remctl 3.6 released
Russ Allbery
rra at stanford.edu
Thu Aug 15 01:21:42 EDT 2013
I'm pleased to announce release 3.6 of remctl.
remctl is a client/server application that supports remote execution of
specific commands, using Kerberos GSS-API for authentication.
Authorization is controlled by a configuration file and ACL files and can
be set separately for each command, unlike with rsh. remctl is like a
Kerberos-authenticated simple CGI server, or a combination of Kerberos rsh
and sudo without most of the features and complexity of either.
Changes from previous release:
If the client specifies a timeout, restart the wait for a nonblocking
connect when interrupted by a signal. This can mean that a connect
can take longer than the timeout if interrupted; hopefully both
timeouts and catching signals are rare enough that this won't pose a
serious issue.
The help output from Net::Remctl::Backend now checks for commands
whose syntax is excessively long and does not let them influence the
formatting of the summary. This keeps commands with a long syntax
from forcing all the summary output into a skinny column against the
right margin and allows proper help output for commands with a syntax
longer than 80 columns.
Fix compilation problems with Kerberos libraries that don't have
gss_krb5_import_cred, including Mac OS X and older Red Hat. Patch
from Ken Dreyer.
Fix problems with PCRE detection on platforms that have the library
but not pcre-config or the pcre.h header file, such as Mac OS X.
Update to rra-c-util 4.9:
* Fix GCC warnings of casts that could increase alignment.
* Add a portable replacement for a missing strndup.
Update to C TAP Harness 2.2:
* bail and sysbail now exit with status 255 to match Test::More.
You can download it from:
<http://www.eyrie.org/~eagle/software/remctl/>
This package is maintained using Git; see the instructions on the above
page to access the Git repository.
Debian packages have been uploaded to Debian unstable.
Please let me know of any problems or feature requests not already listed
in the TODO file.
--
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos
mailing list