version

代理服务器源代码 供大家学习使用,希望大家喜欢

This is MyProxy v3.4 19 Dec 2005.
This version should be protocol compatible with all versions since v0.2.
Binary compatibility of the C API is not guaranteed between releases.

Version History
---------------
v3.4 19 Dec 2005
  - added myproxy-test -valgrind option for detecting memory errors
  - fixed memory errors found with myproxy-test -valgrind

v3.3 2 Dec 2005
  - API changes: new trusted_retrievers member for
    struct myproxy_creds and struct myproxy_request_t
  - generate 1024 bit keys instead of 512 bit keys
  - add support for certificate-only authentication to the
    myproxy-server via myproxy-init -Z and myproxy-server.config
    trusted_retrievers options
  - add support for CA username to DN resolution via LDAP using
    myproxy-server.config ca_ldap options
  - add myproxy-server authentication support for Pubcookie
    (http://www.pubcookie.org/) granting cookie via
    pubcookie_granting_cert and pubcookie_app_server_key
    myproxy-server.config options
  - add myproxy-init --local_proxy option to create a local proxy
    credential after storing a credential on the myproxy-server
  - add myproxy-init --keyfile/--certfile options
  - fix segmentation fault on reverse lookup in client
  - fix SASL build problems on Darwin
  - fix client-side memory leak in GSI_SOCKET_authentication_init()
  - in CA, use SHA1 instead of MD5 digest algorithm, set CA:FALSE in
    X509v3 Basic Constraints, include X509v3 Subject Key Identifier,
    and optionally set email X509v3 Subject Alternative Name using
    certificate_issuer_email_domain in myproxy-server.config
  - support alternate syntax "min max" for GLOBUS_TCP_PORT_RANGE and
    improve error handling and documentation for this environment
    variable

v3.2 11 Oct 2005
  - fix fd_set compiler error introduced in v3.1

v3.1 11 Oct 2005
  - fix compilation problem on platforms without setenv()

v3.0 28 Sep 2005
  - add ability for myproxy-server to act as a CA by setting
    certificate_issuer options in myproxy-server.config
  - fix for static builds using 'gpt-build -static'
  - fixes for SASL support
  - increased myproxy-server's listen(2) backlog for improved
    scalability
  - modify myproxy-test to use "$LOGNAME.myproxy-test" for a username
    to avoid overwriting any existing credentials
  - include configured trusted certificate directory in debug/verbose
    output
  - install example myproxy-server.config to
    $GLOBUS_LOCATION/share/myproxy instead of potentially overwriting
    existing version in $GLOBUS_LOCATION/etc
  - warn on unknown directives in myproxy-server.config

v2.3 28 Jul 2005
  - fix AIX compliation problems in PAM module

v2.2 14 Jul 2005
  - fix TRU64 compilation problem
  - for --dn_as_username option, get DN from user proxy if available
    rather than requiring access to user certificate

v2.1 6 Jul 2005
  - fix compilation problem for ISO C89 compilers
  - fix myproxy-init compatibility with Java CoG grid-proxy-init in
    PATH (use grid-proxy-init -hours instead of -valid)
  - improve PAM error messages
  - fix error message on server-side authorized_renewers check
  - perform reverse lookup on server IP address for authorization
    consistency with other GSI clients

v2.0 8 Jun 2005
  - unified versioning with GPT packaging
  - added native PAM support (not requiring SASL)
  - added support for managing trusted CA certificates using
    myproxy-logon/myproxy-retrieve -T option
  - added the myproxy-replicate utility for managing multiple
    myproxy-server repository replicas for high availability
  - added myproxy_version() and myproxy_check_version() functions
    to verify headers match the shared library in use
  - fixed bug in previous version that caused myproxy-get-delegation
    not to be included in binary GPT installs
  - use system getopt_long() if available; otherwise, use included
    getopt_long from NetBSD instead of GNU version as previous
  - fixed server side bug where the default_key_retrievers policy was
    always applied even if the credential had a key retriever policy
  - fixed myproxy-test GT 2.4 compatibility problem in v0.6.5
  - fixed myproxy_get_delegation() signature, erroneously changed in
    v0.6.2, to maintain API-level compatibility
  - added dynamic buffer management for improved handling of large
    messages

v0.6.5 8 Apr 2005 (GPT package version 1.17)
  - added support for RFC 3820 proxy certificate format
  - renamed myproxy-get-delegation to myproxy-logon;
    kept myproxy-get-delegation symlink for backward compatibility
  - added myproxy-store and myproxy-retrieve commands for storing and
    retrieving credentials directly to/from the repository;
    note myproxy-retrieve support must be explicitly enabled by
    setting authorized_key_retrievers in myproxy-server.config
  - write temp proxy to /tmp/myproxy-proxy.<uid>.<pid> instead of
    /tmp/myproxy-proxy.<uid> so we can run more than one myproxy-init
    in an account at a time
  - added myproxy-test -performance option for performance testing
  - fixed potential logging race condition when running myproxy-server
    in verbose mode
  - fixed potential network race condition in myproxy-init
  - for myproxy-admin-change-pass, only prompt for existing password
    if existing credential is encrypted
  - check for invalid options passed to myproxy commands
  - fixed a myproxy-admin-change-pass segmentation fault when the
    storage directory is invalid
  - improve error messages for too-short passphrases (6 character minimum)

v0.6.4 4 Jan 2005 (GPT package version 1.16)
  - fixed file permission bug in myproxy-admin-load-credential

v0.6.3 22 Nov 2004 (GPT package version 1.15)
  - updated GPT packaging for compatibility with GT 3.9.3
    (globus_gssapi_gsi-4.0)
  - added support for $GT_PROXY_MODE="old" in myproxy-get-delegation,
    to retrieve a "legacy globus proxy" from an end-entity certificate
    stored in the MyProxy repository.
  - modified client tools to attempt connecting to the server first,
    before prompting for user input, to catch server problems early.
  - added initial experimental support for Kerberos authentication via
    the SASL/GSSAPI mechanism.
  - removed dependency on perl Expect package in myproxy-test
  - added myproxy-test -startserver option
  - added myproxy-server --pidfile option to ease myproxy-server
    shutdown

v0.6.2 21 Jun 2004 (GPT package version 1.14)
  - added initial experimental support for PAM authentication via
    the SASL/PLAIN mechanism.
  - changed myproxy-admin-change-pass so an empty pass phrase
    can be used for unencrypted keys (for example, for renewal keys)
  - fixed myproxy-admin-adduser to not depend on nonexistent
    myproxy-admin-adduser-config command
  - removed pass phrase functions from myproxy-admin-load-credential,
    so the existing pass phrase on the source key is kept as is.
    Use myproxy-admin-change-pass to change the pass phrase of a
    credential after loading.
  - fixed GT 2.2 and Java CoG incompatibility introduced in v0.6.1.
    Note: if repository contains end-entity credentials, Java CoG
    will retrieve old-style (legacy) proxies because the Java CoG
    certificate request doesn't specify the proxy type.
  - changed signature of myproxy_get_delegation() method.
    original signature is restored in v2.0.

v0.6.1 30 Mar 2004 (GPT package version 1.13)
  Fixed a bug where the myproxy-server would always delegate new-style
  proxy credentials from end-entity credentials in repository.  The
  myproxy-server now respects proxy type in the certificate request
  when end-entity credentials are stored in repository.  However, if
  the repository contains proxy credentials, the server will delegate
  a proxy of the same type as stored in the repository irrespective of
  the certificate request, because new-style and old-style proxies
  can't be mixed.  This bug fix resulted in an incompatibility with GT
  2.2 and Java CoG clients, fixed in v0.6.2.

v0.6.0 22 Mar 2004 (GPT package version 1.12)
  - added max_proxy_lifetime server configuration option for limiting
    the lifetime of retrieved credentials

v0.5.9 28 Jan 2004 (GPT package version 1.11)
  - removed requirement for /dev/urandom and instead let OpenSSL seed
    its random number generator itself using its standard methods
  - added myproxy-admin-change-pass command
  - changed myproxy-get-delegation -d option to have effect even when
    -a option is not given
  - added support for OpenSSL 0.9.7

v0.5.8 23 Sep 2003 (GPT package version 1.10)
  - fixed networking problem with v0.5.7 on some platforms

v0.5.7 25 Aug 2003 (GPT package version 1.9)
  - fixed additional problems with handling large credentials
  - bugfix: myproxy-admin-load-credential fails to prompt for
    passphrase of source credential in versions 0.5.4-0.5.6.

v0.5.6 31 Jul 2003 (GPT package version 1.8)
  - added support for Globus Toolkit 3.0 libraries
  - added support for new GSI proxy certificate format
  - fixed 'myproxy-info -d'
  - fixed credential problem when using Globus Toolkit 2.4 libraries
  - removed buffer length restriction in credential renewal protocol

v0.5.5 30 May 2003 (GPT package version 1.7)
  - added support for Globus Toolkit 2.4 libraries
  - added support for external passphrase quality enforcement with
    passphrase_policy_program command in myproxy-server.config
  - added support for locking credentials via myproxy-admin-query
  - included example myproxy.cron script for removing expired credentials
  - fixed problems with installed headers
  - added MYPROXY_SERVER_PORT environment variable

v0.5.4 2 May 2003 (GPT package version 1.6)
  - myproxy-admin-adduser command added
  - default lifetime of delegated proxies changed to 12 hours instead of 2
  - --passphrase option added to myproxy-admin-load-credential
  - new options (including remove option) added to myproxy-admin-query
  - compatibility problem with v0.2 (introduced in v0.5.0) fixed
  - OSX build problem fixed
  - support for delegating proxies with maximum lifetime added

v0.5.3 19 Mar 2003 (GPT package version 1.5)
  This version fixes a build problem on AIX.

v0.5.2 10 Mar 2003 (GPT package version 1.4)
  This version adds the myproxy-admin-query and
  myproxy-admin-load-credential commands and adds support for running
  the myproxy-server with a /CN=myproxy/fqhn credential.

v0.5.1 12 Feb 2003 (GPT package version 1.3)
  This release fixes a bug where the X509_USER_CERT and X509_USER_KEY
  environment variables would confuse myproxy-init.

v0.5.0 15 Nov 2002 (GPT package version 1.2)
  This is the first version for Globus Toolkit 2.2.  It adds support
  for storing multiple credentials per username, stores private keys
  encrypted with the credential's passphrase (if set), and adds the
  myproxy-change-pass-phrase command.  It is also the first version to
  be released unter the NCSA Open Source license.  Note that due to
  version incompatibilities with Globus Toolkit 2.2 libraries and the
  Java CoG (not specific to MyProxy), this and future versions of
  MyProxy are not compatible with Java CoG versions before 1.0.

v0.4.6 3 Sep 2002 (GPT package version 1.1)
  This version adds sample init.d and xinetd entries in the GPT
  package.

v0.4.5 28 Aug 2002 (GPT package version 1.0)
  This is the first version packaged with GPT.  In addition to changes
  for GPT compatibility, it contains minor changes to some MyProxy
  debug messages.

v0.4.4 22 Mar 2002
  This version adds the myproxy-info command.

v0.4.3 6 Mar 2002
  This version adds support for per-credential authorization.  Users
  can specify retrieval/renewal policies for a credential on upload
  using myproxy-init.

v0.4.2 4 Feb 2002
  This version includes the GSI distinguished name matching logic that
  was removed in v0.4.0, so for example host/fqhn will now match fqhn
  again.  It also adds support for restricting the TCP port ranges of
  the clients.

v0.4.1 4 Dec 2001
  This version adds support for Globus 2.0 and optionally using the
  distinguished name from the proxy certificate as the default myproxy
  username.

v0.4.0 20 Nov 2001
  This version adds support for anonymous X.509 client authentication,
  to allow users to retrieve a credential using their myproxy
  passphrase when they don't already have a credential.  The myproxy
  server configuration file can enable or disable anonymous and
  certificate-based (from v0.3) authentication.

v0.3 5 Oct 2001
  This version adds support for certificate-based authentication in
  addition to passphrase based authentication, to enable credential
  renewal.  It was developed by Daniel Kouril and Miroslav Ruda for
  the European DataGrid project.

v0.2alpha3 11 Oct 2000
  This version was used by many grid portals.

v0.2alpha1 27 Sep 2000

v0.2 20 Sep 2000

v0.1b3 30 June 2000

v0.1b2 08 May 2000

v0.1b1 05 May 2000

v0.1 03 Apr 2000