head	1.2;
access;
symbols
	RELENG_8_4:1.2.0.2
	RELENG_9_1_0_RELEASE:1.1.1.1
	RELENG_9_1:1.1.1.1.0.16
	RELENG_9_1_BP:1.1.1.1
	RELENG_8_3_0_RELEASE:1.1.1.1
	RELENG_8_3:1.1.1.1.0.14
	RELENG_8_3_BP:1.1.1.1
	RELENG_9_0_0_RELEASE:1.1.1.1
	RELENG_9_0:1.1.1.1.0.12
	RELENG_9_0_BP:1.1.1.1
	RELENG_9:1.1.1.1.0.10
	RELENG_9_BP:1.1.1.1
	RELENG_8_2_0_RELEASE:1.1.1.1
	RELENG_8_2:1.1.1.1.0.8
	RELENG_8_2_BP:1.1.1.1
	RELENG_8_1_0_RELEASE:1.1.1.1
	RELENG_8_1:1.1.1.1.0.6
	RELENG_8_1_BP:1.1.1.1
	RELENG_8_0_0_RELEASE:1.1.1.1
	RELENG_8_0:1.1.1.1.0.4
	RELENG_8_0_BP:1.1.1.1
	RELENG_8:1.1.1.1.0.2
	RELENG_8_BP:1.1.1.1
	v_1_1_0:1.1.1.1
	KTH:1.1.1;
locks; strict;
comment	@# @;


1.2
date	2012.03.22.08.48.42;	author stas;	state dead;
branches
	1.2.2.1;
next	1.1;

1.1
date	2008.05.07.13.39.22;	author dfr;	state Exp;
branches
	1.1.1.1;
next	;

1.2.2.1
date	2012.03.22.08.48.42;	author svnexp;	state dead;
branches;
next	1.2.2.2;

1.2.2.2
date	2013.03.28.13.02.24;	author svnexp;	state Exp;
branches;
next	;

1.1.1.1
date	2008.05.07.13.39.22;	author dfr;	state Exp;
branches;
next	;


desc
@@


1.2
log
@SVN rev 233294 on 2012-03-22 08:48:42Z by stas

- Update FreeBSD Heimdal distribution to version 1.5.1.  This also brings
  several new kerberos related libraries and applications to FreeBSD:
  o kgetcred(1) allows one to manually get a ticket for a particular service.
  o kf(1) securily forwards ticket to another host through an authenticated
    and encrypted stream.
  o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1)
    and other user kerberos operations. klist and kswitch are just symlinks
    to kcc(1) now.
  o kswitch(1) allows you to easily switch between kerberos credentials if
    you're running KCM.
  o hxtool(1) is a certificate management tool to use with PKINIT.
  o string2key(1) maps a password into key.
  o kdigest(8) is a userland tool to access the KDC's digest interface.
  o kimpersonate(8) creates a "fake" ticket for a service.

  We also now install manpages for some lirbaries that were not installed
  before, libheimntlm and libhx509.

- The new HEIMDAL version no longer supports Kerberos 4.  All users are
  recommended to switch to Kerberos 5.

- Weak ciphers are now disabled by default.  To enable DES support (used
  by telnet(8)), use "allow_weak_crypto" option in krb5.conf.

- libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings
  disabled due to the function they use (krb5_get_err_text(3)) being
  deprecated.  I plan to work on this next.

- Heimdal's KDC now require sqlite to operate.  We use the bundled version
  and install it as libheimsqlite.  If some other FreeBSD components will
  require it in the future we can rename it to libbsdsqlite and use for these
  components as well.

- This is not a latest Heimdal version, the new one was released while I was
  working on the update.  I will update it to 1.5.2 soon, as it fixes some
  important bugs and security issues.
@
text
@2008-01-14  Love Hrnquist strand  <lha@@it.su.se>

	* kdc: Test the PKCS11 provider built-in to libhx509.

2007-12-14  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/init.ldif: Add space to make valid ldiff file, from Buchan
	Milne
	
	* ldap/slapd-init.in: Another place where schemas are installed,
	from Buchan Milne.

2007-12-05  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Check that admin-less principal works.

2007-12-04  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-ntlm.in: test kdigest digest-probe command.

2007-12-03  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: Test GSS_C_NO_NAME too.

2007-10-24  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Try multiple enctypes.

2007-08-17  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: EXTRA_DIST += jaas.conf
	
2007-08-13  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: Add java source code.

2007-08-09  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: Don't run this test in AFS since AFS is
	missing unix sockets.

	* kdc/wait-kdc.sh: Catch bind ../../tests/kdc/signal: Operation
	not permitted

2007-08-08  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: use wait-kdc.sh for all diffrent places we
	start ipropd-{master,slave}.

	* all-tests: empty messages.log

	* kdc/check-iprop.in: Use wait-kdc.sh to wait for
	ipropd-{master,slave}.

	* kdc/wait-kdc.sh: look futher back in the logfile.
	
	* kdc/wait-kdc.sh: Make wait-kdc.sh able to wait on other things.

	* kdc/check-iprop.in: Checking master going backward, create
	iprop-stats.

2007-08-07  Love Hrnquist strand  <lha@@it.su.se>

	* java/have-java.sh: GNU GCC Java doesn't support Kerberos

2007-08-01  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: wait longer for iprop, dump messages.log on
	failure.

	* kdc/Makefile.am: Clean after iprop tests.

	* kdc/check-iprop.in: more iprop tests.

2007-07-31  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Add check-iprop and related files.

	* kdc/krb5.conf.in: Add stuff for iprop.

	* kdc/check-iprop.in: Test for iprop.

	* kdc/iprop-acl: ACL file for iprop.

2007-07-28  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/donotexists.txt: missing file.

2007-07-26  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: EXTRA_DIST += donotexists.txt

2007-07-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Test renewing.
	
2007-07-21  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Test for simple salt types.

	* kdc/krb5.conf.keys.in: Configuration file for testing keys.

	* kdc/check-keys.in: Test some simple salt types.

2007-07-17  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: EXTRA_DIST += have_java.sh

	* java/check-kinit.in: Make failing to compile a java program a
	no-fatal error.

	* java/check-kinit.in: Disable test if we use socket wrapper.

2007-07-16  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Give more hints of what went wrong.

2007-07-14  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: add check-kadmin.in
	
2007-07-12  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/slapd.conf: add samba.schema.

	* ldap/slapd-init.in: Add samba schema.

	* ldap/init.ldif: Samba entry to do testing with.

2007-07-11  Love Hrnquist strand  <lha@@it.su.se>
	
	* java/check-kinit.in: Only print when there is an error.

	* java/krb5.conf.in: Move the AES enctypes first.

2007-07-10  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Send kill outout to /dev/null.

	* kdc/krb5.conf.in: Add bits needed for kadmind server test.

	* kdc/Makefile.am: Add check-kadmin.

	* kdc/check-kadmin.in: Simple test for server based kadmin.

	* kdc/heimdal.acl: ACL file for check-admin test.

2007-07-05  Love Hrnquist strand  <lha@@it.su.se>

	* Makefile.am: Add java.

	* java: simple java kinit test

2007-06-26  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/check-ldap.in: Add one more principal and list the
	database.

	* kdc/check-pkinit.in: Fix hxtool issue-certificate --req.

	* kdc/check-referral.in: Spelling.
	
2007-06-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-context.in: disable dns canon on test, break on some
	buildfarm hosts.
	
2007-06-19  Love Hrnquist strand  <lha@@it.su.se>

	* can/test_can.in: readline seems strange, try diffrent way to
	setup the database.

2007-06-18  Love Hrnquist strand  <lha@@it.su.se>

	* can/test_can.in: spoon feed kadmin diffrently

2007-06-11  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Also test rename user to anther realm.

	* kdc/check-kdc.in: Test renaming a user.

	* can/test_can.in: Tell use what the messages.log told us.

	* kdc/check-referral.in: Add some more as-req canon tests, add
	disable tgs-req tests.
	
2007-06-09  Love Hrnquist strand  <lha@@it.su.se>

	* can/check-can.in: Check is there is a working db backend here.
	
2007-06-08  Love Hrnquist strand  <lha@@it.su.se>
	
	* can/Makefile.am: Clean up more cruft.
	
2007-06-07  Love Hrnquist strand  <lha@@it.su.se>

	* can/Makefile.am: More files we want in the dist.

	* can/test_can.in: Simplify error reporting.

	* can/test_can.in: Catch error from kadmin.

	* can/mit-pkinit-20070607.*: mit pkinit-9 request

	* can/check-can.in: Add mit-pkinit test.

	* can/Makefile.am: Create specific configurtion files for some
	tests.

	* can/test_can.in: Pick up the right generated
	krb5.conf (spelling).

	* can: Add Apple Tiger 10.4/MIT Kerberos 1.4

	* can/test_can.in: Don't need to start a kdc for this test.

	* can: pre-canned requests from older versions and other implementations

	* Makefile.am: SUBDIRS += can
	
2007-06-04  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-uu.in: Use stdout from uu_server.
	
2007-05-31  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-pkinit.in: Try pkinit in w2k mode, also add tests for
	MS SAN.

	* kdc/Makefile.am: generate a krb5-pkinit-win.conf

	* kdc/krb5-pkinit.conf.in: W2K tests.
	
2007-05-30  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: remove more files
	
2007-05-10  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-pkinit.in: try principal subject in DB
	
2007-05-08  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: test using test_kcred

	* gss/check-ntlm.in: One more test.

	* ldap/check-ldap.in: check in /usr/lib/openldap too for slapd and
	slapadd
	
2007-05-07  Love Hrnquist strand  <lha@@it.su.se>

	* db/add-modify-delete.in: Remove comment.

	* db/add-modify-delete.in: try replay

	* db/Makefile.am: clean more files.

	* db/add-modify-delete.in: try iprop-log commands.
	
2007-04-27  Love Hrnquist strand  <lha@@it.su.se>

	* db/krb5.conf.in: Add longer example.
	
2007-04-23  Love Hrnquist strand  <lha@@it.su.se>

	* db: basic tests for dbinfo

2007-04-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: Add check-ntlm.

	* gss/check-ntlm.in: test ntlm client credentials code.
	
2007-04-21  Love Hrnquist strand  <lha@@it.su.se>

	* db/loaddump-db.in: make kstash quiet
	
2007-04-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: more gss_acquire_cred tests
	
2007-04-17  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: add check-basic

	* gss/check-basic.in: basic tests that might require a KDC.
	
2007-04-16  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/Makefile.am: CLEANFILES += sdigest-init
	
2007-04-11  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/slapd-init.in: Add Id tag
	
2007-02-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: test new kadmin add_enctype functionallity
	
2007-02-17  Love Hrnquist strand  <lha@@it.su.se>
	
	* Makefile.am: add ldap

	* kdc/check-referral.in: add check-referral
	
	* kdc/Makefile.am: add check-referral
	
2007-02-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* tests/ldap: simple ldap test, inspried by samba ldb ldap test

2007-02-03  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-digest.in: Test ms-chap-v2 (client response, server
	response, session key)
	
2007-02-02  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/krb5.conf.in: allow ms-chap-v2
	
2007-02-01  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: Negative check too.
	
2007-01-18  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-uu.in: save log, wait longer
	
2007-01-15  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-pkinit.in: tell me about certifiate that we have
	generated
	
2007-01-11  Love Hrnquist strand  <lha@@it.su.se>

	* no random, no RSA/DH tests

	* plugin/Makefile.am: remove files created by tests

	* gss/Makefile.am: remove files created by tests

	* gss/Makefile.am: add ntlm-user-file.txt

2007-01-10  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/ap-req.c: --verify-pac no means verify existance of PAC in
	ticket, the signature checking is done by the kerberos library.

	* kdc/check-digest.in: display messages.log and help that that
	tells us what went wrong.

	* plugin/windc.c: Update to validate function signature change.

	* Makefile.am: Only traverse into plugin if there is shared
	library support.
	
2007-01-09  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-pkinit.in: Prefix key with FILE:
	
2007-01-04  Love Hrnquist strand  <lha@@it.su.se>

	* plugin/Makefile.am: EXTRA_DIST += krb5.conf.in

	* plugin/check-pac.in: test explicit requested pac and explicit
	negative requested pac.

	* kdc/ap-req.c: Make it possible to turn off PAC check, its
	default on.

	* plugin/windc.c: Add client_access.

	* plugin/check-pac.in: Verify PAC on server end too.

	* kdc/ap-req.c: Add verification of PAC.

	* kdc/Makefile.am: Add test for pkinit with locally generated
	certs.

	* kdc/check-pkinit.in: Generate a ca, kdc cert and client cert and
	try to use them

	* kdc/pki-mapping: add other foo@@TEST

	* kdc/krb5-pkinit.conf.in: pkinit specific krb5.conf
	
2007-01-03  Love Hrnquist strand  <lha@@it.su.se>
	
	* plugin/check-pac.in: test tgs-req

	* plugin/windc.c: log that the function is called.

	* kdc/check-digest.in: Test security layer in ntlm.

	* plugin: test WinDC PAC functionallity
	
	* Makefile.am: Include plugin in tests
	
2006-12-28  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/ntlm-user-file.txt: Correct DOMAIN name
	
2006-12-26  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/krb5.conf.in: Add digests acls (all)
	
2006-12-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-spnego.in: test wrapunwrap

	* gss/check-spnego.in: Test get and verify MIC.
	
	* gss/check-context.in: don't need to set GSSAPI_SPNEGO_NAME any
	longer
	
2006-12-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-context.in: Define GSSAPI_SPNEGO_NAME and re-add
	spnego
	
	* gss/check-context.in: add trap, remove allow-digest, pretty
	print.

	* gss/check-gssmask.in: catch EXIT traps

	* gss/check-spnego.in: test more combination of spnego contexts

	* gss/Makefile.am: add check-spnego

	* gss/check-spnego.in: check spnego combinations.
	
2006-12-16  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: test more combinations of names
	
2006-12-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/ntlm-user-file.txt: ntlm username and password file

	* kdc/check-digest.in: Check that ntlm works.
	
2006-12-12  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: prefix digest commands with digest-
	
2006-11-29  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Don't (afs) unlog using kdestroy
	
2006-11-25  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Add LIB_roken and (implictly by that libvers
	for print_version) to LDADD
	
2006-11-23  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: check that the getarg -- option works for
	delete and add.

	* kdc/check-kdc.in: Test proxy cert.
	
2006-11-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/krb5.conf.in: revert the enable-pkinit change, and make it
	consistant with all other other enable- options

2006-11-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: Add dce-style context building test.

	* gss/check-context.in: test more combination of context building
	
2006-11-13  Love Hrnquist strand  <lha@@it.su.se>
	
	* Use TEST{,2}.H5L.SE for testing

2006-11-08  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Use EGREP.

	* kdc/check-kdc.in: Use EGREP.
	
2006-10-23  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: run eval on the testfailed variable so we run
	all commands
	
2006-10-22  Love Hrnquist strand  <lha@@it.su.se>
	
	* db/Makefile.am: make have-db being built in the "make all"
	target.

	* kdc/check-kdc.in: tell more what the kdc though about the
	failure.
	
2006-10-21  Love Hrnquist strand  <lha@@it.su.se>

	* db/add-modify-delete.in: Use EGREP.

	* db/Makefile.am: add EGREP to do_subst
	
2006-10-20  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: Clean temporary files

	* db/Makefile.am: clean have-db

	* kdc/Makefile.am: Add pki-mapping to dist file.

	* kdc/Makefile.am: more files
	
	* db/Makefile.am: more files

2006-10-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: give path to have-db
	
	* gss/check-gssmask.in: give path to have-db
	
	* kdc/check-kdc.in: give path to have-db
	
	* kdc/check-digest.in: give path to have-db
	
	* gss/check-gssmask.in: If there is no useful db support compile
	in, disable test

	* gss/check-context.in: Add commeted out digest check.

	* kdc/check-digest.in: If there is no useful db support compile
	in, disable test

	* kdc/check-kdc.in: If there is no useful db support compile in,
	disable test

	* db/loaddump-db.in: If there is no useful db support compile in,
	disable test

	* db/have-db.in: Check if the kdc have any useful builtin
	database.

	* kdc/check-kdc.in: Fix awk statement, put RE on the right side.
	
2006-10-17  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: remove dup exit

	* gss/check-context.in: More name tests.

	* gss/check-context.in: test with and without dns-canon
	
2006-10-14  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Be more explit about what test failed.
	
2006-10-13  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: et KRB5CCNAME in global enviorment
	
2006-10-12  Love Hrnquist strand <lha@@it.su.se>
	
	* gss/Makefile.am: Check if the gss context tester test_context
	works ok.

	* gss/check-context.in: Check if the gss context tester
	test_context works ok.
	
2006-10-10  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: use wait-kdc.sh script

	* kdc/check-kdc.in: use wait-kdc.sh script

	* kdc/check-digest.in: use wait-kdc.sh script

	* Heimdal uses TESTS_ENVIRONMENT before every binary being tested
	directly from the Makefile.  This now uses the same for the
	scripts, so we can run them under valgrind. From Andrew Bartlet

2006-10-07  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: splits script tests and binary tests

	* db/Makefile.am: Add tests script depenencies

	* kdc/Makefile.am: Split script tests and binary tests
	
2006-10-04  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Test pkinit encKey case.
	
2006-09-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-gssmask.in: Catch failures from gssmaestro.
	
2006-09-20  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: Add a third client
	
2006-09-19 Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: test for gssmask + gssmaestro.

	* gss/krb5.conf.in: Add krb5.conf for krb5.conf
	
2006-09-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-gss.in: Add (c)

	* kdc/check-kdc.in: Test constrained delegation impersonation.
	
2006-09-16  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Change the password on krbtgt a couple of
	times to have a non boring kvno.
	
2006-08-24  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-digest.in: Use the server as the server and set
	diffrent password for the user and service.

	* kdc/check-digest.in: Set allow digest flag on the server.

	* kdc/Makefile.am: Build and run check-digest test.

	* kdc/check-digest.in: Remove channel bindings from CHAP tests,
	there is no such thing for CHAP.

	* kdc/check-kdc.in: Test aes only krbtgt and des3 only service.
	
2006-08-21  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Remove empty lines for picky awks
	
2006-07-06  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Check for cross realm case where remove user
	doesn't exists in the database, this is ok assuming the cross
	realm isn't local. In the general case this isn't true.

2006-06-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: run kadmin check
	
2006-06-07  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: test that delegated cred works too

	* kdc/check-kdc.in: Test delegation
	
2006-06-06 Love Hrnquist strand <lha@@it.su.se>
	
	* kdc/check-kdc.in: Add impersonation tests.
	
2006-06-01  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Less verbose, spelling.

	* kdc/check-kdc.in: test cross realm and deleted user
	
2006-05-12  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Check password protected pk-init keyfile.
	
2006-04-30  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Don't try pkinit if there is no rsa
	
2006-04-29  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/pki-mapping: change pki-mapping
	
	* kdc/Makefile.am: clean the server.keytab

	* kdc/check-kdc.in: Add test for pk-init

	* kdc/krb5.conf.in: Add pkinit glue

2006-04-28  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/pki-mapping: Add pk-init mapping file
	
2006-04-27  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Sprinkle more ap-req now that the credential
	is removed from the cache using kdestroy --credential=

	* kdc/ap-req.c: check that AP_OPTS_MUTUAL_REQUIRED matches, check
	seqnumber

	* kdc/Makefile.am: Build as-req.

	* kdc/check-kdc.in: Sprinkel some as-req

	* kdc/ap-req.c: simple test program checking that as ap-req/as-rep
	exchange works
	
2006-04-25  Love Hrnquist strand  <lha@@it.su.se>
	
	* {,kdc/,db/}.cvsignore: ignore Makefile.in

	* kdc/check-kdc.in: Try to detect another KDC running.

	* kdc/check-kdc.in: more tests regarding doing AS-REQ and TGS-REQ

	* kdc/krb5.conf.in: krb5.conf template

	* kdc/check-kdc.in: check that the keytab have the right kvno

	* db/add-modify-delete.in: create a server too

	* kdc/check-kdc.in: check kdc too

	* db/Makefile.am: Add add-modify-delete

	* db/add-modify-delete.in: basic kadmin tests

	* Makefile.am: SUBDIRS += kdc

	* kdc/check-kdc.in: Test framework for getting and checking
	tickets, start kdc on localhost:8888.

	* kdc/Makefile.am: Test framework for getting and checking
	tickets.

	* db/krb5.conf.in: log all message to local file

	* db/Makefile.am: clean messages file
	
2006-01-17  Love Hrnquist strand  <lha@@it.su.se>

	* db/krb5.conf.in: Set [libdefaults] default_realm = EXAMPLE.ORG.

2005-11-30  Love Hrnquist strand  <lha@@it.su.se>

	* db/loaddump-db.in: Specifify explicitly that the database is in
	the current directory.

2005-08-11  Love Hrnquist strand  <lha@@it.su.se>

	* test loading and dumping of the database
@


1.2.2.1
log
@file ChangeLog was added on branch RELENG_8_4 on 2013-03-28 13:02:24 +0000
@
text
@d1 742
@


1.2.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 742
2008-01-14  Love Hrnquist strand  <lha@@it.su.se>

	* kdc: Test the PKCS11 provider built-in to libhx509.

2007-12-14  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/init.ldif: Add space to make valid ldiff file, from Buchan
	Milne
	
	* ldap/slapd-init.in: Another place where schemas are installed,
	from Buchan Milne.

2007-12-05  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Check that admin-less principal works.

2007-12-04  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-ntlm.in: test kdigest digest-probe command.

2007-12-03  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: Test GSS_C_NO_NAME too.

2007-10-24  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Try multiple enctypes.

2007-08-17  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: EXTRA_DIST += jaas.conf
	
2007-08-13  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: Add java source code.

2007-08-09  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: Don't run this test in AFS since AFS is
	missing unix sockets.

	* kdc/wait-kdc.sh: Catch bind ../../tests/kdc/signal: Operation
	not permitted

2007-08-08  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: use wait-kdc.sh for all diffrent places we
	start ipropd-{master,slave}.

	* all-tests: empty messages.log

	* kdc/check-iprop.in: Use wait-kdc.sh to wait for
	ipropd-{master,slave}.

	* kdc/wait-kdc.sh: look futher back in the logfile.
	
	* kdc/wait-kdc.sh: Make wait-kdc.sh able to wait on other things.

	* kdc/check-iprop.in: Checking master going backward, create
	iprop-stats.

2007-08-07  Love Hrnquist strand  <lha@@it.su.se>

	* java/have-java.sh: GNU GCC Java doesn't support Kerberos

2007-08-01  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-iprop.in: wait longer for iprop, dump messages.log on
	failure.

	* kdc/Makefile.am: Clean after iprop tests.

	* kdc/check-iprop.in: more iprop tests.

2007-07-31  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Add check-iprop and related files.

	* kdc/krb5.conf.in: Add stuff for iprop.

	* kdc/check-iprop.in: Test for iprop.

	* kdc/iprop-acl: ACL file for iprop.

2007-07-28  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/donotexists.txt: missing file.

2007-07-26  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: EXTRA_DIST += donotexists.txt

2007-07-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Test renewing.
	
2007-07-21  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Test for simple salt types.

	* kdc/krb5.conf.keys.in: Configuration file for testing keys.

	* kdc/check-keys.in: Test some simple salt types.

2007-07-17  Love Hrnquist strand  <lha@@it.su.se>

	* java/Makefile.am: EXTRA_DIST += have_java.sh

	* java/check-kinit.in: Make failing to compile a java program a
	no-fatal error.

	* java/check-kinit.in: Disable test if we use socket wrapper.

2007-07-16  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Give more hints of what went wrong.

2007-07-14  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: add check-kadmin.in
	
2007-07-12  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/slapd.conf: add samba.schema.

	* ldap/slapd-init.in: Add samba schema.

	* ldap/init.ldif: Samba entry to do testing with.

2007-07-11  Love Hrnquist strand  <lha@@it.su.se>
	
	* java/check-kinit.in: Only print when there is an error.

	* java/krb5.conf.in: Move the AES enctypes first.

2007-07-10  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kadmin.in: Send kill outout to /dev/null.

	* kdc/krb5.conf.in: Add bits needed for kadmind server test.

	* kdc/Makefile.am: Add check-kadmin.

	* kdc/check-kadmin.in: Simple test for server based kadmin.

	* kdc/heimdal.acl: ACL file for check-admin test.

2007-07-05  Love Hrnquist strand  <lha@@it.su.se>

	* Makefile.am: Add java.

	* java: simple java kinit test

2007-06-26  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/check-ldap.in: Add one more principal and list the
	database.

	* kdc/check-pkinit.in: Fix hxtool issue-certificate --req.

	* kdc/check-referral.in: Spelling.
	
2007-06-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-context.in: disable dns canon on test, break on some
	buildfarm hosts.
	
2007-06-19  Love Hrnquist strand  <lha@@it.su.se>

	* can/test_can.in: readline seems strange, try diffrent way to
	setup the database.

2007-06-18  Love Hrnquist strand  <lha@@it.su.se>

	* can/test_can.in: spoon feed kadmin diffrently

2007-06-11  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Also test rename user to anther realm.

	* kdc/check-kdc.in: Test renaming a user.

	* can/test_can.in: Tell use what the messages.log told us.

	* kdc/check-referral.in: Add some more as-req canon tests, add
	disable tgs-req tests.
	
2007-06-09  Love Hrnquist strand  <lha@@it.su.se>

	* can/check-can.in: Check is there is a working db backend here.
	
2007-06-08  Love Hrnquist strand  <lha@@it.su.se>
	
	* can/Makefile.am: Clean up more cruft.
	
2007-06-07  Love Hrnquist strand  <lha@@it.su.se>

	* can/Makefile.am: More files we want in the dist.

	* can/test_can.in: Simplify error reporting.

	* can/test_can.in: Catch error from kadmin.

	* can/mit-pkinit-20070607.*: mit pkinit-9 request

	* can/check-can.in: Add mit-pkinit test.

	* can/Makefile.am: Create specific configurtion files for some
	tests.

	* can/test_can.in: Pick up the right generated
	krb5.conf (spelling).

	* can: Add Apple Tiger 10.4/MIT Kerberos 1.4

	* can/test_can.in: Don't need to start a kdc for this test.

	* can: pre-canned requests from older versions and other implementations

	* Makefile.am: SUBDIRS += can
	
2007-06-04  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-uu.in: Use stdout from uu_server.
	
2007-05-31  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-pkinit.in: Try pkinit in w2k mode, also add tests for
	MS SAN.

	* kdc/Makefile.am: generate a krb5-pkinit-win.conf

	* kdc/krb5-pkinit.conf.in: W2K tests.
	
2007-05-30  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: remove more files
	
2007-05-10  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-pkinit.in: try principal subject in DB
	
2007-05-08  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: test using test_kcred

	* gss/check-ntlm.in: One more test.

	* ldap/check-ldap.in: check in /usr/lib/openldap too for slapd and
	slapadd
	
2007-05-07  Love Hrnquist strand  <lha@@it.su.se>

	* db/add-modify-delete.in: Remove comment.

	* db/add-modify-delete.in: try replay

	* db/Makefile.am: clean more files.

	* db/add-modify-delete.in: try iprop-log commands.
	
2007-04-27  Love Hrnquist strand  <lha@@it.su.se>

	* db/krb5.conf.in: Add longer example.
	
2007-04-23  Love Hrnquist strand  <lha@@it.su.se>

	* db: basic tests for dbinfo

2007-04-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: Add check-ntlm.

	* gss/check-ntlm.in: test ntlm client credentials code.
	
2007-04-21  Love Hrnquist strand  <lha@@it.su.se>

	* db/loaddump-db.in: make kstash quiet
	
2007-04-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-basic.in: more gss_acquire_cred tests
	
2007-04-17  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: add check-basic

	* gss/check-basic.in: basic tests that might require a KDC.
	
2007-04-16  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/Makefile.am: CLEANFILES += sdigest-init
	
2007-04-11  Love Hrnquist strand  <lha@@it.su.se>

	* ldap/slapd-init.in: Add Id tag
	
2007-02-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: test new kadmin add_enctype functionallity
	
2007-02-17  Love Hrnquist strand  <lha@@it.su.se>
	
	* Makefile.am: add ldap

	* kdc/check-referral.in: add check-referral
	
	* kdc/Makefile.am: add check-referral
	
2007-02-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* tests/ldap: simple ldap test, inspried by samba ldb ldap test

2007-02-03  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-digest.in: Test ms-chap-v2 (client response, server
	response, session key)
	
2007-02-02  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/krb5.conf.in: allow ms-chap-v2
	
2007-02-01  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: Negative check too.
	
2007-01-18  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-uu.in: save log, wait longer
	
2007-01-15  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-pkinit.in: tell me about certifiate that we have
	generated
	
2007-01-11  Love Hrnquist strand  <lha@@it.su.se>

	* no random, no RSA/DH tests

	* plugin/Makefile.am: remove files created by tests

	* gss/Makefile.am: remove files created by tests

	* gss/Makefile.am: add ntlm-user-file.txt

2007-01-10  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/ap-req.c: --verify-pac no means verify existance of PAC in
	ticket, the signature checking is done by the kerberos library.

	* kdc/check-digest.in: display messages.log and help that that
	tells us what went wrong.

	* plugin/windc.c: Update to validate function signature change.

	* Makefile.am: Only traverse into plugin if there is shared
	library support.
	
2007-01-09  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-pkinit.in: Prefix key with FILE:
	
2007-01-04  Love Hrnquist strand  <lha@@it.su.se>

	* plugin/Makefile.am: EXTRA_DIST += krb5.conf.in

	* plugin/check-pac.in: test explicit requested pac and explicit
	negative requested pac.

	* kdc/ap-req.c: Make it possible to turn off PAC check, its
	default on.

	* plugin/windc.c: Add client_access.

	* plugin/check-pac.in: Verify PAC on server end too.

	* kdc/ap-req.c: Add verification of PAC.

	* kdc/Makefile.am: Add test for pkinit with locally generated
	certs.

	* kdc/check-pkinit.in: Generate a ca, kdc cert and client cert and
	try to use them

	* kdc/pki-mapping: add other foo@@TEST

	* kdc/krb5-pkinit.conf.in: pkinit specific krb5.conf
	
2007-01-03  Love Hrnquist strand  <lha@@it.su.se>
	
	* plugin/check-pac.in: test tgs-req

	* plugin/windc.c: log that the function is called.

	* kdc/check-digest.in: Test security layer in ntlm.

	* plugin: test WinDC PAC functionallity
	
	* Makefile.am: Include plugin in tests
	
2006-12-28  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/ntlm-user-file.txt: Correct DOMAIN name
	
2006-12-26  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/krb5.conf.in: Add digests acls (all)
	
2006-12-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-spnego.in: test wrapunwrap

	* gss/check-spnego.in: Test get and verify MIC.
	
	* gss/check-context.in: don't need to set GSSAPI_SPNEGO_NAME any
	longer
	
2006-12-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-context.in: Define GSSAPI_SPNEGO_NAME and re-add
	spnego
	
	* gss/check-context.in: add trap, remove allow-digest, pretty
	print.

	* gss/check-gssmask.in: catch EXIT traps

	* gss/check-spnego.in: test more combination of spnego contexts

	* gss/Makefile.am: add check-spnego

	* gss/check-spnego.in: check spnego combinations.
	
2006-12-16  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: test more combinations of names
	
2006-12-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/ntlm-user-file.txt: ntlm username and password file

	* kdc/check-digest.in: Check that ntlm works.
	
2006-12-12  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-digest.in: prefix digest commands with digest-
	
2006-11-29  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Don't (afs) unlog using kdestroy
	
2006-11-25  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Add LIB_roken and (implictly by that libvers
	for print_version) to LDADD
	
2006-11-23  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: check that the getarg -- option works for
	delete and add.

	* kdc/check-kdc.in: Test proxy cert.
	
2006-11-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/krb5.conf.in: revert the enable-pkinit change, and make it
	consistant with all other other enable- options

2006-11-15  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: Add dce-style context building test.

	* gss/check-context.in: test more combination of context building
	
2006-11-13  Love Hrnquist strand  <lha@@it.su.se>
	
	* Use TEST{,2}.H5L.SE for testing

2006-11-08  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/Makefile.am: Use EGREP.

	* kdc/check-kdc.in: Use EGREP.
	
2006-10-23  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: run eval on the testfailed variable so we run
	all commands
	
2006-10-22  Love Hrnquist strand  <lha@@it.su.se>
	
	* db/Makefile.am: make have-db being built in the "make all"
	target.

	* kdc/check-kdc.in: tell more what the kdc though about the
	failure.
	
2006-10-21  Love Hrnquist strand  <lha@@it.su.se>

	* db/add-modify-delete.in: Use EGREP.

	* db/Makefile.am: add EGREP to do_subst
	
2006-10-20  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: Clean temporary files

	* db/Makefile.am: clean have-db

	* kdc/Makefile.am: Add pki-mapping to dist file.

	* kdc/Makefile.am: more files
	
	* db/Makefile.am: more files

2006-10-19  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: give path to have-db
	
	* gss/check-gssmask.in: give path to have-db
	
	* kdc/check-kdc.in: give path to have-db
	
	* kdc/check-digest.in: give path to have-db
	
	* gss/check-gssmask.in: If there is no useful db support compile
	in, disable test

	* gss/check-context.in: Add commeted out digest check.

	* kdc/check-digest.in: If there is no useful db support compile
	in, disable test

	* kdc/check-kdc.in: If there is no useful db support compile in,
	disable test

	* db/loaddump-db.in: If there is no useful db support compile in,
	disable test

	* db/have-db.in: Check if the kdc have any useful builtin
	database.

	* kdc/check-kdc.in: Fix awk statement, put RE on the right side.
	
2006-10-17  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: remove dup exit

	* gss/check-context.in: More name tests.

	* gss/check-context.in: test with and without dns-canon
	
2006-10-14  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Be more explit about what test failed.
	
2006-10-13  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-context.in: et KRB5CCNAME in global enviorment
	
2006-10-12  Love Hrnquist strand <lha@@it.su.se>
	
	* gss/Makefile.am: Check if the gss context tester test_context
	works ok.

	* gss/check-context.in: Check if the gss context tester
	test_context works ok.
	
2006-10-10  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: use wait-kdc.sh script

	* kdc/check-kdc.in: use wait-kdc.sh script

	* kdc/check-digest.in: use wait-kdc.sh script

	* Heimdal uses TESTS_ENVIRONMENT before every binary being tested
	directly from the Makefile.  This now uses the same for the
	scripts, so we can run them under valgrind. From Andrew Bartlet

2006-10-07  Love Hrnquist strand  <lha@@it.su.se>

	* gss/Makefile.am: splits script tests and binary tests

	* db/Makefile.am: Add tests script depenencies

	* kdc/Makefile.am: Split script tests and binary tests
	
2006-10-04  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Test pkinit encKey case.
	
2006-09-22  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-gssmask.in: Catch failures from gssmaestro.
	
2006-09-20  Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: Add a third client
	
2006-09-19 Love Hrnquist strand  <lha@@it.su.se>
	
	* gss/check-gssmask.in: test for gssmask + gssmaestro.

	* gss/krb5.conf.in: Add krb5.conf for krb5.conf
	
2006-09-18  Love Hrnquist strand  <lha@@it.su.se>

	* gss/check-gss.in: Add (c)

	* kdc/check-kdc.in: Test constrained delegation impersonation.
	
2006-09-16  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Change the password on krbtgt a couple of
	times to have a non boring kvno.
	
2006-08-24  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-digest.in: Use the server as the server and set
	diffrent password for the user and service.

	* kdc/check-digest.in: Set allow digest flag on the server.

	* kdc/Makefile.am: Build and run check-digest test.

	* kdc/check-digest.in: Remove channel bindings from CHAP tests,
	there is no such thing for CHAP.

	* kdc/check-kdc.in: Test aes only krbtgt and des3 only service.
	
2006-08-21  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Remove empty lines for picky awks
	
2006-07-06  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Check for cross realm case where remove user
	doesn't exists in the database, this is ok assuming the cross
	realm isn't local. In the general case this isn't true.

2006-06-22  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: run kadmin check
	
2006-06-07  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: test that delegated cred works too

	* kdc/check-kdc.in: Test delegation
	
2006-06-06 Love Hrnquist strand <lha@@it.su.se>
	
	* kdc/check-kdc.in: Add impersonation tests.
	
2006-06-01  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Less verbose, spelling.

	* kdc/check-kdc.in: test cross realm and deleted user
	
2006-05-12  Love Hrnquist strand  <lha@@it.su.se>

	* kdc/check-kdc.in: Check password protected pk-init keyfile.
	
2006-04-30  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Don't try pkinit if there is no rsa
	
2006-04-29  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/pki-mapping: change pki-mapping
	
	* kdc/Makefile.am: clean the server.keytab

	* kdc/check-kdc.in: Add test for pk-init

	* kdc/krb5.conf.in: Add pkinit glue

2006-04-28  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/pki-mapping: Add pk-init mapping file
	
2006-04-27  Love Hrnquist strand  <lha@@it.su.se>
	
	* kdc/check-kdc.in: Sprinkle more ap-req now that the credential
	is removed from the cache using kdestroy --credential=

	* kdc/ap-req.c: check that AP_OPTS_MUTUAL_REQUIRED matches, check
	seqnumber

	* kdc/Makefile.am: Build as-req.

	* kdc/check-kdc.in: Sprinkel some as-req

	* kdc/ap-req.c: simple test program checking that as ap-req/as-rep
	exchange works
	
2006-04-25  Love Hrnquist strand  <lha@@it.su.se>
	
	* {,kdc/,db/}.cvsignore: ignore Makefile.in

	* kdc/check-kdc.in: Try to detect another KDC running.

	* kdc/check-kdc.in: more tests regarding doing AS-REQ and TGS-REQ

	* kdc/krb5.conf.in: krb5.conf template

	* kdc/check-kdc.in: check that the keytab have the right kvno

	* db/add-modify-delete.in: create a server too

	* kdc/check-kdc.in: check kdc too

	* db/Makefile.am: Add add-modify-delete

	* db/add-modify-delete.in: basic kadmin tests

	* Makefile.am: SUBDIRS += kdc

	* kdc/check-kdc.in: Test framework for getting and checking
	tickets, start kdc on localhost:8888.

	* kdc/Makefile.am: Test framework for getting and checking
	tickets.

	* db/krb5.conf.in: log all message to local file

	* db/Makefile.am: clean messages file
	
2006-01-17  Love Hrnquist strand  <lha@@it.su.se>

	* db/krb5.conf.in: Set [libdefaults] default_realm = EXAMPLE.ORG.

2005-11-30  Love Hrnquist strand  <lha@@it.su.se>

	* db/loaddump-db.in: Specifify explicitly that the database is in
	the current directory.

2005-08-11  Love Hrnquist strand  <lha@@it.su.se>

	* test loading and dumping of the database
@


1.1
log
@Initial revision
@
text
@@


1.1.1.1
log
@Vendor import of Heimdal 1.1
@
text
@@
