MUNGE (MUNGE Uid 'N' Gid Emporium) is an authentication service for creating and validating credentials. It is designed to be highly scalable for use in an HPC cluster environment. It allows a process to authenticate the UID and GID of another local or remote process within a group of hosts having common users and groups. These hosts form a security realm that is defined by a shared cryptographic key. Clients within this security realm can create and validate credentials without the use of root privileges, reserved ports, or platform-specific methods.
| Tags | Security Cryptography Clustering/Distributed Networks Software Development Libraries |
|---|---|
| Licenses | GPLv3 LGPLv3 |
| Operating Systems | POSIX |
| Implementation | C |
Recent releases


Release Notes: The homepage was changed. A bug was fixed where munged could deadlock if clients blocked. A bug was fixed where munged could crash while processing supplementary groups. A bug was fixed with CFLAGS specified at configure-time nullifying the --enable-debug option. A bug was fixed with VPATH builds failing to install the init script. The RPM spec file was fixed for openSUSE and SLES.


Release Notes: The license was changed to GPL and LGPL versions 3 or later. A bug was fixed that caused Linux builds to fail under glibc-2.8+. A bug was fixed that caused the daemon to fail after /var/run had been cleared. Support was added for LOCAL_PEERCRED authentication (BSD, Darwin, GNU/kFreeBSD). Support was added for SHA-512 message digests.


Release Notes: A bug was fixed that caused stack corruption on AMD-64 when using Libgcrypt.


Release Notes: Performance improvements were made to the caching of supplementary group information. The --group-check-mtime and --group-update-time command line options were added to munged. A SIGHUP handler for updating the supplementary group information was added to munged. Errors encountered at munged exit were made nonfatal in order to work around a libc6 bug reported on Debian.


Release Notes: A bug was fixed that caused builds using Libgcrypt to fail without the OpenSSL development header files.