|
 |
e8d79a |
Name: gssproxy
|
|
|
e8d79a |
|
|
|
e8d79a |
Version: 0.8.0
|
|
|
e8d79a |
Release: 5%{?dist}
|
|
|
e8d79a |
Summary: GSSAPI Proxy
|
|
|
e8d79a |
|
|
|
e8d79a |
Group: System Environment/Libraries
|
|
|
e8d79a |
License: MIT
|
|
|
e8d79a |
URL: https://pagure.io/gssproxy
|
|
|
e8d79a |
Source0: https://releases.pagure.org/%{name}/%{name}-%{version}.tar.gz
|
|
|
e8d79a |
|
|
|
e8d79a |
%global servicename gssproxy
|
|
|
e8d79a |
%global pubconfpath %{_sysconfdir}/gssproxy
|
|
|
e8d79a |
%global gpstatedir %{_localstatedir}/lib/gssproxy
|
|
|
e8d79a |
|
|
|
e8d79a |
### Patches ###
|
|
|
e8d79a |
Patch0: Always-use-the-encype-we-selected.patch
|
|
|
e8d79a |
Patch1: Clarify-debug-and-debug_level-in-man-pages.patch
|
|
|
e8d79a |
Patch2: Always-choose-highest-requested-debug-level.patch
|
|
|
e8d79a |
|
|
|
e8d79a |
### Dependencies ###
|
|
|
e8d79a |
Requires: krb5-libs >= 1.12.0
|
|
|
e8d79a |
Requires: keyutils-libs
|
|
|
e8d79a |
Requires: libverto-module-base
|
|
|
e8d79a |
Requires: libini_config >= 1.2.0
|
|
|
e8d79a |
Requires(post): systemd-units
|
|
|
e8d79a |
Requires(preun): systemd-units
|
|
|
e8d79a |
Requires(postun): systemd-units
|
|
|
e8d79a |
|
|
|
e8d79a |
# We use a Conflicts: here so as not to interfere with users who make
|
|
|
e8d79a |
# their own policy. The version is the last time someone has filed a
|
|
|
e8d79a |
# bug about gssproxy being broken with selinux.
|
|
|
e8d79a |
Conflicts: selinux-policy < 3.13.1-283.5
|
|
|
e8d79a |
|
|
|
e8d79a |
### Build Dependencies ###
|
|
|
e8d79a |
BuildRequires: autoconf
|
|
|
e8d79a |
BuildRequires: automake
|
|
|
e8d79a |
BuildRequires: libtool
|
|
|
e8d79a |
BuildRequires: m4
|
|
|
e8d79a |
BuildRequires: libxslt
|
|
|
e8d79a |
BuildRequires: libxml2
|
|
|
e8d79a |
BuildRequires: docbook-style-xsl
|
|
|
e8d79a |
BuildRequires: doxygen
|
|
|
e8d79a |
BuildRequires: gettext-devel
|
|
|
e8d79a |
BuildRequires: pkgconfig
|
|
|
e8d79a |
BuildRequires: krb5-devel >= 1.12.0
|
|
|
e8d79a |
BuildRequires: libselinux-devel
|
|
|
e8d79a |
BuildRequires: keyutils-libs-devel
|
|
|
e8d79a |
BuildRequires: libini_config-devel >= 1.2.0
|
|
|
e8d79a |
BuildRequires: libverto-devel
|
|
|
e8d79a |
BuildRequires: popt-devel
|
|
|
e8d79a |
BuildRequires: findutils
|
|
|
e8d79a |
BuildRequires: systemd-units
|
|
|
e8d79a |
BuildRequires: git
|
|
|
e8d79a |
|
|
|
e8d79a |
%description
|
|
|
e8d79a |
A proxy for GSSAPI credential handling
|
|
|
e8d79a |
|
|
|
e8d79a |
%prep
|
|
|
e8d79a |
%autosetup -S git
|
|
|
e8d79a |
|
|
|
e8d79a |
%build
|
|
|
e8d79a |
autoreconf -f -i
|
|
|
e8d79a |
%configure \
|
|
|
e8d79a |
--with-pubconf-path=%{pubconfpath} \
|
|
|
e8d79a |
--with-initscript=systemd \
|
|
|
e8d79a |
--disable-static \
|
|
|
e8d79a |
--disable-rpath \
|
|
|
e8d79a |
--with-gpp-default-behavior=REMOTE_FIRST
|
|
|
e8d79a |
|
|
|
e8d79a |
make %{?_smp_mflags} all
|
|
|
e8d79a |
make test_proxymech
|
|
|
e8d79a |
|
|
|
e8d79a |
%install
|
|
|
e8d79a |
rm -rf %{buildroot}
|
|
|
e8d79a |
make install DESTDIR=%{buildroot}
|
|
|
e8d79a |
rm -f %{buildroot}%{_libdir}/gssproxy/proxymech.la
|
|
|
e8d79a |
install -d -m755 %{buildroot}%{_sysconfdir}/gssproxy
|
|
|
e8d79a |
install -m644 examples/gssproxy.conf %{buildroot}%{_sysconfdir}/gssproxy/gssproxy.conf
|
|
|
e8d79a |
install -m644 examples/99-nfs-client.conf %{buildroot}%{_sysconfdir}/gssproxy/99-nfs-client.conf
|
|
|
e8d79a |
mkdir -p %{buildroot}%{_sysconfdir}/gss/mech.d
|
|
|
e8d79a |
install -m644 examples/mech %{buildroot}%{_sysconfdir}/gss/mech.d/gssproxy.conf
|
|
|
e8d79a |
mkdir -p %{buildroot}%{gpstatedir}/rcache
|
|
|
e8d79a |
|
|
|
e8d79a |
|
|
|
e8d79a |
%files
|
|
|
e8d79a |
%license COPYING
|
|
|
e8d79a |
%{_unitdir}/gssproxy.service
|
|
|
e8d79a |
%{_sbindir}/gssproxy
|
|
|
e8d79a |
%attr(755,root,root) %dir %{pubconfpath}
|
|
|
e8d79a |
%attr(755,root,root) %dir %{gpstatedir}
|
|
|
e8d79a |
%attr(700,root,root) %dir %{gpstatedir}/clients
|
|
|
e8d79a |
%attr(700,root,root) %dir %{gpstatedir}/rcache
|
|
|
e8d79a |
%attr(0600,root,root) %config(noreplace) /%{_sysconfdir}/gssproxy/gssproxy.conf
|
|
|
e8d79a |
%attr(0600,root,root) %config(noreplace) /%{_sysconfdir}/gssproxy/99-nfs-client.conf
|
|
|
e8d79a |
%attr(0644,root,root) %config(noreplace) /%{_sysconfdir}/gss/mech.d/gssproxy.conf
|
|
|
e8d79a |
%dir %{_libdir}/gssproxy
|
|
|
e8d79a |
%{_libdir}/gssproxy/proxymech.so
|
|
|
e8d79a |
%{_mandir}/man5/gssproxy.conf.5*
|
|
|
e8d79a |
%{_mandir}/man8/gssproxy.8*
|
|
|
e8d79a |
%{_mandir}/man8/gssproxy-mech.8*
|
|
|
e8d79a |
|
|
|
e8d79a |
%post
|
|
|
e8d79a |
%systemd_post gssproxy.service
|
|
|
e8d79a |
|
|
|
e8d79a |
%preun
|
|
|
e8d79a |
%systemd_preun gssproxy.service
|
|
|
e8d79a |
|
|
|
e8d79a |
%postun
|
|
|
e8d79a |
%systemd_postun_with_restart gssproxy.service
|
|
|
e8d79a |
|
|
|
e8d79a |
%changelog
|
|
|
e8d79a |
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.0-5
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Apr 12 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-4
|
|
|
e8d79a |
- Drop patch level by one (woo!)
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Apr 12 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-3
|
|
|
e8d79a |
- Always choose highest requested debug level
|
|
|
e8d79a |
- Update man pages about debugging
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Feb 27 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-2
|
|
|
e8d79a |
- Always use the encype we selected
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Feb 09 2018 Robbie Harwood <rharwood@redhat.com> - 0.8.0-1
|
|
|
e8d79a |
- Release version 0.8.0
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-30
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Dec 13 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-29
|
|
|
e8d79a |
- Conditionally reload kernel interface on SIGHUP
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Dec 12 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-28
|
|
|
e8d79a |
- Fixup previous
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Dec 12 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-27
|
|
|
e8d79a |
- More code hygeine fixes from upstream
|
|
|
e8d79a |
- Reorder patches to match el7
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Dec 05 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-26
|
|
|
e8d79a |
- Properly initialize ccaches before storing into them
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Dec 01 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-25
|
|
|
e8d79a |
- Properly locate credentials in collection caches in mechglue
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Oct 31 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-24
|
|
|
e8d79a |
- Only empty FILE ccaches when storing remote creds
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Oct 30 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-23
|
|
|
e8d79a |
- Fix error message handling in gp_config_from_dir()
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Oct 27 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-22
|
|
|
e8d79a |
- Fix concurrency issue in server socket handling
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Oct 02 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-21
|
|
|
e8d79a |
- Off-by-one error fix in selinux-policy version
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Oct 02 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-20
|
|
|
e8d79a |
- Change selinux-policy versioning to Conflicts
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Sep 29 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-19
|
|
|
e8d79a |
- Add explicit selinux-policy dependency after some fixes
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Sep 29 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-18
|
|
|
e8d79a |
- Fix silent death if config file has duplicate sections
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Sep 21 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-17
|
|
|
e8d79a |
- Handle outdated encrypted ccaches
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Sep 15 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-16
|
|
|
e8d79a |
- Backport updates to epoll logic
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Sep 12 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-15
|
|
|
e8d79a |
- Backport two security fixes
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Aug 22 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-14
|
|
|
e8d79a |
- Non-blocking IO + Extended request debug logging
|
|
|
e8d79a |
|
|
|
e8d79a |
* Sun Aug 20 2017 Ville Skyttä <ville.skytta@iki.fi> - 0.7.0-13
|
|
|
e8d79a |
- Own the %%{_libdir}/gssproxy dir
|
|
|
e8d79a |
- Mark COPYING as %%license
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jul 31 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-12
|
|
|
e8d79a |
- Add client ID to debug messages
|
|
|
e8d79a |
- Move packaging to autosetup
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.7.0-11
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jun 19 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-10
|
|
|
e8d79a |
- Fix potential explicit NULL deref of program name
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu May 25 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-9
|
|
|
e8d79a |
- Make proc failure loud but nonfatal
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed May 24 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-8
|
|
|
e8d79a |
- Remove (buggy?) logic around NFS snippet.
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed May 17 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-7
|
|
|
e8d79a |
- Remove NFS server stanza if nfs-utils not present
|
|
|
e8d79a |
- Also update gcc7 patch to match upstream
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue May 16 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-6
|
|
|
e8d79a |
- Fix segfault when no configuration files are found
|
|
|
e8d79a |
- Various build fixes for gcc7
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon May 01 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-5
|
|
|
e8d79a |
- Update systemd unit file (nfs removal, reload capability)
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Apr 03 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-4
|
|
|
e8d79a |
- Backport fix for double unlock
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Mar 28 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-3
|
|
|
e8d79a |
- Drop NFS server snippet (removes dependency on nfs kernel component)
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Mar 14 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-2
|
|
|
e8d79a |
- Fix credential renewal and impersonator checking for m_a_g
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Mar 07 2017 Robbie Harwood <rharwood@redhat.com> - 0.7.0-1
|
|
|
e8d79a |
- New upstream release - 0.7.0
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Mar 06 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.2-4
|
|
|
e8d79a |
- Actually apply the patches I just added
|
|
|
e8d79a |
- Also include a Coverity fix.
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Feb 28 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.2-2
|
|
|
e8d79a |
- Include other non-null fix and various things from master
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Feb 23 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.2-1
|
|
|
e8d79a |
- Fix incorrect use of non-null string in xdr
|
|
|
e8d79a |
- Also move version number to better reflect what is inside
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 0.6.1-3
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jan 23 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.1-2
|
|
|
e8d79a |
- Fix allocation issue of cred store
|
|
|
e8d79a |
- Resolves: #1415400
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Jan 20 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.1-1
|
|
|
e8d79a |
- New upstream release v0.6.1
|
|
|
e8d79a |
- Resolves: #1415090
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Jan 18 2017 Robbie Harwood <rharwood@redhat.com> - 0.6.0-1
|
|
|
e8d79a |
- New upstream release v0.6.0
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Sep 27 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.1-3
|
|
|
e8d79a |
- Adjust libverto dependency to not use a specific backend
|
|
|
e8d79a |
- Resolves: #1379812
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Jun 14 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.1-2
|
|
|
e8d79a |
- Own /var/lib/gssproxy/rcache
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jun 13 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.1-1
|
|
|
e8d79a |
- Update to upstream release v0.5.1
|
|
|
e8d79a |
- Resolves: #1345871
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Jun 07 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.0-5
|
|
|
e8d79a |
- Acquire new socket for fork/permission drops on clients
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon May 09 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.0-4
|
|
|
e8d79a |
- Do not package mod_auth_gssapi conf file
|
|
|
e8d79a |
- This ensures gssproxy works even when the apache user does not exist
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu May 05 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.0-3
|
|
|
e8d79a |
- Ensure we actually package the config files
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu May 05 2016 Simo Sorce <simo@redhat.com> - 0.5.0-2
|
|
|
e8d79a |
- Fix typo in requires
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed May 04 2016 Robbie Harwood <rharwood@redhat.com> - 0.5.0-1
|
|
|
e8d79a |
- Release new upstream version
|
|
|
e8d79a |
- Bump ini_config version for `ini_config_augment()`
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.4.1-5
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Dec 16 2015 Robbie Harwood <rharwood@redhat.com> - 0.4.1-4
|
|
|
e8d79a |
- Fix issues with 1.14
|
|
|
e8d79a |
- Fix bogus date in changelog (March 30 2015 was a Monday)
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Oct 21 2015 Robbie Harwood <rharwood@redhat.com> - 0.4.1-3
|
|
|
e8d79a |
- Clear message buffer to fix segfault on arm
|
|
|
e8d79a |
- resolves: #1235902
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.1-2
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Mar 30 2015 Simo Sorce <simo@redhat.com> 0.4.1-1
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
- Fix issues with paths in config files
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Mar 24 2015 Simo Sorce <simo@redhat.com> 0.4.0-2
|
|
|
e8d79a |
- Workaround rawhide bug (bz1204646) with krb5-config by switching to
|
|
|
e8d79a |
pkg-config (patch from upstream)
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Mar 24 2015 Simo Sorce <simo@redhat.com> 0.4.0-1
|
|
|
e8d79a |
- New upstream realease
|
|
|
e8d79a |
Added optional support for running GSS-Proxy as an unprivileged user
|
|
|
e8d79a |
Uses new /etc/gss/mech.d configuration directory for gss mechanisms
|
|
|
e8d79a |
Kernel related fixes
|
|
|
e8d79a |
General bug fixing, many minor errors or incorrect behaviours have been corrected
|
|
|
e8d79a |
- drop all patches, they are all included upstream
|
|
|
e8d79a |
|
|
|
e8d79a |
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3.1-4
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.3.1-3
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu May 29 2014 Simo Sorce <simo@redhat.com> 0.3.1-2
|
|
|
e8d79a |
- Rebuild as new ding-libs brings in soname bump
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Mar 13 2014 Guenther Deschner <gdeschner@redhat.com> 0.3.1-1
|
|
|
e8d79a |
- Fix flags handling in gss_init_sec_context()
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/112
|
|
|
e8d79a |
- Fix nfsd startup
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/114
|
|
|
e8d79a |
- Fix potential mutex deadlock
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/120
|
|
|
e8d79a |
- Fix segfault in gssi_inquire_context
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/117
|
|
|
e8d79a |
- resolves: #1061133
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Nov 26 2013 Guenther Deschner <gdeschner@redhat.com> 0.3.1-0
|
|
|
e8d79a |
- New upstream release 0.3.1:
|
|
|
e8d79a |
* Fix use of gssproxy for client initiation
|
|
|
e8d79a |
* Add new enforcing and filtering options for context initialization
|
|
|
e8d79a |
* Fix potential thread safety issues
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/110
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/111
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Nov 19 2013 Guenther Deschner <gdeschner@redhat.com> 0.3.0-3
|
|
|
e8d79a |
- Fix flags handling in gss_init_sec_context()
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/106
|
|
|
e8d79a |
- Fix OID handling in gss_inquire_cred_by_mech()
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/107
|
|
|
e8d79a |
- Fix continuation processing for not yet fully established contexts.
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/108
|
|
|
e8d79a |
- Add flags filtering and flags enforcing.
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/109
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Oct 23 2013 Guenther Deschner <gdeschner@redhat.com> 0.3.0-0
|
|
|
e8d79a |
- New upstream release 0.3.0:
|
|
|
e8d79a |
* Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
|
|
|
e8d79a |
* Add support for new rpc.gssd mode of operation that forks and changes uid
|
|
|
e8d79a |
* Add 2 new options allow_any_uid and cred_usage
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Oct 18 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.3-8
|
|
|
e8d79a |
- Fix default proxymech documentation and fix LOCAL_FIRST implementation
|
|
|
e8d79a |
- resolves: https://fedorahosted.org/gss-proxy/ticket/105
|
|
|
e8d79a |
|
|
|
e8d79a |
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2.3-7
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Jul 24 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.3-6
|
|
|
e8d79a |
- Add better default gssproxy.conf file for nfs client and server usage
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Jun 06 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.3-5
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri May 31 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.2-5
|
|
|
e8d79a |
- Require libverto-tevent to make sure libverto initialization succeeds
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed May 29 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.2-4
|
|
|
e8d79a |
- Modify systemd unit files for nfs-secure services
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed May 22 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.2-3
|
|
|
e8d79a |
- Fix cred_store handling w/o client keytab
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu May 16 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.2-2
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue May 07 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.1-2
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Apr 24 2013 Guenther Deschner <gdeschner@redhat.com> 0.2.0-1
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Apr 01 2013 Simo Sorce <simo@redhat.com> - 0.1.0-0
|
|
|
e8d79a |
- New upstream release
|
|
|
e8d79a |
|
|
|
e8d79a |
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.0.3-8
|
|
|
e8d79a |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
e8d79a |
|
|
|
e8d79a |
* Tue Nov 06 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.3-7
|
|
|
e8d79a |
- Update to 0.0.3
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Aug 22 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.2-6
|
|
|
e8d79a |
- Use new systemd-rpm macros
|
|
|
e8d79a |
- resolves: #850139
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Jul 18 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.2-5
|
|
|
e8d79a |
- More spec file fixes
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jul 16 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.2-4
|
|
|
e8d79a |
- Fix systemd service file
|
|
|
e8d79a |
|
|
|
e8d79a |
* Fri Jul 13 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.2-3
|
|
|
e8d79a |
- Fix various packaging issues
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Jul 02 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.1-2
|
|
|
e8d79a |
- Add systemd packaging
|
|
|
e8d79a |
|
|
|
e8d79a |
* Wed Mar 28 2012 Guenther Deschner <gdeschner@redhat.com> 0.0.1-1
|
|
|
e8d79a |
- Various fixes
|
|
|
e8d79a |
|
|
|
e8d79a |
* Mon Dec 12 2011 Simo Sorce <simo@redhat.com> - 0.0.2-0
|
|
|
e8d79a |
- Automated build of the gssproxy daemon
|