bump version to 5.1-1
[pve-access-control.git] / debian / changelog
CommitLineData
b54b7474
TL
1libpve-access-control (5.1-1) unstable; urgency=medium
2
3 * pveum: introduce sub-commands
4
5 * register userid with completion
6
7 * fix #233: return cluster name on successful login
8
9 -- Proxmox Support Team <support@proxmox.com> Thu, 15 Nov 2018 09:34:47 +0100
10
52192dd4
WB
11libpve-access-control (5.0-8) unstable; urgency=medium
12
13 * fix #1612: ldap: make 2nd server work with bind domains again
14
15 * fix an error message where passing a bad pool id to an API function would
16 make it complain about a wrong group name instead
17
18 * fix the API-returned permission list so that the GUI knows to show the
19 'Permissions' tab for a storage to an administrator apart from root@pam
20
21 -- Proxmox Support Team <support@proxmox.com> Thu, 18 Jan 2018 13:34:50 +0100
22
3dadf8cf
FG
23libpve-access-control (5.0-7) unstable; urgency=medium
24
25 * VM.Snapshot.Rollback privilege added
26
27 * api: check for special roles before locking the usercfg
28
29 * fix #1501: pveum: die when deleting special role
30
31 * API/ticket: rework coarse grained permission computation
32
33 -- Proxmox Support Team <support@proxmox.com> Thu, 5 Oct 2017 11:27:48 +0200
34
ec4141f4
WB
35libpve-access-control (5.0-6) unstable; urgency=medium
36
37 * Close #1470: Add server ceritifcate verification for AD and LDAP via the
38 'verify' option. For compatibility reasons this defaults to off for now,
39 but that might change with future updates.
40
41 * AD, LDAP: Add ability to specify a CA path or file, and a client
42 certificate via the 'capath', 'cert' and 'certkey' options.
43
44 -- Proxmox Support Team <support@proxmox.com> Tue, 08 Aug 2017 11:56:38 +0200
45
63134bd4
DM
46libpve-access-control (5.0-5) unstable; urgency=medium
47
48 * change from dpkg-deb to dpkg-buildpackage
49
50 -- Proxmox Support Team <support@proxmox.com> Thu, 22 Jun 2017 09:12:37 +0200
51
868fb1ea
DM
52libpve-access-control (5.0-4) unstable; urgency=medium
53
54 * PVE/CLI/pveum.pm: call setup_default_cli_env()
55
56 * PVE/Auth/PVE.pm: encode uft8 password before calling crypt
57
58 * check_api2_permissions: avoid warning about uninitialized value
59
60 -- Proxmox Support Team <support@proxmox.com> Tue, 02 May 2017 11:58:15 +0200
61
63358f40
DM
62libpve-access-control (5.0-3) unstable; urgency=medium
63
64 * use new PVE::OTP class from pve-common
65
66 * use new PVE::Tools::encrypt_pw from pve-common
67
68 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 17:45:55 +0200
69
05fd50af
DM
70libpve-access-control (5.0-2) unstable; urgency=medium
71
72 * encrypt_pw: avoid '+' for crypt salt
73
74 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 08:54:10 +0200
75
0835385b
FG
76libpve-access-control (5.0-1) unstable; urgency=medium
77
78 * rebuild for PVE 5.0
79
80 -- Proxmox Support Team <support@proxmox.com> Mon, 6 Mar 2017 13:42:01 +0100
81
730f8863
DM
82libpve-access-control (4.0-23) unstable; urgency=medium
83
84 * use new PVE::Ticket class
85
86 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 13:42:06 +0100
87
1f1c4593
DM
88libpve-access-control (4.0-22) unstable; urgency=medium
89
90 * RPCEnvironment: removed check_volume_access() to avoid cyclic dependency
91 (moved to PVE::Storage)
92
93 * PVE::PCEnvironment: use new PVE::RESTEnvironment as base class
94
95 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 09:12:04 +0100
96
f9105063
DM
97libpve-access-control (4.0-21) unstable; urgency=medium
98
99 * setup_default_cli_env: expect $class as first parameter
100
101 -- Proxmox Support Team <support@proxmox.com> Thu, 12 Jan 2017 13:54:27 +0100
102
9595066e
DM
103libpve-access-control (4.0-20) unstable; urgency=medium
104
105 * PVE/RPCEnvironment.pm: new function setup_default_cli_env
106
107 * PVE/API2/Domains.pm: fix property description
108
109 * use new repoman for upload target
110
111 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2017 12:13:26 +0100
112
2af5a793
DM
113libpve-access-control (4.0-19) unstable; urgency=medium
114
115 * Close #833: ldap: non-anonymous bind support
116
117 * don't import 'RFC' from MIME::Base32
118
119 -- Proxmox Support Team <support@proxmox.com> Fri, 05 Aug 2016 13:09:08 +0200
120
5d87bb77
WB
121libpve-access-control (4.0-18) unstable; urgency=medium
122
123 * fix #1062: recognize base32 otp keys again
124
125 -- Proxmox Support Team <support@proxmox.com> Thu, 21 Jul 2016 08:43:18 +0200
126
28ddf48b
WB
127libpve-access-control (4.0-17) unstable; urgency=medium
128
129 * drop oathtool and libdigest-hmac-perl dependencies
130
131 -- Proxmox Support Team <support@proxmox.com> Mon, 11 Jul 2016 12:03:22 +0200
132
15cebb28
DM
133libpve-access-control (4.0-16) unstable; urgency=medium
134
135 * use pve-doc-generator to generate man pages
136
137 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Apr 2016 07:06:05 +0200
138
678df887
DM
139libpve-access-control (4.0-15) unstable; urgency=medium
140
141 * Fix uninitialized warning when shadow.cfg does not exist
142
143 -- Proxmox Support Team <support@proxmox.com> Fri, 01 Apr 2016 07:10:57 +0200
144
cca9761a
DM
145libpve-access-control (4.0-14) unstable; urgency=medium
146
147 * Add is_worker to RPCEnvironment
148
149 -- Proxmox Support Team <support@proxmox.com> Tue, 15 Mar 2016 16:47:34 +0100
150
8643c99d
DM
151libpve-access-control (4.0-13) unstable; urgency=medium
152
153 * fix #916: allow HTTPS to access custom yubico url
154
155 -- Proxmox Support Team <support@proxmox.com> Mon, 14 Mar 2016 11:39:23 +0100
156
ae2a6bf9
DM
157libpve-access-control (4.0-12) unstable; urgency=medium
158
159 * Catch certificate errors instead of segfaulting
160
161 -- Proxmox Support Team <support@proxmox.com> Wed, 09 Mar 2016 14:41:01 +0100
162
4836db5f
DM
163libpve-access-control (4.0-11) unstable; urgency=medium
164
165 * Fix #861: use safer sprintf formatting
166
167 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Jan 2016 12:52:39 +0100
168
ccbe23dc
DM
169libpve-access-control (4.0-10) unstable; urgency=medium
170
171 * Auth::LDAP, Auth::AD: ipv6 support
172
173 -- Proxmox Support Team <support@proxmox.com> Thu, 03 Dec 2015 12:09:32 +0100
174
90399ca4
DM
175libpve-access-control (4.0-9) unstable; urgency=medium
176
177 * pveum: implement bash completion
178
179 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Oct 2015 17:22:52 +0200
180
364ffc13
DM
181libpve-access-control (4.0-8) unstable; urgency=medium
182
183 * remove_storage_access: cleanup of access permissions for removed storage
184
185 -- Proxmox Support Team <support@proxmox.com> Wed, 19 Aug 2015 15:39:15 +0200
186
7c26cb4a
DM
187libpve-access-control (4.0-7) unstable; urgency=medium
188
189 * new helper to remove access permissions for removed VMs
190
191 -- Proxmox Support Team <support@proxmox.com> Fri, 14 Aug 2015 07:57:02 +0200
192
296afbd1
DM
193libpve-access-control (4.0-6) unstable; urgency=medium
194
195 * improve parse_user_config, parse_shadow_config
196
197 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jul 2015 13:14:33 +0200
198
7d2df2ef
DM
199libpve-access-control (4.0-5) unstable; urgency=medium
200
201 * pveum: check for $cmd being defined
202
203 -- Proxmox Support Team <support@proxmox.com> Wed, 10 Jun 2015 10:40:15 +0200
204
98a34e3f
DM
205libpve-access-control (4.0-4) unstable; urgency=medium
206
207 * use activate-noawait triggers
208
209 -- Proxmox Support Team <support@proxmox.com> Mon, 01 Jun 2015 12:25:31 +0200
210
15462727
DM
211libpve-access-control (4.0-3) unstable; urgency=medium
212
213 * IPv6 fixes
214
215 * non-root buildfix
216
217 -- Proxmox Support Team <support@proxmox.com> Wed, 27 May 2015 11:15:44 +0200
218
bbf4cc9a
DM
219libpve-access-control (4.0-2) unstable; urgency=medium
220
221 * trigger pve-api-updates event
222
223 -- Proxmox Support Team <support@proxmox.com> Tue, 05 May 2015 15:06:38 +0200
224
dfbcf6d3
DM
225libpve-access-control (4.0-1) unstable; urgency=medium
226
227 * bump version for Debian Jessie
228
229 -- Proxmox Support Team <support@proxmox.com> Thu, 26 Feb 2015 11:22:01 +0100
230
94971b3a
DM
231libpve-access-control (3.0-16) unstable; urgency=low
232
233 * root@pam can now be disabled in GUI.
234
235 -- Proxmox Support Team <support@proxmox.com> Fri, 30 Jan 2015 06:20:22 +0100
236
7b17c7cb
DM
237libpve-access-control (3.0-15) unstable; urgency=low
238
239 * oath: add 'step' and 'digits' option
240
241 -- Proxmox Support Team <support@proxmox.com> Wed, 23 Jul 2014 06:59:52 +0200
242
1abc2c0a
DM
243libpve-access-control (3.0-14) unstable; urgency=low
244
245 * add oath two factor auth
246
247 * add oathkeygen binary to generate keys for oath
248
249 * add yubico two factor auth
250
251 * dedend on oathtool
252
253 * depend on libmime-base32-perl
30be0de9
DM
254
255 * allow to write builtin auth domains config (comment/tfa/default)
1abc2c0a
DM
256
257 -- Proxmox Support Team <support@proxmox.com> Thu, 17 Jul 2014 13:09:56 +0200
258
298450ab
DM
259libpve-access-control (3.0-13) unstable; urgency=low
260
261 * use correct connection string for AD auth
262
263 -- Proxmox Support Team <support@proxmox.com> Thu, 22 May 2014 07:16:09 +0200
264
396034e4
DM
265libpve-access-control (3.0-12) unstable; urgency=low
266
267 * add dummy API for GET /access/ticket (useful to generate login pages)
268
269 -- Proxmox Support Team <support@proxmox.com> Wed, 30 Apr 2014 14:47:56 +0200
270
26361123
DM
271libpve-access-control (3.0-11) unstable; urgency=low
272
273 * Sets common hot keys for spice client
274
275 -- Proxmox Support Team <support@proxmox.com> Fri, 31 Jan 2014 10:24:28 +0100
276
3643383d
DM
277libpve-access-control (3.0-10) unstable; urgency=low
278
279 * implement helper to generate SPICE remote-viewer configuration
280
281 * depend on libnet-ssleay-perl
282
283 -- Proxmox Support Team <support@proxmox.com> Tue, 10 Dec 2013 10:45:08 +0100
284
0baedcf7
DM
285libpve-access-control (3.0-9) unstable; urgency=low
286
287 * prevent user enumeration attacks
e4f8fc2e
DM
288
289 * allow dots in access paths
0baedcf7
DM
290
291 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Nov 2013 09:06:38 +0100
292
d4b63eae
DM
293libpve-access-control (3.0-8) unstable; urgency=low
294
295 * spice: use lowercase hostname in ticktet signature
296
297 -- Proxmox Support Team <support@proxmox.com> Mon, 28 Oct 2013 08:11:57 +0100
298
49594944
DM
299libpve-access-control (3.0-7) unstable; urgency=low
300
301 * check_volume_access : use parse_volname instead of path, and remove
302 path related code.
7c410d63
DM
303
304 * use warnings instead of global -w flag.
49594944
DM
305
306 -- Proxmox Support Team <support@proxmox.com> Tue, 01 Oct 2013 12:35:53 +0200
307
fe7de5d0
DM
308libpve-access-control (3.0-6) unstable; urgency=low
309
310 * use shorter spiceproxy tickets
311
312 -- Proxmox Support Team <support@proxmox.com> Fri, 19 Jul 2013 12:39:09 +0200
313
4cdd9507
DM
314libpve-access-control (3.0-5) unstable; urgency=low
315
316 * add code to generate tickets for SPICE
317
318 -- Proxmox Support Team <support@proxmox.com> Wed, 26 Jun 2013 13:08:32 +0200
319
677f9ab0
DM
320libpve-access-control (3.0-4) unstable; urgency=low
321
322 * moved add_vm_to_pool/remove_vm_from_pool from qemu-server
323
324 -- Proxmox Support Team <support@proxmox.com> Tue, 14 May 2013 11:56:54 +0200
325
139a8ecf
DM
326libpve-access-control (3.0-3) unstable; urgency=low
327
7b395f99 328 * Add new role PVETemplateUser (and VM.Clone priviledge)
139a8ecf
DM
329
330 -- Proxmox Support Team <support@proxmox.com> Mon, 29 Apr 2013 11:42:15 +0200
331
b78ce7c2
DM
332libpve-access-control (3.0-2) unstable; urgency=low
333
334 * remove CGI.pm related code (pveproxy does not need that)
335
336 -- Proxmox Support Team <support@proxmox.com> Mon, 15 Apr 2013 12:34:23 +0200
337
786820f9
DM
338libpve-access-control (3.0-1) unstable; urgency=low
339
340 * bump version for wheezy release
341
342 -- Proxmox Support Team <support@proxmox.com> Fri, 15 Mar 2013 08:07:06 +0100
343
e5ae5487
DM
344libpve-access-control (1.0-26) unstable; urgency=low
345
346 * check_volume_access: fix access permissions for backup files
347
348 -- Proxmox Support Team <support@proxmox.com> Thu, 28 Feb 2013 10:00:14 +0100
349
e3e6510c
DM
350libpve-access-control (1.0-25) unstable; urgency=low
351
352 * add VM.Snapshot permission
353
354 -- Proxmox Support Team <support@proxmox.com> Mon, 10 Sep 2012 09:23:32 +0200
355
1e15ebe7
DM
356libpve-access-control (1.0-24) unstable; urgency=low
357
358 * untaint path (allow root to restore arbitrary paths)
359
360 -- Proxmox Support Team <support@proxmox.com> Wed, 06 Jun 2012 13:06:34 +0200
361
437be042
DM
362libpve-access-control (1.0-23) unstable; urgency=low
363
364 * correctly compute GUI capabilities (consider pools)
365
366 -- Proxmox Support Team <support@proxmox.com> Wed, 30 May 2012 08:47:23 +0200
367
5bb4e06a
DM
368libpve-access-control (1.0-22) unstable; urgency=low
369
370 * new plugin architecture for Auth modules, minor API change for Auth
371 domains (new 'delete' parameter)
372
373 -- Proxmox Support Team <support@proxmox.com> Wed, 16 May 2012 07:21:44 +0200
374
3030a176
DM
375libpve-access-control (1.0-21) unstable; urgency=low
376
377 * do not allow user names including slash
378
379 -- Proxmox Support Team <support@proxmox.com> Tue, 24 Apr 2012 10:07:47 +0200
380
381libpve-access-control (1.0-20) unstable; urgency=low
382
383 * add ability to fork cli workers in background
384
385 -- Proxmox Support Team <support@proxmox.com> Wed, 18 Apr 2012 08:28:20 +0200
386
dd2cfee0
DM
387libpve-access-control (1.0-19) unstable; urgency=low
388
389 * return set of privileges on login - can be used to adopt GUI
390
391 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Apr 2012 10:25:10 +0200
392
1cf154b7
DM
393libpve-access-control (1.0-18) unstable; urgency=low
394
533219a1
DM
395 * fix bug #151: corretly parse username inside ticket
396
397 * fix bug #152: allow user to change his own password
1cf154b7
DM
398
399 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Apr 2012 09:40:15 +0200
400
2de14407
DM
401libpve-access-control (1.0-17) unstable; urgency=low
402
403 * set propagate flag by default
404
405 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Mar 2012 12:40:19 +0100
406
bdc61d7a
DM
407libpve-access-control (1.0-16) unstable; urgency=low
408
409 * add 'pveum passwd' method
410
411 -- Proxmox Support Team <support@proxmox.com> Thu, 23 Feb 2012 12:05:25 +0100
412
cc7bdf33
DM
413libpve-access-control (1.0-15) unstable; urgency=low
414
415 * Add VM.Config.CDROM privilege to PVEVMUser rule
416
417 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 11:44:23 +0100
418
a69bbe2e
DM
419libpve-access-control (1.0-14) unstable; urgency=low
420
421 * fix buf in userid-param permission check
422
423 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 10:52:35 +0100
424
d9483d94
DM
425libpve-access-control (1.0-13) unstable; urgency=low
426
427 * allow more characters in ldap base_dn attribute
428
429 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 06:17:02 +0100
430
84619607
DM
431libpve-access-control (1.0-12) unstable; urgency=low
432
433 * allow more characters with realm IDs
434
435 -- Proxmox Support Team <support@proxmox.com> Mon, 20 Feb 2012 08:50:33 +0100
436
09d27058
DM
437libpve-access-control (1.0-11) unstable; urgency=low
438
439 * fix bug in exec_api2_perm_check
440
441 -- Proxmox Support Team <support@proxmox.com> Wed, 15 Feb 2012 07:06:30 +0100
442
7a4c849e
DM
443libpve-access-control (1.0-10) unstable; urgency=low
444
445 * fix ACL group name parser
446
447 * changed 'pveum aclmod' command line arguments
448
449 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Feb 2012 12:08:02 +0100
450
3eac4e35
DM
451libpve-access-control (1.0-9) unstable; urgency=low
452
453 * fix bug in check_volume_access (fixes vzrestore)
454
455 -- Proxmox Support Team <support@proxmox.com> Mon, 13 Feb 2012 09:56:37 +0100
456
4384e19e
DM
457libpve-access-control (1.0-8) unstable; urgency=low
458
459 * fix return value for empty ACL list.
460
461 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Feb 2012 11:25:04 +0100
462
d8a56966
DM
463libpve-access-control (1.0-7) unstable; urgency=low
464
465 * fix bug #85: allow root@pam to generate tickets for other users
466
467 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
468
cb6f2f93
DM
469libpve-access-control (1.0-6) unstable; urgency=low
470
471 * API change: allow to filter enabled/disabled users.
472
473 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2012 12:30:37 +0100
474
272fe9ff
DM
475libpve-access-control (1.0-5) unstable; urgency=low
476
477 * add a way to return file changes (diffs): set_result_changes()
478
479 -- Proxmox Support Team <support@proxmox.com> Tue, 20 Dec 2011 11:18:48 +0100
480
e42eedbc
DM
481libpve-access-control (1.0-4) unstable; urgency=low
482
483 * new environment type for ha agents
484
485 -- Proxmox Support Team <support@proxmox.com> Tue, 13 Dec 2011 10:08:53 +0100
486
1fba27e0
DM
487libpve-access-control (1.0-3) unstable; urgency=low
488
489 * add support for delayed parameter parsing - We need that to disable
490 file upload for normal API request (avoid DOS attacs)
491
492 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Dec 2011 09:56:10 +0100
493
5bf71a96
DM
494libpve-access-control (1.0-2) unstable; urgency=low
495
496 * fix bug in fork_worker
497
498 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Oct 2011 08:37:05 +0200
499
2c3a6c0a
DM
500libpve-access-control (1.0-1) unstable; urgency=low
501
502 * allow '-' in permission paths
503
504 * bump version to 1.0
505
506 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jun 2011 13:51:48 +0200
507
508libpve-access-control (0.1) unstable; urgency=low
509
510 * first dummy package - no functionality
511
512 -- Proxmox Support Team <support@proxmox.com> Thu, 09 Jul 2009 16:03:00 +0200
513