== Highlights ==
* Added support for config directory and config snippets and reload on SIGHUP
* Improved debug logging/tracing
* Actually implemented the docuemnted krb5_principal option
* Numerous bugfixes
== Detailed Changelog ==
Lukas Slebodnik (1):
* BUILD: Include gp_rpc_debug.h into tarball
Robbie Harwood (24):
* Extract generalized selinux context comparison function
* Ensure ini_config >= 1.2.0 for `ini_config_augment()`
* Fix formatting on noncompliant copyright lines
* Allow configdir and configfile to be specified together
* getpwman(3) can return NULL without setting errno
* Reload config on SIGHUP
* Use pkg-config to find libgssapi-krb5.so*
* Correct handling of EINTR on read()/write()
* Port test suite to python3
* Add tests for reloading on SIGHUP
* Log useful message on kernel interface failure
* Clear message structure before decoding into it
* Fix potential deadlock on socket grab
* Fix possible explicit NULL deref in gpm_accept_sec_context
* Fix several leaks
* Set C standard used to gnu99
* Fix for gss_inquire_attrs_for_mech accepting NULLs
* Specify KRB5RCACHEDIR in systemd unit file
* Allow symbolic euids in conf files
* Remove one layer of abstraction over dinglibs
* Add support for config directories
* Update man pages for symbolic euids and config snippets
* Error on `allow_any_uid` issues
* Add HTTP service and move NFS into its own conf file
Roland Mainz (3):
* Turn on strict aliasing rules
* Remove support for iniparse library
* Update BUILD.txt
Simo Sorce (23):
* Fix make clean
* Fix const warning in gp_creds.c
* Fix const warning that can lead to issues
* Improve code in gp_export_gssx_cred()
* Add options to specify a debug level
* Add higher level debugging for all rpc calls
* Add helper to find options in rpc messages
* Add gss_acquire_cred_impersonate_name support
* Add helpers to store and retrieve encrypted creds
* Fix acquiring default credentials
* Add acquire test and generally improve tests
* Use t_utils.h in all tests.
* Appropriately resolve const warnings in tests.
* Add impersonate test
* Better naming for tests log files
* Always use valgrind for gssproxy tests
* Since krb5 1.14 inquire_context may return no name
* Fix crash bug when reconfiguring service
* Fix use after free bug
* Implement the krb5_principal option
* Add test to verify krb5_principal works
* Allow to specify a client name for init tests
* Release version 0.5.0
Source:
https://fedorahosted.org/released/gss-proxy/gssproxy-0.5.0.tar.gz
Sha512sum:
https://fedorahosted.org/released/gss-proxy/gssproxy-0.5.0.tar.gz.sha512sum
--
Simo Sorce * Red Hat, Inc * New York