summaryrefslogtreecommitdiffstats
path: root/proxy/man
Commit message (Collapse)AuthorAgeFilesLines
* Update man pages for symbolic euids and config snippetsRobbie Harwood (frozencemetery)2015-09-042-7/+40
| | | | | Signed-off-by: Robbie Harwood <rharwood@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add cmdline option to override default socketSimo Sorce2014-09-151-0/+11
| | | | | | | | This is especially useful for testing, but can be useful for custom configurations of gss-proxy as well (containers, chroots, etc..) Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Guenther Deschner <gdeschner@redhat.com>
* Add support for dropping privilegesSimo Sorce2014-01-141-0/+9
| | | | | | | | | | | | | | If the 'proxy user' configuation option is set in the [gssproxy] section then GSS Proxy will drop privileges to the specified after setting up all the sockets. Care must be taken to make sure all the resources the daemon need access to (keytabs, ccache directories, etc..) are accessible as the proxy user. Implements: https://fedorahosted.org/gss-proxy/ticket/102 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* man: Describe new flag filtering/enforcing optionsSimo Sorce2013-11-201-0/+58
| | | | | | Resolves: https://fedorahosted.org/gss-proxy/ticket/109 Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add impersonation supportSimo Sorce2013-10-231-0/+8
| | | | | | | | | | | | | By setting the impersonate flag to true, the acquisition of credentials will be done using constrained delegation (s4uself + s4u2proxy). To work this needs MIT Kereberos 1.11.4 or later. Previous versions have a bug in the import_cred function that prevents the library from properly importing previously exported delegated credentials. Resolves: https://fedorahosted.org/gss-proxy/ticket/95 Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add man page entry for cred_usageSimo Sorce2013-10-231-0/+9
| | | | Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add man page entry for allow_any_uidSimo Sorce2013-10-231-0/+14
| | | | Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* docs: Fill in GSSPROXY_BEHAVIOR default setting from configure option.Günther Deschner2013-10-181-3/+5
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* docs: autogenerate proxymech manpage.Günther Deschner2013-10-181-0/+0
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix documentation to match realitySimo Sorce2013-10-181-4/+4
| | | | | | LOCAL_FIRST is our default Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add service match using SeLinux ContextSimo Sorce2013-07-021-0/+15
| | | | | | | | | | | | Using getpeercon we can know the elinux context of the process talking to gssproxy. Use this information as an optional additional filter to match processes to service definitions. If a selinux_context option with a full user;role;type context is specified into a service section, then the connecting process must also be running under the specified selinux context in order to be allowed to connect. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Fix documentation of "mechs" parameter in gssproxy.conf(5).Günther Deschner2013-05-161-3/+3
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix typo in gssproxy.8 manpageSimo Sorce2013-04-231-1/+1
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Günther Deschner <gdeschner@redhat.com>
* Add new gssproxy-mech.8 manpage to describe the interposer pluginGünther Deschner2013-04-234-4/+150
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add more documentation in the gssproxy.conf manpage.Günther Deschner2013-04-231-0/+176
| | | | | | | Document options, sections, substitutions and default values. Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Add documentation for -d|--debug in gssproxy manpage.Günther Deschner2013-04-231-0/+11
| | | | | Signed-off-by: Günther Deschner <gdeschner@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Allow cleanup of files to make distcheck happySimo Sorce2012-07-101-0/+3
|
* First releaseSimo Sorce2012-07-101-126/+126
| | | | | | Bump up version to 0.0.2 for the first release Temporarily disable man page translations as we have none Use PAX option for tar so it can handle large uids in make dist
* Intial skeleton gssproxy daemonSimo Sorce2012-01-043-0/+321
generated by cgit (git 2.34.1) at 2025-09-25 21:35:44 +0000