summarylogtreecommitdiffstats
AgeCommit message (Collapse)Author
2023-04-13explicitly depend on keyutilsMantas Mikulėnas
Used for kafs keyring-based PAG integration.
2022-09-27add providesMantas Mikulėnas
I keep trying to install k5start every time
2022-09-12always restart on SIGALRMMantas Mikulėnas
k5start uses SIGALRM internally, so a common hack is to send it one from the outside (via `pkill -ALRM k5start` from NetworkManager, for example) to force renewals. However, sometimes that occurs when k5start *doesn't* have its SIGALRM handler set up, so the result is that the service just crashes. (It's not a good hack.)
2022-03-04tell k5start to read the client principal name from keytabMantas Mikulėnas
Allows it to be used with keytabs that don't match the "guessed default" client principal (which is username@LOCALREALM).
2022-02-26adjust .service comments moreMantas Mikulėnas
2022-02-26adjust .service commentsMantas Mikulėnas
2022-02-26make NM hook signal both k5start and krenewMantas Mikulėnas
It might not be very useful for krenew (the ticket will probably have already expired, and krenew doesn't know the credentials unlike k5start) but it's a little more consistent anyway.
2022-02-26enable -t option by default in unit filesMantas Mikulėnas
Makes it easier to use drop-ins for enabling aklog where OpenAFS is actually installed. Don't ask why I have OpenAFS installed, I don't know that myself.
2022-02-26improve NM dispatcher script locationMantas Mikulėnas
2022-02-26add a NetworkManager hook scriptMantas Mikulėnas
2022-02-22add kstart.serviceMantas Mikulėnas
Keeping the credentials in a keytab is a bit insecure, but... eh, it's on LUKS and it's better than nothing, so I'll use it while GNOME Online Accounts' Kerberos support remains broken. [1][2] [2]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/28 [1]: https://gitlab.gnome.org/GNOME/gnome-online-accounts/-/issues/160
2021-08-31release 4.3Mantas Mikulėnas
2020-10-31make the krenew service be less verboseMantas Mikulėnas
2020-10-25run service with '-a' option (renew on every wakeup)Mantas Mikulėnas
2017-10-26use HTTPS URLsMantas Mikulėnas
2016-03-19release 4.2Mantas Mikulėnas
2015-06-08initial commitMantas Mikulėnas