Changelog for
gssproxy-0.7.0-21.el7.x86_64.rpm :
Fri Jun 8 14:00:00 2018 Robbie Harwood
0.7.0-21
- Always choose highest requested debug level
- Resolves: #1505741
Fri Apr 27 14:00:00 2018 Robbie Harwood 0.7.0-20
- Clean up debug man page + behavior
- Resolves: #1554249
Fri Apr 27 14:00:00 2018 Robbie Harwood 0.7.0-19
- Always use the encype we selected
- Resolves: #1549684
Fri Apr 27 14:00:00 2018 Robbie Harwood 0.7.0-18
- Don\'t leak mech_type when CONTINUE_NEEDED from init_sec_context
- Resolves: #1553819
Wed Dec 13 13:00:00 2017 Robbie Harwood 0.7.0-17
- Conditionally reload kernel interface on SIGHUP
- Resolves: #1507817
Tue Dec 12 13:00:00 2017 Robbie Harwood 0.7.0-16
- Backport epoll() logic
- Resolves: #1507817
Wed Dec 6 13:00:00 2017 Robbie Harwood 0.7.0-15
- Properly initialize ccaches before storing into them
- Resolves: #1488629
Fri Dec 1 13:00:00 2017 Robbie Harwood 0.7.0-14
- Properly locate credentials in collection caches in mechglue
- Resolves: #1488629
Tue Oct 31 13:00:00 2017 Robbie Harwood 0.7.0-13
- Handle outdated encrypted ccaches
- Resolves: #1488629
Tue Oct 31 13:00:00 2017 Robbie Harwood 0.7.0-12
- Handle outdated encrypted ccaches
- Resolves: #1488629
Mon Oct 30 13:00:00 2017 Robbie Harwood 0.7.0-11
- Fix error message handling in gp_config_from_dir()
- Resolves: #1458913
Fri Oct 27 14:00:00 2017 Robbie Harwood 0.7.0-10
- Fix concurrency issue around server socket handling
- Resolves: #1462974
Tue Oct 17 14:00:00 2017 Robbie Harwood 0.7.0-9
- Log useful warning and merge when config file has duplicate sections
- Resolves: #1458913
Mon Oct 2 14:00:00 2017 Robbie Harwood 0.7.0-8
- Add Conflicts: line for old selinux-policy
- Resolves: #1458850
Thu Sep 21 14:00:00 2017 Robbie Harwood 0.7.0-7
- Backport NFS-related gssproxy.service changes
- Resolves: #1326440
Mon Sep 11 14:00:00 2017 Robbie Harwood 0.7.0-6
- Fix segfault when no config files are present
- Resolves: #1451255
Thu Aug 17 14:00:00 2017 Robbie Harwood 0.7.0-5
- Backport hardening improvements
- Resolves: #1462974
Wed May 31 14:00:00 2017 Robbie Harwood 0.7.0-4
- Make proc file failure loud but nonfatal
- Resolves: #1449238
Tue Mar 28 14:00:00 2017 Robbie Harwood 0.7.0-3
- Stop shipping NFS server snippet (nfs-utils takes it instead)
- Resolves: #1379836
Tue Mar 14 13:00:00 2017 Robbie Harwood 0.7.0-2
- Fix credential handling with mod_auth_gssapi that we broke
- Resolves: #1379836
Fri Mar 10 13:00:00 2017 Robbie Harwood 0.7.0-1
- New upstream version - 0.7.0
- Resolves: #1379836
Tue Feb 28 13:00:00 2017 Robbie Harwood 0.6.2-4
- Include fixes for NULL-termination
- Resolves: #1379836
Thu Feb 23 13:00:00 2017 Robbie Harwood 0.6.2-3
- Document debug_level option
- Resolves: #1379836
Tue Feb 21 13:00:00 2017 Robbie Harwood 0.6.2-2
- Enable running the test suite
- Resolves: #1379836
Thu Feb 16 13:00:00 2017 Robbie Harwood 0.6.2-1
- Rebase to latest version since we have krb5-1.15
- Resolves: #1379836
- Resolves: #1344518
- Resolves: #1366782
- Resolves: #1379005
- Resolves: #1379482
- Resolves: #1379616
- Resolves: #1380490
- Resolves: #1378600
- Resolves: #1285012
- Resolves: #1333813
Tue Sep 6 14:00:00 2016 Robbie Harwood 0.4.1-13
- Third try is the charm
- Resolves: #1092515
Tue Sep 6 14:00:00 2016 Robbie Harwood 0.4.1-12
- Restore _FORTIFY_SOURCE behavior
- Resolves: #1092515
Tue Sep 6 14:00:00 2016 Robbie Harwood 0.4.1-11
- Actually harden build with PIE and RELRO
- Resolves: #1092515
Fri Jun 10 14:00:00 2016 Robbie Harwood 0.4.1-10
- Fix behavior with multiple keys in a keytab
- Resolves: #1285012
Tue Jun 7 14:00:00 2016 Robbie Harwood 0.4.1-9
- Re-open socket in mechglue if client forks/changes privilege
- Resolves: #1340259
Wed Mar 30 14:00:00 2016 Robbie Harwood 0.4.1-8
- Make GSS-Proxy work with krb5-1.14
- resolves: #1292487
Tue Sep 29 14:00:00 2015 Simo Sorce 0.4.1-7
- Fix loop cause by imporper EINTR handling
- resolves: #1266564
Mon Aug 24 14:00:00 2015 Roland Mainz 0.4.1-6
- Remove extra whitespaces from #1208640/#1194299 patches
- spec file cleanup
related: #1208640 #1194299
Wed Aug 19 14:00:00 2015 Robbie Harwood 0.4.1-5
- Carry service/HTTP default conf section
- resolves: #1208640
Wed Aug 19 14:00:00 2015 Robbie Harwood 0.4.1-4
- Set default rcache location patch
- resolves: #1194299
Mon Jul 13 14:00:00 2015 Roland Mainz 0.4.1-3
- Bug #1213852 (\"[gssproxy] NFS clients cannot mount with
sec=krb5 if the NFS server is running gssproxy\") was
fixed by the rebase to 0.4.1 in bug (\"[RFE] Rebase
gssproxy to the latest to match expectations of other
projects\").
Note that the same bug was also fixed in the kernel with
\"9507271 svcrpc: fix potential GSSX_ACCEPT_SEC_CONTEXT
decoding failures\" (see
https://bugzilla.redhat.com/show_bug.cgi?id=1213852#c2
and RH Bug #1120860 (\"[NFS] NFS clients cannot mount with
sec=krb5 if the NFS server is running gssproxy\")) to
handle various corner cases not covered by gssproxy,
for example individual krb5 ticket fields exceeding
the kernel\'s buffer size.
Thu Jul 9 14:00:00 2015 Roland Mainz 0.4.1-2
- The following bugs have been fixed by the rebase to 0.4.1
in bug (\"[RFE] Rebase gssproxy to the latest to match
expectations of other projects\"):
- Bug #1196371 (\"rpc.gssd segfaults in gssproxy (proxymech.so)\")
Upstream tickets { #137, #144 }
- Bug #1053730 (\"KrbLocalUserMapping does not work with
Apache & GSS-Proxy\")
Upstream ticket #101
- Bug #1168962 (\"gssproxy is not working with httpd on ppc64 and s390x\")
Upstream ticket #146
Thu Jul 9 14:00:00 2015 Roland Mainz 0.4.1-1
- Add patch to remove -fno-strict-aliasing (gssproxy ticket #140,
a dependicy for the fix for bug #1092515 (see below))
- Add patch to fix bug #1092515 (\"gssproxy - PIE and RELRO check\")
Fri Jun 5 14:00:00 2015 Roland Mainz 0.4.1-0
- Rebase gssproxy to 0.4.1 per bug #1132389 (\"[RFE] Rebase
gssproxy to the latest to match expectations of other
projects\").
Fri Jan 23 13:00:00 2015 Simo Sorce 0.3.0-10
- Fix crash bug affecting updated rpc.gssd
- resolves: #1184531
Wed Mar 12 13:00:00 2014 Guenther Deschner 0.3.0-9
- Fix potential mutex deadlock
- resolves: #1075268
Fri Jan 24 13:00:00 2014 Daniel Mach - 0.3.0-8
- Mass rebuild 2014-01-24
Thu Jan 16 13:00:00 2014 Guenther Deschner 0.3.0-7
- Fix nfsd startup
- resolves: https://fedorahosted.org/gss-proxy/ticket/114
- resolves: #1053710
Fri Dec 27 13:00:00 2013 Daniel Mach - 0.3.0-6
- Mass rebuild 2013-12-27
Tue Dec 17 13:00:00 2013 Guenther Deschner 0.3.0-5
- Fix flags handling.
- resolves: https://fedorahosted.org/gss-proxy/ticket/112
- related: #1031710
Wed Nov 27 13:00:00 2013 Guenther Deschner 0.3.0-4
- Use secure_getenv
- resolves: https://fedorahosted.org/gss-proxy/ticket/110
- resolves: #1032684
- Use strerror_r instead of strerror
- resolves: https://fedorahosted.org/gss-proxy/ticket/111
- resolves: #1033350
Tue Nov 19 13:00:00 2013 Guenther Deschner 0.3.0-3
- Fix flags handling in gss_init_sec_context()
- resolves: https://fedorahosted.org/gss-proxy/ticket/106
- resolves: #1031713
- Fix OID handling in gss_inquire_cred_by_mech()
- resolves: https://fedorahosted.org/gss-proxy/ticket/107
- resolves: #1031712
- Fix continuation processing for not yet fully established contexts.
- resolves: https://fedorahosted.org/gss-proxy/ticket/108
- resolves: #1031711
- Add flags filtering and flags enforcing.
- resolves: https://fedorahosted.org/gss-proxy/ticket/109
- resolves: #1031710
Wed Oct 23 14:00:00 2013 Guenther Deschner 0.3.0-0
- New upstream release 0.3.0:
* Add support for impersonation (depends on s4u2self/s4u2proxy on the KDC)
* Add support for new rpc.gssd mode of operation that forks and changes uid
* Add 2 new options allow_any_uid and cred_usage
Fri Oct 18 14:00:00 2013 Guenther Deschner 0.2.3-8
- Fix default proxymech documentation and fix LOCAL_FIRST implementation
- resolves: https://fedorahosted.org/gss-proxy/ticket/105
Wed Jul 24 14:00:00 2013 Guenther Deschner 0.2.3-6
- Add better default gssproxy.conf file for nfs client and server usage
Thu Jun 6 14:00:00 2013 Guenther Deschner 0.2.3-5
- New upstream release
Fri May 31 14:00:00 2013 Guenther Deschner 0.2.2-5
- Require libverto-tevent to make sure libverto initialization succeeds
Wed May 29 14:00:00 2013 Guenther Deschner 0.2.2-4
- Modify systemd unit files for nfs-secure services
Wed May 22 14:00:00 2013 Guenther Deschner 0.2.2-3
- Fix cred_store handling w/o client keytab
Thu May 16 14:00:00 2013 Guenther Deschner 0.2.2-2
- New upstream release
Tue May 7 14:00:00 2013 Guenther Deschner 0.2.1-2
- New upstream release
Wed Apr 24 14:00:00 2013 Guenther Deschner 0.2.0-1
- New upstream release
Mon Apr 1 14:00:00 2013 Simo Sorce - 0.1.0-0
- New upstream release
Thu Feb 14 13:00:00 2013 Fedora Release Engineering - 0.0.3-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
Tue Nov 6 13:00:00 2012 Guenther Deschner 0.0.3-7
- Update to 0.0.3
Wed Aug 22 14:00:00 2012 Guenther Deschner 0.0.2-6
- Use new systemd-rpm macros
- resolves: #850139
Wed Jul 18 14:00:00 2012 Guenther Deschner 0.0.2-5
- More spec file fixes
Mon Jul 16 14:00:00 2012 Guenther Deschner 0.0.2-4
- Fix systemd service file
Fri Jul 13 14:00:00 2012 Guenther Deschner 0.0.2-3
- Fix various packaging issues
Mon Jul 2 14:00:00 2012 Guenther Deschner 0.0.1-2
- Add systemd packaging
Wed Mar 28 14:00:00 2012 Guenther Deschner 0.0.1-1
- Various fixes
Mon Dec 12 13:00:00 2011 Simo Sorce - 0.0.2-0
- Automated build of the gssproxy daemon
