]> eyrie.org Git - kerberos/krb5-strength.git/log
kerberos/krb5-strength.git
10 years agoMerge branch 'debian' into squeeze debian/squeeze debian/3.0-1_sbp60+1
Russ Allbery [Wed, 26 Mar 2014 22:04:03 +0000 (15:04 -0700)]
Merge branch 'debian' into squeeze

Conflicts:
debian/changelog
debian/control

10 years agoCheck before removing /var/lib/heimdal-history debian/3.0-1
Russ Allbery [Wed, 26 Mar 2014 08:15:14 +0000 (01:15 -0700)]
Check before removing /var/lib/heimdal-history

10 years agoAdd dependency on adduser
Russ Allbery [Wed, 26 Mar 2014 07:56:47 +0000 (00:56 -0700)]
Add dependency on adduser

10 years agoManage a _history user and the history database directory
Russ Allbery [Wed, 26 Mar 2014 07:52:01 +0000 (00:52 -0700)]
Manage a _history user and the history database directory

* Create a _history user and group and a /var/lib/heimdal-history
  directory on package installation for the use of heimdal-history,
  remove the user and the standard database on purge, and remove the
  directory if empty on package purge or removal.

10 years agoFinalize changes for 3.0-1
Russ Allbery [Wed, 26 Mar 2014 07:36:23 +0000 (00:36 -0700)]
Finalize changes for 3.0-1

10 years agoAdd pkg-config build dependency
Russ Allbery [Wed, 26 Mar 2014 07:29:26 +0000 (00:29 -0700)]
Add pkg-config build dependency

10 years agoFix dependency for Perl DBD::SQLite package
Russ Allbery [Wed, 26 Mar 2014 07:25:24 +0000 (00:25 -0700)]
Fix dependency for Perl DBD::SQLite package

10 years agoAdd upstream signing key and check upstream signatures
Russ Allbery [Wed, 26 Mar 2014 07:14:01 +0000 (00:14 -0700)]
Add upstream signing key and check upstream signatures

* Add the upstream signing key to debian/upstream/signing-key.asc and
  configure uscan to do signature validation.  Configure uscan to
  download the xz tarball instead of the gz tarball.

10 years agoAdd dependencies and description for new features
Russ Allbery [Wed, 26 Mar 2014 07:11:29 +0000 (00:11 -0700)]
Add dependencies and description for new features

Also add an explanation for the Recommends so that people know
why they may need to install them.

10 years agoRemove single-debian-patch local options
Russ Allbery [Wed, 26 Mar 2014 07:04:56 +0000 (00:04 -0700)]
Remove single-debian-patch local options

If I ever have to carry any patches, I'll use gbp pq, so remove
these settings.

10 years agoAdd changelog for upstream 3.0 release
Russ Allbery [Wed, 26 Mar 2014 07:04:21 +0000 (00:04 -0700)]
Add changelog for upstream 3.0 release

10 years agoMerge tag 'upstream/3.0' into debian
Russ Allbery [Wed, 26 Mar 2014 06:58:01 +0000 (23:58 -0700)]
Merge tag 'upstream/3.0' into debian

Upstream version 3.0

10 years agoImported Upstream version 3.0 upstream/3.0
Russ Allbery [Wed, 26 Mar 2014 06:57:54 +0000 (23:57 -0700)]
Imported Upstream version 3.0

10 years agoDocument minimum_different in heimdal-strength man page release/3.0
Russ Allbery [Wed, 26 Mar 2014 06:48:04 +0000 (23:48 -0700)]
Document minimum_different in heimdal-strength man page

10 years agoFurther README changes for the addition of SQLite and history
Russ Allbery [Wed, 26 Mar 2014 06:47:23 +0000 (23:47 -0700)]
Further README changes for the addition of SQLite and history

10 years agoRelease 3.0
Russ Allbery [Wed, 26 Mar 2014 06:33:48 +0000 (23:33 -0700)]
Release 3.0

10 years agoRemove duplicate copyright declaration from heimdal-history
Russ Allbery [Wed, 26 Mar 2014 06:32:07 +0000 (23:32 -0700)]
Remove duplicate copyright declaration from heimdal-history

This confuses build-license

10 years agoAdd license statement to autogen
Russ Allbery [Wed, 26 Mar 2014 06:31:47 +0000 (23:31 -0700)]
Add license statement to autogen

It's now long enough that build-license cares about it.

10 years agoSkip more tests for valgrind checking
Russ Allbery [Wed, 26 Mar 2014 06:23:23 +0000 (23:23 -0700)]
Skip more tests for valgrind checking

Also fully-qualify the path to the suppression file, which may
matter if the tests change working directories.

10 years agoFix a memory leak during SQLite dictionary initialization
Russ Allbery [Wed, 26 Mar 2014 06:23:09 +0000 (23:23 -0700)]
Fix a memory leak during SQLite dictionary initialization

10 years agoFix skipped test count with Heimdal and no SQLite
Russ Allbery [Wed, 26 Mar 2014 06:08:42 +0000 (23:08 -0700)]
Fix skipped test count with Heimdal and no SQLite

10 years agoStick to SQLite interfaces in 3.7
Russ Allbery [Wed, 26 Mar 2014 03:58:30 +0000 (20:58 -0700)]
Stick to SQLite interfaces in 3.7

Use sqlite3_close instead of sqlite3_close_v2.  We don't need the
new semantics of sqlite3_close_v2.  Also use sqlite3_errmsg instead
of sqlite3_errstr, which actually appears to be better, assuming it
works as documented.

10 years agoReplace remaining references to cdbmake-wordlist
Russ Allbery [Tue, 25 Mar 2014 23:25:09 +0000 (16:25 -0700)]
Replace remaining references to cdbmake-wordlist

10 years agoAdd additional Perl module requirements for bootstrap
Russ Allbery [Tue, 25 Mar 2014 22:52:15 +0000 (15:52 -0700)]
Add additional Perl module requirements for bootstrap

10 years agoUpdate to rra-c-util 5.4
Russ Allbery [Tue, 25 Mar 2014 22:49:20 +0000 (15:49 -0700)]
Update to rra-c-util 5.4

* Use Lancaster Consensus environment variables to control tests.
* Work around perltidy bug that leaves behind stray log files.

RELEASE_TESTING, AUTOMATED_TESTING, and AUTHOR_TESTING are now used
to control whether to run tests that may not be of interest to the
end user.

10 years agoPerformance tuning of krb5-strength-wordlist for SQLite
Russ Allbery [Tue, 25 Mar 2014 22:28:35 +0000 (15:28 -0700)]
Performance tuning of krb5-strength-wordlist for SQLite

Apply some performance tuning from various threads at Perl Monks
to increase the speed of the bulk creation of the SQLite database.

10 years agoFix typo in the wordlist-sqlite-t test
Russ Allbery [Tue, 25 Mar 2014 22:28:17 +0000 (15:28 -0700)]
Fix typo in the wordlist-sqlite-t test

10 years agoRefactor krb5-strength-wordlist
Russ Allbery [Tue, 25 Mar 2014 20:06:37 +0000 (13:06 -0700)]
Refactor krb5-strength-wordlist

Separate the filter construction into a separate function and use
a hash for command-line arguments to make perlcritic happier with
the complexity of the main routine.

10 years agoFix perltidy error in wordlist-sqlite test
Russ Allbery [Tue, 25 Mar 2014 19:28:52 +0000 (12:28 -0700)]
Fix perltidy error in wordlist-sqlite test

10 years agoAdd test for krb5-strength-wordlist SQLite generation
Russ Allbery [Tue, 25 Mar 2014 18:40:17 +0000 (11:40 -0700)]
Add test for krb5-strength-wordlist SQLite generation

10 years agoSeparate krb5-strength-wordlist filtering to another test
Russ Allbery [Tue, 25 Mar 2014 18:21:34 +0000 (11:21 -0700)]
Separate krb5-strength-wordlist filtering to another test

Rather than merging the wordlist filtering test with the CDB test,
move it to a different unit test program.  This is probably overkill
for the tiny test that we do, but oh well.  It will make adding more
tests later somewhat easier if we ever do.

10 years agoAdd stopword for heimdal-strength documentation
Russ Allbery [Tue, 25 Mar 2014 18:20:28 +0000 (11:20 -0700)]
Add stopword for heimdal-strength documentation

10 years agoDocument the SQLite requirements in README
Russ Allbery [Tue, 25 Mar 2014 08:11:35 +0000 (01:11 -0700)]
Document the SQLite requirements in README

10 years agoAdd real Autoconf probing for SQLite
Russ Allbery [Tue, 25 Mar 2014 08:07:27 +0000 (01:07 -0700)]
Add real Autoconf probing for SQLite

Change all the defines to look for HAVE_SQLITE instead of
HAVE_SQLITE3, since non-v3 versions are so old that I'm not going
to worry about the naming.  Add an Autoconf probe for SQLite that
tries pkg-config first and falls back on library probing.

10 years agoAdd a full complement of edit distance one SQLite checks
Russ Allbery [Tue, 25 Mar 2014 07:42:29 +0000 (00:42 -0700)]
Add a full complement of edit distance one SQLite checks

Fix one logic error uncovered by the more complete tests, which
produced the wrong result when the edit involved a sequence of
repeated characters.

10 years agoAdd support for SQLite dictionaries
Russ Allbery [Tue, 25 Mar 2014 07:09:39 +0000 (00:09 -0700)]
Add support for SQLite dictionaries

The krb5-strength plugin and heimdal-strength program now support a
SQLite password dictionary.  This format of dictionary can detect any
password within edit distance one of a dictionary word, meaning that
the dictionary word can be formed by adding, removing, or changing a
single character in the password.  A SQLite password dictionary can be
used alone or in combination with any of the other supported
dictionary types.  SQLite dictionary support is based on work by David
Mazières.

10 years agoFix minor perlcritic errors in krb5-strength-wordlist
Russ Allbery [Tue, 25 Mar 2014 06:48:26 +0000 (23:48 -0700)]
Fix minor perlcritic errors in krb5-strength-wordlist

Add a missing stopword for spell checking and ignore the literal
newlines in the SQL code constants.

10 years agoFix CDB krb5-strength-wordlist check for no overwrite behavior
Russ Allbery [Tue, 25 Mar 2014 05:58:07 +0000 (22:58 -0700)]
Fix CDB krb5-strength-wordlist check for no overwrite behavior

We now decline to overwrite an existing file, so adjust the test
suite to remove the generated file between tests.

10 years agoRename cdbmake-wordlist and add SQLite support
Russ Allbery [Tue, 25 Mar 2014 02:16:12 +0000 (19:16 -0700)]
Rename cdbmake-wordlist and add SQLite support

cdbmake-wordlist has been renamed to krb5-strength-wordlist.
Generating CDB dictionaries now requires the -c option; see the
documentation for more information.  A SQLite database of dictionary
words can now be created instead, using the -s option.

10 years agoWipe password copies before freeing them
Russ Allbery [Thu, 6 Mar 2014 19:45:24 +0000 (11:45 -0800)]
Wipe password copies before freeing them

We make a copy of the user's password in several places when doing
checks for passwords based on the user's principal.  Be sure to
wipe those copies with memset before freeing them.

10 years agoUpdate to rra-c-util 5.3 and C TAP Harness 3.0
Russ Allbery [Thu, 6 Mar 2014 03:49:23 +0000 (19:49 -0800)]
Update to rra-c-util 5.3 and C TAP Harness 3.0

Update to rra-c-util 5.3:

* Fix portable/krb5.h build with a C++ compiler.

Update to C TAP Harness 3.0:

* Reopen standard input to /dev/null when running a test list.
* Don't leak extraneous file descriptors to tests.

10 years agoAdd a test suite for heimdal-history
Russ Allbery [Thu, 27 Feb 2014 06:31:42 +0000 (22:31 -0800)]
Add a test suite for heimdal-history

10 years agoFix POD stopwords for heimdal-history
Russ Allbery [Thu, 27 Feb 2014 06:31:30 +0000 (22:31 -0800)]
Fix POD stopwords for heimdal-history

10 years agoFix the -s flag to heimdal-history (alternate quality checker)
Russ Allbery [Thu, 27 Feb 2014 06:22:48 +0000 (22:22 -0800)]
Fix the -s flag to heimdal-history (alternate quality checker)

heimdal-history claimed to support an -s option that specified a
different path to the quality check program to run, but it didn't
actually work.  Add support for it.

10 years agoSupport -q option to heimdal-history to suppress syslog
Russ Allbery [Thu, 27 Feb 2014 06:22:15 +0000 (22:22 -0800)]
Support -q option to heimdal-history to suppress syslog

The -q option to heimdal-history will prevent it from logging to
syslog.  This is needed for the test suite to avoid spamming the
local syslog log.

10 years agoSkip Perl strictness testing if module prereqs are missing
Russ Allbery [Thu, 27 Feb 2014 04:04:54 +0000 (20:04 -0800)]
Skip Perl strictness testing if module prereqs are missing

Modify the standard Perl strictness test, which also checks Perl
scripts for syntax errors, to support a list of prerequisite
modules.  Skip the test if any of those modules can't be loaded,
since they'll otherwise cause failures.  This makes the testing
more robust given that we have some scripts that require a bunch
of Perl modules not needed by the main package.

10 years agoAdd minimum_different configuration option
Russ Allbery [Thu, 27 Feb 2014 02:52:21 +0000 (18:52 -0800)]
Add minimum_different configuration option

A new configuration option, minimum_different, can be set to require
that passwords contain at least that many unique characters.  This can
be used to reject long strings of identical characters or short
patterns, which may pass other checks but still be too easy to guess.

10 years agoRevert "In CDB checks, check all passwords within edit distance one"
Russ Allbery [Wed, 26 Feb 2014 23:15:37 +0000 (15:15 -0800)]
Revert "In CDB checks, check all passwords within edit distance one"

This reverts commit 578cb7d0e48ce43da9785751387614dfc8101b73.
Completing the reversion.

10 years agoRevert "Fix edit distance checking and add a test suite"
Russ Allbery [Wed, 26 Feb 2014 23:15:10 +0000 (15:15 -0800)]
Revert "Fix edit distance checking and add a test suite"

This reverts commit feb69b10461b4dca5d439ace7aaf58640000d8bd.
This is too slow to be usable.  We will be adding an new password
dictionary back-end that will do this check.

10 years agoFix edit distance checking and add a test suite
Russ Allbery [Wed, 12 Feb 2014 04:33:38 +0000 (20:33 -0800)]
Fix edit distance checking and add a test suite

Several errors in the previous implementation caused edit distance
checking to not work properly.  Actually iterate through the
possible characters correctly.

10 years agoIn CDB checks, check all passwords within edit distance one
Russ Allbery [Fri, 7 Feb 2014 23:44:44 +0000 (15:44 -0800)]
In CDB checks, check all passwords within edit distance one

When checking a password against a CDB dictionary, the dictionary will
be checked for all printable ASCII passwords within edit distance one,
in addition to checking the password with first and last characters,
first two characters, and last two characters removed.

10 years agoAdd hash benchmarking support to heimdal-history
Russ Allbery [Fri, 7 Feb 2014 22:25:20 +0000 (14:25 -0800)]
Add hash benchmarking support to heimdal-history

Add an option to benchmark the hash function and find an interation
count that takes a particular amount of time.  Adjust the default
iteration count to match benchmarking done on relatively recent
hardware.

10 years agoAdd password history implementation for Heimdal
Russ Allbery [Wed, 5 Feb 2014 01:30:39 +0000 (17:30 -0800)]
Add password history implementation for Heimdal

A password history implementation for Heimdal is now included.  This
is a separate Perl program, heimdal-history, that stacks with the
external program implementation of strength checking.  It is not
available in the form of a plugin, only as a Heimdal external password
quality check.  (MIT Kerberos provides its own password history
mechanism.)  This program has more extensive Perl module dependencies
than the other programs in this distribution.

10 years agoMerge branch 'debian' into squeeze
Russ Allbery [Mon, 16 Dec 2013 23:56:24 +0000 (15:56 -0800)]
Merge branch 'debian' into squeeze

Conflicts:
debian/changelog
debian/control

10 years agoFinalize changes for 2.2-1 debian/2.2-1
Russ Allbery [Mon, 16 Dec 2013 23:36:32 +0000 (15:36 -0800)]
Finalize changes for 2.2-1

10 years agoUpdate debian/copyright for new upstream release
Russ Allbery [Mon, 16 Dec 2013 23:17:04 +0000 (15:17 -0800)]
Update debian/copyright for new upstream release

10 years agoUpdate to standards version 3.9.5
Russ Allbery [Mon, 16 Dec 2013 23:16:16 +0000 (15:16 -0800)]
Update to standards version 3.9.5

10 years agoAdd changelog for new upstream release
Russ Allbery [Mon, 16 Dec 2013 23:15:18 +0000 (15:15 -0800)]
Add changelog for new upstream release

10 years agoMerge tag 'upstream/2.2' into debian
Russ Allbery [Mon, 16 Dec 2013 21:50:16 +0000 (13:50 -0800)]
Merge tag 'upstream/2.2' into debian

Upstream version 2.2

10 years agoImported Upstream version 2.2 upstream/2.2
Russ Allbery [Mon, 16 Dec 2013 21:49:53 +0000 (13:49 -0800)]
Imported Upstream version 2.2

10 years agoAdd valgrind.supp to the distribution release/2.2
Russ Allbery [Mon, 16 Dec 2013 21:44:01 +0000 (13:44 -0800)]
Add valgrind.supp to the distribution

10 years agoRelease 2.2
Russ Allbery [Mon, 16 Dec 2013 21:40:06 +0000 (13:40 -0800)]
Release 2.2

10 years agoUpdate to rra-c-util 4.12 and C TAP Harness 2.3
Russ Allbery [Mon, 16 Dec 2013 21:35:00 +0000 (13:35 -0800)]
Update to rra-c-util 4.12 and C TAP Harness 2.3

Update to rra-c-util 4.12:

* Properly check the return status of snprintf and friends.

Update to C TAP Harness 2.3:

* Suppress lazy plans and test summaries if the test failed with bail.
* Add warn_unused_result gcc attributes to relevant functions.

10 years agoAdd some (unnecessary) checks to unconfuse clang
Russ Allbery [Mon, 16 Dec 2013 21:14:58 +0000 (13:14 -0800)]
Add some (unnecessary) checks to unconfuse clang

When parsing character class configuration, check for NULL explicitly
so that clang knows that the NULL case is handled properly.

10 years agoFree the plugin in the Heimdal test as well
Russ Allbery [Fri, 13 Dec 2013 23:31:14 +0000 (15:31 -0800)]
Free the plugin in the Heimdal test as well

10 years agoClose file descriptor and memory leak in CrackLib
Russ Allbery [Fri, 13 Dec 2013 21:53:27 +0000 (13:53 -0800)]
Close file descriptor and memory leak in CrackLib

Close a file descriptor and memory leak in the included version of
CrackLib.  This problem was already fixed in CrackLib 2.9.0.

10 years agoRestructure MIT test code to allow for dlclose
Russ Allbery [Fri, 13 Dec 2013 21:51:25 +0000 (13:51 -0800)]
Restructure MIT test code to allow for dlclose

We weren't closing the handle after completion of testing, which
caused noise in valgrind.

10 years agoFree character class restrictions on shutdown
Russ Allbery [Fri, 13 Dec 2013 21:50:51 +0000 (13:50 -0800)]
Free character class restrictions on shutdown

We weren't freeing the new structures for complex character class
restrictions when shutting the module down.

10 years agoAdd rules for running the test suite under valgrind
Russ Allbery [Fri, 13 Dec 2013 21:50:32 +0000 (13:50 -0800)]
Add rules for running the test suite under valgrind

10 years agoAdd tests for configuration syntax errors
Russ Allbery [Fri, 13 Dec 2013 20:50:41 +0000 (12:50 -0800)]
Add tests for configuration syntax errors

This should really be abstracted out into data, but we'll get to
that at some later date.

10 years agoUse Perl6::Slurp instead of File::Slurp
Russ Allbery [Fri, 13 Dec 2013 01:34:28 +0000 (17:34 -0800)]
Use Perl6::Slurp instead of File::Slurp

One utility was using Perl6::Slurp and another was using
File::Slurp.  Perl6::Slurp is nicer, so just use that, and
update the documentation.  Also document the bootstrap
requirements imposed by make-c-data.

10 years agoUpdate README with more details about new checking rules
Russ Allbery [Fri, 13 Dec 2013 01:28:09 +0000 (17:28 -0800)]
Update README with more details about new checking rules

The description section didn't mention the non-CrackLib capabilities,
and README never spelled out how CDB dictionaries were checked.
Fix both of those oversights.

10 years agoFlesh out heimdal-strength documentation
Russ Allbery [Fri, 13 Dec 2013 01:22:39 +0000 (17:22 -0800)]
Flesh out heimdal-strength documentation

Add full documentation for the supported krb5.conf configuration
options to the heimdal-strength POD documentation.  Also slightly
update the BLURB section of README.

10 years agoAdd class requirement documentation and length ranges
Russ Allbery [Fri, 13 Dec 2013 01:08:46 +0000 (17:08 -0800)]
Add class requirement documentation and length ranges

Add support for qualifying a character class restriction with the
range of lengths of password to which it applies.  Add documentation
and a NEWS entry for the new configuration.

10 years agoFix various character class check mistakes, add test suite
Russ Allbery [Fri, 13 Dec 2013 00:25:03 +0000 (16:25 -0800)]
Fix various character class check mistakes, add test suite

This is the first working version of the character class checking,
which is now plugged into the module initialization.  It also adds
a test suite for the external password check utility, although not
the embedded modules yet.

10 years agoFirst pass at support for character class rules
Russ Allbery [Thu, 12 Dec 2013 06:10:27 +0000 (22:10 -0800)]
First pass at support for character class rules

This compiles, but it's not tested yet.  It supports a list of
required character classes, but not the restriction to particular
password lengths yet.

10 years agoRename the class test set to letter
Russ Allbery [Thu, 12 Dec 2013 06:01:49 +0000 (22:01 -0800)]
Rename the class test set to letter

Next is to add support for full character class rules, which will
reuse a similar name, so move the simplistic character class rules
to the name letter.json.

10 years agoPut F<> around krb5.conf in heimdal-strength docs
Russ Allbery [Thu, 12 Dec 2013 05:53:06 +0000 (21:53 -0800)]
Put F<> around krb5.conf in heimdal-strength docs

Test::Spelling doesn't let me use stopwords to remove it from the
failures, and this is arguably more correct anyway.

10 years agoMinor coding style fix to the heimdal-strength test
Russ Allbery [Sat, 7 Dec 2013 20:01:45 +0000 (12:01 -0800)]
Minor coding style fix to the heimdal-strength test

10 years agoDon't use sysbail to report libdl errors in test suite
Russ Allbery [Thu, 5 Dec 2013 01:50:58 +0000 (17:50 -0800)]
Don't use sysbail to report libdl errors in test suite

10 years agoFix alphabetization in Kerberos function probes
Russ Allbery [Thu, 5 Dec 2013 01:39:33 +0000 (17:39 -0800)]
Fix alphabetization in Kerberos function probes

10 years agoFix leading comment in tests/data/make-krb5-conf
Russ Allbery [Thu, 5 Dec 2013 01:33:01 +0000 (17:33 -0800)]
Fix leading comment in tests/data/make-krb5-conf

It wasn't correctly describing the new capability for adding
arbitrary key/value pairs.

10 years agoSwitch to LT_INIT from AC_PROG_LIBTOOL
Russ Allbery [Sat, 16 Nov 2013 00:20:16 +0000 (16:20 -0800)]
Switch to LT_INIT from AC_PROG_LIBTOOL

The latter is deprecated.

10 years agoMerge branch 'debian' into squeeze
Russ Allbery [Tue, 5 Nov 2013 20:00:30 +0000 (12:00 -0800)]
Merge branch 'debian' into squeeze

Conflicts:
debian/changelog

10 years agoRecenter maintainer line in README
Russ Allbery [Mon, 4 Nov 2013 21:19:04 +0000 (13:19 -0800)]
Recenter maintainer line in README

10 years agoAdd NEWS entry for cdbmake-wordlist improvements
Russ Allbery [Mon, 4 Nov 2013 21:18:49 +0000 (13:18 -0800)]
Add NEWS entry for cdbmake-wordlist improvements

10 years agoAdd wordlist filter mode to cdbmake-wordlist
Russ Allbery [Mon, 4 Nov 2013 21:16:54 +0000 (13:16 -0800)]
Add wordlist filter mode to cdbmake-wordlist

Add a new -o (--output) option that applies any configured filtering
and writes out a new wordlist file instead of creating a CDB file.
Refactor the script to avoid adding too much complexity with this
feature.

10 years agoSupport filtering wordlists by regex in cdbmake-wordlist
Russ Allbery [Mon, 4 Nov 2013 19:16:56 +0000 (11:16 -0800)]
Support filtering wordlists by regex in cdbmake-wordlist

Add a new option, -x or --exclude, that excludes words from the
resulting CDB database by regular expression.  This option may
be given repeatedly to filter out multiple regular expressions.

10 years agoSupport a maximum word length in cdbmake-wordlist
Russ Allbery [Mon, 4 Nov 2013 18:59:19 +0000 (10:59 -0800)]
Support a maximum word length in cdbmake-wordlist

Add a new -L (--max-length) option that filters out words longer
than a particular length.

10 years agoChange my email address to eagle@eyrie.org
Russ Allbery [Mon, 4 Nov 2013 18:50:13 +0000 (10:50 -0800)]
Change my email address to eagle@eyrie.org

10 years agoFix typo in some of the copyright notices
Russ Allbery [Tue, 8 Oct 2013 05:32:30 +0000 (22:32 -0700)]
Fix typo in some of the copyright notices

10 years agoAdd changelog for upstream 2.1 release debian/2.1-1
Russ Allbery [Fri, 11 Oct 2013 00:09:40 +0000 (17:09 -0700)]
Add changelog for upstream 2.1 release

10 years agoMerge tag 'upstream/2.1' into debian
Russ Allbery [Fri, 11 Oct 2013 00:09:05 +0000 (17:09 -0700)]
Merge tag 'upstream/2.1' into debian

Upstream version 2.1

10 years agoImported Upstream version 2.1 upstream/2.1
Russ Allbery [Fri, 11 Oct 2013 00:09:00 +0000 (17:09 -0700)]
Imported Upstream version 2.1

10 years agoRelease 2.1 release/2.1
Russ Allbery [Fri, 11 Oct 2013 00:06:30 +0000 (17:06 -0700)]
Release 2.1

10 years agoAdd NEWS entries for TinyCDB build fixes
Russ Allbery [Tue, 8 Oct 2013 19:12:30 +0000 (12:12 -0700)]
Add NEWS entries for TinyCDB build fixes

10 years agoUpdate some of the password rejection error messages
Russ Allbery [Tue, 8 Oct 2013 19:10:55 +0000 (12:10 -0700)]
Update some of the password rejection error messages

Refer to "list of common passwords" when rejecting passwords due
to presence in a CDB dictionary, and say that passwords based on
the principal are based on "username or principal" to be more
technically accurate.

10 years agoSimplify TinyCDB Autoconf probes
Russ Allbery [Tue, 8 Oct 2013 18:33:40 +0000 (11:33 -0700)]
Simplify TinyCDB Autoconf probes

Refactor common code and ensure that rra_use_CDB is always set
properly.

10 years agoFix compilation without TinyCDB
Russ Allbery [Tue, 8 Oct 2013 18:32:52 +0000 (11:32 -0700)]
Fix compilation without TinyCDB

The build without TinyCDB support was apparently not retested
after some refactoring, so some functions had the wrong signatures
or were not properly prototyped.

10 years agoFix handling of --with-tinycdb
Russ Allbery [Tue, 8 Oct 2013 18:19:40 +0000 (11:19 -0700)]
Fix handling of --with-tinycdb

Avoid adding -Lyes/lib and -Iyes/include to flags when given
--with-tinydb.  All this should do is make building with TinyCDB
mandatory.