Commit Graph

121 Commits

Author SHA1 Message Date
Robbie Harwood
bb8257ecb7 Backport two security fixes 2017-09-12 17:38:54 +00:00
Robbie Harwood
21c2f037de Non-blocking IO + Extended request debug logging 2017-08-22 19:27:03 +00:00
Ville Skyttä
b9a828d680 Own the %{_libdir}/gssproxy dir, mark COPYING as %license
https://bugzilla.redhat.com/show_bug.cgi?id=1483291
2017-08-21 11:14:00 -04:00
Robbie Harwood
bcc5c70964 Add client ID to debug messages
Move packaging to autosetup
2017-07-31 22:18:04 +00:00
Fedora Release Engineering
7b3524562f - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-26 12:09:30 +00:00
Robbie Harwood
89b45c13cb Fix potential explicit NULL deref of program name 2017-06-19 15:40:50 +00:00
Robbie Harwood
35e3b9ed5e Make proc failure loud but nonfatal 2017-05-25 18:57:36 +00:00
Robbie Harwood
c1f4665d37 Remove (buggy?) logic around NFS snippet. 2017-05-24 17:57:55 +00:00
Robbie Harwood
fbd063543a Remove NFS server stanza if nfs-utils not present 2017-05-17 20:25:54 +00:00
Robbie Harwood
635aea68a9 Segfault, gcc7 2017-05-16 22:31:51 +00:00
Robbie Harwood
bbe27e9eb0 Update systemd unit file (nfs removal, reload capability) 2017-05-01 17:00:42 +00:00
Robbie Harwood
4cd849eea2 Backport fix for double unlock 2017-04-03 16:09:14 +00:00
Robbie Harwood
8b1deb4def Drop NFS server snippet (removes dependency on nfs kernel component) 2017-03-28 20:35:05 +00:00
Robbie Harwood
9f866b6ca3 Fix credential renewal and impersonator checking for m_a_g 2017-03-14 19:00:26 +00:00
Robbie Harwood
d3c2500ea7 New upstream release - 0.7.0 2017-03-07 22:35:16 +00:00
Robbie Harwood
07be2820f2 Actually apply the patches I just added
Also include a Coverity fix.
2017-03-06 16:07:15 +00:00
Robbie Harwood
839072e3a8 Include other non-null fix and various things from master 2017-02-28 19:08:33 +00:00
Robbie Harwood
239d137aa0 Fix incorrect use of non-null string in xdr
Also move version number to better reflect what is inside
2017-02-23 18:20:48 +00:00
Fedora Release Engineering
b9ce568b93 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-10 12:18:08 +00:00
Robbie Harwood
76723599fa Fix allocation issue of cred store
Resolves: #1415400
2017-01-23 22:06:30 +00:00
Robbie Harwood
76f171814e New upstream release v0.6.1
Resolves: #1415090
2017-01-20 22:29:49 +00:00
Robbie Harwood
5068d17a09 New upstream release v0.6.0 2017-01-18 23:53:00 +00:00
Robbie Harwood
d59e9cc267 Adjust libverto dependency to not use a specific backend
Resolves: #1379812
2016-09-27 17:55:14 +00:00
Robbie Harwood
5f6a56fa78 Own /var/lib/gssproxy/rcache 2016-06-14 18:50:23 +00:00
Robbie Harwood
c6a65ffeab Update to upstream release v0.5.1
Resolves: #1345871
2016-06-13 19:17:36 +00:00
Robbie Harwood
ea3404c5c1 Acquire new socket for fork/permission drops on clients 2016-06-07 16:00:59 +00:00
Robbie Harwood
b03a1f0171 Do not package mod_auth_gssapi conf file
This ensures gssproxy works even when the apache user does not exist.
2016-05-09 21:13:27 +00:00
Robbie Harwood
1f3014ccca Ensure we actually package the config files 2016-05-05 18:17:16 +00:00
Simo Sorce
0b9f8fa9ee Fix typo in requires 2016-05-05 09:52:49 -04:00
Robbie Harwood
62fdf2ffbb Release new upstream version 0.5.0
As part of this, bump ini_config version for `ini_config_augment()`
2016-05-04 20:09:03 +00:00
Dennis Gilmore
1f706cd54a - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-03 23:24:43 +00:00
Robbie Harwood
b179495c47 Fix issues with 1.14 2015-12-17 02:03:24 +00:00
Robbie Harwood (frozencemetery)
1a42aaa8ce Clear message buffer to fix segfault on arm
resolves: #1235902
2015-10-21 16:56:28 +00:00
Dennis Gilmore
ec4f0f19ba - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-17 09:54:38 +00:00
Simo Sorce
d25a1f7862 New upstream release
- Fix issues with paths in config files
2015-03-30 09:41:41 -04:00
Simo Sorce
da4e9f2357 Workaround rawhide bug (bz1204646) with krb5-config by switching to
pkg-config (patch from upstream)
2015-03-24 20:01:03 -04:00
Simo Sorce
700ea2373e Fiux spec file's missing %build section 2015-03-24 16:10:09 -04:00
Simo Sorce
318733740f New upstream realease
Added optional support for running GSS-Proxy as an unprivileged user
  Uses new /etc/gss/mech.d configuration directory for gss mechanisms
  Kernel related fixes
  General bug fixing, many minor errors or incorrect behaviours have been corrected
- drop all patches, they are all included upstream
2015-03-24 14:52:09 -04:00
Peter Robinson
fc33969124 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-16 19:15:41 +00:00
Dennis Gilmore
5cf8f3a77b - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-07 13:55:11 -05:00
Simo Sorce
59017289ba Rebuild as new ding-libs brings in soname bump 2014-05-29 10:39:59 -04:00
Günther Deschner
5346047bd4 Fix flags handling in gss_init_sec_context()
resolves: https://fedorahosted.org/gss-proxy/ticket/112
Fix nfsd startup
resolves: https://fedorahosted.org/gss-proxy/ticket/114
Fix potential mutex deadlock
resolves: https://fedorahosted.org/gss-proxy/ticket/120
Fix segfault in gssi_inquire_context
resolves: https://fedorahosted.org/gss-proxy/ticket/117
resolves: #1061133
2014-03-13 16:55:24 +01:00
Günther Deschner
a3731ae64d New upstream release 0.3.1:
* Fix use of gssproxy for client initiation
  * Add new enforcing and filtering options for context initialization
  * Fix potential thread safety issues
- resolves: https://fedorahosted.org/gss-proxy/ticket/110
- resolves: https://fedorahosted.org/gss-proxy/ticket/111
2013-11-26 15:06:48 +01:00
Günther Deschner
b4f5223d51 Add flags filtering and flags enforcing.
- resolves: https://fedorahosted.org/gss-proxy/ticket/109
2013-11-20 15:33:27 +01:00
Günther Deschner
e2e2fe48c7 Fix continuation processing for not yet fully established contexts.
- resolves: https://fedorahosted.org/gss-proxy/ticket/108
2013-11-19 14:53:13 +01:00
Günther Deschner
349bd3c1c3 Fix flags handling in gss_init_sec_context()
- resolves: https://fedorahosted.org/gss-proxy/ticket/106
Fix OID handling in gss_inquire_cred_by_mech()
- resolves: https://fedorahosted.org/gss-proxy/ticket/107
2013-11-19 14:18:28 +01:00
Simo Sorce
ecfa34db00 Fix release number 2013-10-24 12:09:47 -04:00
Günther Deschner
eaf4f7e231 Fix date in changelog. 2013-10-23 20:47:52 +02:00
Günther Deschner
80253e6762 Wed Oct 24 2013 Guenther Deschner <gdeschner@redhat.com> 0.3.0-8
New upstream release 0.3.0:
 * Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
 * Add support for new rpc.gssd mode of operation that forks and changes uid
 * Add 2 new options allow_any_uid and cred_usage
2013-10-23 20:45:19 +02:00
Günther Deschner
736164870b Fix default proxymech documentation and fix LOCAL_FIRST implementation
resolves: https://fedorahosted.org/gss-proxy/ticket/105
2013-10-18 14:42:12 +02:00