gssproxy broken on fedora
by Rob Verduijn
Hello,
I've been struggling for some days on fedora25 to get gssproxy to work.
After a long time I decided to try this on centos73 to see if I was doing
it wrong.
After a minimal install and joining it to the ipa domain the gssproxy was
working flawless.
After checking for the oompthied time for typos and possible kvno errors in
the keytabs I can say that the configuration that works flawlessly on
centos73 does not work on fedora25.
I first wondered if autofs and gssproxy wouldn't play nice together, but it
seems
I have been fighting this bug on centos73 and fedora24/25:
https://fedorahosted.org/sssd/ticket/3080
Any idea when the fix will be released ?
So after disabling autofs on centos and adding the mount to /etc/fstab the
gssproxy started to work flawlessly.
Also on a side note for nfs-idmapd : Method = sss seems to work a lot
better for me than Method = nsswitch
Any idea how to start to determine why gssproxy is broken on fedora 25 ?
Rob Verduijn
6 years, 7 months
branch master updated (b6d6348 -> bd6b6d1)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master
in repository gssproxy.
from b6d6348 Release version 0.6.1
new bd6b6d1 Fix allocation of cred_store to have two extra slots
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/src/gp_creds.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
Released 0.6.0 & 0.6.1
by Robbie Harwood
Since I forgot to do this for 0.6.0, this includes both changelogs.
== Highlights ==
* 0.6.1 fixes an issue with missing keytab
* Test suite improvements
* Improved tracing and debugging
* s4u2proxy and s4u2self controls
* Misc. leak fixes
== Detailed Changelog ==
Robbie Harwood (25):
* Deploy KDC on LDAP instead of db2
* Package runtests.py in dist tarball
* Add configure option for build hardening
* Fix NULL deref in gssi_release_name()
* Fix NULL deref in gssi_release_cred()
* Fix type of argument to gppint_get_def_creds()
* Appease clang with memset instead of initializer
* Fix two leaks in gp_get_cred_environment()
* Fix leak of localname in gp_export_creds_linux()
* Fix leak of ach in gp_accept_sec_context()
* Remove sysvinit support
* Cause `make check` to behave as expected
* Split out test library functions
* Split out each test into its own file
* Separate out test return checking logic
* Indent subtests
* Lower 30-second timeouts to 10
* Add test for cred store extensions
* Include new tests in `make dist` tarball
* Default to a MEMORY cred_store ccache
* Exercise default ccache behavior in test suite
* Sync package spec file with fedora
* Raise failures in test suite
* Release version 0.6.0
* Release version 0.6.1
Simo Sorce (16):
* Add cred_store support for local calls.
* Make sure to pass on request for delegated creds
* In acquire_cred_from, probe for remote creds
* Always initialize ccache when storing.
* Trace the gssproxy process too.
* Improved debug options
* Fix print_return logic
* Use a local keytab for creds encryption
* Parse cred_store struct earlier
* Make local call static
* Add control to permit/deny protocol transition
* Control access to constrained delegation
* Add more impersonation tests
* Fix impersonation tests to work properly
* Fix make distcheck
* Missing keytab should not be fatal
Source:
https://releases.pagure.org/gssproxy/gssproxy-0.6.1.tar.gz
Sha512sum:
https://releases.pagure.org/gssproxy/gssproxy-0.6.1.tar.gz.sha512sum.txt
6 years, 10 months
tag v0.6.1 created (now b6d6348)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to tag v0.6.1
in repository gssproxy.
at b6d6348 (commit)
No new revisions were added by this update.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
branch master updated (1508917 -> b6d6348)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master
in repository gssproxy.
from 1508917 Missing keytab should not be fatal
new b6d6348 Release version 0.6.1
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/version.m4 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
branch master updated (e45dcdd -> 1508917)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master
in repository gssproxy.
from e45dcdd Release version 0.6.0
new 1508917 Missing keytab should not be fatal
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/src/gp_export.c | 182 ++++++++++++++++++++++++++-----------------------
proxy/tests/testlib.py | 17 ++++-
2 files changed, 114 insertions(+), 85 deletions(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
tag v0.6.0 created (now e45dcdd)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to tag v0.6.0
in repository gssproxy.
at e45dcdd (commit)
No new revisions were added by this update.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
branch master updated (344cb6f -> e45dcdd)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master
in repository gssproxy.
from 344cb6f Fix impersonation tests to work properly
new b84ca49 Fix make distcheck
new e45dcdd Release version 0.6.0
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/Makefile.am | 8 +++++++-
proxy/tests/Makefile.am | 11 ++++++++++-
proxy/tests/runtests.py | 2 +-
proxy/version.m4 | 2 +-
4 files changed, 19 insertions(+), 4 deletions(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
branch master updated (6e44a0d -> 344cb6f)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
rharwood pushed a change to branch master
in repository gssproxy.
from 6e44a0d Raise failures in test suite
new 344cb6f Fix impersonation tests to work properly
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/tests/t_impersonate.c | 36 +++++++++++++++++++++---------------
proxy/tests/t_impersonate.py | 15 ++++++---------
proxy/tests/testlib.py | 1 +
3 files changed, 28 insertions(+), 24 deletions(-)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months
branch master updated (c652938 -> 6e44a0d)
by git repository hosting
This is an automated email from the git hooks/post-receive script.
simo pushed a change to branch master
in repository gssproxy.
from c652938 Sync package spec file with fedora
new 6e44a0d Raise failures in test suite
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
proxy/tests/runtests.py | 14 +++++++++++---
proxy/tests/t_acquire.py | 1 +
proxy/tests/t_basic.py | 5 +++++
proxy/tests/t_cred_store.py | 1 +
proxy/tests/t_impersonate.py | 29 +++++++++++++++++++++--------
proxy/tests/t_interpose.py | 1 +
proxy/tests/t_multi_key.py | 10 ++++++++--
proxy/tests/t_reloading.py | 19 +++++++++++++++----
8 files changed, 63 insertions(+), 17 deletions(-)
mode change 100644 => 100755 proxy/tests/t_acquire.py
mode change 100644 => 100755 proxy/tests/t_cred_store.py
mode change 100644 => 100755 proxy/tests/t_interpose.py
mode change 100644 => 100755 proxy/tests/t_multi_key.py
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
6 years, 10 months