Nalin Dahyabhai
b54c6a0718
- incorporate fixes for MITKRB5-SA-2007-006 (CVE-2007-3999, CVE-2007-4000)
2007-09-04 18:10:23 +00:00
Nalin Dahyabhai
9866e02a96
- Do what the rfc says we should do, rather than what the error message
...
suggests we're doing.
2007-09-04 16:34:44 +00:00
Nalin Dahyabhai
929680a650
add missing gawk buildrequirement
2007-08-25 05:12:34 +00:00
Nalin Dahyabhai
8499d2199c
- actually bump the release number
2007-08-25 04:33:13 +00:00
Nalin Dahyabhai
5502d6651d
- cover more cases in labeling files on creation
2007-08-25 04:31:34 +00:00
Nalin Dahyabhai
e0443e5457
- experimental ok-as-delegate setting patch (not applied)
2007-08-25 04:28:10 +00:00
Nalin Dahyabhai
79f8a98d4f
rebuild
2007-08-23 20:50:42 +00:00
Nalin Dahyabhai
2f7dffc0f3
- include but don't apply
2007-07-26 19:08:20 +00:00
Nalin Dahyabhai
7f381af05d
- test patch for login chdir when $HOME is on root-squashed nfs
2007-07-26 19:07:22 +00:00
Nalin Dahyabhai
c7cc1d7d29
- test patch for password expiration reporting
2007-07-26 19:06:51 +00:00
Nalin Dahyabhai
fbe8865459
- kdc.conf: default to listening for TCP clients, too ( #248415 )
2007-07-26 18:36:57 +00:00
Nalin Dahyabhai
34ce3fe705
- add a preliminary patch for #231147 . initially not applied.
2007-07-23 21:01:33 +00:00
Nalin Dahyabhai
c0cd730c79
- update to 1.6.2
...
- add "buildrequires: texinfo-tex" to get texi2pdf
2007-07-19 16:50:28 +00:00
Nalin Dahyabhai
56d1413f95
- truncate the echoed string at the newline, not at the first non-cr/lf
2007-07-17 21:02:32 +00:00
Nalin Dahyabhai
147635188d
add CVE identifiers to the more recent changelog
2007-06-27 18:39:06 +00:00
Nalin Dahyabhai
cd3f50fb19
- incorporate fixes for MITKRB5-SA-2007-004 and MITKRB5-SA-2007-005
2007-06-27 06:08:01 +00:00
Nalin Dahyabhai
196ea67f06
- add missing pam-devel build requirement, force selinux-or-fail build
2007-06-25 01:16:51 +00:00
Nalin Dahyabhai
cb76d1ea2b
rebuild
2007-06-25 00:56:37 +00:00
Nalin Dahyabhai
d360ed53e4
- label all files at creation-time according to the SELinux policy
...
(#228157 )
2007-06-25 00:55:25 +00:00
Nalin Dahyabhai
29d9e8c00d
- apply a label to all files upon creation
2007-06-25 00:54:13 +00:00
Nalin Dahyabhai
5899ab24a3
- also don't error out in the --disable-shared case, which while it doesn't
...
actually build to completion, is pretty handy for testing build changes
2007-06-25 00:52:53 +00:00
Nalin Dahyabhai
dbbe71ef2d
- adjust the login-specific bits for changes which were made for ftpd
2007-06-25 00:50:30 +00:00
Nalin Dahyabhai
8f7d649fe0
- that should work better
2007-06-22 23:21:07 +00:00
Nalin Dahyabhai
e773dcc288
- um, maybe not just yet
2007-06-22 22:33:07 +00:00
Nalin Dahyabhai
2ecf4e22d8
nope, we don't provide that file
2007-06-22 22:15:03 +00:00
Nalin Dahyabhai
70ccd082ae
- oops, note that pam changes went in, too
2007-06-22 22:10:15 +00:00
Nalin Dahyabhai
117cdbbea7
- preprocess kerberos.ldif into a format FDS will like better, and include
...
that as a doc file as well
2007-06-22 22:06:27 +00:00
Nalin Dahyabhai
37416c24a6
- switch man pages to being generated with the right paths in them
...
- drop old, incomplete SELinux patch
- add patch from Greg Hudson to make srvtab routines report missing-file
errors at same point that keytab routines do (#241805 )
2007-06-22 22:04:38 +00:00
Nalin Dahyabhai
513d8d8504
- patch to make srvtab routines report missing-file errors at the same
...
point that the keytab routines do
2007-06-22 22:03:42 +00:00
Nalin Dahyabhai
547fdc81db
- PAM support for rshd, login (used by telnet and rlogind), and ftpd
2007-06-22 22:03:14 +00:00
Nalin Dahyabhai
3f47a21b9d
- filename listing all of the man pages in the source tree, so that the
...
.spec file can rename them from $foo to $foo.in
- patch to replace absolute paths in man pages with configure-based values,
and to generate man pages
2007-06-22 22:02:16 +00:00
Nalin Dahyabhai
b892316bf5
- actually use a configuration file that's not login's as a template
2007-06-22 22:00:29 +00:00
Nalin Dahyabhai
7f177b9be9
- PAM configuration for ftpd
2007-06-22 21:57:16 +00:00
Nalin Dahyabhai
5627f959d0
- PAM configuration for krshd when encryption is being used
2007-06-22 21:56:56 +00:00
Nalin Dahyabhai
0ac131442d
- PAM configuration for krshd when encryption is not being used
2007-06-22 21:56:36 +00:00
Nalin Dahyabhai
ad9d82cb5c
- pull patch from svn to undo unintentional chattiness in ftp
...
- pull patch from svn to handle NULL krb5_get_init_creds_opt structures
better in a couple of places where they're expected
2007-05-24 15:43:24 +00:00
Nalin Dahyabhai
d36d579aba
- patch from svn to fixup a couple of get_init_creds_opt problems
2007-05-24 15:41:33 +00:00
Nalin Dahyabhai
40bfa86a85
- patch from svn to fix debug spew in ftp
2007-05-24 15:41:11 +00:00
Nalin Dahyabhai
3f30bc2d6d
bump release number
2007-05-23 22:06:26 +00:00
Nalin Dahyabhai
7877c27fc3
- bump to 1.6.1
2007-05-23 21:48:27 +00:00
Nalin Dahyabhai
15a4beabc5
- obsolete by 1.6.1 release
2007-05-23 21:48:08 +00:00
Nalin Dahyabhai
c0edd9e442
- obsoleted by krb5-1.6-manpage-paths.patch
2007-05-23 21:47:42 +00:00
Nalin Dahyabhai
65b44dedbe
- experimental patch to ignore empty values for various environment values
2007-05-23 21:46:54 +00:00
Nalin Dahyabhai
5aa33883de
- as before, but get the location of the kpropd acl file correct
2007-05-23 21:39:31 +00:00
Nalin Dahyabhai
a9c20b1574
- kadmind.init: don't fail outright if the default principal database isn't
...
there if it looks like we might be using the kldap plugin
- kadmind.init: attempt to extract the key for the host-specific kadmin
service when we try to create the keytab
2007-05-18 22:16:16 +00:00
Nalin Dahyabhai
ea9e19241a
- omit dependent libraries from the krb5-config --libs output, as using
...
shared libraries (no more static libraries) makes them unnecessary and
they're not part of the libkrb5 interface (patch by Rex Dieter,
#240220 ) (strips out libkeyutils, libresolv, libdl)
2007-05-16 19:48:19 +00:00
Nalin Dahyabhai
a7114b4891
- pull in keyutils as a build requirement to get the "KEYRING:" ccache
...
type, because we've merged
2007-05-04 19:03:00 +00:00
Nalin Dahyabhai
a321e486d2
- fix an uninitialized length value which could cause a crash when parsing
...
key data coming from a directory server
- correct a typo in the krb5.conf man page ("ldap_server"->"ldap_servers")
2007-05-04 18:10:01 +00:00
Nalin Dahyabhai
446760b8bf
- fix an unitialized length count which caused the plugin to attempt to
...
read from an uninitialized pointer when reading back salted key which
didn't include a non-default salt
2007-05-04 18:06:26 +00:00
Nalin Dahyabhai
833ef8ff9f
- fix incorrect doc: "ldap_server" refers to what the code expects is
...
"ldap_servers"
2007-05-04 18:05:15 +00:00
