1. 02 Jun, 2018 1 commit
  2. 31 Dec, 2017 3 commits
  3. 30 Dec, 2017 2 commits
    • Russ Allbery's avatar
      Add clang to Travis-CI testing · 832f57f9
      Russ Allbery authored
    • Russ Allbery's avatar
      Update to rra-c-util 7.0 and C TAP Harness 4.2 · 0e65964c
      Russ Allbery authored
      Update to rra-c-util 7.0:
      * Support a warning build under Clang.
      * Avoid zero-length allocations in reallocarray and vector.
      Update to C TAP Harness 4.2:
      * Avoid zero-length allocations in breallocarray.
      * Add is_blob and is_bool functions.
      * Use C_TAP_SOURCE and C_TAP_BUILD environment variables in tests.
      Compile cleanly under GCC 7 and Clang warnings and Clang's static
  4. 17 Sep, 2017 1 commit
    • Russ Allbery's avatar
      Improve ticket cache and krb5.conf documentation · a0cc6d12
      Russ Allbery authored
      Better document that the default Kerberos library ticket cache
      location is not used (and why), and how to set configuration
      parameters in krb5.conf.  Thanks, Matthew Gabeler-Lee.  (Debian
  5. 12 Aug, 2017 3 commits
  6. 11 Aug, 2017 5 commits
    • Russ Allbery's avatar
      Run configure before make in Travis · 5d91e339
      Russ Allbery authored
    • Russ Allbery's avatar
      Document PKINIT test configuration · f441ab68
      Russ Allbery authored
      Document the test suite configuration files required to run the PKINIT
    • Russ Allbery's avatar
      Add configuration for Travis-CI testing · adcfd84a
      Russ Allbery authored
    • Russ Allbery's avatar
      Rename autogen to bootstrap · 3b4d783f
      Russ Allbery authored
      Rename the script to bootstrap from a Git checkout to bootstrap,
      matching the emerging consensus in the Autoconf world.
    • Russ Allbery's avatar
      Update to rra-c-util 6.3 and C TAP Harness 3.4 · 89c30260
      Russ Allbery authored
      Update to rra-c-util 6.3:
      * Fix new warnings in GCC 7.
      * Probe for warning flags instead of hard-coding a list.
      * New test for obsolete URLs and email addresses.
      * Remove unused portable replacements for strlcpy and strlcat.
      * Use C_TAP_SOURCE and C_TAP_BUILD environment variables in tests.
      * Fix portability defines for anonymous principal strings.
      * Clear errno on pam_modutil_getpwnam to improve other testing.
      * Add portability defines for macOS's PAM implementation.
      * Add new Autoconf macro to probe for pam_strerror const usage.
      * Support Solaris 10's included Kerberos.
      Update to C TAP Harness 3.4:
      * Fix segfault in runtests with an empty test list.
      * Display verbose test results with -v or C_TAP_VERBOSE.
      * Test infrastructure builds cleanly with Clang warnings.
  7. 28 May, 2017 1 commit
  8. 29 Nov, 2015 1 commit
  9. 16 Aug, 2015 2 commits
  10. 20 Jul, 2015 1 commit
  11. 26 Dec, 2014 12 commits
  12. 25 Dec, 2014 7 commits
    • Russ Allbery's avatar
      Update to rra-c-util 5.6 and C TAP Harness 3.2 · 6fe03c35
      Russ Allbery authored
      Update to rra-c-util 5.6:
      * Suppress warnings from Kerberos headers in non-system paths.
      * Fix probing for Heimdal's libroken to work with older versions.
      * Fix Kerberos header detection if root or include paths are given.
      * Pass --deps to krb5-config in the non-reduced-dependencies case.
      * Provide a reallocarray replacement for platforms without it.
      * Use reallocarray where appropriate.
      * Drop checks for NULL before freeing pointers.
      * Drop explicit pointer initialization to NULL and rely on calloc.
      * Check the return status of snprintf and vsnprintf properly.
      * Preserve errno if snprintf fails in vasprintf replacement.
      * Suppress a dummy symbol in the client library that could leak.
      * Fix syntax errors when building with a C++ compiler.
      * Avoid test suite failures where tested functions are macros.
      Update to C TAP Harness 3.2:
      * Reopen standard input to /dev/null when running a test list.
      * Don't leak extraneous file descriptors to tests.
      * Suppress lazy plans and test summaries if the test failed with bail.
      * bail and sysbail now exit with status 255 to match Test::More.
      * runtests now treats the command line as a list of tests by default.
      * The full test executable path can now be passed to runtests -o.
      * Improved harness output for tests with lazy plans.
      * Improved harness output to a terminal for some abort cases.
      * Flush harness output after each test even when not on a terminal.
    • Russ Allbery's avatar
      Add tests for POD documentation, fix spelling · f83b4af4
      Russ Allbery authored
      Import the tests for POD syntax and documentation from the current
      Git version of C TAP Harness.  Add lots of stopwords to the
      documentation and fix a few spelling errors.
    • Russ Allbery's avatar
      Add the no_update_user option · b1d35a63
      Russ Allbery authored
      Add a no_update_user option that disables the normal update of the
      PAM_USER PAM variable after canonicalization of the username.  When
      this is set, pam-krb5 will not convert full principal names to local
      usernames where possible for the rest of the PAM stack.
    • Russ Allbery's avatar
      Add version numbers to the documentation · fa43db62
      Russ Allbery authored
      Add the version number at which each module option was added with its
      current meaning to the documentatation.  Also improve the wording in
      one place, and mention the Red Hat PAM module.
    • Jeffrey Hutzelman's avatar
      fakepam: Support more pam data items · 56c0d8d6
      Jeffrey Hutzelman authored
      This extends fakepam's pam_set_item() and pam_get_item() to provide full
      support for PAM_RHOST, PAM_RUSER, and PAM_TTY, and read-only support for
      PAM_SERVICE (which returns the service name given to pam_start()) and
      PAM_USER_PROMPT (which always returns the default string "login: ").
      This allows fakepam to be used to test modules which get and/or set
      these items, including pam-krb5 when built with CMUCS implied $USER/root
    • Jeffrey Hutzelman's avatar
      parse_name is not krb5_parse_name · a8ba2fa6
      Jeffrey Hutzelman authored
      An error return from parse_name() does not _necessarily_ mean that it is
      krb5_parse_name which failed -- the error could be an out-of-memory
      condition, or (with CMUCS implied /root support) an error identifying
      the requesting user.
    • Jeffrey Hutzelman's avatar
      Eliminate memory leak in parse_name() · de280c93
      Jeffrey Hutzelman authored
      In an uncommon out-of-memory condition, parse_name() could leak even
      more memory by failing to free a buffer before returning ENOMEM.
  13. 11 Aug, 2014 1 commit