1 libpve-access-control (5.1-4) unstable; urgency=medium
3 * fix #1891: Add zsh command completion for pveum
5 * ground work to fix #2079: add periodic auth key rotation. Not yet enabled
6 to avoid issues on upgrade, will be enabled with 6.0
8 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Mar 2019 09:12:05 +0100
10 libpve-access-control (5.1-3) unstable; urgency=medium
12 * api/ticket: move getting cluster name into an eval
14 -- Proxmox Support Team <support@proxmox.com> Thu, 29 Nov 2018 12:59:36 +0100
16 libpve-access-control (5.1-2) unstable; urgency=medium
18 * fix #1998: correct return properties for read_role
20 -- Proxmox Support Team <support@proxmox.com> Fri, 23 Nov 2018 14:22:40 +0100
22 libpve-access-control (5.1-1) unstable; urgency=medium
24 * pveum: introduce sub-commands
26 * register userid with completion
28 * fix #233: return cluster name on successful login
30 -- Proxmox Support Team <support@proxmox.com> Thu, 15 Nov 2018 09:34:47 +0100
32 libpve-access-control (5.0-8) unstable; urgency=medium
34 * fix #1612: ldap: make 2nd server work with bind domains again
36 * fix an error message where passing a bad pool id to an API function would
37 make it complain about a wrong group name instead
39 * fix the API-returned permission list so that the GUI knows to show the
40 'Permissions' tab for a storage to an administrator apart from root@pam
42 -- Proxmox Support Team <support@proxmox.com> Thu, 18 Jan 2018 13:34:50 +0100
44 libpve-access-control (5.0-7) unstable; urgency=medium
46 * VM.Snapshot.Rollback privilege added
48 * api: check for special roles before locking the usercfg
50 * fix #1501: pveum: die when deleting special role
52 * API/ticket: rework coarse grained permission computation
54 -- Proxmox Support Team <support@proxmox.com> Thu, 5 Oct 2017 11:27:48 +0200
56 libpve-access-control (5.0-6) unstable; urgency=medium
58 * Close #1470: Add server ceritifcate verification for AD and LDAP via the
59 'verify' option. For compatibility reasons this defaults to off for now,
60 but that might change with future updates.
62 * AD, LDAP: Add ability to specify a CA path or file, and a client
63 certificate via the 'capath', 'cert' and 'certkey' options.
65 -- Proxmox Support Team <support@proxmox.com> Tue, 08 Aug 2017 11:56:38 +0200
67 libpve-access-control (5.0-5) unstable; urgency=medium
69 * change from dpkg-deb to dpkg-buildpackage
71 -- Proxmox Support Team <support@proxmox.com> Thu, 22 Jun 2017 09:12:37 +0200
73 libpve-access-control (5.0-4) unstable; urgency=medium
75 * PVE/CLI/pveum.pm: call setup_default_cli_env()
77 * PVE/Auth/PVE.pm: encode uft8 password before calling crypt
79 * check_api2_permissions: avoid warning about uninitialized value
81 -- Proxmox Support Team <support@proxmox.com> Tue, 02 May 2017 11:58:15 +0200
83 libpve-access-control (5.0-3) unstable; urgency=medium
85 * use new PVE::OTP class from pve-common
87 * use new PVE::Tools::encrypt_pw from pve-common
89 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 17:45:55 +0200
91 libpve-access-control (5.0-2) unstable; urgency=medium
93 * encrypt_pw: avoid '+' for crypt salt
95 -- Proxmox Support Team <support@proxmox.com> Thu, 30 Mar 2017 08:54:10 +0200
97 libpve-access-control (5.0-1) unstable; urgency=medium
101 -- Proxmox Support Team <support@proxmox.com> Mon, 6 Mar 2017 13:42:01 +0100
103 libpve-access-control (4.0-23) unstable; urgency=medium
105 * use new PVE::Ticket class
107 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 13:42:06 +0100
109 libpve-access-control (4.0-22) unstable; urgency=medium
111 * RPCEnvironment: removed check_volume_access() to avoid cyclic dependency
112 (moved to PVE::Storage)
114 * PVE::PCEnvironment: use new PVE::RESTEnvironment as base class
116 -- Proxmox Support Team <support@proxmox.com> Thu, 19 Jan 2017 09:12:04 +0100
118 libpve-access-control (4.0-21) unstable; urgency=medium
120 * setup_default_cli_env: expect $class as first parameter
122 -- Proxmox Support Team <support@proxmox.com> Thu, 12 Jan 2017 13:54:27 +0100
124 libpve-access-control (4.0-20) unstable; urgency=medium
126 * PVE/RPCEnvironment.pm: new function setup_default_cli_env
128 * PVE/API2/Domains.pm: fix property description
130 * use new repoman for upload target
132 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2017 12:13:26 +0100
134 libpve-access-control (4.0-19) unstable; urgency=medium
136 * Close #833: ldap: non-anonymous bind support
138 * don't import 'RFC' from MIME::Base32
140 -- Proxmox Support Team <support@proxmox.com> Fri, 05 Aug 2016 13:09:08 +0200
142 libpve-access-control (4.0-18) unstable; urgency=medium
144 * fix #1062: recognize base32 otp keys again
146 -- Proxmox Support Team <support@proxmox.com> Thu, 21 Jul 2016 08:43:18 +0200
148 libpve-access-control (4.0-17) unstable; urgency=medium
150 * drop oathtool and libdigest-hmac-perl dependencies
152 -- Proxmox Support Team <support@proxmox.com> Mon, 11 Jul 2016 12:03:22 +0200
154 libpve-access-control (4.0-16) unstable; urgency=medium
156 * use pve-doc-generator to generate man pages
158 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Apr 2016 07:06:05 +0200
160 libpve-access-control (4.0-15) unstable; urgency=medium
162 * Fix uninitialized warning when shadow.cfg does not exist
164 -- Proxmox Support Team <support@proxmox.com> Fri, 01 Apr 2016 07:10:57 +0200
166 libpve-access-control (4.0-14) unstable; urgency=medium
168 * Add is_worker to RPCEnvironment
170 -- Proxmox Support Team <support@proxmox.com> Tue, 15 Mar 2016 16:47:34 +0100
172 libpve-access-control (4.0-13) unstable; urgency=medium
174 * fix #916: allow HTTPS to access custom yubico url
176 -- Proxmox Support Team <support@proxmox.com> Mon, 14 Mar 2016 11:39:23 +0100
178 libpve-access-control (4.0-12) unstable; urgency=medium
180 * Catch certificate errors instead of segfaulting
182 -- Proxmox Support Team <support@proxmox.com> Wed, 09 Mar 2016 14:41:01 +0100
184 libpve-access-control (4.0-11) unstable; urgency=medium
186 * Fix #861: use safer sprintf formatting
188 -- Proxmox Support Team <support@proxmox.com> Fri, 08 Jan 2016 12:52:39 +0100
190 libpve-access-control (4.0-10) unstable; urgency=medium
192 * Auth::LDAP, Auth::AD: ipv6 support
194 -- Proxmox Support Team <support@proxmox.com> Thu, 03 Dec 2015 12:09:32 +0100
196 libpve-access-control (4.0-9) unstable; urgency=medium
198 * pveum: implement bash completion
200 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Oct 2015 17:22:52 +0200
202 libpve-access-control (4.0-8) unstable; urgency=medium
204 * remove_storage_access: cleanup of access permissions for removed storage
206 -- Proxmox Support Team <support@proxmox.com> Wed, 19 Aug 2015 15:39:15 +0200
208 libpve-access-control (4.0-7) unstable; urgency=medium
210 * new helper to remove access permissions for removed VMs
212 -- Proxmox Support Team <support@proxmox.com> Fri, 14 Aug 2015 07:57:02 +0200
214 libpve-access-control (4.0-6) unstable; urgency=medium
216 * improve parse_user_config, parse_shadow_config
218 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jul 2015 13:14:33 +0200
220 libpve-access-control (4.0-5) unstable; urgency=medium
222 * pveum: check for $cmd being defined
224 -- Proxmox Support Team <support@proxmox.com> Wed, 10 Jun 2015 10:40:15 +0200
226 libpve-access-control (4.0-4) unstable; urgency=medium
228 * use activate-noawait triggers
230 -- Proxmox Support Team <support@proxmox.com> Mon, 01 Jun 2015 12:25:31 +0200
232 libpve-access-control (4.0-3) unstable; urgency=medium
238 -- Proxmox Support Team <support@proxmox.com> Wed, 27 May 2015 11:15:44 +0200
240 libpve-access-control (4.0-2) unstable; urgency=medium
242 * trigger pve-api-updates event
244 -- Proxmox Support Team <support@proxmox.com> Tue, 05 May 2015 15:06:38 +0200
246 libpve-access-control (4.0-1) unstable; urgency=medium
248 * bump version for Debian Jessie
250 -- Proxmox Support Team <support@proxmox.com> Thu, 26 Feb 2015 11:22:01 +0100
252 libpve-access-control (3.0-16) unstable; urgency=low
254 * root@pam can now be disabled in GUI.
256 -- Proxmox Support Team <support@proxmox.com> Fri, 30 Jan 2015 06:20:22 +0100
258 libpve-access-control (3.0-15) unstable; urgency=low
260 * oath: add 'step' and 'digits' option
262 -- Proxmox Support Team <support@proxmox.com> Wed, 23 Jul 2014 06:59:52 +0200
264 libpve-access-control (3.0-14) unstable; urgency=low
266 * add oath two factor auth
268 * add oathkeygen binary to generate keys for oath
270 * add yubico two factor auth
274 * depend on libmime-base32-perl
276 * allow to write builtin auth domains config (comment/tfa/default)
278 -- Proxmox Support Team <support@proxmox.com> Thu, 17 Jul 2014 13:09:56 +0200
280 libpve-access-control (3.0-13) unstable; urgency=low
282 * use correct connection string for AD auth
284 -- Proxmox Support Team <support@proxmox.com> Thu, 22 May 2014 07:16:09 +0200
286 libpve-access-control (3.0-12) unstable; urgency=low
288 * add dummy API for GET /access/ticket (useful to generate login pages)
290 -- Proxmox Support Team <support@proxmox.com> Wed, 30 Apr 2014 14:47:56 +0200
292 libpve-access-control (3.0-11) unstable; urgency=low
294 * Sets common hot keys for spice client
296 -- Proxmox Support Team <support@proxmox.com> Fri, 31 Jan 2014 10:24:28 +0100
298 libpve-access-control (3.0-10) unstable; urgency=low
300 * implement helper to generate SPICE remote-viewer configuration
302 * depend on libnet-ssleay-perl
304 -- Proxmox Support Team <support@proxmox.com> Tue, 10 Dec 2013 10:45:08 +0100
306 libpve-access-control (3.0-9) unstable; urgency=low
308 * prevent user enumeration attacks
310 * allow dots in access paths
312 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Nov 2013 09:06:38 +0100
314 libpve-access-control (3.0-8) unstable; urgency=low
316 * spice: use lowercase hostname in ticktet signature
318 -- Proxmox Support Team <support@proxmox.com> Mon, 28 Oct 2013 08:11:57 +0100
320 libpve-access-control (3.0-7) unstable; urgency=low
322 * check_volume_access : use parse_volname instead of path, and remove
325 * use warnings instead of global -w flag.
327 -- Proxmox Support Team <support@proxmox.com> Tue, 01 Oct 2013 12:35:53 +0200
329 libpve-access-control (3.0-6) unstable; urgency=low
331 * use shorter spiceproxy tickets
333 -- Proxmox Support Team <support@proxmox.com> Fri, 19 Jul 2013 12:39:09 +0200
335 libpve-access-control (3.0-5) unstable; urgency=low
337 * add code to generate tickets for SPICE
339 -- Proxmox Support Team <support@proxmox.com> Wed, 26 Jun 2013 13:08:32 +0200
341 libpve-access-control (3.0-4) unstable; urgency=low
343 * moved add_vm_to_pool/remove_vm_from_pool from qemu-server
345 -- Proxmox Support Team <support@proxmox.com> Tue, 14 May 2013 11:56:54 +0200
347 libpve-access-control (3.0-3) unstable; urgency=low
349 * Add new role PVETemplateUser (and VM.Clone priviledge)
351 -- Proxmox Support Team <support@proxmox.com> Mon, 29 Apr 2013 11:42:15 +0200
353 libpve-access-control (3.0-2) unstable; urgency=low
355 * remove CGI.pm related code (pveproxy does not need that)
357 -- Proxmox Support Team <support@proxmox.com> Mon, 15 Apr 2013 12:34:23 +0200
359 libpve-access-control (3.0-1) unstable; urgency=low
361 * bump version for wheezy release
363 -- Proxmox Support Team <support@proxmox.com> Fri, 15 Mar 2013 08:07:06 +0100
365 libpve-access-control (1.0-26) unstable; urgency=low
367 * check_volume_access: fix access permissions for backup files
369 -- Proxmox Support Team <support@proxmox.com> Thu, 28 Feb 2013 10:00:14 +0100
371 libpve-access-control (1.0-25) unstable; urgency=low
373 * add VM.Snapshot permission
375 -- Proxmox Support Team <support@proxmox.com> Mon, 10 Sep 2012 09:23:32 +0200
377 libpve-access-control (1.0-24) unstable; urgency=low
379 * untaint path (allow root to restore arbitrary paths)
381 -- Proxmox Support Team <support@proxmox.com> Wed, 06 Jun 2012 13:06:34 +0200
383 libpve-access-control (1.0-23) unstable; urgency=low
385 * correctly compute GUI capabilities (consider pools)
387 -- Proxmox Support Team <support@proxmox.com> Wed, 30 May 2012 08:47:23 +0200
389 libpve-access-control (1.0-22) unstable; urgency=low
391 * new plugin architecture for Auth modules, minor API change for Auth
392 domains (new 'delete' parameter)
394 -- Proxmox Support Team <support@proxmox.com> Wed, 16 May 2012 07:21:44 +0200
396 libpve-access-control (1.0-21) unstable; urgency=low
398 * do not allow user names including slash
400 -- Proxmox Support Team <support@proxmox.com> Tue, 24 Apr 2012 10:07:47 +0200
402 libpve-access-control (1.0-20) unstable; urgency=low
404 * add ability to fork cli workers in background
406 -- Proxmox Support Team <support@proxmox.com> Wed, 18 Apr 2012 08:28:20 +0200
408 libpve-access-control (1.0-19) unstable; urgency=low
410 * return set of privileges on login - can be used to adopt GUI
412 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Apr 2012 10:25:10 +0200
414 libpve-access-control (1.0-18) unstable; urgency=low
416 * fix bug #151: corretly parse username inside ticket
418 * fix bug #152: allow user to change his own password
420 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Apr 2012 09:40:15 +0200
422 libpve-access-control (1.0-17) unstable; urgency=low
424 * set propagate flag by default
426 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Mar 2012 12:40:19 +0100
428 libpve-access-control (1.0-16) unstable; urgency=low
430 * add 'pveum passwd' method
432 -- Proxmox Support Team <support@proxmox.com> Thu, 23 Feb 2012 12:05:25 +0100
434 libpve-access-control (1.0-15) unstable; urgency=low
436 * Add VM.Config.CDROM privilege to PVEVMUser rule
438 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 11:44:23 +0100
440 libpve-access-control (1.0-14) unstable; urgency=low
442 * fix buf in userid-param permission check
444 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 10:52:35 +0100
446 libpve-access-control (1.0-13) unstable; urgency=low
448 * allow more characters in ldap base_dn attribute
450 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 06:17:02 +0100
452 libpve-access-control (1.0-12) unstable; urgency=low
454 * allow more characters with realm IDs
456 -- Proxmox Support Team <support@proxmox.com> Mon, 20 Feb 2012 08:50:33 +0100
458 libpve-access-control (1.0-11) unstable; urgency=low
460 * fix bug in exec_api2_perm_check
462 -- Proxmox Support Team <support@proxmox.com> Wed, 15 Feb 2012 07:06:30 +0100
464 libpve-access-control (1.0-10) unstable; urgency=low
466 * fix ACL group name parser
468 * changed 'pveum aclmod' command line arguments
470 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Feb 2012 12:08:02 +0100
472 libpve-access-control (1.0-9) unstable; urgency=low
474 * fix bug in check_volume_access (fixes vzrestore)
476 -- Proxmox Support Team <support@proxmox.com> Mon, 13 Feb 2012 09:56:37 +0100
478 libpve-access-control (1.0-8) unstable; urgency=low
480 * fix return value for empty ACL list.
482 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Feb 2012 11:25:04 +0100
484 libpve-access-control (1.0-7) unstable; urgency=low
486 * fix bug #85: allow root@pam to generate tickets for other users
488 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
490 libpve-access-control (1.0-6) unstable; urgency=low
492 * API change: allow to filter enabled/disabled users.
494 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2012 12:30:37 +0100
496 libpve-access-control (1.0-5) unstable; urgency=low
498 * add a way to return file changes (diffs): set_result_changes()
500 -- Proxmox Support Team <support@proxmox.com> Tue, 20 Dec 2011 11:18:48 +0100
502 libpve-access-control (1.0-4) unstable; urgency=low
504 * new environment type for ha agents
506 -- Proxmox Support Team <support@proxmox.com> Tue, 13 Dec 2011 10:08:53 +0100
508 libpve-access-control (1.0-3) unstable; urgency=low
510 * add support for delayed parameter parsing - We need that to disable
511 file upload for normal API request (avoid DOS attacs)
513 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Dec 2011 09:56:10 +0100
515 libpve-access-control (1.0-2) unstable; urgency=low
517 * fix bug in fork_worker
519 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Oct 2011 08:37:05 +0200
521 libpve-access-control (1.0-1) unstable; urgency=low
523 * allow '-' in permission paths
525 * bump version to 1.0
527 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jun 2011 13:51:48 +0200
529 libpve-access-control (0.1) unstable; urgency=low
531 * first dummy package - no functionality
533 -- Proxmox Support Team <support@proxmox.com> Thu, 09 Jul 2009 16:03:00 +0200