doc Novell changes

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17318 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/kadm5/clnt/ChangeLog b/src/lib/kadm5/clnt/ChangeLog
index 578acba3cbaffc1d4fd6f6b0362532ec3d8653c9..bf44190cec8375e906a00786c00014f538ef0c6d 100644 (file)
--- a/src/lib/kadm5/clnt/ChangeLog
+++ b/src/lib/kadm5/clnt/ChangeLog
@@ -8,13 +8,27 @@
 2005-06-20  Ken Raeburn  <raeburn@mit.edu>
 
        Novell merge.
-       * Makefile.in:
-       * client_init.c:
-       * client_principal.c:
-       * clnt_policy.c:
-       * clnt_privs.c:
-       * err_handle.c:
-       * err_handle.h:
+       * err_handle.c: New file.
+       * err_handle.h: New file.
+       * Makefile.in (SRCS, OBJS, STLIBOBJS, err_handle.o): Build
+       err_handle.c.
+       * client_init.c (_kadm5_init_any): Accept new db_args argument,
+       but ignore it.  Don't call initialize_adb_error_table.
+       (kadm5_init_with_creds, kadm5_init_with_password, kadm5_init,
+       kadm5_init_with_skey): Accept new db_args argument and pass it
+       through to _kadm5_init_any.
+       * client_principal.c: Include err_handle.h.
+       (kadm5_get_principal, kadm5_get_principals,
+       kadm5_randkey_principal_3, kadm5_randkey_principal): If an error
+       was returned from the server, pass it and the error string to
+       krb5_set_err.
+       * clnt_policy.c: Include err_handle.h.
+       (kadm5_create_policy, kadm5_delete_policy, kadm5_modify_policy,
+       kadm5_get_policy, kadm5_get_policies): If an error was returned
+       from the server, pass it and the error string to krb5_set_err.
+       * clnt_privs.c: Include err_handle.h.
+       (kadm5_get_privs): If an error was returned from the server, pass
+       it and the error string to krb5_set_err.
 
 2005-02-11  Tom Yu  <tlyu@mit.edu>
 

diff --git a/src/lib/kadm5/srv/ChangeLog b/src/lib/kadm5/srv/ChangeLog
index c885bc65d9d531ab2acc58b4a74b6b74a10538e5..3161a7fbba0a7d46cab7c325214faaa1764d6465 100644 (file)
--- a/src/lib/kadm5/srv/ChangeLog
+++ b/src/lib/kadm5/srv/ChangeLog
@@ -1,17 +1,78 @@
 2005-06-20  Ken Raeburn  <raeburn@mit.edu>
 
        Novell merge.
-       * Makefile.in:
-       * adb_free.c:
-       * adb_openclose.c:
-       * adb_policy.c:
-       * adb_xdr.c:
-       * server_init.c:
-       * server_kdb.c:
-       * server_misc.c:
-       * svr_iters.c:
-       * svr_policy.c:
-       * svr_principal.c:
+       * Makefile.in (SRCS, OBJS, STLIBOBJS): Remove adb_policy,
+       adb_free, and adb_openclose.
+       * adb_free.c: Deleted.
+       * adb_openclose.c, adb_policy.c: Moved to lib/kdb/kdb_db2.
+       * adb_xdr.c: Include server_internal.h; don't include adb.h.
+       (xdr_osa_policy_ent_rec): Function deleted.
+       (osa_free_princ_ent): Moved here from old adb_free.c.
+       * server_init.c (dup_db_args, free_db_args): New functions.
+       (kadm5_init_with_password, kadm5_init_with_creds,
+       kadm5_init_with_skey): Accept new db_args argument, and pass it to
+       kadm5_init.
+       (kadm5_init): Accept new db_args argument.  Don't set the database
+       name; instead, set the default realm for the context.  Call
+       krb5_db_open instead of krb5_db_init, requesting write access and
+       passing in the database arguments.  Don't call adb_policy_init,
+       and don't set deleted field handle->lhandle->policy_db.
+       (kadm5_lock): Don't lock the policy database.  Use
+       KRB5_DB_LOCKMODE_EXCLUSIVE flags instead of
+       KRB5_LOCKMODE_EXCLUSIVE.
+       (kadm5_unlock): Don't unlock the policy database.
+       (kadm5_flush): In the error case, use krb5_db_open instead of
+       krb5_db_set_name and krb5_db_init.
+       * server_kdb.c (kdb_init_master): Don't call krb5_db_init.  Use
+       KADM5_XDR_FAILURE instead of OSA_ADB_XDR_FAILURE.
+       (kdb_iter_entry): Accept new string argument match_entry; pass it
+       to krb5_db_iterate.
+       * server_misc.c: Don't include adb.h.
+       (adb_policy_init): Don't call osa_adb_open_policy.  If
+       krb5_db_inited is falso on the context, call krb5_db_open.
+       (adb_policy_close): Don't call osa_adb_close_policy; do nothing.
+       * svr_iters.c: Don't include adb.h.
+       (kadm5_get_either): Pass glob pattern ("*" if not specified) to
+       kdb_iter_entry.
+       * svr_policy.c: Don't include adb.h.
+       (kadm5_create_policy, kadm5_delete_policy, kadm5_modify_policy,
+       kadm5_get_policy): Call krb5_db_clr_error.  Call
+       krb5_db_create_policy etc instead of osa_adb_* versions, passing
+       the krb5 context instead of the policy database handle.  For
+       krb5_db_get_policy, treat a returned count of zero as a not-found
+       indication.
+       (kadm5_modify_policy_internal): Don't translate the returned error
+       code from krb5_db_put_policy.
+       * svr_principal.c: Don't include adb.h.
+       (kadm5_copy_principal, kadm5_free_principal): New functions, using
+       krb5_db_alloc and krb5_db_free for storage.
+       (cleanup_key_data): Use krb5_db_free.
+       (kadm5_create_principal_3, kadm5_delete_principal,
+       kadm5_modify_principal, kadm5_rename_principal,
+       kadm5_get_principal, kadm5_chpass_principal_3,
+       kadm5_randkey_principal_3, kadm5_setv4key_principal,
+       kadm5_setkey_principal_3, 
+
+       ): Call krb5_db_clr_error.
+       (kadm5_create_principal_3): Use kadm5_copy_principal instead of
+       krb5_copy_principal.  If the KADM5_TL_DATA flag is set, call
+       krb5_dbe_update_tl_data on each element supplied, to augment
+       and/or replace the existing tl data with a copy of the supplied
+       data, instead of splicing the supplied list and the existing list
+       together.  Use krb5_db_free_principal instead of
+       krb5_dbe_free_contents.
+       (kadm5_modify_principal): Use krb5_dbe_update_tl_data to merge tl
+       data records.
+       (kadm5_rename_principal): Use kadm5_{copy,free}_principal.
+       (kadm5_chpass_principal_3): Use krb5_db_free_principal instead of
+       krb5_dbe_free_contents.
+       (kadm5_setv4key_principal): Use krb5_db_alloc, not malloc, for key
+       data to be returned.  Use an automatic variable for the key data,
+       before copying out to the object so allocated.
+       (kadm5_setkey_principal_3): Likewise.
+       (decrypt_key_data): On error, clear and free any key storage that
+       might've been returned from previous calls
+       krb5_dbekd_decrypt_key_data.
 
 2004-12-20  Tom Yu  <tlyu@mit.edu>
 

diff --git a/src/lib/kadm5/unit-test/ChangeLog b/src/lib/kadm5/unit-test/ChangeLog
index aa8e3c472a93a49a2ebcab1659c5ebe135a87b08..6d6c2c3e625ba648bf5f8a3700010c91f1202d3e 100644 (file)
--- a/src/lib/kadm5/unit-test/ChangeLog
+++ b/src/lib/kadm5/unit-test/ChangeLog
@@ -9,14 +9,20 @@
        instead of explicitly using -ldl and -lpthread.
 
        Novell merge.
-       * Makefile.in:
-       * destroy-test.c:
-       * handle-test.c:
-       * init-test.c:
-       * iter-test.c:
-       * lock-test.c:
-       * randkey-test.c:
-       * setkey-test.c:
+       * Makefile.in (randkey-test, server-handle-test, lock-test,
+       server-iter-test, server-setkey-test): Link in pthread and dl
+       libraries.
+       * destroy-test.c (main): Pass NULL db_args argument to
+       ovsec_kadm_init.
+       * handle-test.c (main): Likewise.
+       * init-test.c (main): Likewise.
+       * iter-test.c (main): Likewise.
+       * randkey-test.c (main): Likewise.
+       * setkey-test.c (main): Likewise.
+       * lock-test.c: Include krb5/kdb.h, not kadm5/adb.h.
+       (main): Don't call initialize_adb_error_table.  Call krb5_db_open,
+       not osa_adb_open_policy, krb5_db_ lock functions instead of
+       osa_adb_ ones, etc.
 
 2005-02-10  Tom Yu  <tlyu@mit.edu>