gss-proxy.git, branch master-erroroutput

gssproxy: Call gp_logging_init() before load_config().

2014-01-14T13:33:34+00:00

This makes sure openlog() is called before any syslog() call.

Signed-off-by: Günther Deschner

Use GPERROR when config parsing fails.

2014-01-14T13:33:34+00:00

This makes it more likely configuration parsing failures are detected.

Signed-off-by: Günther Deschner

Let GPERROR also print warning on stderr, not only in syslog.

2014-01-14T13:31:56+00:00

This make it easier to identify issues when run interactively.

Signed-off-by: Günther Deschner

Make it easier to enable mechglue plugin debugging.

2014-01-14T13:31:56+00:00

Instead of recompiling, one can set the "GSSI_DEBUG" environment variable at
runtime.

Signed-off-by: Günther Deschner

Fix config token parsing.

2013-12-09T15:22:52+00:00

Resolves: https://fedorahosted.org/gss-proxy/ticket/112

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

Change version to 0.3.1

2013-11-26T12:22:52+00:00

Signed-off-by: Günther Deschner

Use gp_strerror() everywhere instead of strerror()

2013-11-22T13:41:24+00:00

https://fedorahosted.org/gss-proxy/ticket/111

Reviewed-by: Günther Deschner

Add Thread-safe implementation of strerror()

2013-11-22T13:40:42+00:00

Unfortunately strerror() is not thread safe so we have to juggle with
strerror_r() which is a can of worms as 2 incompatible implementations
are available depending on what is defined at compile time.

Try to do something sane.

https://fedorahosted.org/gss-proxy/ticket/111

Reviewed-by: Günther Deschner

Use secure_getenv in client and mechglue module

2013-11-21T12:48:25+00:00

proxymehc.so may be used in setuid binaries so follow best security
practices and use secure_getenv() if available.
Fallback to poorman emulation when secure_getenv() is not available.

Resolves: https://fedorahosted.org/gss-proxy/ticket/110

Reviewed-by: Günther Deschner

creds: Allow admins to define only client creds

2013-11-20T14:50:12+00:00

When a service is configured with cred_usage = initiate it is
ok to allow only client credentials to be defined.

Reviewed-by: Günther Deschner