Commits - pam_krb5

adjust for new per-user-tmp location

Nalin Dahyabhai • 12 years ago

5b48590

fix ccaches getting the wrong owner when refreshed

Nalin Dahyabhai • 12 years ago

8e9c063

- fix some bashisms and explicitly note errors when we run into them

Nalin Dahyabhai • 13 years ago

aa7ce89

- log the changes to how we prompt for passwords during password change

Nalin Dahyabhai • 13 years ago

4c22a63

- add gssftp to the "external" list

Nalin Dahyabhai • 13 years ago

dd55297

- if "external", don't remove a ccache, either

Nalin Dahyabhai • 13 years ago

ad31f24

- prep for 2.3.13

Nalin Dahyabhai • 13 years ago

9215413

- remove duplicate line

Nalin Dahyabhai • 13 years ago

4667b41

- note cred_session

Nalin Dahyabhai • 13 years ago

7d00c3c

- don't forget that new header file

Nalin Dahyabhai • 13 years ago

7f0caa2

* src/sly.c: if libpam has a KRB5CCNAME set, look there for creds before looking in the default location

Nalin Dahyabhai • 13 years ago

b7248ee

* src/auth.c: when we get non-"external" creds, be sure to note that

Nalin Dahyabhai • 13 years ago

95f541c

* configure.ac: add a --with-default-no-cred-session option

Nalin Dahyabhai • 13 years ago

7bd1c02

- pass an enum to the session worker so that we can better know what's going on

Nalin Dahyabhai • 13 years ago

39ee838

* src/session.c,src/session.h: make the current open/close session function into one that's called with an extra parameter to help clarify when we're calling it

Nalin Dahyabhai • 13 years ago

627a0a4

- only permit a password prompt in attempt 3 if we didn't already

Nalin Dahyabhai • 13 years ago

45bf20d

- allow libkrb5 to prompt for the password, if it's a last-ditch call

Nalin Dahyabhai • 13 years ago

6116594

- rename pw0/pw1 to pw1/pw2

Nalin Dahyabhai • 13 years ago

4f5bee6

- separate the no_initial_prompt and no_subsequent_prompt cases by

Nalin Dahyabhai • 13 years ago

9d9bedc

- don't allocate and initialize password-changing options twice

Nalin Dahyabhai • 13 years ago

fd067b0

- pam_sm_chauthtok(): heed the subsequent_prompt option during the pwchange first pass

Nalin Dahyabhai • 13 years ago

253e0f9

- pam_sm_chauthtok(): also use password-changing opts in the

Nalin Dahyabhai • 13 years ago

1abd997

- use krb5_set_trace_callback() if it's available

Nalin Dahyabhai • 13 years ago

4820fd1

* src/password.c(pam_sm_chauthtok): if we managed to get password changing creds the first time, don't try again, but do prompt for a password if we're still expected to be the module that does it password if we're still expected to be the module that does it

Nalin Dahyabhai • 13 years ago

97b32b8

- note the last change

Nalin Dahyabhai • 13 years ago

dbdb5cf

* src/stash.c(_pam_krb5_stash_external_read): add a flag to track

Nalin Dahyabhai • 13 years ago

e388aa3

- correct date in .spec file

Nalin Dahyabhai • 13 years ago

4bb96c0

- import updated translations, though for some reason many of them mark

Nalin Dahyabhai • 13 years ago

7e0c7cb

- resync .spec file with Fedora Raw Hide

Nalin Dahyabhai • 13 years ago

81cc02e

- 'tx pull' at the right(?) time

Nalin Dahyabhai • 13 years ago

e23da16

- add transifex configuration

Nalin Dahyabhai • 13 years ago

8445a2c

- revert the expiration reporting change

Nalin Dahyabhai • 13 years ago

ea17e27

- not running make check in %%check, don't need these

Nalin Dahyabhai • 13 years ago

080ac4a

- run the test kdc on tcp, too

Nalin Dahyabhai • 13 years ago

7464566

- don't test for krb5_change_password twice

Nalin Dahyabhai • 13 years ago

88f1fce

- tag 2.3.12

Nalin Dahyabhai • 13 years ago

88b0a92

* src/v5.c(v5_change_password): prefer krb5_change_password() over

Nalin Dahyabhai • 13 years ago

90dc564

- try to force tcp

Nalin Dahyabhai • 13 years ago

95e0b6f

don't return new-authtok-reqd unless we succeeded gettng password changing creds

Nalin Dahyabhai • 13 years ago

647967c

- update the test files

Nalin Dahyabhai • 13 years ago

ba6e0a5

- rework how the test kdc and kadmind are started and stopped

Nalin Dahyabhai • 13 years ago

ad77f69

- we don't need to wait that long after a restart

Nalin Dahyabhai • 13 years ago

5c748d9

- we don't need to restart here, we just need to wait

Nalin Dahyabhai • 13 years ago

7793dde

- check for krb5_copy_addr using its symbol, not its declaration

Nalin Dahyabhai • 13 years ago

8fad726

- check for krb5_os_hostaddr() via its symbol, not its declaration

Nalin Dahyabhai • 13 years ago

cf51202

- request a similarly-shortened regular lifetime

Nalin Dahyabhai • 13 years ago

2b2495e

- don't reinit the database just because we restart the kdc

Nalin Dahyabhai • 13 years ago

94240d4

- also clean up password-has-expired errors

Nalin Dahyabhai • 13 years ago

5559789

expect the right warning at the right place, and the right acct-mgmt result

Nalin Dahyabhai • 13 years ago

5108fa4

with nowarn, we shouldn't see a warning

Nalin Dahyabhai • 13 years ago

c15b42e

expect the right warning

Nalin Dahyabhai • 13 years ago

68695b6

pam_krb5

Source Code

Commits 894