path: root/crypto/heimdal/tests/ChangeLog

2008-01-14  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc: Test the PKCS11 provider built-in to libhx509.

2007-12-14  Love Hörnquist Åstrand  <lha@it.su.se>

	* ldap/init.ldif: Add space to make valid ldiff file, from Buchan
	Milne
	
	* ldap/slapd-init.in: Another place where schemas are installed,
	from Buchan Milne.

2007-12-05  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kadmin.in: Check that admin-less principal works.

2007-12-04  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-ntlm.in: test kdigest digest-probe command.

2007-12-03  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-basic.in: Test GSS_C_NO_NAME too.

2007-10-24  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Try multiple enctypes.

2007-08-17  Love Hörnquist Åstrand  <lha@it.su.se>

	* java/Makefile.am: EXTRA_DIST += jaas.conf
	
2007-08-13  Love Hörnquist Åstrand  <lha@it.su.se>

	* java/Makefile.am: Add java source code.

2007-08-09  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-iprop.in: Don't run this test in AFS since AFS is
	missing unix sockets.

	* kdc/wait-kdc.sh: Catch bind ../../tests/kdc/signal: Operation
	not permitted

2007-08-08  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-iprop.in: use wait-kdc.sh for all diffrent places we
	start ipropd-{master,slave}.

	* all-tests: empty messages.log

	* kdc/check-iprop.in: Use wait-kdc.sh to wait for
	ipropd-{master,slave}.

	* kdc/wait-kdc.sh: look futher back in the logfile.
	
	* kdc/wait-kdc.sh: Make wait-kdc.sh able to wait on other things.

	* kdc/check-iprop.in: Checking master going backward, create
	iprop-stats.

2007-08-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* java/have-java.sh: GNU GCC Java doesn't support Kerberos

2007-08-01  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-iprop.in: wait longer for iprop, dump messages.log on
	failure.

	* kdc/Makefile.am: Clean after iprop tests.

	* kdc/check-iprop.in: more iprop tests.

2007-07-31  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: Add check-iprop and related files.

	* kdc/krb5.conf.in: Add stuff for iprop.

	* kdc/check-iprop.in: Test for iprop.

	* kdc/iprop-acl: ACL file for iprop.

2007-07-28  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/donotexists.txt: missing file.

2007-07-26  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: EXTRA_DIST += donotexists.txt

2007-07-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Test renewing.
	
2007-07-21  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: Test for simple salt types.

	* kdc/krb5.conf.keys.in: Configuration file for testing keys.

	* kdc/check-keys.in: Test some simple salt types.

2007-07-17  Love Hörnquist Åstrand  <lha@it.su.se>

	* java/Makefile.am: EXTRA_DIST += have_java.sh

	* java/check-kinit.in: Make failing to compile a java program a
	no-fatal error.

	* java/check-kinit.in: Disable test if we use socket wrapper.

2007-07-16  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kadmin.in: Give more hints of what went wrong.

2007-07-14  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: add check-kadmin.in
	
2007-07-12  Love Hörnquist Åstrand  <lha@it.su.se>

	* ldap/slapd.conf: add samba.schema.

	* ldap/slapd-init.in: Add samba schema.

	* ldap/init.ldif: Samba entry to do testing with.

2007-07-11  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* java/check-kinit.in: Only print when there is an error.

	* java/krb5.conf.in: Move the AES enctypes first.

2007-07-10  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kadmin.in: Send kill outout to /dev/null.

	* kdc/krb5.conf.in: Add bits needed for kadmind server test.

	* kdc/Makefile.am: Add check-kadmin.

	* kdc/check-kadmin.in: Simple test for server based kadmin.

	* kdc/heimdal.acl: ACL file for check-admin test.

2007-07-05  Love Hörnquist Åstrand  <lha@it.su.se>

	* Makefile.am: Add java.

	* java: simple java kinit test

2007-06-26  Love Hörnquist Åstrand  <lha@it.su.se>

	* ldap/check-ldap.in: Add one more principal and list the
	database.

	* kdc/check-pkinit.in: Fix hxtool issue-certificate --req.

	* kdc/check-referral.in: Spelling.
	
2007-06-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-context.in: disable dns canon on test, break on some
	buildfarm hosts.
	
2007-06-19  Love Hörnquist Åstrand  <lha@it.su.se>

	* can/test_can.in: readline seems strange, try diffrent way to
	setup the database.

2007-06-18  Love Hörnquist Åstrand  <lha@it.su.se>

	* can/test_can.in: spoon feed kadmin diffrently

2007-06-11  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Also test rename user to anther realm.

	* kdc/check-kdc.in: Test renaming a user.

	* can/test_can.in: Tell use what the messages.log told us.

	* kdc/check-referral.in: Add some more as-req canon tests, add
	disable tgs-req tests.
	
2007-06-09  Love Hörnquist Åstrand  <lha@it.su.se>

	* can/check-can.in: Check is there is a working db backend here.
	
2007-06-08  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* can/Makefile.am: Clean up more cruft.
	
2007-06-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* can/Makefile.am: More files we want in the dist.

	* can/test_can.in: Simplify error reporting.

	* can/test_can.in: Catch error from kadmin.

	* can/mit-pkinit-20070607.*: mit pkinit-9 request

	* can/check-can.in: Add mit-pkinit test.

	* can/Makefile.am: Create specific configurtion files for some
	tests.

	* can/test_can.in: Pick up the right generated
	krb5.conf (spelling).

	* can: Add Apple Tiger 10.4/MIT Kerberos 1.4

	* can/test_can.in: Don't need to start a kdc for this test.

	* can: pre-canned requests from older versions and other implementations

	* Makefile.am: SUBDIRS += can
	
2007-06-04  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-uu.in: Use stdout from uu_server.
	
2007-05-31  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-pkinit.in: Try pkinit in w2k mode, also add tests for
	MS SAN.

	* kdc/Makefile.am: generate a krb5-pkinit-win.conf

	* kdc/krb5-pkinit.conf.in: W2K tests.
	
2007-05-30  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: remove more files
	
2007-05-10  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-pkinit.in: try principal subject in DB
	
2007-05-08  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-basic.in: test using test_kcred

	* gss/check-ntlm.in: One more test.

	* ldap/check-ldap.in: check in /usr/lib/openldap too for slapd and
	slapadd
	
2007-05-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/add-modify-delete.in: Remove comment.

	* db/add-modify-delete.in: try replay

	* db/Makefile.am: clean more files.

	* db/add-modify-delete.in: try iprop-log commands.
	
2007-04-27  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/krb5.conf.in: Add longer example.
	
2007-04-23  Love Hörnquist Åstrand  <lha@it.su.se>

	* db: basic tests for dbinfo

2007-04-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/Makefile.am: Add check-ntlm.

	* gss/check-ntlm.in: test ntlm client credentials code.
	
2007-04-21  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/loaddump-db.in: make kstash quiet
	
2007-04-18  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-basic.in: more gss_acquire_cred tests
	
2007-04-17  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/Makefile.am: add check-basic

	* gss/check-basic.in: basic tests that might require a KDC.
	
2007-04-16  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/Makefile.am: CLEANFILES += sdigest-init
	
2007-04-11  Love Hörnquist Åstrand  <lha@it.su.se>

	* ldap/slapd-init.in: Add Id tag
	
2007-02-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: test new kadmin add_enctype functionallity
	
2007-02-17  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* Makefile.am: add ldap

	* kdc/check-referral.in: add check-referral
	
	* kdc/Makefile.am: add check-referral
	
2007-02-15  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* tests/ldap: simple ldap test, inspried by samba ldb ldap test

2007-02-03  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-digest.in: Test ms-chap-v2 (client response, server
	response, session key)
	
2007-02-02  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/krb5.conf.in: allow ms-chap-v2
	
2007-02-01  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-digest.in: Negative check too.
	
2007-01-18  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-uu.in: save log, wait longer
	
2007-01-15  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-pkinit.in: tell me about certifiate that we have
	generated
	
2007-01-11  Love Hörnquist Åstrand  <lha@it.su.se>

	* no random, no RSA/DH tests

	* plugin/Makefile.am: remove files created by tests

	* gss/Makefile.am: remove files created by tests

	* gss/Makefile.am: add ntlm-user-file.txt

2007-01-10  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/ap-req.c: --verify-pac no means verify existance of PAC in
	ticket, the signature checking is done by the kerberos library.

	* kdc/check-digest.in: display messages.log and help that that
	tells us what went wrong.

	* plugin/windc.c: Update to validate function signature change.

	* Makefile.am: Only traverse into plugin if there is shared
	library support.
	
2007-01-09  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-pkinit.in: Prefix key with FILE:
	
2007-01-04  Love Hörnquist Åstrand  <lha@it.su.se>

	* plugin/Makefile.am: EXTRA_DIST += krb5.conf.in

	* plugin/check-pac.in: test explicit requested pac and explicit
	negative requested pac.

	* kdc/ap-req.c: Make it possible to turn off PAC check, its
	default on.

	* plugin/windc.c: Add client_access.

	* plugin/check-pac.in: Verify PAC on server end too.

	* kdc/ap-req.c: Add verification of PAC.

	* kdc/Makefile.am: Add test for pkinit with locally generated
	certs.

	* kdc/check-pkinit.in: Generate a ca, kdc cert and client cert and
	try to use them

	* kdc/pki-mapping: add other foo@TEST

	* kdc/krb5-pkinit.conf.in: pkinit specific krb5.conf
	
2007-01-03  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* plugin/check-pac.in: test tgs-req

	* plugin/windc.c: log that the function is called.

	* kdc/check-digest.in: Test security layer in ntlm.

	* plugin: test WinDC PAC functionallity
	
	* Makefile.am: Include plugin in tests
	
2006-12-28  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/ntlm-user-file.txt: Correct DOMAIN name
	
2006-12-26  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/krb5.conf.in: Add digests acls (all)
	
2006-12-19  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-spnego.in: test wrapunwrap

	* gss/check-spnego.in: Test get and verify MIC.
	
	* gss/check-context.in: don't need to set GSSAPI_SPNEGO_NAME any
	longer
	
2006-12-18  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-context.in: Define GSSAPI_SPNEGO_NAME and re-add
	spnego
	
	* gss/check-context.in: add trap, remove allow-digest, pretty
	print.

	* gss/check-gssmask.in: catch EXIT traps

	* gss/check-spnego.in: test more combination of spnego contexts

	* gss/Makefile.am: add check-spnego

	* gss/check-spnego.in: check spnego combinations.
	
2006-12-16  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-digest.in: test more combinations of names
	
2006-12-15  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/ntlm-user-file.txt: ntlm username and password file

	* kdc/check-digest.in: Check that ntlm works.
	
2006-12-12  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-digest.in: prefix digest commands with digest-
	
2006-11-29  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Don't (afs) unlog using kdestroy
	
2006-11-25  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: Add LIB_roken and (implictly by that libvers
	for print_version) to LDADD
	
2006-11-23  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: check that the getarg -- option works for
	delete and add.

	* kdc/check-kdc.in: Test proxy cert.
	
2006-11-19  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/krb5.conf.in: revert the enable-pkinit change, and make it
	consistant with all other other enable- options

2006-11-15  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-context.in: Add dce-style context building test.

	* gss/check-context.in: test more combination of context building
	
2006-11-13  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* Use TEST{,2}.H5L.SE for testing

2006-11-08  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/Makefile.am: Use EGREP.

	* kdc/check-kdc.in: Use EGREP.
	
2006-10-23  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: run eval on the testfailed variable so we run
	all commands
	
2006-10-22  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* db/Makefile.am: make have-db being built in the "make all"
	target.

	* kdc/check-kdc.in: tell more what the kdc though about the
	failure.
	
2006-10-21  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/add-modify-delete.in: Use EGREP.

	* db/Makefile.am: add EGREP to do_subst
	
2006-10-20  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/Makefile.am: Clean temporary files

	* db/Makefile.am: clean have-db

	* kdc/Makefile.am: Add pki-mapping to dist file.

	* kdc/Makefile.am: more files
	
	* db/Makefile.am: more files

2006-10-19  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-context.in: give path to have-db
	
	* gss/check-gssmask.in: give path to have-db
	
	* kdc/check-kdc.in: give path to have-db
	
	* kdc/check-digest.in: give path to have-db
	
	* gss/check-gssmask.in: If there is no useful db support compile
	in, disable test

	* gss/check-context.in: Add commeted out digest check.

	* kdc/check-digest.in: If there is no useful db support compile
	in, disable test

	* kdc/check-kdc.in: If there is no useful db support compile in,
	disable test

	* db/loaddump-db.in: If there is no useful db support compile in,
	disable test

	* db/have-db.in: Check if the kdc have any useful builtin
	database.

	* kdc/check-kdc.in: Fix awk statement, put RE on the right side.
	
2006-10-17  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-gssmask.in: remove dup exit

	* gss/check-context.in: More name tests.

	* gss/check-context.in: test with and without dns-canon
	
2006-10-14  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-kdc.in: Be more explit about what test failed.
	
2006-10-13  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-context.in: et KRB5CCNAME in global enviorment
	
2006-10-12  Love Hörnquist Åstrand <lha@it.su.se>
	
	* gss/Makefile.am: Check if the gss context tester test_context
	works ok.

	* gss/check-context.in: Check if the gss context tester
	test_context works ok.
	
2006-10-10  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-gssmask.in: use wait-kdc.sh script

	* kdc/check-kdc.in: use wait-kdc.sh script

	* kdc/check-digest.in: use wait-kdc.sh script

	* Heimdal uses TESTS_ENVIRONMENT before every binary being tested
	directly from the Makefile.  This now uses the same for the
	scripts, so we can run them under valgrind. From Andrew Bartlet

2006-10-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/Makefile.am: splits script tests and binary tests

	* db/Makefile.am: Add tests script depenencies

	* kdc/Makefile.am: Split script tests and binary tests
	
2006-10-04  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Test pkinit encKey case.
	
2006-09-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-gssmask.in: Catch failures from gssmaestro.
	
2006-09-20  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-gssmask.in: Add a third client
	
2006-09-19 Love Hörnquist Åstrand  <lha@it.su.se>
	
	* gss/check-gssmask.in: test for gssmask + gssmaestro.

	* gss/krb5.conf.in: Add krb5.conf for krb5.conf
	
2006-09-18  Love Hörnquist Åstrand  <lha@it.su.se>

	* gss/check-gss.in: Add (c)

	* kdc/check-kdc.in: Test constrained delegation impersonation.
	
2006-09-16  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Change the password on krbtgt a couple of
	times to have a non boring kvno.
	
2006-08-24  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-digest.in: Use the server as the server and set
	diffrent password for the user and service.

	* kdc/check-digest.in: Set allow digest flag on the server.

	* kdc/Makefile.am: Build and run check-digest test.

	* kdc/check-digest.in: Remove channel bindings from CHAP tests,
	there is no such thing for CHAP.

	* kdc/check-kdc.in: Test aes only krbtgt and des3 only service.
	
2006-08-21  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Remove empty lines for picky awks
	
2006-07-06  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Check for cross realm case where remove user
	doesn't exists in the database, this is ok assuming the cross
	realm isn't local. In the general case this isn't true.

2006-06-22  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: run kadmin check
	
2006-06-07  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: test that delegated cred works too

	* kdc/check-kdc.in: Test delegation
	
2006-06-06 Love Hörnquist Åstrand <lha@it.su.se>
	
	* kdc/check-kdc.in: Add impersonation tests.
	
2006-06-01  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Less verbose, spelling.

	* kdc/check-kdc.in: test cross realm and deleted user
	
2006-05-12  Love Hörnquist Åstrand  <lha@it.su.se>

	* kdc/check-kdc.in: Check password protected pk-init keyfile.
	
2006-04-30  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-kdc.in: Don't try pkinit if there is no rsa
	
2006-04-29  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/pki-mapping: change pki-mapping
	
	* kdc/Makefile.am: clean the server.keytab

	* kdc/check-kdc.in: Add test for pk-init

	* kdc/krb5.conf.in: Add pkinit glue

2006-04-28  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/pki-mapping: Add pk-init mapping file
	
2006-04-27  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* kdc/check-kdc.in: Sprinkle more ap-req now that the credential
	is removed from the cache using kdestroy --credential=

	* kdc/ap-req.c: check that AP_OPTS_MUTUAL_REQUIRED matches, check
	seqnumber

	* kdc/Makefile.am: Build as-req.

	* kdc/check-kdc.in: Sprinkel some as-req

	* kdc/ap-req.c: simple test program checking that as ap-req/as-rep
	exchange works
	
2006-04-25  Love Hörnquist Åstrand  <lha@it.su.se>
	
	* {,kdc/,db/}.cvsignore: ignore Makefile.in

	* kdc/check-kdc.in: Try to detect another KDC running.

	* kdc/check-kdc.in: more tests regarding doing AS-REQ and TGS-REQ

	* kdc/krb5.conf.in: krb5.conf template

	* kdc/check-kdc.in: check that the keytab have the right kvno

	* db/add-modify-delete.in: create a server too

	* kdc/check-kdc.in: check kdc too

	* db/Makefile.am: Add add-modify-delete

	* db/add-modify-delete.in: basic kadmin tests

	* Makefile.am: SUBDIRS += kdc

	* kdc/check-kdc.in: Test framework for getting and checking
	tickets, start kdc on localhost:8888.

	* kdc/Makefile.am: Test framework for getting and checking
	tickets.

	* db/krb5.conf.in: log all message to local file

	* db/Makefile.am: clean messages file
	
2006-01-17  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/krb5.conf.in: Set [libdefaults] default_realm = EXAMPLE.ORG.

2005-11-30  Love Hörnquist Åstrand  <lha@it.su.se>

	* db/loaddump-db.in: Specifify explicitly that the database is in
	the current directory.

2005-08-11  Love Hörnquist Åstrand  <lha@it.su.se>

	* test loading and dumping of the database