Russ Allbery [Mon, 27 Aug 2018 00:58:24 +0000 (17:58 -0700)]
Update to standards version 4.2.1
* Update to standards version 4.2.1.
- Enable verbose test output.
- Install the upstream release notes as NEWS.gz, not changelog.gz.
- Add Rules-Requires-Root: no.
- Use https for URLs in debian/control and debian/copyright.
- Change priority to optional.
Russ Allbery [Wed, 19 Aug 2015 04:22:57 +0000 (21:22 -0700)]
Further rra-c-util 5.8 and C TAP Harness 3.4 updates
Sneak in a few more things: a Test::RRA::Automake fix for removing
relative directories, and fixes to C TAP Harness for test lists
containing no tests.
Russ Allbery [Wed, 19 Aug 2015 02:55:54 +0000 (19:55 -0700)]
Update to rra-c-util 5.8 and C TAP Harness 3.3
Update to rra-c-util 5.8:
* Support the Solaris 10 embedded Kerberos implementation.
* Use calloc or reallocarray instead of malloc.
* Fix compilation with a C++ compiler.
Update to C TAP Harness 3.3:
* Display verbose test results with -v or C_TAP_VERBOSE.
* Reopen standard input to /dev/null when running a test list.
* Don't leak extraneous file descriptors to tests.
Jon Robertson [Wed, 19 Aug 2015 02:13:06 +0000 (19:13 -0700)]
krb5-sync-backend: Add an ending newline to error messages
For --silent we're splitting up the errors by \n, which strips the
newlines from each line. Print out with an explicit \n so that errors
don't all run together.
Russ Allbery [Mon, 10 Feb 2014 03:22:23 +0000 (19:22 -0800)]
Further expand the tools/backend test timing range
* The change in 3.0-3 fixed the test suite failure on all architectures
except armel, which appears to still be failing with a variation on
the original issue. Further expand the valid timing range on the
test, since this seems to be on the right track but just didn't go far
enough.
Russ Allbery [Sun, 9 Feb 2014 21:42:14 +0000 (13:42 -0800)]
Make the tools/backend test less sensitive to timing
* Fix the tools/backend test suite to be less sensitive to timing when
queuing changes. (Closes: #738364)
We were only allowing one second of tolerance, which is too fast for
some slower architectures, and the code was improperly written so that
the skip didn't trigger.
Russ Allbery [Tue, 10 Dec 2013 04:45:19 +0000 (20:45 -0800)]
Disable ad_base_instance for MIT Kerberos
Calling libkadm5srv functions from inside a kadm5_hook plugin
appears to corrupt the state of the library on MIT Kerberos.
Disable the ad_base_instance configuration option on MIT Kerberos
for the time being.
Russ Allbery [Tue, 10 Dec 2013 02:13:14 +0000 (18:13 -0800)]
Add NEWS and update README.Debian for new options and plugin
The plugin name has changed and the ad_ldap_base option is now
required. Document the required changes in NEWS, since it's hard
to automate the update process of the configuration files.
Russ Allbery [Tue, 10 Dec 2013 00:09:06 +0000 (16:09 -0800)]
Only probe for krb5/kadm5_hook_plugin.h when building with MIT
If building with Heimdal using non-standard paths, we may find the
MIT Kerberos header but not be able to compile with it because of
all the symbol conflicts. Work around this by only checking for
the header when building with Heimdal.
Russ Allbery [Sat, 7 Dec 2013 03:56:37 +0000 (19:56 -0800)]
Fix detection of ad_base_instance principals
The logic for checking the Kerberos database for the principal
was incorrect in the case where the principal exists. Fix the
status code checking to work properly.
Russ Allbery [Sat, 7 Dec 2013 03:53:33 +0000 (19:53 -0800)]
Allow propagation of base instances
We weren't allowing ad_base_instance instances through far enough
into the password change logic to determine that they should be
propagated to the base account.
Russ Allbery [Fri, 6 Dec 2013 23:15:33 +0000 (15:15 -0800)]
Add a basic test suite for krb5-sync-backend
This does not (yet) test the process function, but everything
else gets some reasonable basic testing. Still to be done, as
well as process, is testing of creating files when there are
conflicts and testing the purge function.
Russ Allbery [Fri, 6 Dec 2013 23:13:57 +0000 (15:13 -0800)]
Work around Net::Remctl::Backend bug in krb5-sync-backend
Net::Remctl::Backend doesn't do argument count validation
properly with arguments from standard input, which affected the
password command. Allow one fewer argument than we require and
do a separate check that the number of arguments is correct.
Russ Allbery [Fri, 6 Dec 2013 23:10:39 +0000 (15:10 -0800)]
Fix locking in krb5-sync-backend with non-default queues
Allow krb5-sync-backend to create the lock file if it's missing,
and pass in the queue directory to the lock function so that it
can find the correct lock file.
Russ Allbery [Fri, 6 Dec 2013 06:45:40 +0000 (22:45 -0800)]
Finish cleanup of krb5-sync-backend coding style
Functionality should be the same, but it now uses IPC::Run and
Net::Remctl::Backend and holds a queue lock while processing a
particular queue file. The -h option was removed and a new
manual command was added.
Russ Allbery [Thu, 5 Dec 2013 07:27:27 +0000 (23:27 -0800)]
Add standard Perl test suite
Add the test suite for Perl programs. Currently, the critic test
does not pass if maintainer tests are enabled, since the coding
style for krb5-sync-backend is out of date.
Russ Allbery [Thu, 5 Dec 2013 06:10:21 +0000 (22:10 -0800)]
Merge krb5-sync sections in generated krb5.conf files
It looks like the profile library can't handle multiple appdefault
sections for krb5-sync and doesn't combine them properly. Make
make-krb5-conf a bit more complicated to merge the settings into
the existing section.
Russ Allbery [Thu, 5 Dec 2013 05:02:57 +0000 (21:02 -0800)]
Update to rra-c-util 4.12 (to be) and C TAP Harness 2.3
Update to rra-c-util 4.12:
* Better error messages from xasprintf on failure to format output.
* Check return status of vsnprintf properly.
* Significant improvements to POD tests.
* Avoid leaking a dummy symbol from the portability layer.
* Probe for Kerberos headers with file existence checks.
Update to C TAP Harness 2.3:
* runtests now treats the command line as a list of tests by default.
* The full test executable path can now be passed to runtests -o.
* Improved harness output for tests with lazy plans.
* Improved harness output to a terminal for some abort cases.
* Flush harness output after each test even when not on a terminal.
* bail and sysbail now exit with status 255 to match Test::More.
* Suppress lazy plans and test summaries if the test failed with bail.
* Add warn_unused_result gcc attributes to relevant functions.