Nalin Dahyabhai
e0a60dd473
- don't need this any more
2011-12-20 11:49:22 -05:00
Nalin Dahyabhai
298c87aab9
- don't need this any more
2011-12-20 11:48:50 -05:00
Nalin Dahyabhai
f28b57af20
- pull in patch for RT#7048: allow PAC verification to only bother trying to
...
verify the signature with keys that it's given (still more of #761317 )
2011-12-13 10:50:02 -05:00
Nalin Dahyabhai
6d68d342c9
- pull in patch for RT#7047: allow tickets obtained via S4U2Proxy to be cached
...
(more of #761317 )
2011-12-13 10:48:28 -05:00
Nalin Dahyabhai
fb7c02faff
- pull in patch for RT#7046: tag a ccache containing credentials obtained via
...
S4U2Proxy with the principal name of the proxying principal (part of #761317 )
2011-12-13 10:47:31 -05:00
Nalin Dahyabhai
03e76d7832
- apply upstream patch to fix a null pointer dereference when processing TGS requests (CVE-2011-1530, #753748 )
2011-12-06 14:12:15 -05:00
Nalin Dahyabhai
4584a88e40
correct the release to match the changelog
2011-11-30 15:13:54 -05:00
Nalin Dahyabhai
635a422817
- correct a bug in the fix for #754001 so that the file creation context is consistently reset
2011-11-30 15:03:45 -05:00
Nalin Dahyabhai
a45a82724d
- require libverto-module-base at build- and runtime so that tests which
...
use verto can work properly
2011-11-15 13:32:43 -05:00
Nalin Dahyabhai
1110ccd873
- bump to 1.10 alpha 1
2011-11-15 12:45:44 -05:00
Nalin Dahyabhai
a8e279c6ee
- get the 'make check' target to build in the gss-kernel-lib subdir
2011-11-14 16:41:13 -05:00
Nalin Dahyabhai
efdfc3a244
update for 1.10
2011-11-09 18:44:22 -05:00
Nalin Dahyabhai
6d42ba9cb1
update for 1.10
2011-11-09 18:44:01 -05:00
Nalin Dahyabhai
be0f417bc2
we shouldn't need this any more, per RT#6893
2011-11-09 18:25:44 -05:00
Nalin Dahyabhai
18b089b01f
update for 1.10
2011-11-09 18:20:14 -05:00
Nalin Dahyabhai
74f66f3e49
dependency libs aren't output any more
2011-11-09 17:15:32 -05:00
Nalin Dahyabhai
530ff94e09
update, adding the default location for KRB5_KDC_PROFILE
2011-11-09 16:47:29 -05:00
Nalin Dahyabhai
dc853050a1
update for 1.10
2011-11-09 16:21:31 -05:00
Nalin Dahyabhai
0fde11f889
update for 1.10; we don't need to prune out CFLAGS any more
2011-11-09 15:26:34 -05:00
Nalin Dahyabhai
2e2a9f645f
update, move /bin before /usr/sbin to keep up with login
2011-11-09 15:17:06 -05:00
Nalin Dahyabhai
8ef1736cb6
update for 1.10
2011-11-09 15:09:41 -05:00
Nalin Dahyabhai
19826e3133
update for 1.10
2011-11-09 15:07:52 -05:00
Nalin Dahyabhai
440e28a51c
update
2011-11-09 14:53:27 -05:00
Nalin Dahyabhai
17a1f736bd
we'll need this until the next upstream refresh
2011-11-09 14:39:29 -05:00
Nalin Dahyabhai
17be63590c
1.10 incorporates this fix
2011-11-09 14:35:36 -05:00
Nalin Dahyabhai
2a0db84775
don't need this backport any more
2011-11-09 14:35:19 -05:00
Nalin Dahyabhai
0709f21db5
don't need this backport any more
2011-11-09 14:29:15 -05:00
Nalin Dahyabhai
d0a0c0540c
don't need this backport any more
2011-11-09 14:28:50 -05:00
Nalin Dahyabhai
b0718da54f
don't need the backported patches (poll.patch, poll2.patch) and upstream
...
rewrote things so that poll3 doesn't apply
2011-11-09 14:28:04 -05:00
Nalin Dahyabhai
9f7716f718
don't need these backports any more
2011-11-09 14:27:35 -05:00
Nalin Dahyabhai
260fd6d3e4
don't need this backport any more
2011-11-09 14:26:52 -05:00
Nalin Dahyabhai
00adb00d24
don't need this backport any more
2011-11-09 14:23:33 -05:00
Nalin Dahyabhai
eed21c996f
RT#6915 fix applied upstream
2011-11-09 14:23:06 -05:00
Nalin Dahyabhai
9848f42acf
- don't need this backport any more
2011-11-09 14:22:20 -05:00
Nalin Dahyabhai
d250463584
RT#6851 fix applied upstream
2011-11-09 14:21:36 -05:00
Dennis Gilmore
39cc62dcc1
- Rebuilt for glibc bug#747377
2011-10-26 19:09:40 -05:00
Nalin Dahyabhai
af8b546790
- apply upstream patch to fix a null pointer dereference with the LDAP kdb backend (CVE-2011-1527, #744125 ), an assertion failure with multiple kdb backends (CVE-2011-1528), and a null pointer dereference with multiple kdb backends (CVE-2011-1529) ( #737711 )
2011-10-18 14:28:08 -04:00
Nalin Dahyabhai
73b7dd3ece
- pull in patch from trunk to rename krb5int_pac_sign() to krb5_pac_sign() and
...
make it public (#745533 )
2011-10-13 15:31:36 -04:00
Nalin Dahyabhai
28837545d5
- handle a harder-to-trigger assertion failure that starts cropping up when we
...
exit the transmit loop on time (#739853 )
2011-10-07 16:29:28 -04:00
Nalin Dahyabhai
098a308f7e
- kadmin.service: fix #723723 again
...
- kadmin.service,krb5kdc.service: remove optional use of $KRB5REALM in command
lines, because systemd parsing doesn't handle alternate value shell variable
syntax
- kprop.service: add missing Type=forking so that systemd doesn't assume simple
- kprop.service: expect the ACL configuration to be there, not absent
2011-10-07 15:10:35 -04:00
Tom "spot" Callaway
e645180a9a
hardcode pid file path as option to krb5kdc.service
2011-10-02 15:05:51 +02:00
Tom "spot" Callaway
3545dd2571
fix typo
2011-09-30 12:20:58 +02:00
Tom "spot" Callaway
82129e3a0d
convert to systemd
2011-09-19 14:45:57 -04:00
Nalin Dahyabhai
207fa55d00
- pull in upstream patch for RT#6952, confusion following referrals for cross-realm auth ( #734341 )
2011-09-06 00:19:38 -04:00
Nalin Dahyabhai
a26dd7c42c
- switch to the upstream patch for #727829
2011-09-01 09:29:29 -04:00
Nalin Dahyabhai
57d5eabb48
- bump the release number
2011-08-31 13:33:23 -04:00
Nalin Dahyabhai
db0e796a50
- handle an assertion failure that starts cropping up when the patch for using poll ( #701446 ) meets servers that aren't running KDCs or against which the connection fails for other reasons ( #727829 , #734172 )
2011-08-31 13:31:58 -04:00
Nalin Dahyabhai
0ad36e9c38
- override the default build rules to not delete temporary y.tab.c files,
...
so that they can be packaged, allowing debuginfo files which point to them
do so usefully (#729044 )
2011-08-08 18:39:55 -04:00
Nalin Dahyabhai
ad0dcf5042
- pull in a patch to fix losing track of the replay cache FD, from SVN by way of Kevin Coffman
2011-07-22 16:57:35 -04:00
Nalin Dahyabhai
2202e378de
- build shared libraries with partial RELRO support ( #723995 )
...
- filter out potentially multiple instances of -Wl,-z,relro from krb5-config
output, now that it's in the buildroot's default LDFLAGS
2011-07-22 16:29:06 -04:00
