Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  nodelist  faq  login

Computer programmers do it byte by byte.


computers / comp.protocols.kerberos / remctl 3.18 released

SubjectAuthor
o remctl 3.18 releasedRuss Allbery

1
Subject: remctl 3.18 released
From: Russ Allbery
Newsgroups: comp.protocols.kerberos
Organization: The Eyrie
Date: Mon, 9 May 2022 04:58 UTC
References: 1
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: eag...@eyrie.org (Russ Allbery)
Newsgroups: comp.protocols.kerberos
Subject: remctl 3.18 released
Date: Sun, 08 May 2022 21:58:58 -0700
Organization: The Eyrie
Lines: 60
Message-ID: <mailman.52.1652072351.8148.kerberos@mit.edu>
References: <87sfpj8fot.fsf@hope.eyrie.org>
Mime-Version: 1.0
Content-Type: text/plain
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="13056"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux)
To: <kerberos@mit.edu>
Authentication-Results: mit.edu; arc=pass
ARC-Seal: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1652072350; cv=pass;
b=yHENGBx7/NOT11QBJBS5/JQPTOmjQBNU1HH4tmKSbeioQA8i659gbc8noya1oyjUnpiLPjVv4XSs8Rn3f+5OOHAfFx4zS8miA0UO3zDFAyFVS54kr15g7HgkD4892OWUsMLnrkmCePgga9EZXZM7nXciIoxA26iB/JzjseUQrU7ahnfeNAVucPIqIIQFRFAtMR6WZzjPVwgG6G8R4yYWuil05Dj76uqnh3a/3GictUgXJlo6tK0Dxi8trzUeqpafU4z22luMM/q3IE9FMxh4gVUfdBsFbOA/wYK04PKFH6BMJ7wvo4SG2tT/dgDrGz4D2JreSlvHcVJauf849yMuLw==
ARC-Message-Signature: i=2; a=rsa-sha256; d=mit.edu; s=arc; t=1652072350;
c=relaxed/relaxed; bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
h=From:Subject:Date:Message-ID:MIME-Version:Content-Type;
b=r9wbCFR+ySV9KNtp/+skT42TwYCWoaOZjmLeRR3Kg+okOWc3gB0CXy1p3gziya2QzVgHlE+tigTf9EZmi8CTwoKUD2PusvSYpze06l61wM7Z6Cbwbzgmvd0NkjSDcThm9i/VISVzYAMDId8u5K8IvO07ACQBqGLotQLWX6ZaWb7hmjAU9oAjm8eQKiCN2F2l63ZMqOpZzzXMdHVw/J5n007kgLbRCHBm7Wd86F+05dOMQr361SGfBqKFS2rcV3suvR7iOS2TALU7lZzyWQnnGrHWbTym6tdq6/5QsRuvhquKAMyLpPd3eGhqSNGbRPJrdmdGA4JyjrfZXVm6FaiQ6w==
ARC-Authentication-Results: i=2; mit.edu; dkim=pass (1024-bit key)
header.d=mitprod.onmicrosoft.com header.i=@mitprod.onmicrosoft.com
header.b=RGVIs/Jv; arc=pass
Authentication-Results: mit.edu;
dkim=pass (1024-bit key) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.b=RGVIs/Jv
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=I8TBon74mgyhXk6QCk5olpyJUYk/QQKCW3WfvT10O4DYcuP6oWkSNR3dzvSnCGz8XVp5NNLxYkafuzAZ7Z5AeUsPHM8qMDmp2inV7Uz61+dwG19Foa4PpuDUtMfzlcjq2YDZFVQvPUfpHxSa2qHqJv4oy42hzkxMtukUTQP9iLB7KnO5UW8IQnzwYm1fjYv41WklBy8vZ/l0rqzun7q09TZsf6g6VyeMSipUNdr3L6gqhaEXPzs8qxq7H5wFm5A9ubLkQNbYyoMDMICNYq7Pfv0twVZvTINRqRfsceXOBK9zb+nCElxsD9FZyfM5o1NZ5cTVbU7ZK4AqKb2kyinapA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
b=k7YFTPyKTUpTcsoLs6U7/QGRgv1QXEz/7T2QlDWYo29peA5MDZvsMk30zAIXIyqkyhBvK0ik4BHywt7FCy7ahStjbJKQ/jEOhUXTIhyV/kjJu/EY4U8uh51caS3CAX8RiHm7MVq/IsdjdEgALzObO3xX1C8GKP5oxvcrH+ABG9TrstY5N7depKGFmujXAHW4qdQhxGWHd4MN3lGo3rdK1ymKH2d0VJamLILuwyCv8XemyKNdy3aRz+ATXvEMpB41HqMAzBRj8AAIyFxSQud5EpR2QnZkR+dKMuYyEulYqLXWLRScM+GMpwmLLwMbXi2DXC8ebiYz4Jpva7ogFXLF8Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
166.84.7.159) smtp.rcpttodomain=mit.edu smtp.mailfrom=eyrie.org;
dmarc=bestguesspass action=none header.from=eyrie.org; dkim=none (message not
signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=T3yksy5FphORqpZvn41dkhtdvBq1Z2j63sb3vqIUvfU=;
b=RGVIs/Jvza68JKF5RJgWNS5H25q/kTbeW+GCyMrnL2QredVdpoGlZZb1yrEjWJFtwFbMIbWdYQo+SwovjZyKBkPb2D0lOH3OdIEV3Yrd1sfO6rvt3mFH5hOW4w8gNGZq2KboUWRCnIsH2gmKAbq3gJXGDMXIPrM2WmFPwbvefAo=
Authentication-Results: spf=pass (sender IP is 166.84.7.159)
smtp.mailfrom=eyrie.org; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=eyrie.org;
Received-SPF: Pass (protection.outlook.com: domain of eyrie.org designates
166.84.7.159 as permitted sender) receiver=protection.outlook.com;
client-ip=166.84.7.159; helo=haven.eyrie.org;
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: c139c1a9-69de-43d2-9b78-08da3178a21f
X-MS-TrafficTypeDiagnostic: SA1PR01MB6749:EE_
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam-PRVS: <SA1PR01MB674994123A8B9D4BB30AEACBA6C69@SA1PR01MB6749.prod.exchangelabs.com>
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: /aXXvEEj53uOXciloadoOISaGG7pezEYa976HJhZSFkbRaU2bigpyvaLhnV50n6wWlpwfMKnH6lFqwY7UB1ok0Osfl3OdvD7WJoc54pOr/2nIdiexIiLDRIAK6wxpNKixII1VdacWdN8iWEab8OKiMeeybtSoRnq4u23lZp/PHFP1UOFRL3/2tX38vgobZp0DhUjulxSL5+0Vw9NJPOb6JMe8m7L1IA8LGzLJ2WifKZUnfV8PABtx8gMTmGiGybh4hOBUjTtnnhlwD4ohVP5K8/jNGvgkBP+sydUQ7oADI87sSyOgDpsdHfUsjS2rewEDgRauBIfM88MovnKzFtaylJ9gRD8HIYkyDcr/5Jg2mcck7mCh9zbXXVjISGBIr9xKlEiE9FhtpdxgHHztMpcidKaP+3aGMhXNv3QYw3rZPIX0sBX3o8gVrtPpTwImJm0BudW37DHjW3TZuZ9nFs4ZvipKv1OEnqV+m0jW5dN7I7mwotNQd+8dv7BcfK6fkqG1B8Ie9VzNrLJQmVzRnV1MdScVSc/Pd8iDfzJo1luYNfK+BEbncN9dCJq8X66fskM1bKfoYB0Yo34/xu3JNCVihenBkq6tzVtym02PyO7tZKfwO08mKZ6RQ/Bs9c4lL1JLDyuxQLAKMVD5/x6GNTemk+sWPr5yljPvjqt0opswp2agHUEWOKgNmbkpRn+ICDy
X-Forefront-Antispam-Report: CIP:166.84.7.159; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:haven.eyrie.org; PTR:haven.eyrie.org; CAT:NONE;
SFS:(13230001)(4636009)(7116003)(8676002)(70586007)(34206002)(83380400001)(426003)(336012)(68406010)(508600001)(86362001)(26005)(6266002)(316002)(42186006)(786003)(36916002)(7596003)(7636003)(356005)(2906002)(5660300002);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 May 2022 04:59:01.1538 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c139c1a9-69de-43d2-9b78-08da3178a21f
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: BN8NAM11FT034.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR01MB6749
X-OriginatorOrg: mitprod.onmicrosoft.com
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <87sfpj8fot.fsf@hope.eyrie.org>
View all headers
I'm pleased to announce release 3.18 of remctl.

remctl is a client/server application that supports remote execution of
specific commands, using Kerberos GSS-API for authentication.
Authorization is controlled by a configuration file and ACL files and can
be set separately for each command, unlike with rsh.  remctl is like a
Kerberos-authenticated simple CGI server, or a combination of Kerberos ssh
and sudo without most of the features and complexity of either.

Changes from previous release:

    Add support for PCRE2 for pcre ACLs and use it by preference over
    PCRE1 if it is found.  UTF-8 regular expressions are not enabled by
    default, but can be enabled by adding (*UTF) to the beginning of the
    regular expression (a standard PCRE2 feature not specific to remctl).

    Document that pcre and regex ACL expressions are not automatically
    anchored at the start and end of the principal name, so they should be
    explicitly anchored in the configuration unless one intends to allow
    partial matches.

    The Perl libraries and the remctl test suite now require Perl 5.10 or
    later.

    Document sending SIGHUP to remctld when running in stand-alone mode to
    ask it to re-read its configuration file, and document that SIGTERM
    will cause it to exit.  (Fixes #30)

    Mark remctl client library functions that allocate memory with their
    corresponding deallocation functions so that GCC 11 and later can
    diagnose memory deallocation bugs.

    Remove remaining references to pytest-runner in the Python bindings.
    Thanks, Ken Dreyer.

    Switch the Ruby bindings tests to Minitest from Test::Unit.  Thanks,
    Ken Dreyer.

    Update to rra-c-util 10.2:

    * Fix IN6_ARE_ADDR_EQUAL Autoconf probe on macOS.
    * Fix compiler flag probes with Clang.
    * Check that Kerberos headers can be included.
    * Fix util/fdflag test on Solaris 11 and OpenBSD.
    * Suppress some additional warnings in GCC 10.

You can download it from:

    https://www.eyrie.org/~eagle/software/remctl/

This package is maintained using Git; see the instructions on the above
page to access the Git repository.

Debian packages have been uploaded to Debian unstable.

Please let me know of any problems or feature requests not already listed
in the TODO file.

--
Russ Allbery (eagle@eyrie.org)             https://www.eyrie.org/~eagle/


1
rocksolid light 0.7.2
clearneti2ptor