pcp
[Top] [All Lists]

pcp updates: auth

To: PCP Mailing List <pcp@xxxxxxxxxxx>
Subject: pcp updates: auth
From: Nathan Scott <nathans@xxxxxxxxxx>
Date: Wed, 8 May 2013 08:02:17 -0400 (EDT)
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <867020309.12775446.1368014527256.JavaMail.root@xxxxxxxxxx>
Reply-to: Nathan Scott <nathans@xxxxxxxxxx>
Thread-index: MaZ+0Li6QS+csskNEdEXKaFlCs3CQw==
Thread-topic: pcp updates: auth
Changes committed to git://oss.sgi.com/pcp/pcp.git dev

 debian/libpcp-pmda3-dev.install |    2 
 man/man3/pmdafetch.3            |    2 
 man/man3/pmdamain.3             |   66 +++++++---------
 qa/174                          |    3 
 qa/174.out                      |    2 
 qa/322.out.2                    |    3 
 qa/367.out.2                    |    7 +
 qa/449.out.2                    |    4 
 qa/513.out.2                    |    8 +
 qa/617                          |    7 -
 qa/617.out                      |    2 
 qa/src/pdu-server.c             |   29 +++++++
 qa/src/pducheck.c               |   46 +++++++++++
 qa/src/pducrash.c               |   47 +++++++++++
 src/include/pcp/impl.h          |   27 +++---
 src/include/pcp/pmda.h          |   67 +++++++++-------
 src/libpcp/src/GNUmakefile      |    4 
 src/libpcp/src/check-statics    |    2 
 src/libpcp/src/connectlocal.c   |    1 
 src/libpcp/src/internal.h       |    2 
 src/libpcp/src/p_auth.c         |  163 ++++++++++++++++++++++++++++++++++++++++
 src/libpcp/src/p_userauth.c     |   88 ---------------------
 src/libpcp/src/pdu.c            |    5 -
 src/libpcp/src/secureconnect.c  |   33 +++++---
 src/libpcp/src/secureserver.c   |    4 
 src/libpcp_pmda/src/callback.c  |   16 ++-
 src/libpcp_pmda/src/libdefs.h   |   14 +--
 src/libpcp_pmda/src/mainloop.c  |  143 +++++++++--------------------------
 src/libpcp_pmda/src/open.c      |  159 ++++++++++++---------------------------
 src/pmdas/linux_proc/pmda.c     |   24 ++---
 src/pmdas/pmcd/help             |   18 +++-
 src/pmdas/pmcd/root_pmcd        |    4 
 src/pmdas/pmcd/src/pmcd.c       |    6 +
 src/pmdas/sample/src/sample.c   |    2 
 34 files changed, 570 insertions(+), 440 deletions(-)

commit c62c38ffbc7d23f2a16b8527c80196933388d514
Author: Nathan Scott <nathans@xxxxxxxxxx>
Date:   Wed May 8 22:00:47 2013 +1000

    Interfaces for PMDAs making use of client authentication
    
    Pushes the security attributes mechanism into libpcp_pmda.
    This will allow authenticated client information, making use
    of the existing client context concept, to be used by PMDAs
    that want to provide user-specific metric values (for example).
    Updated the Linux pmdaproc to use v6 pmda interfaces preparing
    it for assimilation down the track.
    
    Added in convenience names to the pmdaInterface structure
    so that the version-union struct names can match up with the
    PMDA_VERSION macro names as its just alot more intuitive.
    Also reworked the semantics of the internal HAVE_V_XXX macros
    in libpcp_pmda as they were getting out of hand with addition
    of yet another.
    
    Removed an incorrect pmdaMain(3) diagnostics section entry,
    and removed references to long-deprecated library routines
    (that do not even exist in the code anymore).
    
    Make __pmdaSetupPDU static within libpcp_pmda - it only makes
    to use internally.  Modified it to allow manipulation of the
    credentials flags to tell pmcd this PMDA is interested in any
    authentication information that it sees.
    
    QA test updates to exercise the additional PDU, and deal with
    the introduction of a new PMDA interface.  Work remains within
    pmcd and libpcp to actually transfer the auth attributes, but
    its now largely understood how best to tackle that.

commit a7cbdcbee6b9528db08428726f16e32f688b5b17
Author: Nathan Scott <nathans@xxxxxxxxxx>
Date:   Wed May 8 11:40:10 2013 +1000

    Further work toward establishing authenticated connections
    
    Ensure that we do not accidentally attempt SSL importing on
    non-secure (regular) sockets, else subsequent PDU recv/send
    activity can see spurious SSL size errors.
    
    Add a mechanism for overriding the default SASL plugin and
    configuration paths (more env vars, yay).
    
    Fix an off-by-one on the to-be-sure null termination of the
    string passed into the SASL library (recv'd from the server).

commit 4d9d07bb39da2da62356ed2fec0e049c5ae3d71d
Author: Nathan Scott <nathans@xxxxxxxxxx>
Date:   Wed May 8 11:36:07 2013 +1000

    Additional security attributes added for exposing uid/gid

<Prev in Thread] Current Thread [Next in Thread>
  • pcp updates: auth, Nathan Scott <=