MUNGE Uid 'N' Gid Emporium
MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.
| Tags | Security Cryptography Clustering/Distributed Networks Software Development Libraries |
|---|---|
| Licenses | GPL |
| Operating Systems | POSIX |
| Implementation | C |
Recent releases
- 05 Feb 2007 18:12
Changes: A bug was fixed that caused stack corruption on AMD-64 when using Libgcrypt.
- 24 Dec 2006 05:48
Changes: Performance improvements were made to the caching of supplementary group information. The --group-check-mtime and --group-update-time command line options were added to munged. A SIGHUP handler for updating the supplementary group information was added to munged. Errors encountered at munged exit were made nonfatal in order to work around a libc6 bug reported on Debian.
- 22 Nov 2006 12:47
Changes: A bug was fixed that caused builds using Libgcrypt to fail without the OpenSSL development header files.
- 14 Nov 2006 15:21
Changes: Support was added for the Libgcrypt cryptographic library, AES-256 cipher, and SHA-256 message digest. A minimum key length check was added. The replay cache memory usage was reduced.
- 29 Sep 2006 02:08
Changes: A bug with leaking credential information on decode error was fixed. A bug preventing the daemon from terminating on various platforms was fixed. Issues with building libraries on AIX were fixed. Daemon behavior was changed to return fatal errors to the shell if possible. Ownership and permission checks were added for files and directories. Support for running the daemon as a non-root user was added. Support for Darwin and Solaris 10 was added.
