rkerberos 0.2.3 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGES.md +30 -0
- data/EXAMPLES.md +1015 -0
- data/MANIFEST.md +17 -12
- data/README.md +17 -6
- data/ext/rkerberos/ccache.c +99 -26
- data/ext/rkerberos/config.c +62 -10
- data/ext/rkerberos/context.c +132 -14
- data/ext/rkerberos/kadm5.c +332 -116
- data/ext/rkerberos/keytab.c +230 -79
- data/ext/rkerberos/policy.c +25 -23
- data/ext/rkerberos/principal.c +139 -11
- data/ext/rkerberos/rkerberos.c +269 -52
- data/ext/rkerberos/rkerberos.h +14 -0
- data/rkerberos.gemspec +10 -7
- data/spec/config_spec.rb +41 -0
- data/spec/context_spec.rb +96 -0
- data/spec/credentials_cache_spec.rb +82 -26
- data/spec/kadm5_spec.rb +319 -5
- data/spec/krb5_keytab_spec.rb +275 -20
- data/spec/krb5_spec.rb +186 -21
- data/spec/policy_spec.rb +4 -0
- data/spec/principal_spec.rb +116 -10
- metadata +9 -8
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0dc45dbb751a22370948c430c6590df2a07739638dee7d208f8050d515dfbbfc
|
|
4
|
+
data.tar.gz: 318bd1b2a81b3791fddf876cdc65895a84645d9f60aa0c0cef3872005b217f6b
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0aebb033c55950e140cbfc02abf00f37f4cedd5141228f0bb135d4b70dd93ce50dda121bda128374339259a4a58f7c6e5db09590cd41ba708130beafca734bd2
|
|
7
|
+
data.tar.gz: 26753f9dcecbecbf3234fc941fe42d380ac0e77829671fe4cc947dfcc081166e0faf77444fa65533bd1b26713b81f67f13f59e5be01a1f0749f3fc7b85430644
|
data/CHANGES.md
CHANGED
|
@@ -1,3 +1,33 @@
|
|
|
1
|
+
# 0.3.1 - 21-Aug-2026
|
|
2
|
+
* Hardened initial credential verification so it fails closed when verification
|
|
3
|
+
cannot be performed, rejects closed keytabs and credential caches, and safely
|
|
4
|
+
initializes a supplied cache before storing credentials.
|
|
5
|
+
* Added shared context lifetime tracking. `Context#close` now raises while
|
|
6
|
+
dependent wrappers remain open; `close(force: true)` logically closes the
|
|
7
|
+
context and defers native cleanup until its dependents close.
|
|
8
|
+
* Hardened native handle cleanup and closed-object checks across `Krb5`, `Kadm5`,
|
|
9
|
+
`CredentialsCache`, `Keytab`, and `Principal`.
|
|
10
|
+
* Fixed `Kadm5#modify_policy` to apply values assigned through `Policy` writers,
|
|
11
|
+
including password history, and require an explicit principal for keytab
|
|
12
|
+
authentication.
|
|
13
|
+
* Fixed `Keytab#each` and `Keytab.foreach` to raise iteration errors instead of
|
|
14
|
+
silently returning partial results.
|
|
15
|
+
|
|
16
|
+
# 0.3.0 - 20-Aug-2026
|
|
17
|
+
* Added optional shared `Context` support to the `Krb5`, `Kadm5`, `Config`,
|
|
18
|
+
`CredentialsCache`, `Keytab`, and `Principal` constructors.
|
|
19
|
+
* Breaking: standardized option-based constructors, credential acquisition,
|
|
20
|
+
verification, and principal creation on strict keyword arguments. Positional
|
|
21
|
+
option hashes and unknown keywords are rejected.
|
|
22
|
+
* Added credentials cache authentication to the `Kadm5` constructor and support
|
|
23
|
+
for passing a `Principal` object to `Kadm5#create_principal`.
|
|
24
|
+
* Added `Keytab#add_entry`, `Keytab#remove_entry`, and `Keytab#have_content?`.
|
|
25
|
+
* Added context realm accessors, principal components and type information,
|
|
26
|
+
credential cache full names, Kerberos thread-safety detection, hostname
|
|
27
|
+
expansion, host realm lookup, and convenience aliases.
|
|
28
|
+
* Added comprehensive usage examples and expanded specs for the new APIs.
|
|
29
|
+
* Excluded generated artifacts from release packages.
|
|
30
|
+
|
|
1
31
|
# 0.2.3 - 8-Mar-2026
|
|
2
32
|
* All Kadm5 related classes are skipped if not found.
|
|
3
33
|
* Several updates to the spec helper that mainly revolved around supporting
|