Robbie Harwood
82cabae196
Fix use of enterprise principals with forwarding
2017-04-07 16:13:00 +00:00
Robbie Harwood
0dc40d929f
Backport certauth plugin and related pkinit changes
2017-03-22 18:09:06 +00:00
Robbie Harwood
fd8a9e22c4
Remove duplication between subpackages
...
Resolves : #1250228
2017-03-07 19:41:05 +00:00
Robbie Harwood
2a20da0e2a
New upstream release - 1.15.1
2017-03-04 00:34:47 +00:00
Robbie Harwood
9ce824b289
Patch build by disabling failing test; will fix properly soon
2017-03-01 22:58:53 +00:00
Robbie Harwood
ae83ec3024
Hammer refresh around transient rawhide issue
2017-02-17 23:45:56 +00:00
Robbie Harwood
beaf0637a0
Backport fix for GSSAPI fallback realm
2017-02-17 22:47:38 +00:00
Robbie Harwood
0d08e37340
Move krb5-kdb-version provides from -libs to -devel
2017-02-07 18:25:18 +00:00
Robbie Harwood
621f3cf2e6
Add free hook to KDB; increments KDB version
...
Add KDB version flag.
All patches are touched because git made the hash lengths in patches longer.
2017-01-20 18:07:42 -05:00
Robbie Harwood
be80cb9861
New upstream release
2016-12-05 20:52:58 +00:00
Robbie Harwood
f68ddd3a8e
Comment how betas work
2016-11-17 09:00:11 -05:00
Robbie Harwood
c3f7090334
New upstream release
2016-11-16 21:22:01 +00:00
Robbie Harwood
442bc9dfe4
Ensure we can build with the new CFLAGS
...
Also remove the git versioning in patches.
2016-11-10 20:32:41 +00:00
Robbie Harwood
821dac42ed
Upstream release 1.15-beta1
...
Also update selinux with RHEL hygene.
Resolves : #1314096
2016-10-20 23:34:55 +00:00
Tomas Mraz
895d0bdfea
rebuild with OpenSSL 1.1.0, added backported upstream patch
2016-10-11 14:04:59 +02:00
Robbie Harwood
76843c3ef0
Properly close krad sockets
...
Resolves : #1380836
2016-09-30 17:38:09 +00:00
Robbie Harwood
5a1a649bda
Fix backward check in kprop.service
2016-09-30 16:40:22 +00:00
Robbie Harwood
bbb54d328c
Switch to using autosetup macro
...
Patches come from git, so it is easiest to just make a git repo
2016-09-30 16:40:14 +00:00
Robbie Harwood
32ef372877
Backport getrandom() support and remove patch numbering
2016-09-22 19:39:24 +00:00
Robbie Harwood
14f028579d
New upstream release and integrate with external git
2016-09-19 23:49:31 +00:00
Robbie Harwood
4f5955da72
Add krb5_db_register_keytab
...
Resolves : #1376812
2016-09-19 16:18:42 +00:00
Robbie Harwood
3e13029eb0
Use responder for non-preauth AS requests
...
Resolves : #1370622
2016-08-29 17:58:02 +00:00
Robbie Harwood
10d34c1413
Guess Samba client mutual flag using ap_option
...
Resolves : #1370980
2016-08-29 17:44:23 +00:00
Robbie Harwood
1dd613afe8
Fix KDC return code and set prompt types for OTP client preauth
...
Resolves : #1370072
2016-08-25 14:05:05 +00:00
Robbie Harwood
136cc25087
Turn OFD locks back on with glibc workaround
...
Resolves : #1274922
2016-08-15 17:33:33 +00:00
Robbie Harwood
766ee8e989
Fix use of KKDCPP with SNI
...
Resolves : #1365027
2016-08-10 17:21:41 +00:00
Robbie Harwood
da7614606c
Make krb5-devel depend on libkadm5
...
Resolves : #1364487
2016-08-05 17:02:52 +00:00
Robbie Harwood
480d266a1d
Up-port a bunch of stuff from the el-7.3 cycle
...
Resolves : #1255450
ResolveS : #1314989
2016-08-03 21:15:16 +00:00
Robbie Harwood
482c8e1687
New upstream version 1.14.3
2016-08-01 20:44:35 +00:00
Robbie Harwood
528404bbf5
Fix CVE-2016-3120
...
Resolves : #1361051
2016-07-28 21:56:33 +00:00
Robbie Harwood
e165eeccda
Fix incorrect recv() size calculation in libkrad
2016-06-23 16:07:51 +00:00
Robbie Harwood
802e825d17
Separate out the kadm5 libs
2016-06-16 16:34:18 +00:00
Robbie Harwood
db300d8761
Fix setting of AS key in OTP preauth failure
2016-05-27 21:19:24 +00:00
Robbie Harwood
0429334fa0
Use the correct patches this time.
...
Resolves : #1321135
2016-04-05 20:14:05 +00:00
Robbie Harwood
2f3f20f718
Add send/receive sendto_kdc hooks and corresponding tests
...
Resolves : #1321135
2016-04-04 18:38:02 +00:00
Robbie Harwood
f0b5fc56f2
Fix CVE-2016-3119 (NULL deref in LDAP module)
2016-03-18 21:02:15 +00:00
Robbie Harwood
7b4e88e425
Backport OID mech fix
...
Resolves : #1317609
2016-03-17 17:17:30 +00:00
Robbie Harwood
f1cb770b53
New rawhide, new upstream version
...
- Drop CVE patches
- Rename fix_interposer.patch to acquire_cred_interposer.patch
- Update acquire_cred_interposer.patch to apply to new source
2016-02-29 23:45:38 +00:00
Robbie Harwood
8bddc884ac
Fix log file permissions patch with our selinux
...
Resolves : #1309421
2016-02-22 22:06:57 +00:00
Robbie Harwood
96d71f74f7
Backport my interposer fixes from upstream
...
Supersedes krb5-mechglue_inqure_attrs.patch
2016-02-19 20:11:26 +00:00
Robbie Harwood
5d016a51a3
Clean up bad merge
2016-02-16 17:08:51 +00:00
Robbie Harwood
9707484326
Adjust dependency on crypto-polices to be just the file we want
...
Patch courtesy of lslebodn.
Resolves : #1308984
2016-02-16 17:07:34 +00:00
Dennis Gilmore
04850893e4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 02:24:34 +00:00
Robbie Harwood
f525729cee
Replace _kadmin/_kprop with systemd macros
...
Remove traces of upstart from fedora package per policy
Resolves : #1290185
2016-01-28 19:44:10 +00:00
Robbie Harwood
c52f5baf4b
Fix CVE-2015-8629, CVE-2015-8630, CVE-2015-8631
2016-01-27 23:17:07 +00:00
Robbie Harwood
93772ec156
Make krb5kdc.log not world-readable by default
...
Resolves : #1276484
2016-01-21 19:05:45 +00:00
Robbie Harwood
892fe9b7b5
Allow verification of attributes on krb5.conf
2016-01-21 18:05:08 +00:00
Robbie Harwood
ce63dad07e
Use "new" systemd macros for service handling. (Thanks vpavlin!)
...
Resolves : #850399
2016-01-20 22:11:00 +00:00
Robbie Harwood
21a49ad7c7
Simplify spec file by removing some dead code paths
...
This includes removal of the following macros:
- WITH_NSS (always false)
- WITH_SYSTEMD (always true)
- WITH_LDAP (always true)
- WITH_OPENSSL (always true)
2016-01-20 21:15:02 +00:00
Robbie Harwood
b653d26d53
Backport fix for chrome crash in spnego_gss_inquire_context
...
Resolves : #1295893
2016-01-08 18:38:57 +00:00
