novaBBS - comp.protocols.kerberos - remctl 3.18 released

remctl 3.18 released

<mailman.52.1652072351.8148.kerberos@mit.edu>

https://www.novabbs.com/devel/article-flat.php?id=247&group=comp.protocols.kerberos#247

copy link Newsgroups: comp.protocols.kerberos

Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: eag...@eyrie.org (Russ Allbery)
Newsgroups: comp.protocols.kerberos
Subject: remctl 3.18 released
Date: Sun, 08 May 2022 21:58:58 -0700
Organization: The Eyrie
Lines: 60
Message-ID: <mailman.52.1652072351.8148.kerberos@mit.edu>
References: <87sfpj8fot.fsf@hope.eyrie.org>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="13056"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
To: <kerberos@mit.edu>
Authentication-Results: mit.edu; arc=pass
ARC-Seal: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1652072350; cv=pass;
b=yHENGBx7/NOT11QBJBS5/JQPTOmjQBNU1HH4tmKSbeioQA8i659gbc8noya1oyjUnpiLPjVv4XSs8Rn3f+5OOHAfFx4zS8miA0UO3zDFAyFVS54kr15g7HgkD4892OWUsMLnrkmCePgga9EZXZM7nXciIoxA26iB/JzjseUQrU7ahnfeNAVucPIqIIQFRFAtMR6WZzjPVwgG6G8R4yYWuil05Dj76uqnh3a/3GictUgXJlo6tK0Dxi8trzUeqpafU4z22luMM/q3IE9FMxh4gVUfdBsFbOA/wYK04PKFH6BMJ7wvo4SG2tT/dgDrGz4D2JreSlvHcVJauf849yMuLw==
ARC-Message-Signature: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1652072350;
c=relaxed/relaxed; bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
h=From:Subject:Date:Message-ID:MIME-Version:Content-Type;
b=r9wbCFR+ySV9KNtp/+skT42TwYCWoaOZjmLeRR3Kg+okOWc3gB0CXy1p3gziya2QzVgHlE+tigTf9EZmi8CTwoKUD2PusvSYpze06l61wM7Z6Cbwbzgmvd0NkjSDcThm9i/VISVzYAMDId8u5K8IvO07ACQBqGLotQLWX6ZaWb7hmjAU9oAjm8eQKiCN2F2l63ZMqOpZzzXMdHVw/J5n007kgLbRCHBm7Wd86F+05dOMQr361SGfBqKFS2rcV3suvR7iOS2TALU7lZzyWQnnGrHWbTym6tdq6/5QsRuvhquKAMyLpPd3eGhqSNGbRPJrdmdGA4JyjrfZXVm6FaiQ6w==
ARC-Authentication-Results: i=2; mit.edu; dkim=pass (1024-bit key)
header.d=mitprod.onmicrosoft.com header.i=@mitprod.onmicrosoft.com
header.b=RGVIs/Jv; arc=pass
Authentication-Results: mit.edu;
dkim=pass (1024-bit key) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.b=RGVIs/Jv
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=I8TBon74mgyhXk6QCk5olpyJUYk/QQKCW3WfvT10O4DYcuP6oWkSNR3dzvSnCGz8XVp5NNLxYkafuzAZ7Z5AeUsPHM8qMDmp2inV7Uz61+dwG19Foa4PpuDUtMfzlcjq2YDZFVQvPUfpHxSa2qHqJv4oy42hzkxMtukUTQP9iLB7KnO5UW8IQnzwYm1fjYv41WklBy8vZ/l0rqzun7q09TZsf6g6VyeMSipUNdr3L6gqhaEXPzs8qxq7H5wFm5A9ubLkQNbYyoMDMICNYq7Pfv0twVZvTINRqRfsceXOBK9zb+nCElxsD9FZyfM5o1NZ5cTVbU7ZK4AqKb2kyinapA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
b=k7YFTPyKTUpTcsoLs6U7/QGRgv1QXEz/7T2QlDWYo29peA5MDZvsMk30zAIXIyqkyhBvK0ik4BHywt7FCy7ahStjbJKQ/jEOhUXTIhyV/kjJu/EY4U8uh51caS3CAX8RiHm7MVq/IsdjdEgALzObO3xX1C8GKP5oxvcrH+ABG9TrstY5N7depKGFmujXAHW4qdQhxGWHd4MN3lGo3rdK1ymKH2d0VJamLILuwyCv8XemyKNdy3aRz+ATXvEMpB41HqMAzBRj8AAIyFxSQud5EpR2QnZkR+dKMuYyEulYqLXWLRScM+GMpwmLLwMbXi2DXC8ebiYz4Jpva7ogFXLF8Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
166.84.7.159) smtp.rcpttodomain=mit.edu smtp.mailfrom=eyrie.org;
dmarc=bestguesspass action=none header.from=eyrie.org; dkim=none (message not
signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
b=RGVIs/Jvza68JKF5RJgWNS5H25q/kTbeW+GCyMrnL2QredVdpoGlZZb1yrEjWJFtwFbMIbWdYQo+SwovjZyKBkPb2D0lOH3OdIEV3Yrd1sfO6rvt3mFH5hOW4w8gNGZq2KboUWRCnIsH2gmKAbq3gJXGDMXIPrM2WmFPwbvefAo=
Authentication-Results: spf=pass (sender IP is 166.84.7.159)
smtp.mailfrom=eyrie.org; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=eyrie.org;
Received-SPF: Pass (protection.outlook.com: domain of eyrie.org designates
166.84.7.159 as permitted sender) receiver=protection.outlook.com;
client-ip=166.84.7.159; helo=haven.eyrie.org;
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: c139c1a9-69de-43d2-9b78-08da3178a21f
X-MS-TrafficTypeDiagnostic: SA1PR01MB6749:EE_
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam-PRVS: <SA1PR01MB674994123A8B9D4BB30AEACBA6C69@SA1PR01MB6749.prod.exchangelabs.com>
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: /aXXvEEj53uOXciloadoOISaGG7pezEYa976HJhZSFkbRaU2bigpyvaLhnV50n6wWlpwfMKnH6lFqwY7UB1ok0Osfl3OdvD7WJoc54pOr/2nIdiexIiLDRIAK6wxpNKixII1VdacWdN8iWEab8OKiMeeybtSoRnq4u23lZp/PHFP1UOFRL3/2tX38vgobZp0DhUjulxSL5+0Vw9NJPOb6JMe8m7L1IA8LGzLJ2WifKZUnfV8PABtx8gMTmGiGybh4hOBUjTtnnhlwD4ohVP5K8/jNGvgkBP+sydUQ7oADI87sSyOgDpsdHfUsjS2rewEDgRauBIfM88MovnKzFtaylJ9gRD8HIYkyDcr/5Jg2mcck7mCh9zbXXVjISGBIr9xKlEiE9FhtpdxgHHztMpcidKaP+3aGMhXNv3QYw3rZPIX0sBX3o8gVrtPpTwImJm0BudW37DHjW3TZuZ9nFs4ZvipKv1OEnqV+m0jW5dN7I7mwotNQd+8dv7BcfK6fkqG1B8Ie9VzNrLJQmVzRnV1MdScVSc/Pd8iDfzJo1luYNfK+BEbncN9dCJq8X66fskM1bKfoYB0Yo34/xu3JNCVihenBkq6tzVtym02PyO7tZKfwO08mKZ6RQ/Bs9c4lL1JLDyuxQLAKMVD5/x6GNTemk+sWPr5yljPvjqt0opswp2agHUEWOKgNmbkpRn+ICDy
X-Forefront-Antispam-Report: CIP:166.84.7.159; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:haven.eyrie.org; PTR:haven.eyrie.org; CAT:NONE;
SFS:(13230001)(4636009)(7116003)(8676002)(70586007)(34206002)(83380400001)(426003)(336012)(68406010)(508600001)(86362001)(26005)(6266002)(316002)(42186006)(786003)(36916002)(7596003)(7636003)(356005)(2906002)(5660300002);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2022 04:59:01.1538 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c139c1a9-69de-43d2-9b78-08da3178a21f
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM11FT034.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR01MB6749
X-OriginatorOrg: mitprod.onmicrosoft.com
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <87sfpj8fot.fsf@hope.eyrie.org>

by: Russ Allbery - Mon, 9 May 2022 04:58 UTC

I'm pleased to announce release 3.18 of remctl.

remctl is a client/server application that supports remote execution of
specific commands, using Kerberos GSS-API for authentication.
Authorization is controlled by a configuration file and ACL files and can
be set separately for each command, unlike with rsh. remctl is like a
Kerberos-authenticated simple CGI server, or a combination of Kerberos ssh
and sudo without most of the features and complexity of either.

Changes from previous release:

Add support for PCRE2 for pcre ACLs and use it by preference over
PCRE1 if it is found. UTF-8 regular expressions are not enabled by
default, but can be enabled by adding (*UTF) to the beginning of the
regular expression (a standard PCRE2 feature not specific to remctl).

Document that pcre and regex ACL expressions are not automatically
anchored at the start and end of the principal name, so they should be
explicitly anchored in the configuration unless one intends to allow
partial matches.

The Perl libraries and the remctl test suite now require Perl 5.10 or
later.

Document sending SIGHUP to remctld when running in stand-alone mode to
ask it to re-read its configuration file, and document that SIGTERM
will cause it to exit. (Fixes #30)

Mark remctl client library functions that allocate memory with their
corresponding deallocation functions so that GCC 11 and later can
diagnose memory deallocation bugs.

Remove remaining references to pytest-runner in the Python bindings.
Thanks, Ken Dreyer.

Switch the Ruby bindings tests to Minitest from Test::Unit. Thanks,
Ken Dreyer.

Update to rra-c-util 10.2:

* Fix IN6_ARE_ADDR_EQUAL Autoconf probe on macOS.
* Fix compiler flag probes with Clang.
* Check that Kerberos headers can be included.
* Fix util/fdflag test on Solaris 11 and OpenBSD.
* Suppress some additional warnings in GCC 10.

You can download it from:

<https://www.eyrie.org/~eagle/software/remctl/>

This package is maintained using Git; see the instructions on the above
page to access the Git repository.

Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

--
Russ Allbery (eagle@eyrie.org) <https://www.eyrie.org/~eagle/>

Chemistry professors never die, they just fail to react.

devel / comp.protocols.kerberos / remctl 3.18 released

devel / comp.protocols.kerberos / remctl 3.18 released