remctl 3.3 released

ольга крыжановская olga.kryzhanovska at gmail.com
Wed Sep 26 01:08:53 EDT 2012


Russ, here is my RFE:
- Support SCTP.
- If SCTP is supported, allow that more than stdin/stdout/stderr
streams (with fifo semantics only, not full file I/O with seek()) to
be forwarded. This should be easy, as SCTP can embed many streams with
in a single SCTP connection.

Olga

On Wed, Sep 26, 2012 at 6:52 AM, Russ Allbery <rra at stanford.edu> wrote:
> I'm pleased to announce release 3.3 of remctl.
>
> remctl is a client/server application that supports remote execution of
> specific commands, using Kerberos v5 GSS-API for authentication.
> Authorization is controlled by a configuration file and ACL files and can
> be set separately for each command, unlike with rsh.  remctl is like a
> Kerberos-authenticated simple CGI server, or a combination of Kerberos rsh
> and sudo without most of the features and complexity of either.
>
> Changes from previous release:
>
>     Fix a file descriptor leak when checking ACL files.  This would cause
>     long-running remctld processes to eventually run out of available file
>     descriptors.
>
>     Fix some memory leaks when reloading the remctld configuration and
>     several memory leaks when closing or reusing client connections in
>     libremctl.
>
>     Don't create the remctld PID file until the network socket is bound
>     and listening.  This helps init scripts starting the daemon to know
>     when startup is complete and the service is available.
>
>     Remove prototypes from the Perl remctl() function.  With prototypes,
>     the connection and command information could not be provided via an
>     array, since the prototype forces it into scalar context.
>
>     Fix build dependencies for language bindings to work with parallel
>     builds and pass CPPFLAGS down to the language binding build systems.
>
>     Update to rra-c-util 4.6:
>
>     * Drop concat from the util library in favor of asprintf.
>     * Fail on any error in [bx]asprintf and [bx]vasprintf.
>
> You can download it from:
>
>     <http://www.eyrie.org/~eagle/software/remctl/>
>
> This package is maintained using Git; see the instructions on the above
> page to access the Git repository.
>
> Debian packages have been uploaded to Debian experimental.
>
> Please let me know of any problems or feature requests not already listed
> in the TODO file.
>
> --
> Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos



-- 
      ,   _                                    _   ,
     { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
.----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
 `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
      /\/\     Solaris/BSD//C/C++ programmer   /\/\
      `--`                                      `--`


More information about the Kerberos mailing list