gss-proxy.git/proxy/man, branch master

Reload config on SIGHUP

2015-09-15T22:23:36+00:00

For sockets, we will only reinitialize those that have changed.  Additionally,
the old text about SIGHUP behavior was incorrect.

Signed-off-by: Robbie Harwood 
Ticket: https://fedorahosted.org/gss-proxy/ticket/125

Update man pages for symbolic euids and config snippets

2015-09-04T18:27:12+00:00

Signed-off-by: Robbie Harwood 
Reviewed-by: Simo Sorce

Add cmdline option to override default socket

2014-09-15T11:09:21+00:00

This is especially useful for testing, but can be useful for custom
configurations of gss-proxy as well (containers, chroots, etc..)

Signed-off-by: Simo Sorce 
Reviewed-by: Guenther Deschner

Add support for dropping privileges

2014-01-14T15:07:27+00:00

If the 'proxy user' configuation option is set in the [gssproxy] section then
GSS Proxy will drop privileges to the specified after setting up all the
sockets.

Care must be taken to make sure all the resources the daemon need access to
(keytabs, ccache directories, etc..) are accessible as the proxy user.

Implements: https://fedorahosted.org/gss-proxy/ticket/102

Signed-off-by: Simo Sorce 
Reviewed-by: Günther Deschner

man: Describe new flag filtering/enforcing options

2013-11-20T14:26:13+00:00

Resolves: https://fedorahosted.org/gss-proxy/ticket/109

Reviewed-by: Günther Deschner

Add impersonation support

2013-10-23T17:52:13+00:00

By setting the impersonate flag to true, the acquisition of credentials will
be done using constrained delegation (s4uself + s4u2proxy).

To work this needs MIT Kereberos 1.11.4 or later.
Previous versions have a bug in the import_cred function that prevents the
library from properly importing previously exported delegated credentials.

Resolves: https://fedorahosted.org/gss-proxy/ticket/95

Reviewed-by: Günther Deschner

Add man page entry for cred_usage

2013-10-23T13:05:44+00:00

Reviewed-by: Günther Deschner

Add man page entry for allow_any_uid

2013-10-23T13:05:36+00:00

Reviewed-by: Günther Deschner

docs: Fill in GSSPROXY_BEHAVIOR default setting from configure option.

2013-10-18T13:17:52+00:00

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce

docs: autogenerate proxymech manpage.

2013-10-18T13:17:47+00:00

Signed-off-by: Günther Deschner 
Reviewed-by: Simo Sorce