ConnMan 1.16 was released Sunday, July 14th, 2013.
The two main features in this release are the much enhanced Session functionality and IPv6 Prefix Delegation support.
The session policy plugin has been updated to support User and Group ID matching in addition to the already existing SELinux capability matching. The configuration file format is documented in doc/session-policy-format.txt and can now contain multiple policies per file, which is in line with the other already supported configuration file formats. As a result of matching processes to Sessions, a dedicated routing table and iptables marking selecting this dedicated routing table is configured for the session, which allows different Sessions to have different routing. Session based accounting has a placeholder in the code, but is to be implemented later on. The kernel options needed for session use are documented in the README file with the overall Session functionality described in doc/session-overview.txt. Thanks to Daniel Wagner for implementing the Session functionality!
ConnMan has also been enhanced with IPv6 Prefix Delegation support. If available, an IPv6 prefix is requested via DHCPv6 from the uplink connection and provided as an autoconfigurable IPv6 prefix for all tethered interfaces. With Prefix Delegation each tethered client can now have its own globally routable IPv6 address. Thanks to Jukka Rissanen for the implementation!
Other noteworthy features include:
- Periodically check timeservers every two hours and retry the list of timeserver if the most preferred timeserver is not being used (Patrik Flykt)
- The command line client now can list VPN daemon connections, monitor the VPN daemon and adds initial support for VPN Agent functionality (Patrik Flykt)
- IP pool implementation enhancements with conflicting tethering and uplink IP subnet prefixes are now handled properly (Jukka Rissanen)
- Updates to DHCPv6 with ConnMan getting closer to RFC compliance (Jukka Rissanen)
- Openconnect can now request missing cookie, server and server's certificate hash via VPN Agent API (Patrik Flykt)
Thanks for all the hard work and bugfixes go to Constantin Musca, Daniel Wagner, Henrique Dante de Almeida, Jukka Rissanen, Marcel Holtmann, Patrik Flykt, Tomasz Bursztyka, BMW and Intel.
ConnMan 1.16 can be downloaded from:
http://www.kernel.org/pub/linux/network/connman/
ConnMan is available via git at:
git://git.kernel.org/pub/scm/network/connman/connman.git
Web interface to the git repository:
http://git.kernel.org/?p=network/connman/connman.git;a=summary