Posts for June 2011

2011-06-03: fsr 1.14

Arthur Prokosch pointed out that fsr would exit successfully with no error messages if its only argument were a non-existent directory. To address that, and related issues, fsr now checks all of its arguments to see if they exist and are directories and ignores any argument that doesn't exist or isn't a directory, warning about them. It then exits with a non-zero status if, after filtering out such arguments, there are no remaining directories to process.

This version also adds a pointer to up / afs-up in the discussion of fs copyacl.

You can get the latest version from the fsr distribution page.

2011-06-03 16:05 — Permanent link

2011-06-04: git-pbuilder 1.22

I actually released this on May 23rd, but I never posted an announcement here, and I think it's worth at least a brief note (if for no other reason that I can remember what I've been working on). The new version adds support for reading COWBUILDER_BASE from the environment so that you can use a different location for your cowbuilder setups if you'd like. It also removes an extra level of quoting around options in $BASE that caused problems with the shell.

The latter is weird, and I still don't completely understand it. I was setting a variable like:

    OPTIONS="$OPTIONS --basepath '$BASE'"

and then using it with:

    pdebuild --pbuilder "$BUILDER" -- $OPTIONS

(with some additional complexity). I expected, since $OPTIONS was not quoted, that this would expand $OPTIONS and then do shell parsing again, which would strip off the other level of quotes. But this doesn't seem to actually work; instead, the quotes are left in, at least for some shells.

This is apparently some corner of shell quoting that I don't understand.

The chances of the base path containing shell metacharacters is quite low, so I just went with the solution that feels "underquoted."

Anyway, you can get the latest version from my scripts page.

2011-06-04 18:57 — Permanent link

2011-06-07: rra-c-util 3.6

Both of the fixes in this release are minor, but releases are cheap, so I may as well put a version number on it. Error handling in network_accept_any now handles the (usually impossible) case of select returning without an error but without adding anything to the fd sets. And pam_getenvlist in the fakepam testing library now returns an empty environment rather than NULL if no environment variables have been set.

You can get the latest version from the rra-c-util distribution page.

2011-06-07 14:27 — Permanent link

2011-06-07: pam-afs-session 2.3

The main fix in this release is that pam-afs-session now honors KRB5CCNAME set in the general environment if it is set and there is no KRB5CCNAME in the PAM environment. Previously, in that case it would skip running aklog; now, it exports that environment variable to aklog and runs it. This allows users to get tokens in situations where they're reusing an existing ticket cache without doing a new Kerberos authentication, such as passwordless sudo.

You can get the latest version from the pam-afs-session distribution page.

2011-06-07 14:31 — Permanent link

2011-06-08: pam-afs-session 2.4

I'm not doing a great job recently at doing bug-free releases.

The change in version 2.3 to support KRB5CCNAME set in the general environment didn't reallocate the environment array properly, resulting in a potential free of unallocated memory. That's fixed in this version. Anyone who upgraded to 2.3 should upgrade to 2.4.

You can get the latest version from the pam-afs-session distribution page.

2011-06-08 20:17 — Permanent link

2011-06-09: kadmin-remctl 3.2

The primary feature in this release is support for an additional blacklist of principals whose passwords should not be changed via the reset_passwd function. There's also a fix for error reporting from incorrect password errors from Heimdal's kpasswd program, and yet another fix for setting default attributes when creating accounts in Heimdal. Unfortunately, that means we're now back to forcing pre-auth to be set for all newly created principals in the code.

Since I was making a new release, I've also refreshed all the build machinery, supporting libraries, and licensing documentation.

You can get the latest version from the kadmin-remctl distribution page.

2011-06-09 15:13 — Permanent link