Skip Menu |
 

From: tlyu@mit.edu
Subject: git commit

Add flag word to KDB iteration APIs

https://github.com/krb5/krb5/commit/ab009b8568d9b64b7e992ecdb98114e895b4a7ff
Author: Tom Yu <tlyu@mit.edu>
Commit: ab009b8568d9b64b7e992ecdb98114e895b4a7ff
Branch: master
src/include/kdb.h | 10 +++++++---
src/kadmin/dbutil/dump.c | 2 +-
src/kadmin/dbutil/kdb5_mkey.c | 4 ++--
src/lib/kadm5/srv/server_kdb.c | 2 +-
src/lib/kdb/Makefile.in | 2 +-
src/lib/kdb/kdb5.c | 4 ++--
src/plugins/kdb/db2/db2_exp.c | 4 ++--
src/plugins/kdb/db2/kdb_db2.c | 8 ++++----
src/plugins/kdb/db2/kdb_db2.h | 2 +-
src/plugins/kdb/hdb/kdb_hdb.c | 2 +-
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.c | 2 +-
src/plugins/kdb/ldap/libkdb_ldap/ldap_principal.h | 2 +-
src/tests/kdbtest.c | 2 +-
13 files changed, 25 insertions(+), 21 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Support write locks in DB2 iteration

Add support to krb5_db_iterate() for requesting write locks in the DB2
back end.

https://github.com/krb5/krb5/commit/0cc00db2987f6b103b7e8bee72b7ddfbad2faea8
Author: Tom Yu <tlyu@mit.edu>
Commit: 0cc00db2987f6b103b7e8bee72b7ddfbad2faea8
Branch: master
src/plugins/kdb/db2/kdb_db2.c | 8 +++++++-
1 files changed, 7 insertions(+), 1 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Use write lock flag for update_princ_encryption

In kdb5_util update_princ_encryption, instead of getting a write lock
on the KDB surrounding the call to krb5_db_iterate(), use the
iterflags parameter of krb5_db_iterate() to request that it obtain a
write lock around the iteration.

https://github.com/krb5/krb5/commit/0d3db948464bf7a38afa458f2f54867d107bbb72
Author: Tom Yu <tlyu@mit.edu>
Commit: 0d3db948464bf7a38afa458f2f54867d107bbb72
Branch: master
src/kadmin/dbutil/kdb5_mkey.c | 11 +++--------
1 files changed, 3 insertions(+), 8 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Support unlocked iteration in DB2

Add support to the DB2 KDB back end to optionally release the lock
when calling the iterator callback. This prevents the blocking of
other processes when dumps of large databases are taking place.

Also add support for reversed iteration.

https://github.com/krb5/krb5/commit/c35e3316423af7b806c9f8971a0cce5e0d4c893f
Author: Tom Yu <tlyu@mit.edu>
Commit: c35e3316423af7b806c9f8971a0cce5e0d4c893f
Branch: master
src/include/k5-int.h | 1 +
src/plugins/kdb/db2/kdb_db2.c | 196 ++++++++++++++++++++++++++++++++++++-----
src/plugins/kdb/db2/kdb_db2.h | 1 +
3 files changed, 175 insertions(+), 23 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Tests for unlocked iteration

https://github.com/krb5/krb5/commit/344d6e26d9a11303a6078ae6afeb5fc8c4b42865
Author: Tom Yu <tlyu@mit.edu>
Commit: 344d6e26d9a11303a6078ae6afeb5fc8c4b42865
Branch: master
src/tests/Makefile.in | 7 +-
src/tests/t_unlockiter.py | 18 +++
src/tests/unlockiter.c | 273 +++++++++++++++++++++++++++++++++++++++++++++
3 files changed, 297 insertions(+), 1 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Ignore iprop deletion of deleted princ

Now that an iprop full dump might not hold a lock around the entire
dump, it's possible that iprop will queue an incremental update while
the dump is in progress. If a principal is deleted while the dump is
in progress, the dump could omit that principal, yet the deletion
event would still be queued in the ulog. Ignore that deletion without
generating an error.

This is the same basic change as for ticket #7753.

https://github.com/krb5/krb5/commit/8f752f88bf1b1284d8e2b8119031625f2b703ab7
Author: Tom Yu <tlyu@mit.edu>
Commit: 8f752f88bf1b1284d8e2b8119031625f2b703ab7
Branch: master
src/lib/kdb/kdb_log.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Stop locking around iprop dumps

https://github.com/krb5/krb5/commit/71dff2ba654260a870dfc2adc35b2a90a458ce35
Author: Tom Yu <tlyu@mit.edu>
Commit: 71dff2ba654260a870dfc2adc35b2a90a458ce35
Branch: master
src/kadmin/dbutil/dump.c | 13 +------------
1 files changed, 1 insertions(+), 12 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Document unlockiter

https://github.com/krb5/krb5/commit/20de23910012dcda1fd06d6ac7153adf2c0589b8
Author: Tom Yu <tlyu@mit.edu>
Commit: 20de23910012dcda1fd06d6ac7153adf2c0589b8
Branch: master
doc/admin/admin_commands/kadmin_local.rst | 13 +++++++++++++
doc/admin/conf_files/kdc_conf.rst | 7 +++++++
2 files changed, 20 insertions(+), 0 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Correct includes for unlockiter.c

Some platforms (e.g., Solaris) need a declaration of memset() for the
FD_ZERO() macro to work, contrary to POSIX standards. Add an
inclusion of <string.h> to accommodate them. Also add <sys/time.h>,
possibly needed by some older platforms, and remove a spurious
inclusion of <sys/socket.h>.

https://github.com/krb5/krb5/commit/f85675510f9028879228193bae25f1b127134fc4
Author: Tom Yu <tlyu@mit.edu>
Commit: f85675510f9028879228193bae25f1b127134fc4
Branch: master
src/tests/unlockiter.c | 4 +++-
1 files changed, 3 insertions(+), 1 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Fix KDC race in t_unlockiter.py

The second KDC startup in t_unlockiter.py could race with the
garbage-collected shutdown of the first, causing the second one to
fail to bind the listening port. Avoid the situation by setting
start_kdc=False, because there doesn't need to be a KDC running for
these tests anyway. Also use create_user=False and create_host=False,
because those principals aren't necessary either.

https://github.com/krb5/krb5/commit/9831cb6930e40af1240ee67eef31c83ecadcce5c
Author: Tom Yu <tlyu@mit.edu>
Commit: 9831cb6930e40af1240ee67eef31c83ecadcce5c
Branch: master
src/tests/t_unlockiter.py | 5 +++--
1 files changed, 3 insertions(+), 2 deletions(-)
From: tlyu@mit.edu
Subject: git commit

Disallow unlocked iteration of hash databases

It's not clear whether unlocked iteration over a hash DB2 database
will omit unaffected entries if database additions or deletions occur
concurrently with the iteration. Avoid this situation by disabling
unlocked iteration in the unlikely event that someone is still using a
hash database for their KDB.

https://github.com/krb5/krb5/commit/ded6f17bbda92419a68478b822ce79406c0be1e0
Author: Tom Yu <tlyu@mit.edu>
Commit: ded6f17bbda92419a68478b822ce79406c0be1e0
Branch: master
src/plugins/kdb/db2/kdb_db2.c | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)