[Pkg-freeipa-devel] python-kdcproxy: Changes to 'master'

Timo Aaltonen tjaalton at moszumanska.debian.org
Tue Oct 20 20:51:28 UTC 2015


New branch 'master' available with the following commits:
commit d16c85d22f5f934b9dcdf72ffcbd26b9ce1d33a9
Author: Timo Aaltonen <tjaalton at debian.org>
Date:   Tue Oct 20 23:44:42 2015 +0300

    releasing package python-kdcproxy version 0.3.2-1

commit bd4e8b7a5c4ea7cd14a8038b1f924b8734fe0bcb
Author: Timo Aaltonen <tjaalton at debian.org>
Date:   Tue Oct 20 19:02:38 2015 +0300

    disable tests for now, as they fail

commit 1cfa5ad065004618f39195378cadcd052d31093c
Author: Timo Aaltonen <tjaalton at debian.org>
Date:   Tue Oct 20 19:02:19 2015 +0300

    initial packaging

commit f32c13314edd9bfb45df7aadcb482ee8c1d360e3
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Aug 3 14:54:33 2015 -0400

    Release 0.3.2

commit 24b8f54699b0b1c07aa2e2e3b9e2aa7c131df78c
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Aug 3 14:55:17 2015 -0400

    Revert "Document LimitRequestBody stanza"
    
    This reverts commit e4a71193099cd395578bcf32f4eb8beaa7da3e43.

commit f274aa6787cb8b3ec1cc12c440a56665b7231882
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Aug 3 14:38:49 2015 -0400

    Enforce a maximum packet length
    
    Permanently fixes CVE-2015-5159 for all applications.

commit e4a71193099cd395578bcf32f4eb8beaa7da3e43
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Jul 22 12:47:12 2015 -0400

    Document LimitRequestBody stanza
    
    This prevents DoS attacks.
    
    CVE-2015-5159
    
    Fixes #20

commit 96bfe8b171478981927345e64e30f4671adaacec
Author: Nathaniel McCallum <nathaniel at themccallums.org>
Date:   Tue Jul 7 08:52:54 2015 -0400

    Release 0.3.1

commit 5724c88d3cd5633e6396d7bf33a2b98e1d247f28
Author: Christian Heimes <cheimes at redhat.com>
Date:   Wed Jun 24 15:32:21 2015 +0200

    Fix tox compatibility issue on Fedora 21
    
    Fedora 21 has python-tox-1.7.1. The version doesn't support conditional
    requirements.

commit 2c5da06994492c2776cd9d1851b3bbe990c88fa9
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Jun 10 16:03:29 2015 -0400

    Release 0.3

commit 8f31d42725c7ecfaa1911315ec135823ea4ea35e
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Jun 10 16:03:06 2015 -0400

    Add Christian Heimes as an author

commit 88f07a831fcd6a8895950ef24780d385007b7595
Author: Christian Heimes <cheimes at redhat.com>
Date:   Fri May 22 10:24:39 2015 +0200

    Make README markdown compatible again
    
    README must be valid markdown (for github) and restructured text (for
    PyPI).

commit 031ce69fb57828e899805f48b921184ff19536b6
Author: Christian Heimes <cheimes at redhat.com>
Date:   Wed May 13 09:08:32 2015 +0200

    Add testing infrastructure
    
    The new unit test infrastructure uses tox, py.test, coverage, flake8 and
    doc8. To run the tests, install python-tox and run:
    
        tox
    
    The test check for Python 2.7 and 3.4 compatibility. The source files
    and documentation are checked for PEP8 conformity, too.

commit 6c9f0fec1b950d0f74867c1709623bad5bfd27f3
Author: Christian Heimes <cheimes at redhat.com>
Date:   Wed May 13 11:52:43 2015 +0200

    Update README with examples and configuration hints
    
    * explain client-side configuration
    * give some debugging hints
    * add more detailed example for mod_wsgi settings
    * include a note on configuration reloading

commit 657b38658c3c708661dd2187bb3b4d06dc7f367e
Author: Christian Heimes <cheimes at redhat.com>
Date:   Thu May 21 10:22:02 2015 +0200

    Fix error in logging code of the global config handler
    
    The error logger of KDCProxyConfig.__init__ was referring to the
    wrong variable.

commit da761441b3091dee8cccd5b0098f74a4cc941cfa
Author: Christian Heimes <cheimes at redhat.com>
Date:   Fri May 15 10:03:30 2015 +0200

    Fix and improve kdcproxy.config.mit module
    
    Bugs fixed:
     * get_bool() wasn't working on Python because char* input
       parameters were unicode instead of bytes.
     * dns_lookup_kdc option was ignored. prof.section() returns a
       list of tuples.
     * each kpasswd lookup modified the internal kpasswd_server list. This
       bug causes the list to grow with every request.
    
    Reimplement parts of module with advanced ctypes feature.
    
    The module now uses function prototypes with argtypes, restype and
    errcheck as well as structs for type-safe function calls and simpler
    error checks. A custom text type makes UTF-8 support simpler, too.

commit 6ec3f459a03c33eb54d644c1e4477f336d0d8681
Author: Christian Heimes <cheimes at redhat.com>
Date:   Thu May 21 10:28:36 2015 +0200

    Fix error in HTTPError call with GET requests
    
    GET requests caused an internal server error because HTTPError was
    called with wrong arguments for headers.

commit e9aeff1a544671529ea6f160914573dcca31a85c
Author: Christian Heimes <cheimes at redhat.com>
Date:   Mon May 18 09:25:45 2015 +0200

    Fix socket.recv() behavior for TCP sockets
    
    For TCP sockets, one call to recv() may not return the entire message.
    If the first reply is not as long as the expected message size, further
    results are accumulated in a buffer until the socket signals EOF.

commit bae10ef4e124456044215adcea4fe03b306a1005
Author: Christian Heimes <cheimes at redhat.com>
Date:   Fri May 15 12:14:23 2015 +0200

    Fix KPASSWDProxyRequest.__str__

commit cfbb9399259c49cbf2aacaed364d940a3fbb16b5
Author: Christian Heimes <cheimes at redhat.com>
Date:   Wed May 13 09:24:02 2015 +0200

    PEP8-tify the source code

commit 0c9d0c0b9c11622e8dd932421425099ce90ebe49
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Fri Oct 24 10:18:22 2014 -0400

    Release 0.2.1

commit df1f5a4ea2b73295c2cf026c1401f55c8a941183
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Fri Oct 24 10:13:37 2014 -0400

    Remove all shebang lines
    
    The shebang lines cause some packaging tools to create hard
    dependencies on the python3 binary when no hard dependency is
    required.

commit 0fb130cd80a67ec8107a0d60d190f94fbefc97ee
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Fri Oct 24 10:01:34 2014 -0400

    Python 3 no longer supports .has_key() on os.environ

commit b64909d2b0f6a1e800a54680ecf9ad33771354b0
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Fri Oct 24 10:00:29 2014 -0400

    Only process known MIT config keys

commit 62f0c3402567f38309306bfaf80d1a1731d975ed
Author: Patrick Uiterwijk <puiterwijk at redhat.com>
Date:   Fri Oct 24 13:40:17 2014 +0200

    Fix handling instantiation errors

commit 55710bab448bc3743d09ac1b220269f28b7e766e
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Thu Oct 16 11:23:12 2014 -0400

    Release 0.2

commit 65f9ca29e01ba5bb2e7d63c461dd8f50d7ecebee
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Thu Oct 16 11:19:27 2014 -0400

    Update docs for recent changes

commit 4f74cc671d9a7b4c265564b70b363a98d7b2b1a7
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Fri Feb 7 18:14:18 2014 -0500

    Handle python3's socket.SOCK_NONBLOCK more cleanly
    
    Use the fact that python2 doesn't mix socket.SOCK_NONBLOCK in with
    socket .type attributes to add a helper method that does the right
    thing for both, and use it when reading back a socket's type.

commit e87f1004201dc54b67d3fdd1e3dc35dff4310a09
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Fri Feb 7 18:16:14 2014 -0500

    Prefer to read configuration from $KDCPROXY_CONFIG
    
    If $KDCPROXY_CONFIG is defined, try to read it instead of
    /etc/kdcproxy.conf.  Otherwise, read /etc/kdcproxy.conf, as
    we did before.  Proposed for issue #4.

commit 30c0fed8de4f859cb8b4bb7468069db9aed331ad
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Fri Feb 7 18:17:54 2014 -0500

    Work around read() not finishing under paste
    
    When run from mod_wsgi, env["wsgi.input"].read's default behavior of
    reading until the end of the data is reached pulls in the rest of the
    client's request.  Under paste with SSL, it blocks.  So if the client
    sent a Content-Length header, stop after reading just that many bytes.

commit 6e1cd076e5662bec8be45fde006672d9cc169236
Author: Nalin Dahyabhai <nalin at dahyabhai.net>
Date:   Wed Apr 23 10:47:55 2014 -0400

    Always instantiate an application
    
    When run under mod_wsgi, we're invoked as 'kdcproxy', so we don't supply
    the application object that it expects.  Just remove the conditional
    logic and always instantiate one.

commit 1c95425fc4b1d20a413674d5d4214fbd05b227c9
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Feb 5 13:10:59 2014 -0500

    Only give TCP a longer timeout after connection
    
    Fixes #3.

commit 42bf4d72cf01568b4e9b744b91bae3602d665d98
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Feb 5 12:56:22 2014 -0500

    Filter out socket types we don't support
    
    Fixes #2.

commit 0c9d47ca8f1a2235ee0433f0ef5c15d22df066d8
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Feb 5 12:32:13 2014 -0500

    Remove trailing whitespace

commit faabc6efa0f417e68cbd4f2ee644f77c4ae4eb98
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Wed Feb 5 12:31:29 2014 -0500

    Use the correct encoder (DER)
    
    Fixes #1

commit 01333670d69e4c55d20032d54d0e5760271ed1f8
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Tue Jan 21 16:39:42 2014 -0500

    Release 0.1.1

commit a00cd0ac2ed87be7baccdfa92c97052122059f02
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Tue Jan 21 16:37:41 2014 -0500

    Add missing copyright header

commit 370fd4dcdc1ae9eb58ad707b4b90bea5b795d4ec
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Tue Jan 21 15:59:49 2014 -0500

    Prepare for release

commit 90ea534796f1d374c803eba225a3c5550f2a25b7
Author: Nalin Dahyabhai <nalin at redhat.com>
Date:   Tue Jan 21 15:56:14 2014 -0500

    Handle the 4-byte prefix when proxying over UDP

commit 3c88ed36fde2b38c203b5ace97d87a05b6d174e8
Author: Nalin Dahyabhai <nalin at redhat.com>
Date:   Tue Jan 21 15:46:04 2014 -0500

    Use all the arguments in the getaddrinfo() results

commit 01851029056da6da36d76c65fb4ef1451da457d3
Author: Nalin Dahyabhai <nalin at redhat.com>
Date:   Tue Jan 21 15:45:17 2014 -0500

    Fix bug in socket type conditionals

commit cc01a45bd6a3a71c48dbaa2a963d3a658c7723cc
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Tue Jan 21 15:23:30 2014 -0500

    Fix logic around non-blocking connect() (thanks Nalin!)

commit 893bba1af11ac4c50e9c705080a75d70981aec61
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Tue Jan 21 09:12:16 2014 -0500

    Clarify some important points in the docs

commit 2c6214a8510fc808fd9e61abf9f17fbc89a1afa1
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 17:40:17 2014 -0500

    Update documentation for UDP support

commit cfbbdb877a5bfec6447b56df80b3d5a1cff98b01
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 17:29:50 2014 -0500

    Remove obsolete config normalization

commit 8cd033fecdd0af449759d5c5e3ddd9ddcf94218f
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 17:26:50 2014 -0500

    Add UDP support

commit b2b92d505f1f7f53c16925c0a0250601f24bfaa5
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 17:25:51 2014 -0500

    Catch all DNS errors

commit 0fe7dc3bcc7ff93118a201f5119670baf730ec03
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 17:25:30 2014 -0500

    Fix typo (thanks Nalin!)

commit 145bda94497f24f65528e6e5d28dac7332324db8
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 14:39:06 2014 -0500

    Fix codec and wsgi code

commit 8b8434154b9730dbe9533eef054d4d31885f2d6f
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 14:07:36 2014 -0500

    Fix decoding bug typo

commit b409cba11db540cab85d18f3cde00e770728e8db
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 13:59:04 2014 -0500

    Create a more flexible configuration system

commit 3c819f4273657573dd053762fc5009421577de41
Author: Nathaniel McCallum <npmccallum at redhat.com>
Date:   Mon Jan 20 14:00:32 2014 -0500

    Initial commit




More information about the Pkg-freeipa-devel mailing list