summaryrefslogtreecommitdiffstats
path: root/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
* Re-Release of 1.2.4Steve Dickson2011-06-301-0/+11
| | | | Signed-off-by: Steve Dickson <steved@redhat.com>
* Updated ChangeLog with all the commits of the current release.Steve Dickson2011-06-291-1481/+934
| | | | Signed-off-by: Steve Dickson <steved@redhat.com>
* Release 1.2.3Steve Dickson2010-09-281-3005/+1744
| | | | Signed-off-by: Steve Dickson <steved@redhat.com>
* Fix -n option to mountdSteinar H. Gunderson2006-10-241-0/+10
| | | | | | | The getopt_long() option string in mountd was having a spurious colon after the 'n', leading to the short form of --no-tcp not being usable (expecting a parameter, contrary to the long form and the documentation). Fix.
* Document sensitive gidsSteinar H. Gunderson2006-10-241-0/+11
| | | | | | | | The exports(8) man page already mentions that some non-root users, such as bin, might be just as sensitive as root, and that root_squash thus might not be as effective as one could hope for. Update the documentation to also mention that this could be the case for non-root groups, such as staff.
* Set version to 1.0.10Neil Brown2006-08-071-0/+9
| | | | | | | Note: 1.0.10 should be used in preference to 1.0.9 especially with kernels 2.6.18 and later otherwise 'rpc.nfsd N' won't work to change the number of threads after nfsd has been started.
* "rpc.nfsd XX" should not fail if ports are already open.Neil Brown2006-08-071-1/+11
| | | | | | | | | support/nfs/nfssvc.c: if any ports are already open, don't try to open any more. This means that once nfsd is running rpc.nfsd X will just change the number of threads, not the ports in use.
* Remove warning if neither 'sync' or 'async' present.Neil Brown2006-08-071-0/+6
| | | | Add warning of neither 'subtree_check' or 'no_subtree_check' present.
* Update changelog and set version to 1.0.9Neil Brown2006-07-081-0/+367
|
* nfs-utils 1.0.9-pre1Neil Brown2006-07-031-0/+184
| | | | Update change log and change version number
* Move NFS mount code from util-linux to nfs-utils - part 1Amit Gud2006-06-161-0/+4
| | | | | | | Adds the mount directory and the code to mount and umount the NFS file system. Signed-off-by: Amit Gud <agud@redhat.com> Signed-off-by: Steve Dickson <steved@redhat.com>
* Minor man page tidyupNeil Brown2006-06-051-0/+1
|
* fix nhfsrun signalNeil Brown2006-06-051-1/+7
| | | | | | | | nhfsrun is supposed to be able to be signalled with SIGUSR1, but the signal trapped is number 30, which is something else entirely (SIGPWR). This patch simply changes it to say "USR1", which gets it right no matter what the value is. "Steinar H. Gunderson" <sesse@debian.org>
* mountd state directoryNeil Brown2006-06-051-1/+5
| | | | | | Let the user select (via a new parameter) the path to the NFS state directory for mountd, to match the statd functionality. "Steinar H. Gunderson" <sesse@debian.org>
* document sync option:Neil Brown2006-06-051-2/+6
| | | | | | Document the 'sync' option in the exports(5) man page -- ATM only the 'async' option is documented, which is not very symmetric. :-) "Steinar H. Gunderson" <sesse@debian.org>
* Only treat '#' as starting a comment when at the start of a tokenNeil Brown2006-06-051-0/+3
| | | | otherwise '#' in filenames cannot be read.
* escape hashes in exportsNeil Brown2006-06-051-1/+5
| | | | | | | Makes sure any # signs in the printed-out exports file are escaped (as with quotes, spaces, etc.), so they won't be treated as a comment when they're read back in again. "Steinar H. Gunderson" <sesse@debian.org>
* fix exportfs with multiple matchesNeil Brown2006-06-051-0/+5
| | | | | | | Fixes a problem with exportfs -o and multiple entries of the same type for the same patch that matches a given client. The entire rationale and problem description can be found at http://bugs.debian.org/245449 (fumihiko kakuma <kakmy@mvh.biglobe.ne.jp>)
* Remove debian/Neil Brown2006-06-051-0/+3
| | | | .. at request of Debian maintainer "Steinar H. Gunderson" <sesse@debian.org>
* Remove **/Makefile.in, aclocal.m4, configure, andNeil Brown2006-04-171-0/+6
| | | | | | support/include/config.h.in from source control These are auto autogenerated by aclocal -I aclocal ; autoheader ; automake ; autoconf
* Define and use HIAVE_IFADDRS_HNeil Brown2006-04-171-0/+7
|
* 1.0.8neilbrown2006-04-121-0/+4
|
* 2006-04-10 NeilBrown <neilb@suse.de>neilbrown2006-04-101-0/+12
| | | | | | | | | | | | | Various paranoia checks: gssd_proc.c: pass max_field sizes to sscanf to avoid buffer overflow svcgssd_proc.c: range_check name.length, to ensure name.length+1 doesn't wrap idmapd.c(nfsdcb): make sure at least one byte is read before zeroing the last byte that was read, otherwise memory corruption is possible. Found by SuSE security audit.
* 2006-04-10 "Kevin Coffman" <kwc@citi.umich.edu>neilbrown2006-04-101-1/+5
| | | | | Check for sufficient version of librpcsecgss and libgssapi in configure.in
* 2006-04-10 "Kevin Coffman" <kwc@citi.umich.edu>neilbrown2006-04-101-0/+4
| | | | | Update aclocal/tcp-wrappers.m4 to define HAVE_LIBWRAP and HAVE_TCP_WRAPPERS as appropriate.
* Add checking for innetgr back to configure.inneilbrown2006-04-101-0/+3
|
* 2006-04-10 kwc@citi.umich.eduneilbrown2006-04-091-0/+6
| | | | | | | Update calls to gss_export_lucid_sec_context() Change the calls to gss_export_lucid_sec_context() to match the corrected interface definition in libgssapi-0.9.
* 2006-04-10 kwc@citi.umich.eduneilbrown2006-04-091-0/+5
| | | | | | Plug memory leaks in svcgssd Various memory leaks in the svcgssd context processing are eliminated.
* 2006-04-10 kwc@citi.umich.eduneilbrown2006-04-091-0/+6
| | | | | | | Fix memory leak of the AUTH structure on context negotiations Free AUTH structure after completing context negotiation and sending context information to the kernel.
* 2006-04-10 kwc@citi.umich.eduneilbrown2006-04-091-0/+3
| | | | Fix support/include/config.h.in such as would be done be running autoheader.
* aclocal/autoconf/automake, properly this time.neilbrown2006-03-281-0/+3
|
* Use PKGCONFIG to locate gssapi and rpcsecgss header filesneilbrown2006-03-281-0/+12
| | | | | | | | | | | Instead of having separate copies of the gssapi and rpcsecgss header files, or depending on the Kerberos gssapi header, locate the headers now installed with the libgssapi and librpcsecgss libraries. Remove local copies of the gssapi and rpcsecgss header files. This depends on the configure_use_autotools patch.
* Add debugging to better detect negotiation of enctype not supported by kernelneilbrown2006-03-281-0/+8
| | | | | | | Print debugging message indicating the type of encryption keys being sent down to the kernel. This should make it easier to detect cases where unsupported encryption types are being negotiated. (really this time)
* Don't close and reopen all pipes on every DNOTIFY signal.neilbrown2006-03-281-0/+12
| | | | | | | | | | From: Vince Busam <vbusam@google.com> Signed-off-by: Kevin Coffman <kwc@citi.umich.edu> Don't unnecessarily close and re-open all pipes after every DNOTIFY signal. These unnecessary closes were triggering a kernel Oops. Original patch modified to correct segfault when unmounting last NFSv4 mount.
* Add option to specify directory to search for credentials cache filesneilbrown2006-03-281-0/+11
| | | | | | | | | From: Vince Busam <vbusam@google.com> Signed-off-by: Kevin Coffman <kwc@citi.umich.edu> Add command line option to specify which directory should be searched to find credentials caches. (really this time)
* Must still use knowledge of the glue context for pre-1.4 versions of MIT krb5neilbrown2006-03-281-0/+9
| | | | | | | | We need to get access to the internal krb5 context pointer for older (pre-1.4) versions of MIT Kerberos. We get a pointer to the gss glue's context. Get the right pointer before accessing the context information. (really this time)
* Remove unused groups variable from get_ids() which was causing a compiler ↵neilbrown2006-03-281-0/+5
| | | | | | warning. (really this time)
* Update krb5 code to use glue routine lucid context functionsneilbrown2006-03-281-0/+14
| | | | | | | | | | | The gssd code should not know about the glue layer's context structure. A previous patch added gss_export_lucid_sec_context() and gss_free_lucid_sec_context() functions to the gssapi glue layer. Use these functions rather than calling directly to the Kerberos gssapi code (which requires the Kerberos context handle rather than the glue's context handle). (really this time)
* Separate out context handling code for MIT Kerberos and SPKM3neilbrown2006-03-281-0/+6
| | | | | into their own file. (Really this time)
* User-selectable idmapping cache lifetimeneilbrown2006-03-281-0/+7
| | | | | | Read and process new configuration option, Cache-Expiration, and use the value to determine how long idmapping entries are cached. (Really this time)
* update version to -rc3neilbrown2006-03-271-0/+3
|
* Add debugging to better detect negotiation of enctype not supported by kernelneilbrown2006-03-261-0/+7
| | | | | | Print debugging message indicating the type of encryption keys being sent down to the kernel. This should make it easier to detect cases where unsupported encryption types are being negotiated.
* Don't close and reopen all pipes on every DNOTIFY signal.neilbrown2006-03-261-0/+8
| | | | | | | Don't unnecessarily close and re-open all pipes after every DNOTIFY signal. These unnecessary closes were triggering a kernel Oops. Original patch modified to correct segfault when unmounting last NFSv4 mount.
* Add option to specify directory to search for credentials cache filesneilbrown2006-03-261-0/+6
| | | | | Add command line option to specify which directory should be searched to find credentials caches.
* Must still use knowledge of the glue context for pre-1.4 versions of MIT krb5neilbrown2006-03-261-0/+8
| | | | | | | We need to get access to the internal krb5 context pointer for older (pre-1.4) versions of MIT Kerberos. We get a pointer to the gss glue's context. Get the right pointer before accessing the context information.
* Remove unused variable causing compile warningneilbrown2006-03-261-0/+5
| | | | Remove unused groups variable from get_ids() which was causing a compiler warning.
* Update krb5 code to use glue routine lucid context functionsneilbrown2006-03-261-0/+10
| | | | | | | | | The gssd code should not know about the glue layer's context structure. A previous patch added gss_export_lucid_sec_context() and gss_free_lucid_sec_context() functions to the gssapi glue layer. Use these functions rather than calling directly to the Kerberos gssapi code (which requires the Kerberos context handle rather than the glue's context handle).
* Separate out context handling code for MIT Kerberos and SPKM3neilbrown2006-03-261-0/+4
| | | | into their own file.
* Consolidate gssd and svcgssd since they share much codeneilbrown2006-03-261-0/+12
| | | | | | | | | | | Remove directory svcgssd which was only created because the old build system could not handle building two daemons in the same directory. This eliminates build complications since gssd and svcgssd also share many source files. This patch effectively removes the utils/svcgssd directory, moving all its files to the utils/gssd directory. File utils/gssd/Makefile.am is modified with directions to build both gssd and svcgssd.
* Use PKGCONFIG to locate gssapi and rpcsecgss header filesneilbrown2006-03-261-0/+12
| | | | | | | | | | | Instead of having separate copies of the gssapi and rpcsecgss header files, or depending on the Kerberos gssapi header, locate the headers now installed with the libgssapi and librpcsecgss libraries. Remove local copies of the gssapi and rpcsecgss header files. This depends on the configure_use_autotools patch.