remctl 3.3 released
ольга крыжановская
olga.kryzhanovska at gmail.com
Wed Sep 26 01:08:53 EDT 2012
Russ, here is my RFE:
- Support SCTP.
- If SCTP is supported, allow that more than stdin/stdout/stderr
streams (with fifo semantics only, not full file I/O with seek()) to
be forwarded. This should be easy, as SCTP can embed many streams with
in a single SCTP connection.
Olga
On Wed, Sep 26, 2012 at 6:52 AM, Russ Allbery <rra at stanford.edu> wrote:
> I'm pleased to announce release 3.3 of remctl.
>
> remctl is a client/server application that supports remote execution of
> specific commands, using Kerberos v5 GSS-API for authentication.
> Authorization is controlled by a configuration file and ACL files and can
> be set separately for each command, unlike with rsh. remctl is like a
> Kerberos-authenticated simple CGI server, or a combination of Kerberos rsh
> and sudo without most of the features and complexity of either.
>
> Changes from previous release:
>
> Fix a file descriptor leak when checking ACL files. This would cause
> long-running remctld processes to eventually run out of available file
> descriptors.
>
> Fix some memory leaks when reloading the remctld configuration and
> several memory leaks when closing or reusing client connections in
> libremctl.
>
> Don't create the remctld PID file until the network socket is bound
> and listening. This helps init scripts starting the daemon to know
> when startup is complete and the service is available.
>
> Remove prototypes from the Perl remctl() function. With prototypes,
> the connection and command information could not be provided via an
> array, since the prototype forces it into scalar context.
>
> Fix build dependencies for language bindings to work with parallel
> builds and pass CPPFLAGS down to the language binding build systems.
>
> Update to rra-c-util 4.6:
>
> * Drop concat from the util library in favor of asprintf.
> * Fail on any error in [bx]asprintf and [bx]vasprintf.
>
> You can download it from:
>
> <http://www.eyrie.org/~eagle/software/remctl/>
>
> This package is maintained using Git; see the instructions on the above
> page to access the Git repository.
>
> Debian packages have been uploaded to Debian experimental.
>
> Please let me know of any problems or feature requests not already listed
> in the TODO file.
>
> --
> Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
> ________________________________________________
> Kerberos mailing list Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
--
, _ _ ,
{ \/`o;====- Olga Kryzhanovska -====;o`\/ }
.----'-/`-/ olga.kryzhanovska at gmail.com \-`\-'----.
`'-..-| / http://twitter.com/fleyta \ |-..-'`
/\/\ Solaris/BSD//C/C++ programmer /\/\
`--` `--`
More information about the Kerberos
mailing list