[PATCH] Coverity fixes
by Simo Sorce
We finally reinstated internal Coverity runs against Gss-proxy here @
Red Hat and we got 3/4 errors found.
All minor stuff that will probably never be triggered, but anyways ...
attached.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
10 years, 12 months
Implement ticket #96
by Simo Sorce
This patch implements support to filter clients by selinux context too.
Can be easily tested with nfs server and client.
Add selinux_context = system_u:system_r:kernel_t to the
service/nfs-server section and selinux_context =
system_u:system_r:gssd_t to the service/nfs-client section.
If rpc.gssd is started manually instead of via init scripts then it will
be necessary to set selinux_context = unconfined_u:system_r:unconfined_t
as daemons started manually by root do not go through transition and
simply inherit root's context.
Not specifying and selinux_context will mean the context is not taken in
account to fitler clients, same happens if selinux support is not
available or completely disabled.
Simo.
Patch also available here:
http://fedorapeople.org/cgit/simo/public_git/gss-proxy.git/commit/?id=55e...
--
Simo Sorce * Red Hat, Inc * New York
11 years
Patch to adress ticket #94
by Simo Sorce
This just changes the configuration file.
I think this is the best way as we do realy want to be able to have completely different options for the client and the serve anyways.
Simo.
--
Simo Sorce * Red Hat, Inc. * New York
11 years
Adding keytabs to GSSProxy
by William Brown
Hi,
GSS proxy looks like a great new feature in F19.
However, Everything I am reading talks about the API benefits of this,
and how to integrate this with applications. But the most important task
of actually providing the keytabs to GSS proxy seems to be undocumented.
How do you add an exported keytab into GSS proxy?
(I am off list, so please make sure to CC me on a reply)
--
Sincerely,
William Brown
Research & Teaching, Technology Services
The University of Adelaide, AUSTRALIA 5005
CRICOS Provider Number 00123M
-----------------------------------------------------------------------------
IMPORTANT: This message may contain confidential or legally privileged
information. If you think it was sent to you by mistake, please delete
all
copies and advise the sender. For the purposes of the SPAM Act 2003,
this
email is authorised by The University of Adelaide.
pgp.mit.edu
http://pgp.mit.edu:11371/pks/lookup?op=vindex&search=0x3C0AC6DAB2F928A2
11 years
[Announce] gssproxy v0.2.3 available
by Günther Deschner
====================
Release Announcement
====================
Today, gssproxy 0.2.3 has been released.
Major enhancements in gssproxy 0.2.3 include:
o Various enhancements for better nfsv4 integration
o Fix segfault in cred_store configuration handling
o Packaging fixes to improve stability
Changes since 0.2.2:
--------------------
o Günther Deschner (10):
* Make sure dlopen.sh is part of the tarball
* Fix realloc size in gp_get_cred_environment().
* Add "make test_proxymech" to provided specfile.
* systemd: Make sure we start before nfs-secure services.
* systemd: add require for the nfs kernel modules.
* gssproxy: report an error message on event loop failure.
* Require libverto-tevent to make sure libverto initialization
succeeds
* Use verbose ding-libs error reporting when config parsing failed.
* Add Requires: libini_config >= 1.0.0.1 to the rpm spec file.
* Bump version for 0.2.3 release.
o Simo Sorce (1):
* Fix nfsd socket
=======================================
Reporting bugs & Development Discussion
=======================================
Please discuss this release on the gssproxy mailing list or by
joining the #gssproxy IRC channel on irc.freenode.net.
All bugs should be reported in the gssproxy trac instance:
https://fedorahosted.org/gss-proxy/report
================
Download Details
================
The source code can be downloaded from:
https://fedorahosted.org/gss-proxy/wiki/Releases
The release notes are available online at:
https://fedorahosted.org/gss-proxy/wiki/Releases/v0.2.3
--
Günther Deschner GPG-ID: 8EE11688
Red Hat gdeschner(a)redhat.com
Samba Team gd(a)samba.org
11 years
