OpenAFS Master Repository branch, openafs-stable-1_8_x, updated. openafs-stable-1_8_2

[Gerrit Code Review]

The following commit has been merged in the openafs-stable-1_8_x branch:
commit 1b199eeafad6420982380ce5e858f00c528cfd13
Author: Benjamin Kaduk <kaduk@mit.edu>
Date:   Thu Sep 6 18:50:39 2018 -0500

    OPENAFS-SA-2018-001 butc: require authenticated connections with -localauth
    
    The butc -localauth option is available to use the cell-wide key to
    authenticate to the vlserver and buserver, which in normal deployments
    will require incoming connections to be authenticated as a superuser.
    In such cases, the cell-wide key is also available for use in
    authenticating incoming connections to the butc, which would otherwise
    have been completely unauthenticated.
    
    Because of the security hazards of allowing unauthenticaed inbound
    RPCs, especially ones that manipulate backup information and are allowed
    to initiate outboud RPCs authenticated as the superuser, default to
    not allowing unauthenticated inbound RPCs at all.  Provide an opt-out
    command-line argument for deployments that require this functionality
    and have configured their network environment (firewall/etc.) appropriately.
    
    Change-Id: Ia6349757a4c6d59d1853df1a844e210d32c14feb

 doc/man-pages/pod8/butc.pod |   16 ++++++++++-
 src/butc/butc_prototypes.h  |    1 +
 src/butc/tcmain.c           |   59 +++++++++++++++++++++++++++++++++++-------
 src/butc/tcprocs.c          |   10 +++---
 4 files changed, 69 insertions(+), 17 deletions(-)

-- 
OpenAFS Master Repository