksu and v4rcp owned by root Sat Jun 03 2000 Nalin Dahyabhai <nalin@redhat.com> - use %{_infodir} to better comply with FHS - move .so files to -devel subpackage - tweak xinetd config files (bugs #11833, #11835, #11836, #11840) - fix package descriptions again Wed May 24 2000 Nalin Dahyabhai <nalin@redhat.com> - change a LINE_MAX to 1024, fix from Ken Raeburn - add fix for login vulnerability in case anyone rebuilds without krb4 compat - add tweaks for byte-swapping macros in krb.h, also from Ken - add xinetd config files - make rsh and rlogin quieter - build with debug to fix credential forwarding - add rsh as a build-time req because the configure scripts look for it to determine paths Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com> - fix config_subpackage logic Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com> - remove setuid bit on v4rcp and ksu - apply patches from Jeffrey Schiller to fix overruns Chris Evans found - reintroduce configs subpackage for use in the errata - add PreReq: sh-utils Mon May 15 2000 Nalin Dahyabhai <nalin@redhat.com> - fix double-free in the kdc (patch merged into MIT tree) - include convert-config-files script as a documentation file Wed May 03 2000 Nalin Dahyabhai <nalin@redhat.com> - patch ksu man page because the -C option never works - add access() checks and disable debug mode in ksu - modify default ksu build arguments to specify more directories in CMD_PATH and to use getusershell() Wed May 03 2000 Bill Nottingham <notting@redhat.com> - fix configure stuff for ia64 Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com> - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653) - change Requires: for/in subpackages to include 1.2.1 Wed Apr 05 2000 Nalin Dahyabhai <nalin@redhat.com> - add man pages for kerberos(1), kvno(1), .k5login(5) - add kvno to -workstation Mon Apr 03 2000 Nalin Dahyabhai <nalin@redhat.com> - Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as a %config file anyway. - Make krb5.conf a noreplace config file. Thu Mar 30 2000 Nalin Dahyabhai <nalin@redhat.com> - Make klogind pass a clean environment to children, like NetKit's rlogind does. Wed Mar 08 2000 Nalin Dahyabhai <nalin@redhat.com> - Don't enable the server by default. - Compress info pages. - Add defaults for the PAM module to krb5.conf Mon Mar 06 2000 Nalin Dahyabhai <nalin@redhat.com> - Correct copyright: it's exportable now, provided the proper paperwork is filed with the government. Fri Mar 03 2000 Nalin Dahyabhai <nalin@redhat.com> - apply Mike Friedman's patch to fix format string problems - don't strip off argv[0] when invoking regular rsh/rlogin Thu Mar 02 2000 Nalin Dahyabhai <nalin@redhat.com> - run kadmin.local correctly at startup Mon Feb 28 2000 Nalin Dahyabhai <nalin@redhat.com> - pass absolute path to kadm5.keytab if/when extracting keys at startup Sat Feb 19 2000 Nalin Dahyabhai <nalin@redhat.com> - fix info page insertions Wed Feb 09 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak server init script to automatically extract kadm5 keys if /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet - adjust package descriptions Thu Feb 03 2000 Nalin Dahyabhai <nalin@redhat.com> - fix for potentially gzipped man pages Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com> - fix comments in krb5-configs Fri Jan 07 2000 Nalin Dahyabhai <nalin@redhat.com> - move /usr/kerberos/bin to end of PATH Tue Dec 28 1999 Nalin Dahyabhai <nalin@redhat.com> - install kadmin header files Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com> - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h - add installation of info docs - remove krb4 compat patch because it doesn't fix workstation-side servers Mon Dec 20 1999 Nalin Dahyabhai <nalin@redhat.com> - remove hesiod dependency at build-time Sun Dec 19 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - rebuild on 1.1.1 Thu Oct 07 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - clean up init script for server, verify that it works [jlkatz] - clean up rotation script so that rc likes it better - add clean stanza Mon Oct 04 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - backed out ncurses and makeshlib patches - update for krb5-1.1 - add KDC rotation to rc.boot, based on ideas from Michael's C version Sun Sep 26 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added -lncurses to telnet and telnetd makefiles Mon Jul 05 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added krb5.csh and krb5.sh to /etc/profile.d Tue Jun 22 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - broke out configuration files Mon Jun 14 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - fixed server package so that it works now Sat May 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - started changelog - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6 - added --force to makeinfo commands to skip errors during build
2004-09-09 07:05:48 +00:00
[realms]
EXAMPLE.COM = {
master_key_type = des-cbc-crc
supported_enctypes = des3-cbc-sha1:normal des3-cbc-sha1:norealm des3-cbc-sha1:onlyrealm des-cbc-crc:v4 des-cbc-crc:afs3 des-cbc-crc:normal des-cbc-crc:norealm des-cbc-crc:onlyrealm des-cbc-md4:v4 des-cbc-md4:afs3 des-cbc-md4:normal des-cbc-md4:norealm des-cbc-md4:onlyrealm des-cbc-md5:v4 des-cbc-md5:afs3 des-cbc-md5:normal des-cbc-md5:norealm des-cbc-md5:onlyrealm des-cbc-sha1:v4 des-cbc-sha1:afs3 des-cbc-sha1:normal des-cbc-sha1:norealm des-cbc-sha1:onlyrealm
auto-import changelog data from krb5-1.2.1-8.src.rpm Wed Aug 16 2000 Nalin Dahyabhai <nalin@redhat.com> - fix summaries and descriptions - switched the default transfer protocol from PORT to PASV as proposed on bugzilla (#16134), and to match the regular ftp package's behavior Wed Jul 19 2000 Jeff Johnson <jbj@redhat.com> - rebuild to compress man pages. Sat Jul 15 2000 Bill Nottingham <notting@redhat.com> - move initscript back Fri Jul 14 2000 Nalin Dahyabhai <nalin@redhat.com> - disable servers by default to keep linuxconf from thinking they need to be started when they don't Thu Jul 13 2000 Prospector <bugzilla@redhat.com> - automatic rebuild Mon Jul 10 2000 Nalin Dahyabhai <nalin@redhat.com> - change cleanup code in post to not tickle chkconfig - add grep as a Prereq: for -libs Thu Jul 06 2000 Nalin Dahyabhai <nalin@redhat.com> - move condrestarts to postun - make xinetd configs noreplace - add descriptions to xinetd configs - add /etc/init.d as a prereq for the -server package - patch to properly truncate $TERM in krlogind Fri Jun 30 2000 Nalin Dahyabhai <nalin@redhat.com> - update to 1.2.1 - back out Tom Yu's patch, which is a big chunk of the 1.2 -> 1.2.1 update - start using the official source tarball instead of its contents Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - Tom Yu's patch to fix compatibility between 1.2 kadmin and 1.1.1 kadmind - pull out 6.2 options in the spec file (sonames changing in 1.2 means it's not compatible with other stuff in 6.2, so no need) Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak graceful start/stop logic in post and preun Mon Jun 26 2000 Nalin Dahyabhai <nalin@redhat.com> - update to the 1.2 release - ditch a lot of our patches which went upstream - enable use of DNS to look up things at build-time - disable use of DNS to look up things at run-time in default krb5.conf - change ownership of the convert-config-files script to root.root - compress PS docs - fix some typos in the kinit man page - run condrestart in server post, and shut down in preun Mon Jun 19 2000 Nalin Dahyabhai <nalin@redhat.com> - only remove old krb5server init script links if the init script is there Sat Jun 17 2000 Nalin Dahyabhai <nalin@redhat.com> - disable kshell and eklogin by default Thu Jun 15 2000 Nalin Dahyabhai <nalin@redhat.com> - patch mkdir/rmdir problem in ftpcmd.y - add condrestart option to init script - split the server init script into three pieces and add one for kpropd Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com> - make sure workstation servers are all disabled by default - clean up krb5server init script Fri Jun 09 2000 Nalin Dahyabhai <nalin@redhat.com> - apply second set of buffer overflow fixes from Tom Yu - fix from Dirk Husung for a bug in buffer cleanups in the test suite - work around possibly broken rev binary in running test suite - move default realm configs from /var/kerberos to /var/kerberos Tue Jun 06 2000 Nalin Dahyabhai <nalin@redhat.com> - make ksu and v4rcp owned by root Sat Jun 03 2000 Nalin Dahyabhai <nalin@redhat.com> - use %{_infodir} to better comply with FHS - move .so files to -devel subpackage - tweak xinetd config files (bugs #11833, #11835, #11836, #11840) - fix package descriptions again Wed May 24 2000 Nalin Dahyabhai <nalin@redhat.com> - change a LINE_MAX to 1024, fix from Ken Raeburn - add fix for login vulnerability in case anyone rebuilds without krb4 compat - add tweaks for byte-swapping macros in krb.h, also from Ken - add xinetd config files - make rsh and rlogin quieter - build with debug to fix credential forwarding - add rsh as a build-time req because the configure scripts look for it to determine paths Wed May 17 2000 Nalin Dahyabhai <nalin@redhat.com> - fix config_subpackage logic Tue May 16 2000 Nalin Dahyabhai <nalin@redhat.com> - remove setuid bit on v4rcp and ksu - apply patches from Jeffrey Schiller to fix overruns Chris Evans found - reintroduce configs subpackage for use in the errata - add PreReq: sh-utils Mon May 15 2000 Nalin Dahyabhai <nalin@redhat.com> - fix double-free in the kdc (patch merged into MIT tree) - include convert-config-files script as a documentation file Wed May 03 2000 Nalin Dahyabhai <nalin@redhat.com> - patch ksu man page because the -C option never works - add access() checks and disable debug mode in ksu - modify default ksu build arguments to specify more directories in CMD_PATH and to use getusershell() Wed May 03 2000 Bill Nottingham <notting@redhat.com> - fix configure stuff for ia64 Mon Apr 10 2000 Nalin Dahyabhai <nalin@redhat.com> - add LDCOMBINE=-lc to configure invocation to use libc versioning (bug #10653) - change Requires: for/in subpackages to include 1.2.1 Wed Apr 05 2000 Nalin Dahyabhai <nalin@redhat.com> - add man pages for kerberos(1), kvno(1), .k5login(5) - add kvno to -workstation Mon Apr 03 2000 Nalin Dahyabhai <nalin@redhat.com> - Merge krb5-configs back into krb5-libs. The krb5.conf file is marked as a %config file anyway. - Make krb5.conf a noreplace config file. Thu Mar 30 2000 Nalin Dahyabhai <nalin@redhat.com> - Make klogind pass a clean environment to children, like NetKit's rlogind does. Wed Mar 08 2000 Nalin Dahyabhai <nalin@redhat.com> - Don't enable the server by default. - Compress info pages. - Add defaults for the PAM module to krb5.conf Mon Mar 06 2000 Nalin Dahyabhai <nalin@redhat.com> - Correct copyright: it's exportable now, provided the proper paperwork is filed with the government. Fri Mar 03 2000 Nalin Dahyabhai <nalin@redhat.com> - apply Mike Friedman's patch to fix format string problems - don't strip off argv[0] when invoking regular rsh/rlogin Thu Mar 02 2000 Nalin Dahyabhai <nalin@redhat.com> - run kadmin.local correctly at startup Mon Feb 28 2000 Nalin Dahyabhai <nalin@redhat.com> - pass absolute path to kadm5.keytab if/when extracting keys at startup Sat Feb 19 2000 Nalin Dahyabhai <nalin@redhat.com> - fix info page insertions Wed Feb 09 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak server init script to automatically extract kadm5 keys if /var/kerberos/krb5kdc/kadm5.keytab doesn't exist yet - adjust package descriptions Thu Feb 03 2000 Nalin Dahyabhai <nalin@redhat.com> - fix for potentially gzipped man pages Fri Jan 21 2000 Nalin Dahyabhai <nalin@redhat.com> - fix comments in krb5-configs Fri Jan 07 2000 Nalin Dahyabhai <nalin@redhat.com> - move /usr/kerberos/bin to end of PATH Tue Dec 28 1999 Nalin Dahyabhai <nalin@redhat.com> - install kadmin header files Tue Dec 21 1999 Nalin Dahyabhai <nalin@redhat.com> - patch around TIOCGTLC defined on alpha and remove warnings from libpty.h - add installation of info docs - remove krb4 compat patch because it doesn't fix workstation-side servers Mon Dec 20 1999 Nalin Dahyabhai <nalin@redhat.com> - remove hesiod dependency at build-time Sun Dec 19 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - rebuild on 1.1.1 Thu Oct 07 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - clean up init script for server, verify that it works [jlkatz] - clean up rotation script so that rc likes it better - add clean stanza Mon Oct 04 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - backed out ncurses and makeshlib patches - update for krb5-1.1 - add KDC rotation to rc.boot, based on ideas from Michael's C version Sun Sep 26 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added -lncurses to telnet and telnetd makefiles Mon Jul 05 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - added krb5.csh and krb5.sh to /etc/profile.d Tue Jun 22 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - broke out configuration files Mon Jun 14 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - fixed server package so that it works now Sat May 15 1999 Nalin Dahyabhai <nsdahya1@eos.ncsu.edu> - started changelog - updated existing 1.0.5 RPM from Eos Linux to krb5 1.0.6 - added --force to makeinfo commands to skip errors during build
2004-09-09 07:05:48 +00:00
}