1 libpve-access-control (5.0-6) unstable; urgency=medium
3 * Close #1470: Add server ceritifcate verification for AD and LDAP via the
4 'verify' option. For compatibility reasons this defaults to off for now,
5 but that might change with future updates.
7 * AD, LDAP: Add ability to specify a CA path or file, and a client
8 certificate via the 'capath', 'cert' and 'certkey' options.
10 -- Proxmox Support Team <support@proxmox.com> Tue, 08 Aug 2017 11:56:38 +0200
12 libpve-access-control (5.0-5) unstable; urgency=medium
14 * change from dpkg-deb to dpkg-buildpackage
16 -- Proxmox Support Team <support@proxmox.com> Thu, 22 Jun 2017 09:12:37 +0200
18 libpve-access-control (5.0-4) unstable; urgency=medium
20 * PVE/CLI/pveum.pm: call setup_default_cli_env()
22 * PVE/Auth/PVE.pm: encode uft8 password before calling crypt
24 * check_api2_permissions: avoid warning about uninitialized value
26 -- Proxmox Support Team <support@proxmox.com> Tue, 02 May 2017 11:58:15 +0200
28 libpve-access-control (5.0-3) unstable; urgency=medium
30 * use new PVE::OTP class from pve-common
32 * use new PVE::Tools::encrypt_pw from pve-common
34 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 17:45:55 +0200
36 libpve-access-control (5.0-2) unstable; urgency=medium
38 * encrypt_pw: avoid '+' for crypt salt
40 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 08:54:10 +0200
42 libpve-access-control (5.0-1) unstable; urgency=medium
46 -- Proxmox Support Team <support@proxmox.com> Mon, 6 Mar 2017 13:42:01 +0100
48 libpve-access-control (4.0-23) unstable; urgency=medium
50 * use new PVE::Ticket class
52 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 13:42:06 +0100
54 libpve-access-control (4.0-22) unstable; urgency=medium
56 * RPCEnvironment: removed check_volume_access() to avoid cyclic dependency
57 (moved to PVE::Storage)
59 * PVE::PCEnvironment: use new PVE::RESTEnvironment as base class
61 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 09:12:04 +0100
63 libpve-access-control (4.0-21) unstable; urgency=medium
65 * setup_default_cli_env: expect $class as first parameter
67 -- Proxmox Support Team <support@proxmox.com> Thu, 12 Jan 2017 13:54:27 +0100
69 libpve-access-control (4.0-20) unstable; urgency=medium
71 * PVE/RPCEnvironment.pm: new function setup_default_cli_env
73 * PVE/API2/Domains.pm: fix property description
75 * use new repoman for upload target
77 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2017 12:13:26 +0100
79 libpve-access-control (4.0-19) unstable; urgency=medium
81 * Close #833: ldap: non-anonymous bind support
83 * don't import 'RFC' from MIME::Base32
85 -- Proxmox Support Team <support@proxmox.com> Fri, 05 Aug 2016 13:09:08 +0200
87 libpve-access-control (4.0-18) unstable; urgency=medium
89 * fix #1062: recognize base32 otp keys again
91 -- Proxmox Support Team <support@proxmox.com> Thu, 21 Jul 2016 08:43:18 +0200
93 libpve-access-control (4.0-17) unstable; urgency=medium
95 * drop oathtool and libdigest-hmac-perl dependencies
97 -- Proxmox Support Team <support@proxmox.com> Mon, 11 Jul 2016 12:03:22 +0200
99 libpve-access-control (4.0-16) unstable; urgency=medium
101 * use pve-doc-generator to generate man pages
103 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Apr 2016 07:06:05 +0200
105 libpve-access-control (4.0-15) unstable; urgency=medium
107 * Fix uninitialized warning when shadow.cfg does not exist
109 -- Proxmox Support Team <support@proxmox.com> Fri, 01 Apr 2016 07:10:57 +0200
111 libpve-access-control (4.0-14) unstable; urgency=medium
113 * Add is_worker to RPCEnvironment
115 -- Proxmox Support Team <support@proxmox.com> Tue, 15 Mar 2016 16:47:34 +0100
117 libpve-access-control (4.0-13) unstable; urgency=medium
119 * fix #916: allow HTTPS to access custom yubico url
121 -- Proxmox Support Team <support@proxmox.com> Mon, 14 Mar 2016 11:39:23 +0100
123 libpve-access-control (4.0-12) unstable; urgency=medium
125 * Catch certificate errors instead of segfaulting
127 -- Proxmox Support Team <support@proxmox.com> Wed, 09 Mar 2016 14:41:01 +0100
129 libpve-access-control (4.0-11) unstable; urgency=medium
131 * Fix #861: use safer sprintf formatting
133 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Jan 2016 12:52:39 +0100
135 libpve-access-control (4.0-10) unstable; urgency=medium
137 * Auth::LDAP, Auth::AD: ipv6 support
139 -- Proxmox Support Team <support@proxmox.com> Thu, 03 Dec 2015 12:09:32 +0100
141 libpve-access-control (4.0-9) unstable; urgency=medium
143 * pveum: implement bash completion
145 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Oct 2015 17:22:52 +0200
147 libpve-access-control (4.0-8) unstable; urgency=medium
149 * remove_storage_access: cleanup of access permissions for removed storage
151 -- Proxmox Support Team <support@proxmox.com> Wed, 19 Aug 2015 15:39:15 +0200
153 libpve-access-control (4.0-7) unstable; urgency=medium
155 * new helper to remove access permissions for removed VMs
157 -- Proxmox Support Team <support@proxmox.com> Fri, 14 Aug 2015 07:57:02 +0200
159 libpve-access-control (4.0-6) unstable; urgency=medium
161 * improve parse_user_config, parse_shadow_config
163 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jul 2015 13:14:33 +0200
165 libpve-access-control (4.0-5) unstable; urgency=medium
167 * pveum: check for $cmd being defined
169 -- Proxmox Support Team <support@proxmox.com> Wed, 10 Jun 2015 10:40:15 +0200
171 libpve-access-control (4.0-4) unstable; urgency=medium
173 * use activate-noawait triggers
175 -- Proxmox Support Team <support@proxmox.com> Mon, 01 Jun 2015 12:25:31 +0200
177 libpve-access-control (4.0-3) unstable; urgency=medium
183 -- Proxmox Support Team <support@proxmox.com> Wed, 27 May 2015 11:15:44 +0200
185 libpve-access-control (4.0-2) unstable; urgency=medium
187 * trigger pve-api-updates event
189 -- Proxmox Support Team <support@proxmox.com> Tue, 05 May 2015 15:06:38 +0200
191 libpve-access-control (4.0-1) unstable; urgency=medium
193 * bump version for Debian Jessie
195 -- Proxmox Support Team <support@proxmox.com> Thu, 26 Feb 2015 11:22:01 +0100
197 libpve-access-control (3.0-16) unstable; urgency=low
199 * root@pam can now be disabled in GUI.
201 -- Proxmox Support Team <support@proxmox.com> Fri, 30 Jan 2015 06:20:22 +0100
203 libpve-access-control (3.0-15) unstable; urgency=low
205 * oath: add 'step' and 'digits' option
207 -- Proxmox Support Team <support@proxmox.com> Wed, 23 Jul 2014 06:59:52 +0200
209 libpve-access-control (3.0-14) unstable; urgency=low
211 * add oath two factor auth
213 * add oathkeygen binary to generate keys for oath
215 * add yubico two factor auth
219 * depend on libmime-base32-perl
221 * allow to write builtin auth domains config (comment/tfa/default)
223 -- Proxmox Support Team <support@proxmox.com> Thu, 17 Jul 2014 13:09:56 +0200
225 libpve-access-control (3.0-13) unstable; urgency=low
227 * use correct connection string for AD auth
229 -- Proxmox Support Team <support@proxmox.com> Thu, 22 May 2014 07:16:09 +0200
231 libpve-access-control (3.0-12) unstable; urgency=low
233 * add dummy API for GET /access/ticket (useful to generate login pages)
235 -- Proxmox Support Team <support@proxmox.com> Wed, 30 Apr 2014 14:47:56 +0200
237 libpve-access-control (3.0-11) unstable; urgency=low
239 * Sets common hot keys for spice client
241 -- Proxmox Support Team <support@proxmox.com> Fri, 31 Jan 2014 10:24:28 +0100
243 libpve-access-control (3.0-10) unstable; urgency=low
245 * implement helper to generate SPICE remote-viewer configuration
247 * depend on libnet-ssleay-perl
249 -- Proxmox Support Team <support@proxmox.com> Tue, 10 Dec 2013 10:45:08 +0100
251 libpve-access-control (3.0-9) unstable; urgency=low
253 * prevent user enumeration attacks
255 * allow dots in access paths
257 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Nov 2013 09:06:38 +0100
259 libpve-access-control (3.0-8) unstable; urgency=low
261 * spice: use lowercase hostname in ticktet signature
263 -- Proxmox Support Team <support@proxmox.com> Mon, 28 Oct 2013 08:11:57 +0100
265 libpve-access-control (3.0-7) unstable; urgency=low
267 * check_volume_access : use parse_volname instead of path, and remove
270 * use warnings instead of global -w flag.
272 -- Proxmox Support Team <support@proxmox.com> Tue, 01 Oct 2013 12:35:53 +0200
274 libpve-access-control (3.0-6) unstable; urgency=low
276 * use shorter spiceproxy tickets
278 -- Proxmox Support Team <support@proxmox.com> Fri, 19 Jul 2013 12:39:09 +0200
280 libpve-access-control (3.0-5) unstable; urgency=low
282 * add code to generate tickets for SPICE
284 -- Proxmox Support Team <support@proxmox.com> Wed, 26 Jun 2013 13:08:32 +0200
286 libpve-access-control (3.0-4) unstable; urgency=low
288 * moved add_vm_to_pool/remove_vm_from_pool from qemu-server
290 -- Proxmox Support Team <support@proxmox.com> Tue, 14 May 2013 11:56:54 +0200
292 libpve-access-control (3.0-3) unstable; urgency=low
294 * Add new role PVETemplateUser (and VM.Clone priviledge)
296 -- Proxmox Support Team <support@proxmox.com> Mon, 29 Apr 2013 11:42:15 +0200
298 libpve-access-control (3.0-2) unstable; urgency=low
300 * remove CGI.pm related code (pveproxy does not need that)
302 -- Proxmox Support Team <support@proxmox.com> Mon, 15 Apr 2013 12:34:23 +0200
304 libpve-access-control (3.0-1) unstable; urgency=low
306 * bump version for wheezy release
308 -- Proxmox Support Team <support@proxmox.com> Fri, 15 Mar 2013 08:07:06 +0100
310 libpve-access-control (1.0-26) unstable; urgency=low
312 * check_volume_access: fix access permissions for backup files
314 -- Proxmox Support Team <support@proxmox.com> Thu, 28 Feb 2013 10:00:14 +0100
316 libpve-access-control (1.0-25) unstable; urgency=low
318 * add VM.Snapshot permission
320 -- Proxmox Support Team <support@proxmox.com> Mon, 10 Sep 2012 09:23:32 +0200
322 libpve-access-control (1.0-24) unstable; urgency=low
324 * untaint path (allow root to restore arbitrary paths)
326 -- Proxmox Support Team <support@proxmox.com> Wed, 06 Jun 2012 13:06:34 +0200
328 libpve-access-control (1.0-23) unstable; urgency=low
330 * correctly compute GUI capabilities (consider pools)
332 -- Proxmox Support Team <support@proxmox.com> Wed, 30 May 2012 08:47:23 +0200
334 libpve-access-control (1.0-22) unstable; urgency=low
336 * new plugin architecture for Auth modules, minor API change for Auth
337 domains (new 'delete' parameter)
339 -- Proxmox Support Team <support@proxmox.com> Wed, 16 May 2012 07:21:44 +0200
341 libpve-access-control (1.0-21) unstable; urgency=low
343 * do not allow user names including slash
345 -- Proxmox Support Team <support@proxmox.com> Tue, 24 Apr 2012 10:07:47 +0200
347 libpve-access-control (1.0-20) unstable; urgency=low
349 * add ability to fork cli workers in background
351 -- Proxmox Support Team <support@proxmox.com> Wed, 18 Apr 2012 08:28:20 +0200
353 libpve-access-control (1.0-19) unstable; urgency=low
355 * return set of privileges on login - can be used to adopt GUI
357 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Apr 2012 10:25:10 +0200
359 libpve-access-control (1.0-18) unstable; urgency=low
361 * fix bug #151: corretly parse username inside ticket
363 * fix bug #152: allow user to change his own password
365 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Apr 2012 09:40:15 +0200
367 libpve-access-control (1.0-17) unstable; urgency=low
369 * set propagate flag by default
371 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Mar 2012 12:40:19 +0100
373 libpve-access-control (1.0-16) unstable; urgency=low
375 * add 'pveum passwd' method
377 -- Proxmox Support Team <support@proxmox.com> Thu, 23 Feb 2012 12:05:25 +0100
379 libpve-access-control (1.0-15) unstable; urgency=low
381 * Add VM.Config.CDROM privilege to PVEVMUser rule
383 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 11:44:23 +0100
385 libpve-access-control (1.0-14) unstable; urgency=low
387 * fix buf in userid-param permission check
389 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 10:52:35 +0100
391 libpve-access-control (1.0-13) unstable; urgency=low
393 * allow more characters in ldap base_dn attribute
395 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 06:17:02 +0100
397 libpve-access-control (1.0-12) unstable; urgency=low
399 * allow more characters with realm IDs
401 -- Proxmox Support Team <support@proxmox.com> Mon, 20 Feb 2012 08:50:33 +0100
403 libpve-access-control (1.0-11) unstable; urgency=low
405 * fix bug in exec_api2_perm_check
407 -- Proxmox Support Team <support@proxmox.com> Wed, 15 Feb 2012 07:06:30 +0100
409 libpve-access-control (1.0-10) unstable; urgency=low
411 * fix ACL group name parser
413 * changed 'pveum aclmod' command line arguments
415 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Feb 2012 12:08:02 +0100
417 libpve-access-control (1.0-9) unstable; urgency=low
419 * fix bug in check_volume_access (fixes vzrestore)
421 -- Proxmox Support Team <support@proxmox.com> Mon, 13 Feb 2012 09:56:37 +0100
423 libpve-access-control (1.0-8) unstable; urgency=low
425 * fix return value for empty ACL list.
427 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Feb 2012 11:25:04 +0100
429 libpve-access-control (1.0-7) unstable; urgency=low
431 * fix bug #85: allow root@pam to generate tickets for other users
433 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
435 libpve-access-control (1.0-6) unstable; urgency=low
437 * API change: allow to filter enabled/disabled users.
439 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2012 12:30:37 +0100
441 libpve-access-control (1.0-5) unstable; urgency=low
443 * add a way to return file changes (diffs): set_result_changes()
445 -- Proxmox Support Team <support@proxmox.com> Tue, 20 Dec 2011 11:18:48 +0100
447 libpve-access-control (1.0-4) unstable; urgency=low
449 * new environment type for ha agents
451 -- Proxmox Support Team <support@proxmox.com> Tue, 13 Dec 2011 10:08:53 +0100
453 libpve-access-control (1.0-3) unstable; urgency=low
455 * add support for delayed parameter parsing - We need that to disable
456 file upload for normal API request (avoid DOS attacs)
458 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Dec 2011 09:56:10 +0100
460 libpve-access-control (1.0-2) unstable; urgency=low
462 * fix bug in fork_worker
464 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Oct 2011 08:37:05 +0200
466 libpve-access-control (1.0-1) unstable; urgency=low
468 * allow '-' in permission paths
470 * bump version to 1.0
472 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jun 2011 13:51:48 +0200
474 libpve-access-control (0.1) unstable; urgency=low
476 * first dummy package - no functionality
478 -- Proxmox Support Team <support@proxmox.com> Thu, 09 Jul 2009 16:03:00 +0200