1 libpve-access-control (5.1-5) unstable; urgency=medium
3 * fix vnc ticket verification without authkey lifetime
5 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Mar 2019 10:43:17 +0100
7 libpve-access-control (5.1-4) unstable; urgency=medium
9 * fix #1891: Add zsh command completion for pveum
11 * ground work to fix #2079: add periodic auth key rotation. Not yet enabled
12 to avoid issues on upgrade, will be enabled with 6.0
14 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Mar 2019 09:12:05 +0100
16 libpve-access-control (5.1-3) unstable; urgency=medium
18 * api/ticket: move getting cluster name into an eval
20 -- Proxmox Support Team <support@proxmox.com> Thu, 29 Nov 2018 12:59:36 +0100
22 libpve-access-control (5.1-2) unstable; urgency=medium
24 * fix #1998: correct return properties for read_role
26 -- Proxmox Support Team <support@proxmox.com> Fri, 23 Nov 2018 14:22:40 +0100
28 libpve-access-control (5.1-1) unstable; urgency=medium
30 * pveum: introduce sub-commands
32 * register userid with completion
34 * fix #233: return cluster name on successful login
36 -- Proxmox Support Team <support@proxmox.com> Thu, 15 Nov 2018 09:34:47 +0100
38 libpve-access-control (5.0-8) unstable; urgency=medium
40 * fix #1612: ldap: make 2nd server work with bind domains again
42 * fix an error message where passing a bad pool id to an API function would
43 make it complain about a wrong group name instead
45 * fix the API-returned permission list so that the GUI knows to show the
46 'Permissions' tab for a storage to an administrator apart from root@pam
48 -- Proxmox Support Team <support@proxmox.com> Thu, 18 Jan 2018 13:34:50 +0100
50 libpve-access-control (5.0-7) unstable; urgency=medium
52 * VM.Snapshot.Rollback privilege added
54 * api: check for special roles before locking the usercfg
56 * fix #1501: pveum: die when deleting special role
58 * API/ticket: rework coarse grained permission computation
60 -- Proxmox Support Team <support@proxmox.com> Thu, 5 Oct 2017 11:27:48 +0200
62 libpve-access-control (5.0-6) unstable; urgency=medium
64 * Close #1470: Add server ceritifcate verification for AD and LDAP via the
65 'verify' option. For compatibility reasons this defaults to off for now,
66 but that might change with future updates.
68 * AD, LDAP: Add ability to specify a CA path or file, and a client
69 certificate via the 'capath', 'cert' and 'certkey' options.
71 -- Proxmox Support Team <support@proxmox.com> Tue, 08 Aug 2017 11:56:38 +0200
73 libpve-access-control (5.0-5) unstable; urgency=medium
75 * change from dpkg-deb to dpkg-buildpackage
77 -- Proxmox Support Team <support@proxmox.com> Thu, 22 Jun 2017 09:12:37 +0200
79 libpve-access-control (5.0-4) unstable; urgency=medium
81 * PVE/CLI/pveum.pm: call setup_default_cli_env()
83 * PVE/Auth/PVE.pm: encode uft8 password before calling crypt
85 * check_api2_permissions: avoid warning about uninitialized value
87 -- Proxmox Support Team <support@proxmox.com> Tue, 02 May 2017 11:58:15 +0200
89 libpve-access-control (5.0-3) unstable; urgency=medium
91 * use new PVE::OTP class from pve-common
93 * use new PVE::Tools::encrypt_pw from pve-common
95 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 17:45:55 +0200
97 libpve-access-control (5.0-2) unstable; urgency=medium
99 * encrypt_pw: avoid '+' for crypt salt
101 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 08:54:10 +0200
103 libpve-access-control (5.0-1) unstable; urgency=medium
105 * rebuild for PVE 5.0
107 -- Proxmox Support Team <support@proxmox.com> Mon, 6 Mar 2017 13:42:01 +0100
109 libpve-access-control (4.0-23) unstable; urgency=medium
111 * use new PVE::Ticket class
113 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 13:42:06 +0100
115 libpve-access-control (4.0-22) unstable; urgency=medium
117 * RPCEnvironment: removed check_volume_access() to avoid cyclic dependency
118 (moved to PVE::Storage)
120 * PVE::PCEnvironment: use new PVE::RESTEnvironment as base class
122 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 09:12:04 +0100
124 libpve-access-control (4.0-21) unstable; urgency=medium
126 * setup_default_cli_env: expect $class as first parameter
128 -- Proxmox Support Team <support@proxmox.com> Thu, 12 Jan 2017 13:54:27 +0100
130 libpve-access-control (4.0-20) unstable; urgency=medium
132 * PVE/RPCEnvironment.pm: new function setup_default_cli_env
134 * PVE/API2/Domains.pm: fix property description
136 * use new repoman for upload target
138 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2017 12:13:26 +0100
140 libpve-access-control (4.0-19) unstable; urgency=medium
142 * Close #833: ldap: non-anonymous bind support
144 * don't import 'RFC' from MIME::Base32
146 -- Proxmox Support Team <support@proxmox.com> Fri, 05 Aug 2016 13:09:08 +0200
148 libpve-access-control (4.0-18) unstable; urgency=medium
150 * fix #1062: recognize base32 otp keys again
152 -- Proxmox Support Team <support@proxmox.com> Thu, 21 Jul 2016 08:43:18 +0200
154 libpve-access-control (4.0-17) unstable; urgency=medium
156 * drop oathtool and libdigest-hmac-perl dependencies
158 -- Proxmox Support Team <support@proxmox.com> Mon, 11 Jul 2016 12:03:22 +0200
160 libpve-access-control (4.0-16) unstable; urgency=medium
162 * use pve-doc-generator to generate man pages
164 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Apr 2016 07:06:05 +0200
166 libpve-access-control (4.0-15) unstable; urgency=medium
168 * Fix uninitialized warning when shadow.cfg does not exist
170 -- Proxmox Support Team <support@proxmox.com> Fri, 01 Apr 2016 07:10:57 +0200
172 libpve-access-control (4.0-14) unstable; urgency=medium
174 * Add is_worker to RPCEnvironment
176 -- Proxmox Support Team <support@proxmox.com> Tue, 15 Mar 2016 16:47:34 +0100
178 libpve-access-control (4.0-13) unstable; urgency=medium
180 * fix #916: allow HTTPS to access custom yubico url
182 -- Proxmox Support Team <support@proxmox.com> Mon, 14 Mar 2016 11:39:23 +0100
184 libpve-access-control (4.0-12) unstable; urgency=medium
186 * Catch certificate errors instead of segfaulting
188 -- Proxmox Support Team <support@proxmox.com> Wed, 09 Mar 2016 14:41:01 +0100
190 libpve-access-control (4.0-11) unstable; urgency=medium
192 * Fix #861: use safer sprintf formatting
194 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Jan 2016 12:52:39 +0100
196 libpve-access-control (4.0-10) unstable; urgency=medium
198 * Auth::LDAP, Auth::AD: ipv6 support
200 -- Proxmox Support Team <support@proxmox.com> Thu, 03 Dec 2015 12:09:32 +0100
202 libpve-access-control (4.0-9) unstable; urgency=medium
204 * pveum: implement bash completion
206 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Oct 2015 17:22:52 +0200
208 libpve-access-control (4.0-8) unstable; urgency=medium
210 * remove_storage_access: cleanup of access permissions for removed storage
212 -- Proxmox Support Team <support@proxmox.com> Wed, 19 Aug 2015 15:39:15 +0200
214 libpve-access-control (4.0-7) unstable; urgency=medium
216 * new helper to remove access permissions for removed VMs
218 -- Proxmox Support Team <support@proxmox.com> Fri, 14 Aug 2015 07:57:02 +0200
220 libpve-access-control (4.0-6) unstable; urgency=medium
222 * improve parse_user_config, parse_shadow_config
224 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jul 2015 13:14:33 +0200
226 libpve-access-control (4.0-5) unstable; urgency=medium
228 * pveum: check for $cmd being defined
230 -- Proxmox Support Team <support@proxmox.com> Wed, 10 Jun 2015 10:40:15 +0200
232 libpve-access-control (4.0-4) unstable; urgency=medium
234 * use activate-noawait triggers
236 -- Proxmox Support Team <support@proxmox.com> Mon, 01 Jun 2015 12:25:31 +0200
238 libpve-access-control (4.0-3) unstable; urgency=medium
244 -- Proxmox Support Team <support@proxmox.com> Wed, 27 May 2015 11:15:44 +0200
246 libpve-access-control (4.0-2) unstable; urgency=medium
248 * trigger pve-api-updates event
250 -- Proxmox Support Team <support@proxmox.com> Tue, 05 May 2015 15:06:38 +0200
252 libpve-access-control (4.0-1) unstable; urgency=medium
254 * bump version for Debian Jessie
256 -- Proxmox Support Team <support@proxmox.com> Thu, 26 Feb 2015 11:22:01 +0100
258 libpve-access-control (3.0-16) unstable; urgency=low
260 * root@pam can now be disabled in GUI.
262 -- Proxmox Support Team <support@proxmox.com> Fri, 30 Jan 2015 06:20:22 +0100
264 libpve-access-control (3.0-15) unstable; urgency=low
266 * oath: add 'step' and 'digits' option
268 -- Proxmox Support Team <support@proxmox.com> Wed, 23 Jul 2014 06:59:52 +0200
270 libpve-access-control (3.0-14) unstable; urgency=low
272 * add oath two factor auth
274 * add oathkeygen binary to generate keys for oath
276 * add yubico two factor auth
280 * depend on libmime-base32-perl
282 * allow to write builtin auth domains config (comment/tfa/default)
284 -- Proxmox Support Team <support@proxmox.com> Thu, 17 Jul 2014 13:09:56 +0200
286 libpve-access-control (3.0-13) unstable; urgency=low
288 * use correct connection string for AD auth
290 -- Proxmox Support Team <support@proxmox.com> Thu, 22 May 2014 07:16:09 +0200
292 libpve-access-control (3.0-12) unstable; urgency=low
294 * add dummy API for GET /access/ticket (useful to generate login pages)
296 -- Proxmox Support Team <support@proxmox.com> Wed, 30 Apr 2014 14:47:56 +0200
298 libpve-access-control (3.0-11) unstable; urgency=low
300 * Sets common hot keys for spice client
302 -- Proxmox Support Team <support@proxmox.com> Fri, 31 Jan 2014 10:24:28 +0100
304 libpve-access-control (3.0-10) unstable; urgency=low
306 * implement helper to generate SPICE remote-viewer configuration
308 * depend on libnet-ssleay-perl
310 -- Proxmox Support Team <support@proxmox.com> Tue, 10 Dec 2013 10:45:08 +0100
312 libpve-access-control (3.0-9) unstable; urgency=low
314 * prevent user enumeration attacks
316 * allow dots in access paths
318 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Nov 2013 09:06:38 +0100
320 libpve-access-control (3.0-8) unstable; urgency=low
322 * spice: use lowercase hostname in ticktet signature
324 -- Proxmox Support Team <support@proxmox.com> Mon, 28 Oct 2013 08:11:57 +0100
326 libpve-access-control (3.0-7) unstable; urgency=low
328 * check_volume_access : use parse_volname instead of path, and remove
331 * use warnings instead of global -w flag.
333 -- Proxmox Support Team <support@proxmox.com> Tue, 01 Oct 2013 12:35:53 +0200
335 libpve-access-control (3.0-6) unstable; urgency=low
337 * use shorter spiceproxy tickets
339 -- Proxmox Support Team <support@proxmox.com> Fri, 19 Jul 2013 12:39:09 +0200
341 libpve-access-control (3.0-5) unstable; urgency=low
343 * add code to generate tickets for SPICE
345 -- Proxmox Support Team <support@proxmox.com> Wed, 26 Jun 2013 13:08:32 +0200
347 libpve-access-control (3.0-4) unstable; urgency=low
349 * moved add_vm_to_pool/remove_vm_from_pool from qemu-server
351 -- Proxmox Support Team <support@proxmox.com> Tue, 14 May 2013 11:56:54 +0200
353 libpve-access-control (3.0-3) unstable; urgency=low
355 * Add new role PVETemplateUser (and VM.Clone priviledge)
357 -- Proxmox Support Team <support@proxmox.com> Mon, 29 Apr 2013 11:42:15 +0200
359 libpve-access-control (3.0-2) unstable; urgency=low
361 * remove CGI.pm related code (pveproxy does not need that)
363 -- Proxmox Support Team <support@proxmox.com> Mon, 15 Apr 2013 12:34:23 +0200
365 libpve-access-control (3.0-1) unstable; urgency=low
367 * bump version for wheezy release
369 -- Proxmox Support Team <support@proxmox.com> Fri, 15 Mar 2013 08:07:06 +0100
371 libpve-access-control (1.0-26) unstable; urgency=low
373 * check_volume_access: fix access permissions for backup files
375 -- Proxmox Support Team <support@proxmox.com> Thu, 28 Feb 2013 10:00:14 +0100
377 libpve-access-control (1.0-25) unstable; urgency=low
379 * add VM.Snapshot permission
381 -- Proxmox Support Team <support@proxmox.com> Mon, 10 Sep 2012 09:23:32 +0200
383 libpve-access-control (1.0-24) unstable; urgency=low
385 * untaint path (allow root to restore arbitrary paths)
387 -- Proxmox Support Team <support@proxmox.com> Wed, 06 Jun 2012 13:06:34 +0200
389 libpve-access-control (1.0-23) unstable; urgency=low
391 * correctly compute GUI capabilities (consider pools)
393 -- Proxmox Support Team <support@proxmox.com> Wed, 30 May 2012 08:47:23 +0200
395 libpve-access-control (1.0-22) unstable; urgency=low
397 * new plugin architecture for Auth modules, minor API change for Auth
398 domains (new 'delete' parameter)
400 -- Proxmox Support Team <support@proxmox.com> Wed, 16 May 2012 07:21:44 +0200
402 libpve-access-control (1.0-21) unstable; urgency=low
404 * do not allow user names including slash
406 -- Proxmox Support Team <support@proxmox.com> Tue, 24 Apr 2012 10:07:47 +0200
408 libpve-access-control (1.0-20) unstable; urgency=low
410 * add ability to fork cli workers in background
412 -- Proxmox Support Team <support@proxmox.com> Wed, 18 Apr 2012 08:28:20 +0200
414 libpve-access-control (1.0-19) unstable; urgency=low
416 * return set of privileges on login - can be used to adopt GUI
418 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Apr 2012 10:25:10 +0200
420 libpve-access-control (1.0-18) unstable; urgency=low
422 * fix bug #151: corretly parse username inside ticket
424 * fix bug #152: allow user to change his own password
426 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Apr 2012 09:40:15 +0200
428 libpve-access-control (1.0-17) unstable; urgency=low
430 * set propagate flag by default
432 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Mar 2012 12:40:19 +0100
434 libpve-access-control (1.0-16) unstable; urgency=low
436 * add 'pveum passwd' method
438 -- Proxmox Support Team <support@proxmox.com> Thu, 23 Feb 2012 12:05:25 +0100
440 libpve-access-control (1.0-15) unstable; urgency=low
442 * Add VM.Config.CDROM privilege to PVEVMUser rule
444 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 11:44:23 +0100
446 libpve-access-control (1.0-14) unstable; urgency=low
448 * fix buf in userid-param permission check
450 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 10:52:35 +0100
452 libpve-access-control (1.0-13) unstable; urgency=low
454 * allow more characters in ldap base_dn attribute
456 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 06:17:02 +0100
458 libpve-access-control (1.0-12) unstable; urgency=low
460 * allow more characters with realm IDs
462 -- Proxmox Support Team <support@proxmox.com> Mon, 20 Feb 2012 08:50:33 +0100
464 libpve-access-control (1.0-11) unstable; urgency=low
466 * fix bug in exec_api2_perm_check
468 -- Proxmox Support Team <support@proxmox.com> Wed, 15 Feb 2012 07:06:30 +0100
470 libpve-access-control (1.0-10) unstable; urgency=low
472 * fix ACL group name parser
474 * changed 'pveum aclmod' command line arguments
476 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Feb 2012 12:08:02 +0100
478 libpve-access-control (1.0-9) unstable; urgency=low
480 * fix bug in check_volume_access (fixes vzrestore)
482 -- Proxmox Support Team <support@proxmox.com> Mon, 13 Feb 2012 09:56:37 +0100
484 libpve-access-control (1.0-8) unstable; urgency=low
486 * fix return value for empty ACL list.
488 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Feb 2012 11:25:04 +0100
490 libpve-access-control (1.0-7) unstable; urgency=low
492 * fix bug #85: allow root@pam to generate tickets for other users
494 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
496 libpve-access-control (1.0-6) unstable; urgency=low
498 * API change: allow to filter enabled/disabled users.
500 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2012 12:30:37 +0100
502 libpve-access-control (1.0-5) unstable; urgency=low
504 * add a way to return file changes (diffs): set_result_changes()
506 -- Proxmox Support Team <support@proxmox.com> Tue, 20 Dec 2011 11:18:48 +0100
508 libpve-access-control (1.0-4) unstable; urgency=low
510 * new environment type for ha agents
512 -- Proxmox Support Team <support@proxmox.com> Tue, 13 Dec 2011 10:08:53 +0100
514 libpve-access-control (1.0-3) unstable; urgency=low
516 * add support for delayed parameter parsing - We need that to disable
517 file upload for normal API request (avoid DOS attacs)
519 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Dec 2011 09:56:10 +0100
521 libpve-access-control (1.0-2) unstable; urgency=low
523 * fix bug in fork_worker
525 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Oct 2011 08:37:05 +0200
527 libpve-access-control (1.0-1) unstable; urgency=low
529 * allow '-' in permission paths
531 * bump version to 1.0
533 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jun 2011 13:51:48 +0200
535 libpve-access-control (0.1) unstable; urgency=low
537 * first dummy package - no functionality
539 -- Proxmox Support Team <support@proxmox.com> Thu, 09 Jul 2009 16:03:00 +0200