[gssapi/gssproxy] 0f4bce: Add special user-proxy mode
by Simo Sorce
Branch: refs/heads/main
Home: https://github.com/gssapi/gssproxy
Commit: 0f4bce2386e2654853147f41f09a90045359dca8
https://github.com/gssapi/gssproxy/commit/0f4bce2386e2654853147f41f09a900...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M src/gp_config.c
M src/gp_config.h
M src/gp_init.c
M src/gp_proxy.h
M src/gssproxy.c
Log Message:
-----------
Add special user-proxy mode
This mode is to be used in a user session where what we want to proxy
is other applications run by the same user in a container or flatpak.
This allows those application to use the user's creedntials w/o having
to bind mount and expose the user TGT.
The configuration is fixed and simplified, and the user proxy is allowed
to be itself intercepted by the system proxy if desired.
Use a subdirectory of XDG_RUNTIME_DIR by default
If an explicit socket name is passed we expect the directory structure
to be in place.
However if we are dealing with XDG_RUNTIME_DIR then we want to create a
subdirectory so that it can bind mounted in containers.
Bind mounting the socket directly is problematic if we want to allow to
restart the daemon as the socket may then become permanently
disconnected in the container.
If we use a subdirectory we need to attempt to create it on start
because XDG_RUNTIME_DIR is ephemeral and generally recreated from
scratch when the user session is created, so we need to populate it with
the needed dir strcuture ourself to make things simpler for users.
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: 0837a5675a6911b8e29025b143bb4ff3f016b69b
https://github.com/gssapi/gssproxy/commit/0837a5675a6911b8e29025b143bb4ff...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M configure.ac
M src/mechglue/gss_plugin.c
Log Message:
-----------
Allow to build with inteposer enabled by default
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: a04a5602cce52fd5ca693673d3f093c3fe111c8c
https://github.com/gssapi/gssproxy/commit/a04a5602cce52fd5ca693673d3f093c...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M Makefile.am
M configure.ac
A external/dinglibs.m4
M external/libpopt.m4
Log Message:
-----------
Allow building just the proxymech gss module
This helps cases where only the client is needed, as it removes
a bunch of dependencies needed only by the proxy daemon itself.
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: 07939ce8a5c5c314d15786b96b52bd7d887f9272
https://github.com/gssapi/gssproxy/commit/07939ce8a5c5c314d15786b96b52bd7...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M configure.ac
A docs/Userproxy.md
M man/gssproxy-mech.8.xml.in
M man/gssproxy.8.xml
Log Message:
-----------
Add documentation for the Userproxy mode.
Add Userproxy.md file that explains what user proxy mode is
and how/when to use it.
Add userproxy mode changes to manpages.
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: 145c7cecb9d7aecb707c02995b0289b40a6df4d7
https://github.com/gssapi/gssproxy/commit/145c7cecb9d7aecb707c02995b0289b...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M Makefile.am
M configure.ac
M external/systemd.m4
M src/gp_proxy.h
M src/gp_socket.c
M src/gssproxy.c
Log Message:
-----------
Support Socket Activation for userproxy mode
This way we can provide a user systemd unit that will automatically
starts gssproxy in user mode if someone tries to use the userproxy
socket.
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: 7bf9e49bf8491ab2d9751fbdcc44154d6fdf5a36
https://github.com/gssapi/gssproxy/commit/7bf9e49bf8491ab2d9751fbdcc44154...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M .gitignore
M Makefile.am
M conf_macros.m4
M configure.ac
A systemd/gssuserproxy.service.in
A systemd/gssuserproxy.socket.in
Log Message:
-----------
Add systemd user unit files for userproxy mode
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Commit: bf92a596af4092a9d621097d02596e1936bb5bb9
https://github.com/gssapi/gssproxy/commit/bf92a596af4092a9d621097d02596e1...
Author: Simo Sorce <simo(a)redhat.com>
Date: 2022-05-23 (Mon, 23 May 2022)
Changed paths:
M .gitignore
M Makefile.am
M conf_macros.m4
M configure.ac
M contrib/gssproxy.spec.in
R examples/mech.in
A examples/proxymech.conf.in
Log Message:
-----------
Always install the gss module configuration
This changes the example file name from "mech" to proxymech.conf
and always installs this file. Downstreams have been already doing
this for a long time, might as well do it upstream as well.
Also tidy up install dirs when only the gss module is built.
Signed-off-by: Simo Sorce <simo(a)redhat.com>
Compare: https://github.com/gssapi/gssproxy/compare/358ab121cd72...bf92a596af40
1 year, 11 months
- 1
- 0