< June 2013 Russ Allbery > Eagle's Path August 2013 >

Posts for July 2013

Syndication

RSS All posts
 RSS Only reviews
 RSS Only software releases
 RSS Debian-focused
 RSS Web site changes
 DW: eaglespath_feed

Comments

This journal does not support comments. Read why.

Archives

Book and magazine reviews are not included in the journal archives. For older book reviews, see all book reviews sorted by date and all magazine reviews.

2024: 01

2023: 01 02 03 04 05 06 07 08 09 10 11 12

2022: 01 02 03 04 05 06 07 08 09 10 11 12

2021: 01 02 03 04 05 06 07 08 09 10 11 12

2020: 01 02 03 04 05 06 07 08 09 10 11 12

2019: 01 02 03 04 05 06 07 08 09 10 11 12

2018: 01 02 03 04 05 06 07 08 09 10 11 12

2017: 01 02 03 04 05 06 07 08 09 10 11 12

2016: 01 02 03 04 05 06 07 08 09 10 11 12

2015: 01 02 03 04 05 06 07 08 09 10 11 12

2014: 01 02 03 04 05 06 07 08 09 10 11 12

2013: 01 02 03 04 05 06 07 08 09 10 11 12

2012: 01 02 03 04 05 06 07 08 09 10 11 12

2011: 01 02 03 04 05 06 07 08 09 10 11 12

2010: 01 02 03 04 05 06 07 08 09 10 11 12

2009: 01 02 03 04 05 06 07 08 09 10 11 12

2008: 01 02 03 04 05 06 07 08 09 10 11 12

2007: 01 02 03 04 05 06 07 08 09 10 11 12

2006: 01 02 03 04 05 06 07 08 09 10 11 12

2005: 01 02 03 04 05 06 07 08 09 10 11 12

2004: 01 02 03 04 05 06 07 08 09 10 11 12

2003: 03 04 05 06 07 08 09 10 11 12

Other Book Reviews

Light Reads
James Davis Nicoll
Martin's Booklog
Outside of a Dog
rushthatspeaks
Salon Futura
Susan Stepney
Tor.com
Weasel Words

Fiction Authors

Elizabeth Bear
Steven Brust
Nicola Griffith
David Langford
Yoon Ha Lee
N.K. Jemisin
Rosemary Kirstein
Sarah Monette
Lyda Morehouse
John Scalzi
Karl Schroeder
Ursula Vernon

Social Commentary

Ask A Manager
Camestros Felapton
Captain Awkward
DNA Lounge
Camestros Felapton
Lowering the Bar
Cal Newport
James Nicoll
Anne Helen Petersen
Slacktivist (Fred Clark)
Adam Tooze
Jamie Zawinski

Technology and Science

Eye on the Storm
Linux Weekly News
Dan Luu
Bruce Schneier

Comics

Penny Arcade
XKCD
XKCD What If?

2013-07-10: kadmin-remctl 3.4

kadmin-remctl is a wrapper in front of the Kerberos kadmin protocol that exports many operations via remctl and adds some additional synchronization functionality.

The primary purpose of this release is to add disallow-svr to the default flags for all newly-created principals. This prohibits obtaining service tickets for the principal, which provides some hardening against brute force attacks. Since the create command is designed for creation of user principals, not service principals, and use of service tickets for user principals is quite obscure and rare in Kerberos, this seems like a better default.

This release also relaxes the default allowed principal regex to allow two-character user principals. We mostly prohibit them, but we had some old, disabled ones and at least one of those users returned. This is just a default that can be overridden by other sites.

This package, as I say most times when I release it, is badly in need of a complete overhaul, a switch to JSON for the attribute format, conversion to a saner Perl kadmin API, and various other improvements. One of these days....

You can get the latest version from the kadmin-remctl distribution page.

2013-07-10 20:08 — Permanent link

< June 2013 Russ Allbery > Eagle's Path August 2013 >
Last spun 2024-01-01 from thread modified 2013-07-11