php-remctl - PECL module for Kerberos-authenticated command execution

Property Value
Distribution Ubuntu 18.04 LTS (Bionic Beaver)
Repository Ubuntu Universe i386
Package filename php-remctl_3.13-1+deb9u1_i386.deb
Package name php-remctl
Package version 3.13
Package release 1+deb9u1
Package architecture i386
Package type deb
Category universe/php
License -
Maintainer Ubuntu Developers <>
Download size 15.02 KB
Installed size 89.00 KB
remctl is a client/server protocol for executing specific commands on a
remote system with Kerberos authentication.  The allowable commands must
be listed in a server configuration file, and the executable run on the
server may be mapped to any command name.  Each command is also
associated with an ACL containing a list of Kerberos principals
authorized to run that command.
This package contains the PECL remctl module for PHP 7, which provides
native PHP bindings for the libremctl client library.


Package Version Architecture Repository
php-remctl_3.13-1+deb9u1_amd64.deb 3.13 amd64 Ubuntu Universe
php-remctl - - -


Name Value
libc6 >= 2.4
libremctl1 >= 3.1
php-common >= 1:7.0+33~
phpapi-20170718 -
ruby << 1:2.6~


Name Value
php7.0-remctl -


Type URL
Binary Package php-remctl_3.13-1+deb9u1_i386.deb
Source Package remctl

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install php-remctl deb package:
    # sudo apt-get install php-remctl




2018-03-31 - Russ Allbery <>
remctl (3.13-1+deb9u1) stretch-security; urgency=high
* CVE-2018-0493: Apply upstream patch to fix use-after-free
vulnerability in the remctld server for commands using the sudo
configuration option.
2016-10-10 - Russ Allbery <>
remctl (3.13-1) unstable; urgency=medium
* New upstream release.
- remctl-shell now supports being run as a forced command.
- The summary configuration option is now allowed for commands with
subcommands other than ALL, passing in two arguments to the summary
* Build the standalone binaries with -fPIE.
2016-07-29 - Russ Allbery <>
remctl (3.12-1) unstable; urgency=medium
* New upstream release.
- New server implementation, remctl-shell, included in the
remctl-server package, which is meant to be run as the shell of a
dedicated user via ssh and supports the same configuration as
remctld.  (This may eventually move into a separate package; if you
would like to see that, file a bug.)
- New server configuration option, sudo, which says to change users
with sudo when running the command.
* Hard-code the path to sudo in the build so that the sudo package
doesn't have to be installed when building the package.
* Switch to the new comment character for php-remctl.ini.
* Switch to https for all package metadata URLs.
* Remove now-unneeded source Lintian override.
* Update standards version to 3.9.8 (no changes required).
2016-05-07 - Russ Allbery <>
remctl (3.11-1) unstable; urgency=medium
* New upstream release.
- Port to PHP 7.  (Closes: #821713)
* Convert packaging to use dh_php and build php-remctl instead of
php5-remctl (and provide php7.0-remctl).  There is no upgrade path
defined from php5-remctl, since that seems to be the way other PHP
packages are being handled during the upgrade.
* Switch to the DEP-14 branch layout and update debian/gbp.conf and
Vcs-Git accordingly.
* Belatedly bump shlibs for interfaces added in remctl 3.3.
2015-11-27 - Russ Allbery <>
remctl (3.10-1) unstable; urgency=medium
* New upstream release.
- New server ACLs anyuser:auth and anyuser:anonymous.  The latter
allows access by anonymous clients if the KDC supports anonymous
service tickets.
- Server now sets the REMOTE_EXPIRES environment variable to the time
when the client credentials would expire.
- Anonymous users no longer satisfy ANYUSER (anyuser:auth).
- Simplify the Python RemctlError class (with some backward
- Dynamically resize the buffer used for the localgroup ACL scheme,
allowing support of users in large numbers of local groups.
2015-08-08 - Russ Allbery <>
remctl (3.9-2) unstable; urgency=medium
* Build against libsystemd instead of libsystemd-daemon.  Thanks,
Michael Biebl.  (Closes: #779764)
* Add explicit build dependency on libmodule-build-perl, since it will
soon no longer be provided by the perl package.  (Closes: #791666)
* Add debian/gbp.conf reflecting the branch layout of the default
packaging repository.
* Refresh upstream signing key.
* Update standards version to 3.9.6 (no changes required).

See Also

Package Description
php-rrd_2.0.1+1.1.3-4build1_i386.deb PHP bindings to rrd tool system
php-sabre-dav_1.8.12-3ubuntu2_all.deb WebDAV Framework for PHP
php-sabre-vobject_2.1.7-4_all.deb library to parse and manipulate iCalendar and vCard objects
php-sass_0.5.10-3build1_i386.deb PHP bindings to libsass - fast, native Sass parsing in PHP
php-seclib_1.0.9-1_all.deb implementations of an arbitrary-precision integer arithmetic library
php-services-json_1.0.3-1build1_all.deb PHP implementaion of json_encode/decode
php-services-weather_1.4.7-4_all.deb This class acts as an interface to various online weather-services
php-smbclient_0.8.0-3build2_i386.deb PHP wrapper for libsmbclient
php-soap_7.2+60ubuntu1_all.deb SOAP module for PHP [default]
php-solr_2.4.0-5build1_i386.deb PHP extension for communicating with Apache Solr server
php-sql-formatter_1.2.17-2_all.deb a PHP SQL highlighting library
php-ssh2_1.1.2+0.13-1build1_i386.deb Bindings for the libssh2 library
php-stomp_2.0.1+1.0.9-4_i386.deb Streaming Text Oriented Messaging Protocol (STOMP) client module for PHP
php-swiftmailer_5.4.2-1.1_all.deb Swiftmailer, free feature-rich PHP mailer
php-sybase_7.2+60ubuntu1_all.deb Sybase module for PHP [default]