gss-proxy.git - Work on gss-proxy before it lands upstream

	Commit message (Collapse)	Author	Age	Files	Lines
*	man: Describe new flag filtering/enforcing options	Simo Sorce	2013-11-20	1	-0/+58
\| \| \| \| \| \|	Resolves: https://fedorahosted.org/gss-proxy/ticket/109 Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Add impersonation support	Simo Sorce	2013-10-23	1	-0/+8
\| \| \| \| \| \| \| \| \| \| \| \| \|	By setting the impersonate flag to true, the acquisition of credentials will be done using constrained delegation (s4uself + s4u2proxy). To work this needs MIT Kereberos 1.11.4 or later. Previous versions have a bug in the import_cred function that prevents the library from properly importing previously exported delegated credentials. Resolves: https://fedorahosted.org/gss-proxy/ticket/95 Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Add man page entry for cred_usage	Simo Sorce	2013-10-23	1	-0/+9
\| \| \| \|	Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Add man page entry for allow_any_uid	Simo Sorce	2013-10-23	1	-0/+14
\| \| \| \|	Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	docs: Fill in GSSPROXY_BEHAVIOR default setting from configure option.	Günther Deschner	2013-10-18	1	-3/+5
\| \| \| \| \|	Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	docs: autogenerate proxymech manpage.	Günther Deschner	2013-10-18	1	-0/+0
\| \| \| \| \|	Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	Fix documentation to match reality	Simo Sorce	2013-10-18	1	-4/+4
\| \| \| \| \| \|	LOCAL_FIRST is our default Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Add service match using SeLinux Context	Simo Sorce	2013-07-02	1	-0/+15
\| \| \| \| \| \| \| \| \| \| \| \|	Using getpeercon we can know the elinux context of the process talking to gssproxy. Use this information as an optional additional filter to match processes to service definitions. If a selinux_context option with a full user;role;type context is specified into a service section, then the connecting process must also be running under the specified selinux context in order to be allowed to connect. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Fix documentation of "mechs" parameter in gssproxy.conf(5).	Günther Deschner	2013-05-16	1	-3/+3
\| \| \| \| \|	Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	Fix typo in gssproxy.8 manpage	Simo Sorce	2013-04-23	1	-1/+1
\| \| \| \| \|	Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
*	Add new gssproxy-mech.8 manpage to describe the interposer plugin	Günther Deschner	2013-04-23	4	-4/+150
\| \| \| \| \|	Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	Add more documentation in the gssproxy.conf manpage.	Günther Deschner	2013-04-23	1	-0/+176
\| \| \| \| \| \| \|	Document options, sections, substitutions and default values. Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	Add documentation for -d\|--debug in gssproxy manpage.	Günther Deschner	2013-04-23	1	-0/+11
\| \| \| \| \|	Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
*	Allow cleanup of files to make distcheck happy	Simo Sorce	2012-07-10	1	-0/+3
\|
*	First release	Simo Sorce	2012-07-10	1	-126/+126
\| \| \| \| \| \|	Bump up version to 0.0.2 for the first release Temporarily disable man page translations as we have none Use PAX option for tar so it can handle large uids in make dist
*	Intial skeleton gssproxy daemon	Simo Sorce	2012-01-04	3	-0/+321