rpms/sssd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
879ffa1b7c
sssd/sssd.spec

2829 lines
110 KiB
RPMSpec
Raw Normal View History

sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
# SSSD SPEC file for Fedora 34+ and RHEL-9+
# define SSSD user
%if 0%{?rhel}
%global sssd_user sssd
%else
%global sssd_user root
%endif
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
sssd-2.4.2-1: Rebase to latest upstream release
2021-02-19 16:08:43 +00:00
# Set setuid bit on child helpers if we support non-root user.
%if "%{sssd_user}" == "root"
%global child_attrs 0750
%else
%global child_attrs 4750
%endif
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
%if 0%{?fedora} >= 34
%global build_kcm_renewals 1
%global krb5_version 1.19.1
%elif 0%{?rhel} >= 8
%global build_kcm_renewals 1
%global krb5_version 1.18.2
%else
%global build_kcm_renewals 0
%endif
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
# we don't want to provide private python extension libs
sssd-2.3.1-1: Rebase to latest upstream release
2020-07-24 14:47:30 +00:00
%define __provides_exclude_from %{python3_sitearch}/.*\.so$
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
Build with _hardened_build macro
2011-08-03 13:31:33 +00:00
%define _hardened_build 1
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
# Determine the location of the LDB modules directory
%global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
Rebuild with libldb-1.2.0 sssd buill with older version of libldb will crash (gdb) bt #0 0x0000000000000001 in ?? () #1 0x00007fcb39ce28dc in ldb_db_lock_destructor () from /lib64/libldb.so.1 #2 0x00007fcb3a103f31 in _tc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", tc=<optimized out>) at ../talloc.c:1078 #3 _talloc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", ptr=0x55e267aebef0) at ../talloc.c:1174 #4 _talloc_free (ptr=0x55e267aebef0, location=0x7fcb39ce9303 "../common/ldb.c:1026") at ../talloc.c:1716 #5 0x00007fcb39ce02f2 in ldb_lock_backend_callback () from /lib64/libldb.so.1 #6 0x00007fcb31b172ae in ltdb_callback () from /usr/lib64/ldb/modules/ldb/tdb.so #7 0x00007fcb3a31e8c1 in tevent_common_loop_timer_delay () from /lib64/libtevent.so.0
2017-07-07 10:44:30 +00:00
%global ldb_version 1.2.0
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})
New upstream release 1.16.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-11 10:19:53 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Name: sssd
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
Version: 2.6.0
Release: 1%{?dist}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Summary: System Security Services Daemon
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
License: GPLv3+
Fix github url typo Signed-off-by: Peter Jones <pjones@redhat.com>
2020-06-19 22:50:55 +00:00
URL: https://github.com/SSSD/sssd/
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
Source0: https://github.com/SSSD/sssd/releases/download/2.6.0/sssd-2.6.0.tar.gz
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
### Patches ###
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
### Dependencies ###
New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
2015-11-20 08:16:13 +00:00
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: sssd-ad = %{version}-%{release}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
Requires: sssd-common = %{version}-%{release}
Requires: sssd-ipa = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: sssd-krb5 = %{version}-%{release}
Requires: sssd-ldap = %{version}-%{release}
Use weak dependencies
2016-09-21 10:46:40 +00:00
Recommends: sssd-proxy = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Recommends: logrotate
sssd-2.4.2-2: Remove setuid from child binaries and relax requirement on python3-sssdconfig
2021-02-19 17:24:03 +00:00
Suggests: python3-sssdconfig = %{version}-%{release}
Use weak dependencies
2016-09-21 10:46:40 +00:00
Suggests: sssd-dbus = %{version}-%{release}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
%global servicename sssd
%global sssdstatedir %{_localstatedir}/lib/sss
%global dbpath %{sssdstatedir}/db
New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
2015-06-22 11:52:08 +00:00
%global keytabdir %{sssdstatedir}/keytabs
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
%global pipepath %{sssdstatedir}/pipes
New upstream release 1.9.0
2012-09-25 11:20:37 +00:00
%global mcpath %{sssdstatedir}/mc
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
%global pubconfpath %{sssdstatedir}/pubconf
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
%global gpocachepath %{sssdstatedir}/gpo_cache
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
%global secdbpath %{sssdstatedir}/secrets
Backport few upstream patches/fixes
2017-09-01 18:52:07 +00:00
%global deskprofilepath %{sssdstatedir}/deskprofile
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
### Build Dependencies ###
BuildRequires: autoconf
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
BuildRequires: automake
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: bind-utils
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
BuildRequires: c-ares-devel
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
BuildRequires: check-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: cifs-utils-devel
BuildRequires: dbus-devel
BuildRequires: docbook-style-xsl
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
BuildRequires: doxygen
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
BuildRequires: findutils
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: gcc
BuildRequires: gdm-pam-extensions-devel
BuildRequires: gettext-devel
# required for p11_child smartcard tests
BuildRequires: gnutls-utils
BuildRequires: keyutils-libs-devel
BuildRequires: krb5-devel
Fix cyclic dependencies between sssd-{krb5,}-common The upstream ticket #2507 is prerequisite for BZ1212503 Patch also enables cmocka tests with secondary architectures.
2015-05-08 12:32:52 +00:00
BuildRequires: libcmocka-devel >= 1.0.0
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: libdhash-devel >= 0.4.2
BuildRequires: libini_config-devel >= 1.1
BuildRequires: libldb-devel >= %{ldb_version}
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
BuildRequires: libnfsidmap-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: libnl3-devel
BuildRequires: libselinux-devel
BuildRequires: libsemanage-devel
Reorder entries in spec file to match upstream version
2015-01-19 09:18:01 +00:00
BuildRequires: libsmbclient-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: libtalloc-devel
BuildRequires: libtdb-devel
BuildRequires: libtevent-devel
BuildRequires: libtool
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
BuildRequires: libunistring
BuildRequires: libunistring-devel
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
BuildRequires: libuuid-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: libxml2
BuildRequires: libxslt
BuildRequires: m4
BuildRequires: make
BuildRequires: nss_wrapper
BuildRequires: openldap-devel
BuildRequires: openssh
sssd-2.5.0-1: Rebase to latest upstream release
2021-05-10 14:02:51 +00:00
# required for p11_child smartcard tests
sssd.spec: BuildRequires on openssl binary It's required by tests in order to generate the certificate files.
2021-03-27 22:52:22 +00:00
BuildRequires: openssl
New upstream release 1.16.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-11 10:19:53 +00:00
BuildRequires: openssl-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: p11-kit-devel
BuildRequires: pam_wrapper
BuildRequires: pam-devel
sssd-2.5.0-1: Rebase to latest upstream release
2021-05-10 14:02:51 +00:00
BuildRequires: pcre2-devel
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: pkgconfig
BuildRequires: popt-devel
BuildRequires: python3-devel
BuildRequires: samba-devel
# required for idmap_sss.so
BuildRequires: samba-winbind
BuildRequires: selinux-policy-targeted
# required for p11_child smartcard tests
New upstream release 1.16.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-11 10:19:53 +00:00
BuildRequires: softhsm >= 2.1.0
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
BuildRequires: systemd-devel
BuildRequires: systemtap-sdt-devel
BuildRequires: uid_wrapper
spec: update spec file with recent upstream fixes * https://github.com/SSSD/sssd/commit/815197cb1d33ad0ac8538f5402a7b95e9f474e7f * https://github.com/SSSD/sssd/commit/9da41eb910ed292a9ed27aa8b66c4d4c8c842122 (cherry picked from commit 53a865af5d2972215da41df083002452738474ba)
2021-03-31 09:47:57 +00:00
BuildRequires: po4a
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
%if %{build_kcm_renewals}
BuildRequires: krb5-libs >= %{krb5_version}
%endif
Reorder entries in spec file to match upstream version
2015-01-19 09:18:01 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%description
Provides a set of daemons to manage access to remote directories and
authentication mechanisms. It provides an NSS and PAM interface toward
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
the system and a pluggable back end system to connect to multiple different
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
The sssd subpackage is a meta-package that contains the daemon as well as all
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
the existing back ends.
%package common
Summary: Common files for the SSSD
License: GPLv3+
# Requires
New upstream release 1.15.3 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 11:58:49 +00:00
# due to ABI changes in 1.1.30/1.2.0
Requires: libldb >= %{ldb_version}
sssd-2.5.2-1: Rebase to latest upstream release
2021-07-13 09:28:31 +00:00
Requires: libtevent >= 0.11.0
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
Requires: sssd-client%{?_isa} = %{version}-%{release}
Use weak dependencies
2016-09-21 10:46:40 +00:00
Recommends: libsss_sudo = %{version}-%{release}
Recommends: libsss_autofs%{?_isa} = %{version}-%{release}
Recommends: sssd-nfs-idmap = %{version}-%{release}
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
Requires: libsss_idmap = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_certmap = %{version}-%{release}
%if 0%{?rhel}
Requires(pre): shadow-utils
%endif
Fix systemd executions/requirements Merges: https://src.fedoraproject.org/rpms/sssd/pull-request/1 Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-01-25 14:53:22 +00:00
%{?systemd_requires}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
### Provides ###
Provides: libsss_sudo-devel = %{version}-%{release}
Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV
2013-07-01 22:57:07 +00:00
Obsoletes: libsss_sudo-devel <= 1.10.0-7%{?dist}.beta1
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%description common
Common files for the SSSD. The common package includes all the files needed
to run a particular back end, however, the back ends are packaged in separate
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
subpackages such as sssd-ldap.
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%package client
Summary: SSSD Client libraries for NSS and PAM
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
License: LGPLv3+
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_nss_idmap = %{version}-%{release}
Requires: libsss_idmap = %{version}-%{release}
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
Requires(post): /usr/sbin/alternatives
Requires(preun): /usr/sbin/alternatives
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%description client
Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD
service.
Move libsss_sudo.so outside sssd-common The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo. If libsss_sudo.so was part of sssd-client then 32 bit version would never be used on 64 bit machine and files in sssd-client can be used by multilib applications e.g. libnss_sss.so can be indirectly "dlopened" by 64 bit applications and 32 bit application. (32-bit web browser; ordinary 64bit applications ...)
2016-01-19 14:06:17 +00:00
%package -n libsss_sudo
Summary: A library to allow communication between SUDO and SSSD
License: LGPLv3+
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
Conflicts: sssd-common < %{version}-%{release}
Move libsss_sudo.so outside sssd-common The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo. If libsss_sudo.so was part of sssd-client then 32 bit version would never be used on 64 bit machine and files in sssd-client can be used by multilib applications e.g. libnss_sss.so can be indirectly "dlopened" by 64 bit applications and 32 bit application. (32-bit web browser; ordinary 64bit applications ...)
2016-01-19 14:06:17 +00:00
%description -n libsss_sudo
A utility library to allow communication between SUDO and SSSD
Move libsss_autofs.so outside sssd-common It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
2016-02-19 08:27:27 +00:00
%package -n libsss_autofs
Summary: A library to allow communication between Autofs and SSSD
License: LGPLv3+
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
Conflicts: sssd-common < %{version}-%{release}
Move libsss_autofs.so outside sssd-common It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
2016-02-19 08:27:27 +00:00
%description -n libsss_autofs
A utility library to allow communication between Autofs and SSSD
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%package tools
Summary: Userspace tools for use with the SSSD
License: GPLv3+
sssd-tools should require sssd-common, not sssd This bug was already fixed upstream.
2013-07-08 10:13:51 +00:00
Requires: sssd-common = %{version}-%{release}
Move python bindings to separate packages Some python bindings pysss and pysss_murmur was in package sssd-common. Therefore package sssd-common had python as a dependency.
2015-02-25 09:35:28 +00:00
# required by sss_obfuscate
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
Requires: python3-sss = %{version}-%{release}
Requires: python3-sssdconfig = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_certmap = %{version}-%{release}
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
# required by sss_analyze
Requires: python3-systemd
Requires: python3-click
Add sssd-dbus package as a dependency of sssd-tools
2020-02-27 02:54:46 +00:00
Recommends: sssd-dbus
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%description tools
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
Provides several administrative tools:
New upstream version 1.9.2
2012-10-14 19:43:04 +00:00
* sss_debuglevel to change the debug level on the fly
* sss_seed which pre-creates a user entry for use in kickstarts
* sss_obfuscate for generating an obfuscated LDAP password
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
* sssctl -- an sssd status and control utility
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%package -n python3-sssdconfig
Summary: SSSD and IPA configuration file manipulation classes and functions
License: GPLv3+
BuildArch: noarch
Revert "Do no use python_provide conditionally" The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python in the package python-rpm-macros. But this package is not part of build root and therefore rpm cannot parse spec file. This reverts commit 22c180263aad50325d9e6c8a946fc8b6386fc694.
2016-09-22 21:40:41 +00:00
%{?python_provide:%python_provide python3-sssdconfig}
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%description -n python3-sssdconfig
Provides python3 files for manipulation SSSD and IPA configuration files.
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%package -n python3-sss
Summary: Python3 bindings for sssd
License: LGPLv3+
Requires: sssd-common = %{version}-%{release}
Revert "Do no use python_provide conditionally" The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python in the package python-rpm-macros. But this package is not part of build root and therefore rpm cannot parse spec file. This reverts commit 22c180263aad50325d9e6c8a946fc8b6386fc694.
2016-09-22 21:40:41 +00:00
%{?python_provide:%python_provide python3-sss}
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%description -n python3-sss
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
Provides python3 bindings:
* function for retrieving list of groups user belongs to
Move python bindings to separate packages Some python bindings pysss and pysss_murmur was in package sssd-common. Therefore package sssd-common had python as a dependency.
2015-02-25 09:35:28 +00:00
* class for obfuscation of passwords
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%package -n python3-sss-murmur
Summary: Python3 bindings for murmur hash function
License: LGPLv3+
Revert "Do no use python_provide conditionally" The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python in the package python-rpm-macros. But this package is not part of build root and therefore rpm cannot parse spec file. This reverts commit 22c180263aad50325d9e6c8a946fc8b6386fc694.
2016-09-22 21:40:41 +00:00
%{?python_provide:%python_provide python3-sss-murmur}
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%description -n python3-sss-murmur
Provides python3 module for calculating the murmur hash version 3
Move python bindings to separate packages Some python bindings pysss and pysss_murmur was in package sssd-common. Therefore package sssd-common had python as a dependency.
2015-02-25 09:35:28 +00:00
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%package ldap
Summary: The LDAP back end of the SSSD
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
Requires: sssd-krb5-common = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_idmap = %{version}-%{release}
Requires: libsss_certmap = %{version}-%{release}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%description ldap
Provides the LDAP back end that the SSSD can utilize to fetch identity data
from and authenticate against an LDAP server.
%package krb5-common
Summary: SSSD helpers needed for Kerberos and GSSAPI authentication
License: GPLv3+
Requires: cyrus-sasl-gssapi%{?_isa}
Requires: sssd-common = %{version}-%{release}
%description krb5-common
Provides helper processes that the LDAP and Kerberos back ends can use for
Kerberos user or host authentication.
%package krb5
Summary: The Kerberos authentication back end for the SSSD
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
Requires: sssd-krb5-common = %{version}-%{release}
%description krb5
Provides the Kerberos back end that the SSSD can utilize authenticate
against a Kerberos server.
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
%package common-pac
Summary: Common files needed for supporting PAC processing
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_idmap = %{version}-%{release}
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
%description common-pac
Provides common files needed by SSSD providers such as IPA and Active Directory
for handling Kerberos PACs.
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%package ipa
Summary: The IPA back end of the SSSD
License: GPLv3+
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: samba-client-libs >= %{samba_package_version}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
Requires: sssd-common = %{version}-%{release}
Requires: sssd-krb5-common = %{version}-%{release}
Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current
2013-06-13 08:28:56 +00:00
Requires: libipa_hbac%{?_isa} = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_certmap = %{version}-%{release}
Use weak dependencies
2016-09-21 10:46:40 +00:00
Recommends: bind-utils
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
Requires: sssd-common-pac = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_idmap = %{version}-%{release}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%description ipa
Provides the IPA back end that the SSSD can utilize to fetch identity data
from and authenticate against an IPA server.
%package ad
Summary: The AD back end of the SSSD
License: GPLv3+
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: samba-client-libs >= %{samba_package_version}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
Requires: sssd-common = %{version}-%{release}
Requires: sssd-krb5-common = %{version}-%{release}
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
Requires: sssd-common-pac = %{version}-%{release}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_idmap = %{version}-%{release}
Requires: libsss_certmap = %{version}-%{release}
Use weak dependencies
2016-09-21 10:46:40 +00:00
Recommends: bind-utils
Recommends: adcli
Suggests: sssd-winbind-idmap = %{version}-%{release}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%description ad
Provides the Active Directory back end that the SSSD can utilize to fetch
identity data from and authenticate against an Active Directory server.
%package proxy
Summary: The proxy back end of the SSSD
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
%description proxy
Provides the proxy back end which can be used to wrap an existing NSS and/or
PAM modules to leverage SSSD caching.
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
%package -n libsss_idmap
Summary: FreeIPA Idmap library
License: LGPLv3+
%description -n libsss_idmap
New upstream version 1.9.2
2012-10-14 19:43:04 +00:00
Utility library to convert SIDs to Unix uids and gids
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
%package -n libsss_idmap-devel
Summary: FreeIPA Idmap library
License: LGPLv3+
Requires: libsss_idmap = %{version}-%{release}
%description -n libsss_idmap-devel
Utility library to SIDs to Unix uids and gids
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
%package -n libipa_hbac
Summary: FreeIPA HBAC Evaluator library
License: LGPLv3+
%description -n libipa_hbac
Utility library to validate FreeIPA HBAC rules for authorization requests
%package -n libipa_hbac-devel
Summary: FreeIPA HBAC Evaluator library
License: LGPLv3+
Requires: libipa_hbac = %{version}-%{release}
%description -n libipa_hbac-devel
Utility library to validate FreeIPA HBAC rules for authorization requests
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%package -n python3-libipa_hbac
Summary: Python3 bindings for the FreeIPA HBAC Evaluator library
License: LGPLv3+
Requires: libipa_hbac = %{version}-%{release}
Revert "Do no use python_provide conditionally" The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python in the package python-rpm-macros. But this package is not part of build root and therefore rpm cannot parse spec file. This reverts commit 22c180263aad50325d9e6c8a946fc8b6386fc694.
2016-09-22 21:40:41 +00:00
%{?python_provide:%python_provide python3-libipa_hbac}
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%description -n python3-libipa_hbac
The python3-libipa_hbac contains the bindings so that libipa_hbac can be
used by Python applications.
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
%package -n libsss_nss_idmap
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
Summary: Library for SID and certificate based lookups
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
License: LGPLv3+
%description -n libsss_nss_idmap
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
Utility library for SID and certificate based lookups
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
%package -n libsss_nss_idmap-devel
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
Summary: Library for SID and certificate based lookups
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
License: LGPLv3+
Requires: libsss_nss_idmap = %{version}-%{release}
%description -n libsss_nss_idmap-devel
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
Utility library for SID and certificate based lookups
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%package -n python3-libsss_nss_idmap
Summary: Python3 bindings for libsss_nss_idmap
License: LGPLv3+
Requires: libsss_nss_idmap = %{version}-%{release}
Revert "Do no use python_provide conditionally" The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python in the package python-rpm-macros. But this package is not part of build root and therefore rpm cannot parse spec file. This reverts commit 22c180263aad50325d9e6c8a946fc8b6386fc694.
2016-09-22 21:40:41 +00:00
%{?python_provide:%python_provide python3-libsss_nss_idmap}
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%description -n python3-libsss_nss_idmap
The python3-libsss_nss_idmap contains the bindings so that libsss_nss_idmap can
be used by Python applications.
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%package dbus
Summary: The D-Bus responder of the SSSD
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
Fix systemd executions/requirements Merges: https://src.fedoraproject.org/rpms/sssd/pull-request/1 Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-01-25 14:53:22 +00:00
%{?systemd_requires}
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%description dbus
Provides the D-Bus responder of the SSSD, called the InfoPipe, that allows
the information from the SSSD to be transmitted over the system bus.
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%if 0%{?rhel}
%package polkit-rules
Summary: Rules for polkit integration for SSSD
Group: Applications/System
License: GPLv3+
Requires: polkit >= 0.106
Requires: sssd-common = %{version}-%{release}
%description polkit-rules
Provides rules for polkit integration with SSSD. This is required
for smartcard support.
%endif
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%package -n libsss_simpleifp
Summary: The SSSD D-Bus responder helper library
License: GPLv3+
Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile
2015-01-09 14:11:21 +00:00
Requires: sssd-dbus = %{version}-%{release}
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%description -n libsss_simpleifp
Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
%package -n libsss_simpleifp-devel
Summary: The SSSD D-Bus responder helper library
License: GPLv3+
Requires: dbus-devel
Requires: libsss_simpleifp = %{version}-%{release}
%description -n libsss_simpleifp-devel
Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
%package winbind-idmap
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
2016-07-08 06:35:48 +00:00
Summary: SSSD's idmap_sss Backend for Winbind
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
License: GPLv3+ and LGPLv3+
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
Requires: libsss_nss_idmap = %{version}-%{release}
Requires: libsss_idmap = %{version}-%{release}
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
Conflicts: sssd-common < %{version}-%{release}
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
%description winbind-idmap
The idmap_sss module provides a way for Winbind to call SSSD to map UIDs/GIDs
and SIDs.
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
%package nfs-idmap
Summary: SSSD plug-in for NFSv4 rpc.idmapd
License: GPLv3+
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
Conflicts: sssd-common < %{version}-%{release}
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
%description nfs-idmap
The libnfsidmap sssd module provides a way for rpc.idmapd to call SSSD to map
UIDs/GIDs to names and vice versa. It can be also used for mapping principal
(user) name to IDs(UID or GID) or to obtain groups which user are member of.
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%package -n libsss_certmap
Update to latest released upstream version 2.2.0
2019-06-17 12:39:56 +00:00
Summary: SSSD Certificate Mapping Library
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
License: LGPLv3+
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
Conflicts: sssd-common < %{version}-%{release}
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%description -n libsss_certmap
Library to map certificates to users based on rules
%package -n libsss_certmap-devel
Update to latest released upstream version 2.2.0
2019-06-17 12:39:56 +00:00
Summary: SSSD Certificate Mapping Library
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
License: LGPLv3+
Requires: libsss_certmap = %{version}-%{release}
%description -n libsss_certmap-devel
Library to map certificates to users based on rules
%package kcm
Summary: An implementation of a Kerberos KCM server
License: GPLv3+
Requires: sssd-common = %{version}-%{release}
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
%if %{build_kcm_renewals}
Requires: krb5-libs >= %{krb5_version}
%endif
Fix systemd executions/requirements Merges: https://src.fedoraproject.org/rpms/sssd/pull-request/1 Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-01-25 14:53:22 +00:00
%{?systemd_requires}
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%description kcm
An implementation of a Kerberos KCM server. Use this package if you want to
use the KCM: Kerberos credentials cache.
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%prep
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%autosetup -p1
Resolves: rhbz#752495 - Crash when apply settings
2011-11-10 17:03:57 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%build
Disable LTO
2020-07-01 18:15:35 +00:00
- Add support for libldb 1.0.0
2011-02-11 14:36:41 +00:00
autoreconf -ivf
Reorder entries in spec file to match upstream version
2015-01-19 09:18:01 +00:00
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
%configure \
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
--disable-rpath \
--disable-static \
--enable-gss-spnego-for-zero-maxssf \
--enable-nfsidmaplibdir=%{_libdir}/libnfsidmap \
--enable-nsslibdir=%{_libdir} \
--enable-pammoddir=%{_libdir}/security \
--enable-sss-default-nss-plugin \
--enable-systemtap \
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
--with-db-path=%{dbpath} \
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
--with-gpo-cache-path=%{gpocachepath} \
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
--with-init-dir=%{_initrddir} \
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
--with-initscript=systemd \
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
--with-krb5-rcache-dir=%{_localstatedir}/cache/krb5rcache \
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
--with-mcache-path=%{mcpath} \
sssd-2.3.1-2: switch to rundir
2020-07-28 08:26:30 +00:00
--with-pid-path=%{_rundir} \
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
--with-pipe-path=%{pipepath} \
--with-pubconf-path=%{pubconfpath} \
--with-sssd-user=%{sssd_user} \
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
--with-syslog=journald \
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
--with-test-dir=/dev/shm \
%if 0%{?fedora}
--disable-polkit-rules-path \
New upstream release 1.16.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-11 10:19:53 +00:00
%endif
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%{nil}
- Version 0.3.0 - Provides file based configuration and lots of improvements
2009-04-13 15:49:54 +00:00
sssd-2.3.1-2: switch to rundir
2020-07-28 08:26:30 +00:00
%make_build all docs runstatedir=%{_rundir}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
%py3_shebang_fix src/tools/analyzer/sss_analyze.py
Fix Python build failures on rawhide. Thx. to Lukas Slebodnik for fixing this issue.
2019-06-19 08:53:12 +00:00
sed -i -e 's:/usr/bin/python:/usr/bin/python3:' src/tools/sss_obfuscate
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%check
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
export CK_TIMEOUT_MULTIPLIER=10
Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 14:20:46 +00:00
%make_build check VERBOSE=yes
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
unset CK_TIMEOUT_MULTIPLIER
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%install
Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 14:20:46 +00:00
%make_install
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
# Prepare language files
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
/usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
# Copy default logrotate file
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
# Make sure SSSD is able to run on read-only root
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
Add krb5 conf snippet for default KCM http://fedoraproject.org/wiki/Releases/27/ChangeSet#Kerberos_KCM_credential_cache_by_default https://bugzilla.redhat.com/show_bug.cgi?id=1421604
2017-09-01 18:46:24 +00:00
# Kerberos KCM credential cache by default
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d
cp $RPM_BUILD_ROOT/%{_datadir}/sssd-kcm/kcm_default_ccache \
$RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d/kcm_default_ccache
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
# Create directory for cifs-idmap alternative
# Otherwise this directory could not be owned by sssd-client
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/cifs-utils
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
# Remove .la files created by libtool
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
find $RPM_BUILD_ROOT -name "*.la" -exec rm -f {} \;
# Suppress developer-only documentation
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
rm -Rf ${RPM_BUILD_ROOT}/%{_docdir}/%{name}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
# Older versions of rpmbuild can only handle one -f option
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
# So we need to append to the sssd*.lang file
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
for file in `ls $RPM_BUILD_ROOT/%{python3_sitelib}/*.egg-info 2> /dev/null`
do
echo %{python3_sitelib}/`basename $file` >> python3_sssdconfig.lang
done
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
touch sssd.lang
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
libsss_certmap sssd_kcm
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
do
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
touch $subpackage.lang
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
done
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
do
lang=`echo $man | cut -c 1-2`
case `basename $man` in
Move the sss_cache tool to the main package
2012-10-18 17:53:46 +00:00
sss_cache*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
;;
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
sss_ssh*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
;;
sss_rpcidmapd*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_nfs_idmap.lang
;;
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
sss_*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)
2012-02-07 01:08:04 +00:00
;;
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
sssctl*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
;;
New upstream release 1.9.0
2012-09-25 11:20:37 +00:00
sssd_krb5_*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
;;
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
pam_sss*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang
;;
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
sssd-ldap*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ldap.lang
;;
sssd-krb5*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_krb5.lang
;;
sssd-ipa*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ipa.lang
;;
sssd-ad*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_ad.lang
;;
sssd-proxy*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_proxy.lang
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
;;
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
sssd-ifp*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_dbus.lang
;;
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
sssd-kcm*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_kcm.lang
;;
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
idmap_sss*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_winbind_idmap.lang
;;
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
sss-certmap*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> libsss_certmap.lang
;;
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
;;
esac
done
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
# Print these to the rpmbuild log
echo "sssd.lang:"
cat sssd.lang
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
echo "python3_sssdconfig.lang:"
cat python3_sssdconfig.lang
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
for subpackage in sssd_ldap sssd_krb5 sssd_ipa sssd_ad sssd_proxy sssd_tools \
sssd_client sssd_dbus sssd_nfs_idmap sssd_winbind_idmap \
libsss_certmap sssd_kcm
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
do
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
echo "$subpackage.lang:"
cat $subpackage.lang
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
done
%files
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%files common -f sssd.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.7.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 Support for case-insensitive domains Support for multiple search bases in the LDAP provider Support for the native FreeIPA netgroup implementation Reliability improvements to the process monitor New DEBUG facility with more consistent log levels New tool to change debug log levels without restarting SSSD SSSD will now disconnect from LDAP server when idle FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains Assorted performance improvements in the LDAP provider
2011-12-22 20:12:50 +00:00
%doc src/examples/sssd-example.conf
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%{_sbindir}/sssd
Reorder entries in spec file to match upstream version
2015-01-19 09:18:01 +00:00
%{_unitdir}/sssd.service
New upstream release 1.15.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 18:57:42 +00:00
%{_unitdir}/sssd-autofs.socket
%{_unitdir}/sssd-autofs.service
%{_unitdir}/sssd-nss.socket
%{_unitdir}/sssd-nss.service
%{_unitdir}/sssd-pac.socket
%{_unitdir}/sssd-pac.service
%{_unitdir}/sssd-pam.socket
%{_unitdir}/sssd-pam-priv.socket
%{_unitdir}/sssd-pam.service
%{_unitdir}/sssd-ssh.socket
%{_unitdir}/sssd-ssh.service
%{_unitdir}/sssd-sudo.socket
%{_unitdir}/sssd-sudo.service
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
Own several directories https://bugzilla.redhat.com/show_bug.cgi?id=839782
2012-07-15 14:45:13 +00:00
%dir %{_libexecdir}/%{servicename}
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
%{_libexecdir}/%{servicename}/sssd_be
%{_libexecdir}/%{servicename}/sssd_nss
%{_libexecdir}/%{servicename}/sssd_pam
%{_libexecdir}/%{servicename}/sssd_autofs
%{_libexecdir}/%{servicename}/sssd_ssh
%{_libexecdir}/%{servicename}/sssd_sudo
New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 06:00:25 +00:00
%{_libexecdir}/%{servicename}/p11_child
Add missing file
2017-03-06 10:41:21 +00:00
%{_libexecdir}/%{servicename}/sssd_check_socket_activated_responders
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
Own several directories https://bugzilla.redhat.com/show_bug.cgi?id=839782
2012-07-15 14:45:13 +00:00
%dir %{_libdir}/%{name}
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
# The files provider is intentionally packaged in -common
Cherry-pick patches from upstream that enable the files provider Required for: https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-22 15:01:18 +00:00
%{_libdir}/%{name}/libsss_files.so
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%{_libdir}/%{name}/libsss_simple.so
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
Split internal helper libraries into a shared object - Significantly reduce disk-space usage
2013-03-01 13:23:37 +00:00
#Internal shared libraries
%{_libdir}/%{name}/libsss_child.so
%{_libdir}/%{name}/libsss_crypt.so
New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
2015-06-22 11:52:08 +00:00
%{_libdir}/%{name}/libsss_cert.so
Split internal helper libraries into a shared object - Significantly reduce disk-space usage
2013-03-01 13:23:37 +00:00
%{_libdir}/%{name}/libsss_debug.so
Fix cyclic dependencies between sssd-{krb5,}-common The upstream ticket #2507 is prerequisite for BZ1212503 Patch also enables cmocka tests with secondary architectures.
2015-05-08 12:32:52 +00:00
%{_libdir}/%{name}/libsss_krb5_common.so
Split internal helper libraries into a shared object - Significantly reduce disk-space usage
2013-03-01 13:23:37 +00:00
%{_libdir}/%{name}/libsss_ldap_common.so
%{_libdir}/%{name}/libsss_util.so
New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)
2015-01-08 19:51:31 +00:00
%{_libdir}/%{name}/libsss_semanage.so
New upstream release 2.0.0
2018-08-14 09:07:44 +00:00
%{_libdir}/%{name}/libifp_iface.so
%{_libdir}/%{name}/libifp_iface_sync.so
%{_libdir}/%{name}/libsss_iface.so
%{_libdir}/%{name}/libsss_iface_sync.so
%{_libdir}/%{name}/libsss_sbus.so
%{_libdir}/%{name}/libsss_sbus_sync.so
Split internal helper libraries into a shared object - Significantly reduce disk-space usage
2013-03-01 13:23:37 +00:00
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
%{ldb_modulesdir}/memberof.so
New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider
2012-02-15 21:11:31 +00:00
%{_bindir}/sss_ssh_authorizedkeys
%{_bindir}/sss_ssh_knownhostsproxy
Move the sss_cache tool to the main package
2012-10-18 17:53:46 +00:00
%{_sbindir}/sss_cache
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
%{_libexecdir}/%{servicename}/sss_signal
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
%dir %{sssdstatedir}
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
%dir %{_localstatedir}/cache/krb5rcache
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%attr(700,%{sssd_user},%{sssd_user}) %dir %{dbpath}
%attr(775,%{sssd_user},%{sssd_user}) %dir %{mcpath}
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
%attr(700,root,root) %dir %{secdbpath}
Resolves: upstream#3621: FleetCommander integration must not require capability DAC_OVERRIDE Together with the patches backported from upstream, we're changing the deskprofilepath permissions from 755 to 751, reflecting the upstream spec file changes. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-02-14 21:20:50 +00:00
%attr(751,root,root) %dir %{deskprofilepath}
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/passwd
%ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/group
%ghost %attr(0664,%{sssd_user},%{sssd_user}) %verify(not md5 size mtime) %{mcpath}/initgroups
%attr(755,%{sssd_user},%{sssd_user}) %dir %{pipepath}
%attr(750,%{sssd_user},root) %dir %{pipepath}/private
%attr(755,%{sssd_user},%{sssd_user}) %dir %{pubconfpath}
%attr(755,%{sssd_user},%{sssd_user}) %dir %{gpocachepath}
%attr(750,%{sssd_user},%{sssd_user}) %dir %{_var}/log/%{name}
%attr(700,%{sssd_user},%{sssd_user}) %dir %{_sysconfdir}/sssd
%attr(711,%{sssd_user},%{sssd_user}) %dir %{_sysconfdir}/sssd/conf.d
Resolves: rhbz#1591804 - something keeps /lib/libnss_systemd.so.2 open on minimal appliance image, breaking composes Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-21 18:52:17 +00:00
%attr(711,root,root) %dir %{_sysconfdir}/sssd/pki
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
%ghost %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{_sysconfdir}/logrotate.d
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%config(noreplace) %{_sysconfdir}/logrotate.d/sssd
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{_sysconfdir}/rwtab.d
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
%config(noreplace) %{_sysconfdir}/rwtab.d/sssd
Own several directories https://bugzilla.redhat.com/show_bug.cgi?id=839782
2012-07-15 14:45:13 +00:00
%dir %{_datadir}/sssd
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%config(noreplace) %{_sysconfdir}/pam.d/sssd-shadowutils
Own the %{_libdir}/%{name}/conf dir https://bugzilla.redhat.com/show_bug.cgi?id=1483517
2017-08-21 10:35:02 +00:00
%dir %{_libdir}/%{name}/conf
New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 08:58:04 +00:00
%{_libdir}/%{name}/conf/sssd.conf
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
%{_datadir}/sssd/cfg_rules.ini
New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider
2012-02-15 21:11:31 +00:00
%{_mandir}/man1/sss_ssh_authorizedkeys.1*
%{_mandir}/man1/sss_ssh_knownhostsproxy.1*
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man5/sssd.conf.5*
Cherry-pick patches from upstream that enable the files provider Required for: https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-22 15:01:18 +00:00
%{_mandir}/man5/sssd-files.5*
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%{_mandir}/man5/sssd-simple.5*
New upstream release 1.9.0-13.beta6
2012-08-02 15:19:01 +00:00
%{_mandir}/man5/sssd-sudo.5*
Backport few upstream patches/fixes
2017-09-01 18:52:07 +00:00
%{_mandir}/man5/sssd-session-recording.5*
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man8/sssd.8*
Move the sss_cache tool to the main package
2012-10-18 17:53:46 +00:00
%{_mandir}/man8/sss_cache.8*
New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 08:58:04 +00:00
%dir %{_datadir}/sssd/systemtap
%{_datadir}/sssd/systemtap/id_perf.stp
%{_datadir}/sssd/systemtap/nested_group_perf.stp
Fix few bugs/regressions Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied
2017-09-11 10:04:54 +00:00
%{_datadir}/sssd/systemtap/dp_request.stp
Update to latest released upstream version 2.2.3
2020-02-27 00:18:17 +00:00
%{_datadir}/sssd/systemtap/ldap_perf.stp
New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 08:58:04 +00:00
%dir %{_datadir}/systemtap
%dir %{_datadir}/systemtap/tapset
%{_datadir}/systemtap/tapset/sssd.stp
%{_datadir}/systemtap/tapset/sssd_functions.stp
Fix few bugs/regressions Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied
2017-09-11 10:04:54 +00:00
%{_mandir}/man5/sssd-systemtap.5*
New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 08:58:04 +00:00
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%if 0%{?rhel}
%files polkit-rules
%{_datadir}/polkit-1/rules.d/*
%endif
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%files ldap -f sssd_ldap.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_libdir}/%{name}/libsss_ldap.so
%{_mandir}/man5/sssd-ldap.5*
Update to latest released upstream version 2.2.3
2020-02-27 00:18:17 +00:00
%{_mandir}/man5/sssd-ldap-attributes.5*
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%files krb5-common
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%attr(755,%{sssd_user},%{sssd_user}) %dir %{pubconfpath}/krb5.include.d
sssd-2.4.2-2: Remove setuid from child binaries and relax requirement on python3-sssdconfig
2021-02-19 17:24:03 +00:00
%attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/ldap_child
%attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/krb5_child
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%files krb5 -f sssd_krb5.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_libdir}/%{name}/libsss_krb5.so
%{_mandir}/man5/sssd-krb5.5*
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
%files common-pac
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
Backport the sssd-common-pac subpackage from upstream
2013-09-27 20:42:45 +00:00
%{_libexecdir}/%{servicename}/sssd_pac
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%files ipa -f sssd_ipa.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%attr(700,%{sssd_user},%{sssd_user}) %dir %{keytabdir}
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_libdir}/%{name}/libsss_ipa.so
sssd-2.4.2-2: Remove setuid from child binaries and relax requirement on python3-sssdconfig
2021-02-19 17:24:03 +00:00
%attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/selinux_child
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_mandir}/man5/sssd-ipa.5*
%files ad -f sssd_ad.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_libdir}/%{name}/libsss_ad.so
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
%{_libexecdir}/%{servicename}/gpo_child
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_mandir}/man5/sssd-ad.5*
%files proxy
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
sssd-2.4.2-2: Remove setuid from child binaries and relax requirement on python3-sssdconfig
2021-02-19 17:24:03 +00:00
%attr(%{child_attrs},root,%{sssd_user}) %{_libexecdir}/%{servicename}/proxy_child
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
%{_libdir}/%{name}/libsss_proxy.so
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%files dbus -f sssd_dbus.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%{_libexecdir}/%{servicename}/sssd_ifp
%{_mandir}/man5/sssd-ifp.5*
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%{_unitdir}/sssd-ifp.service
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
# InfoPipe DBus plumbing
%{_sysconfdir}/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
%{_datadir}/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
%files -n libsss_simpleifp
%{_libdir}/libsss_simpleifp.so.*
%files -n libsss_simpleifp-devel
%doc sss_simpleifp_doc/html
%{_includedir}/sss_sifp.h
%{_includedir}/sss_sifp_dbus.h
%{_libdir}/libsss_simpleifp.so
%{_libdir}/pkgconfig/sss_simpleifp.pc
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
%files client -f sssd_client.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
Remove stray leading slash from file path Related: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
2013-08-09 08:17:36 +00:00
%{_libdir}/libnss_sss.so.2
%{_libdir}/security/pam_sss.so
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%{_libdir}/security/pam_sss_gss.so
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
2010-09-16 13:32:53 +00:00
%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders
2012-06-25 17:15:35 +00:00
%{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{_libdir}/cifs-utils
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
%{_libdir}/cifs-utils/cifs_idmap_sss.so
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{_sysconfdir}/cifs-utils
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
%ghost %{_sysconfdir}/cifs-utils/idmap-plugin
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{_libdir}/%{name}
%dir %{_libdir}/%{name}/modules
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
%{_libdir}/%{name}/modules/sssd_krb5_localauth_plugin.so
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man8/pam_sss.8*
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%{_mandir}/man8/pam_sss_gss.8*
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
%{_mandir}/man8/sssd_krb5_locator_plugin.8*
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
Move libsss_sudo.so outside sssd-common The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo. If libsss_sudo.so was part of sssd-client then 32 bit version would never be used on 64 bit machine and files in sssd-client can be used by multilib applications e.g. libnss_sss.so can be indirectly "dlopened" by 64 bit applications and 32 bit application. (32-bit web browser; ordinary 64bit applications ...)
2016-01-19 14:06:17 +00:00
%files -n libsss_sudo
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING
Move libsss_sudo.so outside sssd-common The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo. If libsss_sudo.so was part of sssd-client then 32 bit version would never be used on 64 bit machine and files in sssd-client can be used by multilib applications e.g. libnss_sss.so can be indirectly "dlopened" by 64 bit applications and 32 bit application. (32-bit web browser; ordinary 64bit applications ...)
2016-01-19 14:06:17 +00:00
%{_libdir}/libsss_sudo.so*
Move libsss_autofs.so outside sssd-common It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
2016-02-19 08:27:27 +00:00
%files -n libsss_autofs
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
Move libsss_autofs.so outside sssd-common It will reduce dependency chain in container world. libsss_autofs.so depends only on libc and requires sssd unix sockets. And sssd-common has many requirements.
2016-02-19 08:27:27 +00:00
%dir %{_libdir}/%{name}/modules
%{_libdir}/%{name}/modules/libsss_autofs.so
New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)
2012-02-07 01:08:04 +00:00
%files tools -f sssd_tools.lang
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license COPYING
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%{_sbindir}/sss_obfuscate
New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 06:00:25 +00:00
%{_sbindir}/sss_override
New upstream release 1.7.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 Support for case-insensitive domains Support for multiple search bases in the LDAP provider Support for the native FreeIPA netgroup implementation Reliability improvements to the process monitor New DEBUG facility with more consistent log levels New tool to change debug log levels without restarting SSSD SSSD will now disconnect from LDAP server when idle FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains Assorted performance improvements in the LDAP provider
2011-12-22 20:12:50 +00:00
%{_sbindir}/sss_debuglevel
New upstream release 1.9.0-13.beta6
2012-08-02 15:19:01 +00:00
%{_sbindir}/sss_seed
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
%{_sbindir}/sssctl
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
%{python3_sitelib}/sssd/
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%{_mandir}/man8/sss_obfuscate.8*
New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 06:00:25 +00:00
%{_mandir}/man8/sss_override.8*
New upstream release 1.7.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 Support for case-insensitive domains Support for multiple search bases in the LDAP provider Support for the native FreeIPA netgroup implementation Reliability improvements to the process monitor New DEBUG facility with more consistent log levels New tool to change debug log levels without restarting SSSD SSSD will now disconnect from LDAP server when idle FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains Assorted performance improvements in the LDAP provider
2011-12-22 20:12:50 +00:00
%{_mandir}/man8/sss_debuglevel.8*
New upstream release 1.9.0-13.beta6
2012-08-02 15:19:01 +00:00
%{_mandir}/man8/sss_seed.8*
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
2016-07-08 06:35:48 +00:00
%{_mandir}/man8/sssctl.8*
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%files -n python3-sssdconfig -f python3_sssdconfig.lang
%dir %{python3_sitelib}/SSSDConfig
%{python3_sitelib}/SSSDConfig/*.py*
Fix unowned directories - https://fedoraproject.org/wiki/Packaging:UnownedDirectories - Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 14:12:33 +00:00
%dir %{python3_sitelib}/SSSDConfig/__pycache__
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%{python3_sitelib}/SSSDConfig/__pycache__/*.py*
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%dir %{_datadir}/sssd
%{_datadir}/sssd/sssd.api.conf
%{_datadir}/sssd/sssd.api.d
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%files -n python3-sss
%{python3_sitearch}/pysss.so
%files -n python3-sss-murmur
%{python3_sitearch}/pysss_murmur.so
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
%files -n libsss_idmap
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
%{_libdir}/libsss_idmap.so.*
%files -n libsss_idmap-devel
%doc idmap_doc/html
%{_includedir}/sss_idmap.h
%{_libdir}/libsss_idmap.so
%{_libdir}/pkgconfig/sss_idmap.pc
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
%files -n libipa_hbac
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
%{_libdir}/libipa_hbac.so.*
%files -n libipa_hbac-devel
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
%doc hbac_doc/html
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
%{_includedir}/ipa_hbac.h
%{_libdir}/libipa_hbac.so
%{_libdir}/pkgconfig/ipa_hbac.pc
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
%files -n libsss_nss_idmap
Add missing %license macro
2017-02-14 18:45:41 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
%{_libdir}/libsss_nss_idmap.so.*
%files -n libsss_nss_idmap-devel
%doc nss_idmap_doc/html
%{_includedir}/sss_nss_idmap.h
%{_libdir}/libsss_nss_idmap.so
%{_libdir}/pkgconfig/sss_nss_idmap.pc
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
%files -n python3-libsss_nss_idmap
%{python3_sitearch}/pysss_nss_idmap.so
%files -n python3-libipa_hbac
%{python3_sitearch}/pyhbac.so
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%files winbind-idmap -f sssd_winbind_idmap.lang
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
%dir %{_libdir}/samba/idmap
%{_libdir}/samba/idmap/sss.so
%{_mandir}/man8/idmap_sss.8*
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%files nfs-idmap -f sssd_nfs_idmap.lang
%{_mandir}/man5/sss_rpcidmapd.5*
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
%{_libdir}/libnfsidmap/sss.so
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
%files -n libsss_certmap -f libsss_certmap.lang
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%license src/sss_client/COPYING src/sss_client/COPYING.LESSER
%{_libdir}/libsss_certmap.so.*
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
%{_mandir}/man5/sss-certmap.5*
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%files -n libsss_certmap-devel
%doc certmap_doc/html
%{_includedir}/sss_certmap.h
%{_libdir}/libsss_certmap.so
%{_libdir}/pkgconfig/sss_certmap.pc
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
%files kcm -f sssd_kcm.lang
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%{_libexecdir}/%{servicename}/sssd_kcm
Add krb5 conf snippet for default KCM http://fedoraproject.org/wiki/Releases/27/ChangeSet#Kerberos_KCM_credential_cache_by_default https://bugzilla.redhat.com/show_bug.cgi?id=1421604
2017-09-01 18:46:24 +00:00
%config(noreplace) %{_sysconfdir}/krb5.conf.d/kcm_default_ccache
New upstream release 1.15.3 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 11:58:49 +00:00
%dir %{_datadir}/sssd-kcm
%{_datadir}/sssd-kcm/kcm_default_ccache
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%{_unitdir}/sssd-kcm.socket
%{_unitdir}/sssd-kcm.service
%{_mandir}/man8/sssd-kcm.8*
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
%if 0%{?rhel}
%pre common
getent group sssd >/dev/null || groupadd -r sssd
getent passwd sssd >/dev/null || useradd -r -g sssd -d / -s /sbin/nologin -c "User for sssd" sssd
%endif
Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV
2013-07-01 22:57:07 +00:00
%post common
Use macros and don't call systemctl directly - Resolves: rhbz#850328 - Introduce new systemd-rpm macros in sssd spec file
2016-01-19 11:04:41 +00:00
%systemd_post sssd.service
New upstream release 1.15.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 18:57:42 +00:00
%systemd_post sssd-autofs.socket
%systemd_post sssd-nss.socket
%systemd_post sssd-pac.socket
%systemd_post sssd-pam.socket
%systemd_post sssd-pam-priv.socket
%systemd_post sssd-ssh.socket
%systemd_post sssd-sudo.socket
- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection
2010-07-09 18:52:22 +00:00
Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV
2013-07-01 22:57:07 +00:00
%preun common
Use macros and don't call systemctl directly - Resolves: rhbz#850328 - Introduce new systemd-rpm macros in sssd spec file
2016-01-19 11:04:41 +00:00
%systemd_preun sssd.service
New upstream release 1.15.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 18:57:42 +00:00
%systemd_preun sssd-autofs.socket
%systemd_preun sssd-nss.socket
%systemd_preun sssd-pac.socket
%systemd_preun sssd-pam.socket
%systemd_preun sssd-pam-priv.socket
%systemd_preun sssd-ssh.socket
%systemd_preun sssd-sudo.socket
Fix systemd conversion. Upgrades from SysV to systemd weren't properly enabling the systemd service. Fix a serious memory leak in the memberOf plugin Fix an issue where the user's full name would sometimes be removed from the cache
2011-04-14 18:16:04 +00:00
Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV
2013-07-01 22:57:07 +00:00
%postun common
New upstream release 1.15.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 18:57:42 +00:00
%systemd_postun_with_restart sssd-autofs.socket
%systemd_postun_with_restart sssd-nss.socket
%systemd_postun_with_restart sssd-pac.socket
%systemd_postun_with_restart sssd-pam.socket
%systemd_postun_with_restart sssd-pam-priv.socket
%systemd_postun_with_restart sssd-ssh.socket
%systemd_postun_with_restart sssd-sudo.socket
spec: update spec file with recent upstream fixes * https://github.com/SSSD/sssd/commit/815197cb1d33ad0ac8538f5402a7b95e9f474e7f * https://github.com/SSSD/sssd/commit/9da41eb910ed292a9ed27aa8b66c4d4c8c842122 (cherry picked from commit 53a865af5d2972215da41df083002452738474ba)
2021-03-31 09:47:57 +00:00
# Services have RefuseManualStart=true, therefore we can't request restart.
%systemd_postun sssd-autofs.service
%systemd_postun sssd-nss.service
%systemd_postun sssd-pac.service
%systemd_postun sssd-pam.service
%systemd_postun sssd-ssh.service
%systemd_postun sssd-sudo.service
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
%post dbus
%systemd_post sssd-ifp.service
%preun dbus
%systemd_preun sssd-ifp.service
%postun dbus
%systemd_postun_with_restart sssd-ifp.service
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
%post kcm
%systemd_post sssd-kcm.socket
%preun kcm
%systemd_preun sssd-kcm.socket
%postun kcm
%systemd_postun_with_restart sssd-kcm.socket
%systemd_postun_with_restart sssd-kcm.service
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
%post client
/usr/sbin/alternatives --install /etc/cifs-utils/idmap-plugin cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so 20
%preun client
Small spec file clean-up * remove workaround for old rpmbuild (rhel5) * remove conversion sysv scripts to systemd * small code style update in bash scripts
2015-04-09 16:06:13 +00:00
if [ $1 -eq 0 ] ; then
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
/usr/sbin/alternatives --remove cifs-idmap-plugin %{_libdir}/cifs-utils/cifs_idmap_sss.so
fi
Fix %postun
2011-04-18 15:02:57 +00:00
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
%posttrans common
%systemd_postun_with_restart sssd.service
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%changelog
sssd-2.6.0-1: Rebase to latest upstream release
2021-10-14 10:24:52 +00:00
* Thu Oct 14 2021 Pavel Březina <pbrezina@redhat.com> - 2.6.0-1
- Rebase to SSSD 2.6.0
Solve compilation problem with autoconf Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-09-21 08:10:03 +00:00
* Tue Sep 21 2021 Iker Pedrosa <ipedrosa@redhat.com> - 2.5.2-7
- Solve compilation problem with autoconf
* Tue Sep 14 2021 Sahana Prasad <sahana@redhat.com> - 2.5.2-6
Rebuilt with OpenSSL 3.0.0
2021-09-14 17:15:54 +00:00
- Rebuilt with OpenSSL 3.0.0
sssd-2.5.2-5: Fix CVE-2021-3621
2021-08-16 13:04:28 +00:00
* Mon Aug 16 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.2-5
- Fix CVE-2021-3621
Support subid ranges managed by FreeIPA
2021-08-09 10:48:10 +00:00
* Mon Aug 09 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.2-4
- Disable running files provider by default
- Support subid ranges managed by FreeIPA
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 18:15:25 +00:00
* Fri Jul 23 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.5.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Rebuild against Samba 4.15.0 RC1 Samba's libndr did bump soname Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2021-07-16 14:04:00 +00:00
* Fri Jul 16 2021 Alexander Bokovoy <abokovoy@redhat.com> - 2.5.2-2
- Rebuild against Samba 4.15.0 RC1
sssd-2.5.2-1: Rebase to latest upstream release
2021-07-13 09:28:31 +00:00
* Tue Jul 13 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.2-1
- Rebase to SSSD 2.5.2
sssd-2.5.1-2: debug_backtrace improvements
2021-06-24 10:11:56 +00:00
* Thu Jun 24 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.1-2
- Multiple small fixes to reduce size of log files with debug_backtrace on
- Fix a corner case bug in KCM renewals that makes user lookup in the daemon fail
sssd-2.5.1-1: Rebase to latest upstream release
2021-06-08 11:07:57 +00:00
* Tue Jun 08 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.1-1
- Rebase to SSSD 2.5.1
Rebuilt for Python 3.10
2021-06-04 19:15:45 +00:00
* Fri Jun 04 2021 Python Maint <python-maint@redhat.com>
- Rebuilt for Python 3.10
sssd-2.5.0-2: Fix KCM regression on long upgrade path Resolves: rhbz#1962006
2021-05-19 17:30:33 +00:00
* Wed May 19 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.0-2
- Fix regression in sssd-kcm when upgrading from 2.4.0 directly to 2.5.0
- Return correct error code for unknown/unsupported operations in sssd-kcm
sssd-2.5.0-1: Rebase to latest upstream release
2021-05-10 14:02:51 +00:00
* Mon May 10 2021 Pavel Březina <pbrezina@redhat.com> - 2.5.0-1
- Rebase to SSSD 2.5.0
sssd-2.4.2-5: Change configure to avoid errors with new autoconf version (rhbz#1943130)
2021-04-08 13:46:53 +00:00
* Thu Apr 8 2021 Iker Pedrosa <ipedrosa@redhat.com> - 2.4.2-5
- Change configure to avoid errors with new autoconf version (rhbz#1943130)
sssd-2.4.2-4: Add CAP_DAC_OVERRIDE to ifp service file if required by build configuration
2021-03-31 09:49:33 +00:00
* Wed Mar 31 2021 Pavel Březina <pbrezina@redhat.com> - 2.4.2-4
- Add CAP_DAC_OVERRIDE to ifp service file if required by build configuration
Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583.
2021-03-02 15:12:16 +00:00
* Tue Mar 02 2021 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.4.2-3
- Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
sssd-2.4.2-2: Remove setuid from child binaries and relax requirement on python3-sssdconfig
2021-02-19 17:24:03 +00:00
* Fri Feb 19 2021 Pavel Březina <pbrezina@redhat.com> - 2.4.2-2
- Remove setuid from child binaries and relax requirement on python3-sssdconfig
sssd-2.4.2-1: Rebase to latest upstream release
2021-02-19 16:08:43 +00:00
* Fri Feb 19 2021 Pavel Březina <pbrezina@redhat.com> - 2.4.2-1
- Rebase to SSSD 2.4.2
sssd-2.4.1-1: Rebase to latest upstream release
2021-02-05 13:14:41 +00:00
* Fri Feb 5 2021 Pavel Březina <pbrezina@redhat.com> - 2.4.1-1
- Rebase to SSSD 2.4.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-27 21:01:16 +00:00
* Wed Jan 27 2021 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
sssd-2.4.0-6 - improve kcm performance
2020-12-11 10:30:39 +00:00
* Fri Dec 11 2020 Pavel Březina <pbrezina@redhat.com> - 2.4.0-6
- Improve sssd-kcm performance, fix upgrade with existing credentials (rhbz#1645624)
sssd-2.4.0.5 - improve kcm performance
2020-12-07 16:20:34 +00:00
* Mon Dec 7 2020 Pavel Březina <pbrezina@redhat.com> - 2.4.0-5
- Improve sssd-kcm performance (rhbz#1645624)
Rebuild for Fedora ELN Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2020-11-30 13:09:43 +00:00
* Mon Nov 30 2020 Stephen Gallagher <sgallagh@redhat.com> - 2.4.0-4
- Rebuild for Fedora ELN
Rebuild with libsemanage.so.2
2020-11-03 15:56:27 +00:00
* Tue Nov 3 2020 Petr Lautrbach <plautrba@redhat.com> - 2.4.0-3
- Rebuild with libsemanage.so.2
sssd-2.4.0-2: remove old patches
2020-10-12 12:13:26 +00:00
* Mon Oct 12 2020 Pavel Březina <pbrezina@redhat.com> - 2.4.0-2
- Remove old patches
sssd-2.4.0-1: Rebase to latest upstream release
2020-10-12 11:06:47 +00:00
* Mon Oct 12 2020 Pavel Březina <pbrezina@redhat.com> - 2.4.0-1
- Rebase to SSSD 2.4.0
sssd-2.3.1-4: include 2.3.1 source
2020-07-28 09:52:54 +00:00
* Tue Jul 28 2020 Pavel Březina <pbrezina@redhat.com> - 2.3.1-4
- Actually include 2.3.1 source
sssd-2.3.1-3: fix test compilation with check-0.15
2020-07-28 08:27:21 +00:00
* Tue Jul 28 2020 Pavel Březina <pbrezina@redhat.com> - 2.3.1-3
- Fix test compilation with check-0.15
sssd-2.3.1-2: switch to rundir
2020-07-28 08:26:30 +00:00
* Mon Jul 27 2020 Pavel Březina <pbrezina@redhat.com> - 2.3.1-2
- Use correct run dir (RHBZ#1557622)
sssd-2.3.1-1: Rebase to latest upstream release
2020-07-24 14:47:30 +00:00
* Fri Jul 24 2020 Pavel Březina <pbrezina@redhat.com> - 2.3.1-1
- Rebase to SSSD 2.3.1
Minor ELN conditional fix Signed-off-by: Merlin Mathesius <mmathesi@redhat.com>
2020-07-09 17:13:57 +00:00
* Fri Jul 24 2020 Merlin Mathesius <mmathesi@redhat.com> - 2.3.0-5
- Minor ELN conditional fix
Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-14 14:20:46 +00:00
* Tue Jul 14 2020 Tom Stellard <tstellar@redhat.com> - 2.3.0-4
- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
Disable LTO
2020-07-01 18:15:35 +00:00
* Wed Jul 1 2020 Jeff Law <law@redhat.com>
- Disable LTO
Fix github url typo Signed-off-by: Peter Jones <pjones@redhat.com>
2020-06-19 22:50:55 +00:00
* Fri Jun 19 2020 Peter Jones <pjones@redhat.com>
- Fix github url typo
Rebuilt for Python 3.9
2020-05-26 01:51:04 +00:00
* Tue May 26 2020 Miro Hrončok <mhroncok@redhat.com> - 2.3.0-2
- Rebuilt for Python 3.9
sssd-2.3.0-1: Rebase to latest upstream release
2020-05-20 10:55:34 +00:00
* Wed May 20 2020 Pavel Březina <pbrezina@redhat.com> - 2.3.0-1
- Rebase to SSSD 2.3.0
Fix nss symbol collision Fedora Rawhide
2020-02-27 06:02:08 +00:00
* Fri Feb 28 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-14
- Resolves: rhbz#1800567 - sssd fail to build in Fedora rawhide
Resolves: upstream#4159 - p11_child should have an option to skip C_WaitForSlotEvent if the PKCS#11 module does not implement it properly
2020-02-27 03:12:39 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-13
- Resolves: upstream#4159 - p11_child should have an option to skip
C_WaitForSlotEvent if the PKCS#11 module does not
implement it properly
Resolves: upstream#4135 - util/sss_ptr_hash.c: potential double free in `sss_ptr_hash_delete_cb()`
2020-02-27 03:07:30 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-12
- Resolves: upstream#4135 - util/sss_ptr_hash.c: potential double free in
`sss_ptr_hash_delete_cb()`
Resolves: upstream#4118 sssd requires timed sudoers ldap entries to be specified up to the seconds
2020-02-27 02:59:01 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-11
- Resolves: upstream#4118 - sssd requires timed sudoers ldap entries to be
specified up to the seconds
Add sssd-dbus package as a dependency of sssd-tools
2020-02-27 02:54:46 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-11
- Add sssd-dbus package as a dependency of sssd-tools
Resolves: upstream#4142 - sssd_be frequent crash
2020-02-27 02:51:05 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-10
- Resolves: upstream#4142 - sssd_be frequent crash
Resolves: upstream#4131 Force LDAPS over 636 with AD Provider
2020-02-27 02:40:28 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-9
- Resolves: upstream#4131 Force LDAPS over 636 with AD Provider
Resolves: upstream#3630 - Randomize ldap_connection_expire_timeout either by default or w/ a configure option
2020-02-27 02:32:17 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-8
- Resolves: upstream#3630 - Randomize ldap_connection_expire_timeout either
by default or w/ a configure option
Resolves: upstream#4135 - util/sss_ptr_hash.c: potential double free in `sss_ptr_hash_delete_cb()`
2020-02-27 02:24:54 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-7
- Resolves: upstream#4135 - util/sss_ptr_hash.c: potential double free in
`sss_ptr_hash_delete_cb()`
Resolves: upstream#4088 - server/be: SIGTERM handling is incorrect
2020-02-27 02:19:00 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-6
- Resolves: upstream#4088 - server/be: SIGTERM handling is incorrect
Resolves: upstream##4089 Watchdog implementation or usage is incorrect
2020-02-27 02:09:42 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-5
- Resolves: upstream##4089 Watchdog implementation or usage is incorrect
Resolves: upstream#4126 pcscd rejecting sssd ldap_child as unauthorized
2020-02-27 02:03:56 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-4
- Resolves: upstream#4126 pcscd rejecting sssd ldap_child as unauthorized
Resolves: upstream#4127 - [Doc]Provide explanation on escape character for match rules sss-certmap
2020-02-27 01:56:53 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-3
- Resolves: upstream#4127 - [Doc]Provide explanation on escape character for
match rules sss-certmap
Resolves: upstream#4129 - sssctl config-check command does not give proper error messages with line numbers
2020-02-27 01:51:03 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-2
- Resolves: upstream#4129 - sssctl config-check command does not give proper
error messages with line numbers
Update to latest released upstream version 2.2.3
2020-02-27 00:18:17 +00:00
* Wed Feb 26 2020 Michal Židek <mzidek@redhat.com> - 2.2.3-1
- Update to latest released upstream version
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_3.htm
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-31 00:16:21 +00:00
* Fri Jan 31 2020 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Fix build against samba-4.12.0rc1 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2020-01-24 15:18:38 +00:00
* Fri Jan 24 2020 Stephen Gallagher <sgallagh@redhat.com> - 2.2.2-5
- Fix build against samba-4.12.0rc1
Rebuild for samba-4.12.0rc1 Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
2020-01-24 12:17:14 +00:00
* Fri Jan 24 2020 Mohan Boddu <mboddu@bhujji.com> - 2.2.2-4
- Rebuild for samba-4.12.0rc1
Backport PR #900 to fix RHBZ #1755643
2019-10-22 18:27:01 +00:00
* Tue Oct 22 2019 Adam Williamson <awilliam@redhat.com> - 2.2.2-3
- Resolves: rhbz#1755643 - Upgrade to sssd 2.2.2-1.fc30 breaks setting
up FreeIPA replica in containers
Backport PR #904 to fix RHBZ #1757224
2019-10-22 17:04:39 +00:00
* Tue Oct 22 2019 Adam Williamson <awilliam@redhat.com> - 2.2.2-2
- Resolves: rhbz#1757224 - Tickets act like they're expiring prematurely
when using KCM cache
Update to latest released upstream version 2.2.2
2019-08-28 08:15:03 +00:00
* Wed Sep 11 2019 Michal Židek <mzidek@redhat.com> - 2.2.2-1
- Update to latest released upstream version
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_2.html
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_1.html
Rebuilding for libldb 2.0.5 Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2019-08-26 21:57:25 +00:00
* Mon Aug 26 2019 Stephen Gallagher <sgallagh@redhat.com> - 2.2.0-6
- Rebuilding for libldb 2.0.5
Rebuilt for Python 3.8
2019-08-19 09:06:22 +00:00
* Mon Aug 19 2019 Miro Hrončok <mhroncok@redhat.com> - 2.2.0-5
- Rebuilt for Python 3.8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-27 00:08:51 +00:00
* Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Resolves: rhbz#1721636 - sssd-kcm calls sssd-genconf which triggers nscd warning
2019-07-05 14:45:48 +00:00
* Fri Jul 5 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-3
- Resolves: rhbz#1721636 - sssd-kcm calls sssd-genconf which triggers
nscd warning
Resolves: rhbz#1724717 - sssd-proxy crashes resolving groups with no members
2019-07-05 14:43:37 +00:00
* Fri Jul 5 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.2.0-2
- Resolves: rhbz#1724717 - sssd-proxy crashes resolving groups with
no members
Update to latest released upstream version 2.2.0
2019-06-17 12:39:56 +00:00
* Mon Jun 17 2019 Michal Židek <mzidek@redhat.com> - 2.2.0-1
- Update to latest released upstream version
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_0.html
Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip GPOs that have groupPolicyContainers unreadable by SSSD. - CVE-2018-16838
2019-03-27 23:00:47 +00:00
* Wed Mar 27 2019 Michal Židek <mzidek@redhat.com> - 2.1.0-2
- Resolves: upstream#3867 - [RFE] Need an option in SSSD so that it will skip
GPOs that have groupPolicyContainers unreadable
by SSSD.
- CVE-2018-16838
Update to latest released upstream version 2.1.0
2019-03-27 16:54:49 +00:00
* Wed Mar 27 2019 Michal Židek <mzidek@redhat.com> - 2.1.0-1
- Update to latest released upstream version
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_1_0.html
Resolves: rhbz#1667444 - sssd: make python3-sssdconfig as suggest Signed-off-by: Sinny Kumari <sinny@redhat.com>
2019-02-13 14:19:00 +00:00
* Wed Feb 13 2019 Sinny Kumari <skumari@redhat.com> - 2.0.0-9
- Resolves: rhbz#1667444 - sssd: make python3-sssdconfig as suggest
Backport fix for RHBZ #1676946 (see upstream #3924) This backports three commits that are identified in upstream issue #3924 as the fixes for RHBZ #1676946 (failure of sssd to start in current Rawhide).
2019-02-14 01:55:26 +00:00
* Wed Feb 13 2019 Adam Williamson <awilliam@redhat.com> - 2.0.0-8
- Resolves: rhbz#1676946 - startup fail with status NOTIMPLEMENTED
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-03 08:34:02 +00:00
* Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Resolves: rhbz#1654537 - sbus: use 120 second default timeout
2018-12-13 06:41:39 +00:00
* Wed Dec 12 2018 Adam Williamson <awilliam@redhat.com> - 2.0.0-6
- Resolves: rhbz#1654537 - sbus: use 120 second default timeout
Backport other patches from master to fix build with recent krb5
2018-12-13 08:02:15 +00:00
- Backport two other patches from master to fix build with recent krb5
Resolves: rhbz#1654537 - sbus: use 120 second default timeout
2018-12-13 06:41:39 +00:00
Resolves: rhbz#1629737 - sssd: Remove python2 (sub)packages from Fedora 30+
2018-11-07 13:20:39 +00:00
* Wed Nov 07 2018 Michal Židek <mzidek@redhat.com> - 2.0.0-5
- Resolves: rhbz#1629737 - sssd: Remove python2 (sub)packages from Fedora 30+
Backport a bunch of upstream fixes - Resolves: upstream#3821 - crash related to sbus_router_destructor() - Resolves: upstream#3810 - sbus2: fix memory leak in sbus_message_bound_ref - Resolves: upstream#3819 - sssd only sets the SELinux login context if it differs from the default - Resolves: upstream#3807 - The sbus codegen script relies on "python" which might not be available on all distributions - Resolves: upstream#3820 - sudo: search with lower cased name for case insensitive domains - Resolves: upstream#3701 - [RFE] Allow changing default behavior of SSSD from an allow-any default to a deny-any default when it can't find any GPOs to apply to a user login. - Resolves: upstream#3828 - Invalid domain provider causes SSSD to abort startup - Resolves: upstream#3500 - Make sure sssd is a replacement for pam_pkcs11 also for local account authentication - Resolves: upstream#3812 - sssd 2.0.0 segfaults on startup - Resolves: upstream#3826 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated - Resolves: upstream#3827 - SSSD should log to syslog if a domain is not started due to a misconfiguration - Resolves: upstream#3830 - Printing incorrect information about domain with sssctl utility - Resolves: upstream#3489 - p11_child should work wit openssl1.0+ - Resolves: upstream#3750 - [RFE] man 5 sssd-files should mention necessary changes in nsswitch.conf - Resovles: upstream#3650 - RFE: Require smartcard authentication - Resolves: upstream#3334 - sssctl config-check does not check any special characters in domain name of domain section - Resolves: upstream#3849 - Files: The files provider always enumerates which causes duplicate when running getent passwd - Related: upstream#3855 - session not recording for local user when groups defined - Resolves: upstream#3802 - Reuse sysdb_error_to_errno() outside sysdb - Related: upstream#3493 - Remove the pysss.local interface
2018-10-24 08:34:15 +00:00
* Wed Aug 29 2018 Michal Židek <mzidek@redhat.com> - 2.0.0-4
- Resolves: upstream#3821 - crash related to sbus_router_destructor()
- Resolves: upstream#3810 - sbus2: fix memory leak in sbus_message_bound_ref
- Resolves: upstream#3819 - sssd only sets the SELinux login context if it
differs from the default
- Resolves: upstream#3807 - The sbus codegen script relies on "python" which
might not be available on all distributions
- Resolves: upstream#3820 - sudo: search with lower cased name for case
insensitive domains
- Resolves: upstream#3701 - [RFE] Allow changing default behavior of SSSD from
an allow-any default to a deny-any default when it
can't find any GPOs to apply to a user login.
- Resolves: upstream#3828 - Invalid domain provider causes SSSD to abort
startup
- Resolves: upstream#3500 - Make sure sssd is a replacement for pam_pkcs11
also for local account authentication
- Resolves: upstream#3812 - sssd 2.0.0 segfaults on startup
- Resolves: upstream#3826 - Remove references of sss_user/group/add/del
commands in man pages since local provider is
deprecated
- Resolves: upstream#3827 - SSSD should log to syslog if a domain is not
started due to a misconfiguration
- Resolves: upstream#3830 - Printing incorrect information about domain with
sssctl utility
- Resolves: upstream#3489 - p11_child should work wit openssl1.0+
- Resolves: upstream#3750 - [RFE] man 5 sssd-files should mention necessary
changes in nsswitch.conf
- Resovles: upstream#3650 - RFE: Require smartcard authentication
- Resolves: upstream#3334 - sssctl config-check does not check any special
characters in domain name of domain section
- Resolves: upstream#3849 - Files: The files provider always enumerates
which causes duplicate when running getent passwd
- Related: upstream#3855 - session not recording for local user when groups
defined
- Resolves: upstream#3802 - Reuse sysdb_error_to_errno() outside sysdb
- Related: upstream#3493 - Remove the pysss.local interface
Resolves: rhbz#1622760 - Console login as FreeIPA domain user fails in current Fedora Rawhide / 29
2018-08-29 13:39:37 +00:00
* Wed Aug 29 2018 Michal Židek <mzidek@redhat.com> - 2.0.0-3
Backport a bunch of upstream fixes - Resolves: upstream#3821 - crash related to sbus_router_destructor() - Resolves: upstream#3810 - sbus2: fix memory leak in sbus_message_bound_ref - Resolves: upstream#3819 - sssd only sets the SELinux login context if it differs from the default - Resolves: upstream#3807 - The sbus codegen script relies on "python" which might not be available on all distributions - Resolves: upstream#3820 - sudo: search with lower cased name for case insensitive domains - Resolves: upstream#3701 - [RFE] Allow changing default behavior of SSSD from an allow-any default to a deny-any default when it can't find any GPOs to apply to a user login. - Resolves: upstream#3828 - Invalid domain provider causes SSSD to abort startup - Resolves: upstream#3500 - Make sure sssd is a replacement for pam_pkcs11 also for local account authentication - Resolves: upstream#3812 - sssd 2.0.0 segfaults on startup - Resolves: upstream#3826 - Remove references of sss_user/group/add/del commands in man pages since local provider is deprecated - Resolves: upstream#3827 - SSSD should log to syslog if a domain is not started due to a misconfiguration - Resolves: upstream#3830 - Printing incorrect information about domain with sssctl utility - Resolves: upstream#3489 - p11_child should work wit openssl1.0+ - Resolves: upstream#3750 - [RFE] man 5 sssd-files should mention necessary changes in nsswitch.conf - Resovles: upstream#3650 - RFE: Require smartcard authentication - Resolves: upstream#3334 - sssctl config-check does not check any special characters in domain name of domain section - Resolves: upstream#3849 - Files: The files provider always enumerates which causes duplicate when running getent passwd - Related: upstream#3855 - session not recording for local user when groups defined - Resolves: upstream#3802 - Reuse sysdb_error_to_errno() outside sysdb - Related: upstream#3493 - Remove the pysss.local interface
2018-10-24 08:34:15 +00:00
- Resolves: rhbz#1622760 - Console login as FreeIPA domain user fails in
current Fedora Rawhide / 29
Resolves: rhbz#1622760 - Console login as FreeIPA domain user fails in current Fedora Rawhide / 29
2018-08-29 13:39:37 +00:00
Fix linking issues
2018-08-29 12:15:30 +00:00
* Wed Aug 29 2018 Michal Židek <mzidek@redhat.com> - 2.0.0-2
- Fix linking issues
New upstream release 2.0.0
2018-08-14 09:07:44 +00:00
* Tue Aug 14 2018 Michal Židek <mzidek@redhat.com> - 2.0.0-1
- New upstream release 2.0.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 06:42:21 +00:00
* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.16.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Rebuilt for Python 3.7
2018-07-02 16:24:19 +00:00
* Mon Jul 02 2018 Miro Hrončok <mhroncok@redhat.com> - 1.16.2-5
- Rebuilt for Python 3.7
Resolves: upstream#3766 - CVE-2018-10852: information leak from the sssd-sudo responder And also ... - Related: upstream#941 - return multiple server addresses to the Kerberos locator plugin - Related: upstream#3652 - kdcinfo doesn't get populated for other domains - Resolves: upstream#3747 - sss_ssh_authorizedkeys exits abruptly if SSHD closes its end of the pipe before reading all the SSH keys - Resolves: upstream#3607 - Handle conflicting e-mail addresses more gracefully - Resolves: upstream#3754 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries - Related: upstream#3219 - [RFE] Regular expression used in sssd.conf not being able to consume an @-sign in the user/group name. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-25 07:36:46 +00:00
* Mon Jun 25 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.2-4
- Related: upstream#941 - return multiple server addresses to the Kerberos
locator plugin
- Related: upstream#3652 - kdcinfo doesn't get populated for other domains
- Resolves: upstream#3747 - sss_ssh_authorizedkeys exits abruptly if SSHD
closes its end of the pipe before reading all the
SSH keys
- Resolves: upstream#3607 - Handle conflicting e-mail addresses more gracefully
- Resolves: upstream#3754 - SSSD AD uses LDAP filter to detect POSIX attributes
stored in AD GC also for regular AD DC queries
- Related: upstream#3219 - [RFE] Regular expression used in sssd.conf not being
able to consume an @-sign in the user/group name.
- Resolves: upstream#3766 - CVE-2018-10852: information leak from the sssd-sudo
responder
* Thu Jun 21 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.2-3
Resolves: rhbz#1591804 - something keeps /lib/libnss_systemd.so.2 open on minimal appliance image, breaking composes Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-21 18:52:17 +00:00
- Resolves: rhbz#1591804 - something keeps /lib/libnss_systemd.so.2 open on
minimal appliance image, breaking composes
Rebuilt for Python 3.7
2018-06-19 09:27:58 +00:00
* Tue Jun 19 2018 Miro Hrončok <mhroncok@redhat.com> - 1.16.2-2
- Rebuilt for Python 3.7
New upstream release 1.16.2 - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-06-11 10:19:53 +00:00
* Mon Jun 11 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.2-1
- New upstream release 1.16.2
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_2.html
Related: upstream#3742 - Change of: User may not run sudo --> a password is required Patch 0017-sudo-ldap-do-not-store-rules-without-sudoHost-attrib.patch has been commented out as it caused some regressions on IPA tests. In order to unblock IPA folks, let's revert this patch from Fedora till we have a proper fix. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-28 08:00:39 +00:00
* Thu May 24 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-9
- Related: upstream#3742 - Change of: User may not run sudo --> a password is
required
Revert "Add: "ExcludeArch: armv7hl"" This reverts commit bc3790f5a0da28c52d1d22a6da574b7b133ac14d.
2018-05-17 15:21:23 +00:00
* Thu May 17 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-8
- Revert 589d1a48 as the builders are back to f27
Related: upstream#3436 - Certificates used in unit tests have limited lifetime Fix a non harmful warning shown by recent versions of OpenSSL. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-16 19:53:46 +00:00
* Wed May 16 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-7
- Related: upstream#3436 - Certificates used in unit tests have limited
lifetime
Add: "ExcludeArch: armv7hl" For some reason still unclear we're *not* able to build SSSD on koji's buildroot for armv7hl. Some tests have been done and SSSD was built successfully using real armv7hl hardware, which indicates that we're facing https://bugzilla.redhat.com/show_bug.cgi?id=1576593 As soon as the bug is resolved, this patch could be safely reverted. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-16 17:49:37 +00:00
- Add: "ExcludeArch: armv7hl"
Related: upstream#3436 - Certificates used in unit tests have limited lifetime Fix a non harmful warning shown by recent versions of OpenSSL. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-16 19:53:46 +00:00
Related: upstream#3436 - Add openssl, openssh and nss-tools as BuildRequires Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 09:29:22 +00:00
* Mon May 14 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-6
- Related: upstream#3436 - Add openssl, openssh and nss-tools as BuildRequires
Related: upstream#3436 - Certificates used in unit tests have limited lifetime Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 06:58:27 +00:00
* Mon May 14 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-5
- Related: upstream#3436 - Certificates used in unit tests have limited
lifetime
Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update process is terminated with a signal Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:01:15 +00:00
- Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update
process is terminated with a signal
Resolves: upstream#3726 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:03:15 +00:00
- Resolves: upstream#3726 - SSSD with ID provider 'ad' should give a warning
in case the ldap schema is manually changed to
something different than 'ad'.
Related: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:05:33 +00:00
- Related: upstream#2653 - Group renaming issue when "id_provider = ldap" is
set.
Resolves: upstream#3719 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:10:24 +00:00
- Resolves: upstream#3719 - The SSSD IPA provider allocates information about
external groups on a long lived memory context,
causing memory growth of the sssd_be process
Resolves: upstream#3728 - Request by ID outside the min_id/max_id limit of a first domain does not reach the second domain Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:11:57 +00:00
- Resolves: upstream#3728 - Request by ID outside the min_id/max_id limit of a
first domain does not reach the second domain
Resolves: upstream#3731 - nss_clear_netgroup_hash_table(): only remove entries from the hash table, do not free them Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:13:53 +00:00
- Resolves: upstream#3731 - nss_clear_netgroup_hash_table(): only remove
entries from the hash table, do not free them
Resolves: upstream#3595 - ID override GID from Default Trust View is not properly resolved in case domain resolution order is set Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 07:16:02 +00:00
- Resolves: upstream#3595 - ID override GID from Default Trust View is not
properly resolved in case domain resolution order
is set
Related: upstream#3436 - Certificates used in unit tests have limited lifetime Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-14 06:58:27 +00:00
Resolves: rhbz#1574778 - sssd fails to download known_hosts from freeipa Patch 0018-sysdb-custom-completely-replace-old-object-instead-o.patch caused a regression, caught by lslebodn and reported by a few users. Let's comment out this patch for now and uncomment it when we have a fix that do not cause a regression. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-05-05 19:42:38 +00:00
* Sat May 05 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-4
- Resolves: rhbz#1574778 - sssd fails to download known_hosts from freeipa
Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:16:31 +00:00
* Fri Apr 27 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-3
- Resolves: upstream#3684 - A group is not updated if its member is removed
with the cleanup task, but the group does not
change
Resolves: upstream#3558 - sudo: report error when two rules share cn Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:18:59 +00:00
- Resolves: upstream#3558 - sudo: report error when two rules share cn
Tone down shutdown messages for socket activated responders Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:22:58 +00:00
- Tone down shutdown messages for socket activated responders
IPA: Qualify the externalUser sudo attribute Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:24:05 +00:00
- IPA: Qualify the externalUser sudo attribute
Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:26:30 +00:00
- Resolves: upstream#3550 - refresh_expired_interval does not work with
netgrous in 1.15
Resolves: upstream#3402 - Support alternative sources for the files provider Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:28:02 +00:00
- Resolves: upstream#3402 - Support alternative sources for the files provider
Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:30:42 +00:00
- Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
Resolves: upstream#3679 - Make nss netgroup requests more robust Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:31:57 +00:00
- Resolves: upstream#3679 - Make nss netgroup requests more robust
Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:34:23 +00:00
- Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not
configured
Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:50:29 +00:00
- Resolves: upstream#3469 - extend sss-certmap man page regarding priority
processing
Improve docs/debug message about GC detection Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:52:39 +00:00
- Improve docs/debug message about GC detection
Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:54:13 +00:00
- Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes
list out of bound?
Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:58:17 +00:00
- Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is
set.
Document which principal does the AD provider use Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 20:00:50 +00:00
- Document which principal does the AD provider use
Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 20:02:36 +00:00
- Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is
defined, but contains no SIDs
Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM Also ... Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.Fatal] Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 20:05:04 +00:00
- Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM
- Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
Provider returned an error
[org.freedesktop.sssd.Error.DataProvider.Fatal]
Add gcc to build dependencies gcc will be revomed from buildroot in fedora 29 http://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot Upstream patch from Lukáš Slebodnik <lslebodn@redhat.com> Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 20:07:37 +00:00
- Add gcc to build dependencies
Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-04-27 19:16:31 +00:00
Resolves: upstream#3573 - sssd won't show netgroups with blank domai Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:30:01 +00:00
* Fri Mar 30 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-2
- Resolves: upstream#3573 - sssd won't show netgroups with blank domain
Resolves: upstream#3660 - confdb_expand_app_domains() always fails Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:33:25 +00:00
- Resolves: upstream#3660 - confdb_expand_app_domains() always fails
Resolves: upstream#3658 - Application domain is not interpreted correctly Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:35:59 +00:00
- Resolves: upstream#3658 - Application domain is not interpreted correctly
Resolves: usptream#3687 - KCM: Don't pass a non null terminated string to json_loads() Related to: rhbz#1494843 - KCM Does not work Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:38:32 +00:00
- Resolves: upstream#3687 - KCM: Don't pass a non null terminated string to
json_loads()
Resolves: upstream#3386 - KCM: Payload buffer is too small Related to: rhbz#1494843 - KCM Does not work Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:43:19 +00:00
- Resolves: upstream#3386 - KCM: Payload buffer is too small
Resolves: upstream#3666 - Fix usage of str.decode() in our test Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:45:42 +00:00
- Resolves: upstream#3666 - Fix usage of str.decode() in our tests
A few KCM misc fixes Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:47:05 +00:00
- A few KCM misc fixes
Resolves: upstream#3573 - sssd won't show netgroups with blank domai Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-30 12:30:01 +00:00
New upstream release 1.16.1 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-03-09 14:42:19 +00:00
* Fri Mar 9 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.1-1
- New upstream release 1.16.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html
Resolves: upstream#3621 - backport bug found by static analyzers
2018-02-20 14:12:59 +00:00
* Tue Feb 20 2018 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-13
- Resolves: upstream#3621 - backport bug found by static analyzers
Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-02-14 21:14:28 +00:00
* Wed Feb 14 2018 Fabiano Fidêncio <fidencio@fedoraproject.org> - 1.16.0-12
- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
with no specific host/hostgroup set
Resolves: upstream#3621: FleetCommander integration must not require capability DAC_OVERRIDE Together with the patches backported from upstream, we're changing the deskprofilepath permissions from 755 to 751, reflecting the upstream spec file changes. Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-02-14 21:20:50 +00:00
- Resolves: upstream#3621 - FleetCommander integration must not require
capability DAC_OVERRIDE
Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
2018-02-14 21:14:28 +00:00
Resolves: upstream#3618 - selinux_child segfaults in a docker container
2018-02-07 21:04:27 +00:00
* Wed Feb 07 2018 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-11
- Resolves: upstream#3618 - selinux_child segfaults in a docker container
Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl
2018-02-06 12:11:52 +00:00
* Tue Feb 06 2018 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-10
- Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl
Fix systemd executions/requirements Merges: https://src.fedoraproject.org/rpms/sssd/pull-request/1 Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-01-25 14:53:22 +00:00
* Thu Jan 25 2018 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 1.16.0-9
- Fix systemd executions/requirements
Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS
2018-01-25 10:39:00 +00:00
* Thu Jan 25 2018 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-8
- Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS
Fix building of sssd-nfs-idmap with libnfsidmap.so.1
2018-01-11 15:52:45 +00:00
* Thu Jan 11 2018 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-7
- Fix building of sssd-nfs-idmap with libnfsidmap.so.1
Rebuilt for libnfsidmap.so.1
2018-01-11 11:01:37 +00:00
* Thu Jan 11 2018 Björn Esser <besser82@fedoraproject.org> - 1.16.0-6
- Rebuilt for libnfsidmap.so.1
Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout Resolves: upstream#3588 - sssd_nss consumes more memory until restarted or machine swaps Resolves: failure in glibc tests https://sourceware.org/bugzilla/show_bug.cgi?id=22530 Resolves: upstream#3451 - When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds Resolves: upstream#3285 - SSSD needs restart after incorrect clock is corrected with AD Resolves: upstream#3586 - Give a more detailed debug and system-log message if krb5_init_context() failed Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet in /etc/systemd/system Backport few upstream features from 1.16.1
2017-12-04 20:33:29 +00:00
* Mon Dec 04 2017 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-5
- Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
setnetgrent_result_timeout
- Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
or machine swaps
- Resolves: failure in glibc tests
https://sourceware.org/bugzilla/show_bug.cgi?id=22530
- Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
auth_provider ldap, login fails if the LDAP server
is not allowing anonymous binds
- Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
corrected with AD
- Resolves: upstream#3586 - Give a more detailed debug and system-log message
if krb5_init_context() failed
- Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
in /etc/systemd/system
- Backport few upstream features from 1.16.1
Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
2017-11-21 16:52:58 +00:00
* Tue Nov 21 2017 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-4
- Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
Backport extended NSS API from upstream master branch
2017-11-17 17:06:26 +00:00
* Fri Nov 17 2017 Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-3
- Backport extended NSS API from upstream master branch
Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade
2017-11-03 15:13:22 +00:00
* Fri Nov 03 2017 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-2
- Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade
New upstream release 1.16.0 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
2017-10-20 16:00:47 +00:00
* Fri Oct 20 2017 Lukas Slebodnik <lslebodn@fedoraproject.org> - 1.16.0-1
- New upstream release 1.16.0
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database access on the sock_file system_bus_socket
2017-10-11 15:45:52 +00:00
* Wed Oct 11 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-5
- Resolves: rhbz#1499354 - CVE-2017-12173 sssd: unsanitized input when
searching in local cache database access on
the sock_file system_bus_socket
Fix few bugs/regressions Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access on the sock_file system_bus_socket Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and fails to download desktop profile data Resolves: upstream#3485 - getsidbyid does not work with 1.15.3 Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after applying ID Views for them in IPA server Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping is applied
2017-09-11 10:04:54 +00:00
* Mon Sep 11 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-4
- Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write
access on the sock_file system_bus_socket
- Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
fails to download desktop profile data
- Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
- Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients
after applying ID Views for them in IPA server
- Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id
mapping is applied
Backport few upstream patches/fixes
2017-09-01 18:52:07 +00:00
* Fri Sep 01 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-3
- Backport few upstream patches/fixes
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
2017-07-27 19:16:38 +00:00
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.15.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
New upstream release 1.15.3 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 11:58:49 +00:00
* Tue Jul 25 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-1
- New upstream release 1.15.3
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
Rebuild with libldb-1.2.0 sssd buill with older version of libldb will crash (gdb) bt #0 0x0000000000000001 in ?? () #1 0x00007fcb39ce28dc in ldb_db_lock_destructor () from /lib64/libldb.so.1 #2 0x00007fcb3a103f31 in _tc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", tc=<optimized out>) at ../talloc.c:1078 #3 _talloc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", ptr=0x55e267aebef0) at ../talloc.c:1174 #4 _talloc_free (ptr=0x55e267aebef0, location=0x7fcb39ce9303 "../common/ldb.c:1026") at ../talloc.c:1716 #5 0x00007fcb39ce02f2 in ldb_lock_backend_callback () from /lib64/libldb.so.1 #6 0x00007fcb31b172ae in ltdb_callback () from /usr/lib64/ldb/modules/ldb/tdb.so #7 0x00007fcb3a31e8c1 in tevent_common_loop_timer_delay () from /lib64/libtevent.so.0
2017-07-07 10:44:30 +00:00
* Tue Jun 27 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.5
- Rebuild with libldb-1.2.0
Fix build issues: Update expided certificate in unit tests
2017-06-27 12:22:05 +00:00
* Tue Jun 27 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.4
- Fix build issues: Update expided certificate in unit tests
Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with file from package sssd-common-1.15.1-1.fc25.x86_64 Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 21:49:49 +00:00
* Sat Apr 29 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.3
- Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
- Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
file from package sssd-common-1.15.1-1.fc25.x86_64
- Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
Fix issue with IPA + SELinux in containers Resolves: upstream https://fedorahosted.org/sssd/ticket/3297
2017-04-06 13:54:35 +00:00
* Thu Apr 06 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.2
- Fix issue with IPA + SELinux in containers
- Resolves: upstream https://fedorahosted.org/sssd/ticket/3297
Backport upstream patches for 1.15.3 pre-release required for building freeipa-4.5.x in rawhide
2017-04-04 14:22:39 +00:00
* Tue Apr 04 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.3-0.beta.1
- Backport upstream patches for 1.15.3 pre-release
- required for building freeipa-4.5.x in rawhide
New upstream release 1.15.2 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 09:30:23 +00:00
* Thu Mar 16 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.2-1
- New upstream release 1.15.2
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
New upstream release 1.15.1 https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
2017-03-06 09:48:22 +00:00
* Mon Mar 06 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.1-1
- New upstream release 1.15.1
- https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
Cherry-pick patches from upstream that enable the files provider Required for: https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-22 15:01:18 +00:00
* Wed Feb 22 2017 Jakub Hrozek <jhrozek@redhat.com> - 1.15.0-4
- Cherry-pick patches from upstream that enable the files provider
- Enable the files domain
- Retire patch 0501-Partially-revert-CONFIG-Use-default-config-when-none.patch
which is superseded by the files domain autoconfiguration
- Related: rhbz#1357418 - SSSD fast cache for local users
Add missing %license macro
2017-02-14 18:45:41 +00:00
* Tue Feb 14 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.0-3
- Add missing %%license macro
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
2017-02-11 13:57:49 +00:00
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.15.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
New upstream release 1.15.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 18:57:42 +00:00
* Fri Jan 27 2017 Lukas Slebodnik <lslebodn@redhat.com> - 1.15.0-1
- New upstream release 1.15.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
Rebuild for Python 3.6
2016-12-19 17:20:38 +00:00
* Mon Dec 19 2016 Miro Hrončok <mhroncok@redhat.com> - 1.14.2-3
- Rebuild for Python 3.6
Resolves: rhbz#1369130 - nss_sss should not link against libpthread Resolves: rhbz#1392916 - sssd failes to start after update Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses on the directory /etc/sssd
2016-12-13 19:09:35 +00:00
* Tue Dec 13 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-2
- Resolves: rhbz#1369130 - nss_sss should not link against libpthread
- Resolves: rhbz#1392916 - sssd failes to start after update
- Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
on the directory /etc/sssd
New upstream release 1.14.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2
2016-10-20 14:06:13 +00:00
* Thu Oct 20 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.2-1
- New upstream release 1.14.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2
libwbclient-sssd: update interface to version 0.13
2016-10-14 17:06:17 +00:00
* Fri Oct 14 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-4
- libwbclient-sssd: update interface to version 0.13
Fix regression with krb5_map_user - Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore - Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError: default if nonexistent domain is mentioned
2016-09-22 20:28:47 +00:00
* Thu Sep 22 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-3
- Fix regression with krb5_map_user
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
default if nonexistent domain is mentioned
Backport important patches from upstream 1.14.2 prerelease - Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after boot - Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14
2016-08-31 17:45:36 +00:00
* Thu Sep 01 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-2
- Backport important patches from upstream 1.14.2 prerelease
- Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
boot
- Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 15:49:47 +00:00
* Fri Aug 19 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.1-1
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
Add workaround patch for RHBZ #1366403
2016-08-15 18:15:18 +00:00
* Mon Aug 15 2016 Stephen Gallagher <sgallagh@redhat.com> - 1.14.0-5
- Add workaround patch for RHBZ #1366403
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
2016-07-19 12:41:42 +00:00
* Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.14.0-4
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
New upstream release 1.14.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
2016-07-08 06:35:48 +00:00
* Fri Jul 08 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.0-3
- New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
New upstream release 1.14 beta - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 08:11:33 +00:00
* Fri Jul 01 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.0-2.beta
- New upstream release 1.14 beta
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
New upstream release 1.14 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 08:58:04 +00:00
* Tue Jun 21 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.14.0-1.alpha
- New upstream release 1.14 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): sssd_ifp killed by SIGSEGV
2016-05-13 09:09:07 +00:00
* Fri May 13 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-3
- Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
sssd_ifp killed by SIGSEGV
Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6
2016-04-22 18:50:56 +00:00
* Fri Apr 22 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-2
- Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6
New upstream release 1.13.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4
2016-04-14 10:56:06 +00:00
* Thu Apr 14 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.4-1
- New upstream release 1.13.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4
Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password prompts (e.g. Password + Token) - Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed by remote host" if locale not available
2016-03-22 08:06:29 +00:00
* Tue Mar 22 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-6
- Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
by remote host" if locale not available
Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA groups during getgrnam and getgrgid - Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses in call to 'print'
2016-02-25 12:58:00 +00:00
* Thu Feb 25 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-5
- Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
in call to 'print'
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-05 00:37:31 +00:00
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.13.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
Additional upstream fixes
2016-01-20 17:40:57 +00:00
* Wed Jan 20 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-3
- Additional upstream fixes
Resolves: rhbz#1256849 - SUDO: Support the IPA schema
2016-01-19 17:23:34 +00:00
* Tue Jan 19 2016 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-2
- Resolves: rhbz#1256849 - SUDO: Support the IPA schema
New upstream release 1.13.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3
2015-12-16 07:47:07 +00:00
* Wed Dec 16 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.3-1
- New upstream release 1.13.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3
New upstream release 1.13.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
2015-11-20 08:16:13 +00:00
* Fri Nov 20 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.2-1
- New upstream release 1.13.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
Rebuilt for Python3.5 rebuild
2015-11-06 14:40:37 +00:00
* Fri Nov 06 2015 Robert Kuska <rkuska@redhat.com> - 1.13.1-5
- Rebuilt for Python3.5 rebuild
Fix building pac responder with the krb5-1.14
2015-10-27 08:40:23 +00:00
* Tue Oct 27 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-4
- Fix building pac responder with the krb5-1.14
python-sssdconfig: Fix parssing sssd.conf without config_file_version - Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed
2015-10-19 13:04:51 +00:00
* Mon Oct 19 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-3
- python-sssdconfig: Fix parssing sssd.conf without config_file_version
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed
Fix few segfaults - Resolves: upstream #2811 - PAM responder crashed if user was not set - Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step
2015-10-07 11:41:19 +00:00
* Wed Oct 07 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-2
- Fix few segfaults
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step
* Thu Oct 01 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.1-1
New upstream release 1.13.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 06:00:25 +00:00
- New upstream release 1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
Fix OTP bug - Resolves: upstream #2729 - Do not send SSS_OTP if both factors were entered separately
2015-09-10 12:26:47 +00:00
* Thu Sep 10 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-6
- Fix OTP bug
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
entered separately
Backport upstream patches required by FreeIPA 4.2.1
2015-09-07 16:37:40 +00:00
* Mon Sep 07 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-5
- Backport upstream patches required by FreeIPA 4.2.1
Fix ipa-migration bug - Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled migration mode
2015-07-21 07:05:49 +00:00
* Tue Jul 21 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-4
- Fix ipa-migration bug
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
migration mode
Backport upstream patches required by FreeIPA 4.2.1
2015-09-07 16:37:40 +00:00
New upstream release 1.13.0 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0
2015-07-08 13:56:49 +00:00
* Wed Jul 08 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-3
- New upstream release 1.13.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0
Unify return type of list_active_domains for python{2,3}
2015-06-29 19:59:11 +00:00
* Tue Jun 30 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-2.alpha
- Unify return type of list_active_domains for python{2,3}
New upstream release 1.13 alpha - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
2015-06-22 11:52:08 +00:00
* Mon Jun 22 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.13.0-1.alpha
- New upstream release 1.13 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-19 01:41:15 +00:00
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.12.5-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
Fix libwbclient alternatives
2015-06-12 14:58:13 +00:00
* Fri Jun 12 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.5-3
- Fix libwbclient alternatives
New upstream release 1.12.5 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5 - backport important patches from upstream 1.13 prerelease
2015-06-12 12:14:35 +00:00
* Fri Jun 12 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.5-2
- Backport important patches from upstream 1.13 prerelease
* Fri Jun 12 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.5-1
- New upstream release 1.12.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5
Backport important patches from upstream 1.13 prerelease - Resolves: rhbz#1060325 - Does sssd-ad use the most suitable attribute for group name - Resolves: upstream #2335 - Investigate using the krb5 responder for driving the PAM conversation with OTPs - Enable cmocka tests for secondary architectures
2015-05-08 12:53:58 +00:00
* Fri May 08 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-8
- Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures
Backport patches from upstream 1.12.5 prerelease - contains many fixes
2015-05-08 12:13:58 +00:00
* Fri May 08 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-7
- Backport patches from upstream 1.12.5 prerelease - contains many fixes
Fix slow login with ipa and SELinux - Resolves: upstream #2624 - Only set the selinux context if the context differs from the local one
2015-04-15 12:17:32 +00:00
* Wed Apr 15 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-6
- Fix slow login with ipa and SELinux
- Resolves: upstream #2624 - Only set the selinux context if the context
differs from the local one
Fix regressions with ipa and SELinux - Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security context on client is staff_u
2015-03-23 16:17:30 +00:00
* Mon Mar 23 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-5
- Fix regressions with ipa and SELinux
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
context on client is staff_u
Also relax libldb Requires and remove --enable-ldb-version-check
2015-03-06 10:45:10 +00:00
* Fri Mar 6 2015 Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-4
- Also relax libldb Requires
- Remove --enable-ldb-version-check
Relax libldb BuildRequires Originally, we tried to stay on the safe side with libldb since it never really commited to stable ABI or API, but since there were never any issues in many years, it's safe to relax the requirement. This change will benefit especially the storage developers who often need a different (typically newer) libldb version and would like to avoid to rebuild sssd for no reason.
2015-03-06 09:28:02 +00:00
* Fri Mar 6 2015 Jakub Hrozek <jhrozek@redhat.com> - 1.12.4-3
- Relax libldb BuildRequires to be greater-or-equal
Add support for python3 bindings - Add requirement to python3 or python3 bindings - Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 12:49:51 +00:00
* Wed Feb 25 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-2
- Add support for python3 bindings
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3
New upstream release 1.12.4 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4
2015-02-18 20:24:59 +00:00
* Wed Feb 18 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.4-1
- New upstream release 1.12.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4
Backport patches with Python3 support from upstream
2015-01-21 20:14:41 +00:00
* Sat Feb 14 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-7
- Backport patches with Python3 support from upstream
Fix bogus date
2015-02-12 21:01:16 +00:00
* Thu Feb 12 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-6
Fix double free in monitor - Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort(): sssd killed by SIGABRT
2015-02-12 20:58:28 +00:00
- Fix double free in monitor
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
sssd killed by SIGABRT
Rebuild for new libldb
2015-01-28 09:43:17 +00:00
* Wed Jan 28 2015 Jakub Hrozek <jhrozek@redhat.com> - 1.12.3-5
- Rebuild for new libldb
Decrease priority of sssd-libwbclient - It should be lower than priority of samba veriosn of libwbclient. - https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18
2015-01-22 10:09:48 +00:00
* Thu Jan 22 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-4
- Decrease priority of sssd-libwbclient 20 -> 5
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18
Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD
2015-01-19 09:24:15 +00:00
* Mon Jan 19 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-3
- Apply a number of patches from upstream to fix issues found 1.12.3
Reverting change of rhbz ticket in changelog This change was part of initial patch from BZ1184623.
2015-02-14 15:36:31 +00:00
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
Apply a number of patches from upstream to fix issues found 1.12.3 - Resolves: rhbz#1176373 - dyndns_iface does not accept multiple interfaces, or isn't documented to be able to - Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is not running - Resolves: upstream #2557 authentication failure with user from AD
2015-01-19 09:24:15 +00:00
interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
not running
- Resolves: upstream #2557 authentication failure with user from AD
Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus Resolves: rhbz#1179379 - gzip: stdin: file size changed while zipping when rotating logfile
2015-01-09 14:11:21 +00:00
* Fri Jan 09 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-2
- Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
- Resolves: rhbz#1179379 - gzip: stdin: file size changed while
zipping when rotating logfile
New upstream release 1.12.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3 - Fix spelling errors in description (fedpkg lint)
2015-01-08 19:51:31 +00:00
* Thu Jan 08 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.3-1
- New upstream release 1.12.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)
Rebuild for libldb 1.1.19
2015-01-06 10:49:40 +00:00
* Tue Jan 6 2015 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-8
- Rebuild for libldb 1.1.19
Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes crash in wbinfo - in addition to the patch libwbclient.so is filtered out of the Provides list of the package
2014-12-19 21:31:43 +00:00
* Fri Dec 19 2014 Sumit Bose <sbose@redhat.com> - 1.12.2-7
- Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
crash in wbinfo
- in addition to the patch libwbclient.so is
filtered out of the Provides list of the package
Fix regressions and bugs in sssd upstream 1.12.2 - https://fedorahosted.org/sssd/ticket/{id} - Regressions: #2471, #2475, #2483, #2487, #2529, #2535 - Bugs: #2287, #2445
2014-12-17 21:45:11 +00:00
* Wed Dec 17 2014 Lukas Slebodnik <lslebodn@redhat.com> - 1.12.2-6
- Fix regressions and bugs in sssd upstream 1.12.2
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445
Rebuild for libldb 1.1.18
2014-12-07 19:45:08 +00:00
* Sun Dec 7 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-5
- Rebuild for libldb 1.1.18
Fix typo in libwbclient-devel %preun
2014-11-26 10:17:29 +00:00
* Wed Nov 26 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-4
Fix rpmlint warnings fedpkg/sssd/sssd.spec:1232: W: macro-in-%changelog %preun fedpkg/sssd/sssd.spec:1366: W: macro-in-%changelog %{_lib} fedpkg/sssd/sssd.spec:1366: W: macro-in-comment %{_lib}
2016-02-02 10:59:36 +00:00
- Fix typo in libwbclient-devel %%preun
Fix typo in libwbclient-devel %preun
2014-11-26 10:17:29 +00:00
Use alternatives for libwbclient
2014-11-25 11:20:29 +00:00
* Tue Nov 25 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-3
- Use alternatives for libwbclient
Backport several patches from upstream. - Fix a potential crash against old (pre-4.0) IPA servers
2014-10-22 11:09:58 +00:00
* Wed Oct 22 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-2
- Backport several patches from upstream.
- Fix a potential crash against old (pre-4.0) IPA servers
New upstream release 1.12.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2
2014-10-20 15:25:47 +00:00
* Mon Oct 20 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.2-1
- New upstream release 1.12.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2
Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server
2014-09-15 08:27:34 +00:00
* Mon Sep 15 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-2
- Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user
private group from server
New upstream release 1.12.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 19:56:00 +00:00
* Mon Sep 8 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.1-1
- New upstream release 1.12.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
Do not crash on resolving a group SID in IPA server mode
2014-08-22 13:29:14 +00:00
* Fri Aug 22 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.0-7
- Do not crash on resolving a group SID in IPA server mode
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-18 03:41:37 +00:00
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.12.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
Fix release version for upgrades
2014-07-10 16:41:28 +00:00
* Thu Jul 10 2014 Stephen Gallagher <sgallagh@redhat.com> 1.12.0-5
- Fix release version for upgrades
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
* Wed Jul 09 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.0-1
- New upstream release 1.12.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-08 07:10:13 +00:00
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.12.0-4.beta2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
2014-06-04 19:46:10 +00:00
* Wed Jun 04 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.0-1.beta2
New upstream release 1.12.0
2014-07-09 18:51:38 +00:00
- New upstream release 1.12 beta2
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
2014-06-04 19:46:10 +00:00
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
* Mon Jun 02 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.0-2.beta1
Fix tests on big-endian
2014-06-02 09:08:39 +00:00
- Fix tests on big-endian
- Fix previous changelog entry
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
2014-06-04 19:46:10 +00:00
* Fri May 30 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.12.0-1.beta1
New upstream release 1.12 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 20:16:22 +00:00
- New upstream release 1.12 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
Rebuild against new ding-libs
2014-05-29 07:30:16 +00:00
* Thu May 29 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.5.1-4
- Rebuild against new ding-libs
Make LDB dependency a strict equivalency
2014-05-08 20:26:19 +00:00
* Thu May 08 2014 Stephen Gallagher <sgallagh@redhat.com> - 1.11.5.1-3
- Make LDB dependency a strict equivalency
Rebuild against new libldb
2014-05-08 20:14:33 +00:00
* Thu May 08 2014 Stephen Gallagher <sgallagh@redhat.com> - 1.11.5.1-2
- Rebuild against new libldb
New upstream release 1.11.5.1
2014-04-11 09:14:46 +00:00
* Fri Apr 11 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.5.1-1
- New upstream release 1.11.5.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5.1
Fix bug in generation of systemd unit file There was a bug in the generation of the tarball that results in a unit file with a path to /usr/local/sbin, which is incorrect.
2014-04-10 17:15:33 +00:00
* Thu Apr 10 2014 Stephen Gallagher <sgallagh@redhat.com> 1.11.5-2
- Fix bug in generation of systemd unit file
New upstream release 1.11.5 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
2014-04-08 11:37:45 +00:00
* Tue Apr 08 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.5-1
- New upstream release 1.11.5
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
Handle new error code for IPA password migration
2014-03-13 19:14:42 +00:00
* Thu Mar 13 2014 Sumit Bose <sbose@redhat.com> - 1.11.4-3
- Handle new error code for IPA password migration
New upstream release 1.11.5 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
2014-04-08 11:37:45 +00:00
* Tue Mar 11 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-2
Include couple of patches from upstream 1.11 branch
2014-03-11 12:35:03 +00:00
- Include couple of patches from upstream 1.11 branch
New upstream release 1.11.4 - Remove upstreamed patch - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4
2014-02-11 14:44:57 +00:00
* Mon Feb 17 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.4-1
- New upstream release 1.11.4
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4
Fix changelog entry to be in descending order (wow, it's 2014 already)
2014-02-11 14:49:38 +00:00
* Tue Feb 11 2014 Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-2
Handle OTP response from FreeIPA server gracefully
2014-02-11 14:44:57 +00:00
- Handle OTP response from FreeIPA server gracefully
New upstream release 1.11.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
2013-12-19 19:01:09 +00:00
* Wed Oct 30 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.3-1
- New upstream release 1.11.3
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
New upstream release 1.11.2 - Remove upstreamed patches - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
2013-10-30 23:33:55 +00:00
* Wed Oct 30 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.2-1
- New upstream release 1.11.2
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
Fix potential crash with external groups in trusted IPA-AD setup
2013-10-16 11:59:35 +00:00
* Wed Oct 16 2013 Sumit Bose <sbose@redhat.com> - 1.11.1-5
- Fix potential crash with external groups in trusted IPA-AD setup
Add plugin for cifs-utils - Resolves: rhbz#998544
2013-10-15 10:35:12 +00:00
* Mon Oct 14 2013 Sumit Bose <sbose@redhat.com> - 1.11.1-4
- Add plugin for cifs-utils
- Resolves: rhbz#998544
Fix failover from Global Catalog to LDAP in case GC is not available
2013-10-08 13:16:48 +00:00
* Tue Oct 08 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-3
- Fix failover from Global Catalog to LDAP in case GC is not available
* Fri Oct 04 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-2
Remove the ability to create public ccachedir (#1015089)
2013-10-04 07:51:35 +00:00
- Remove the ability to create public ccachedir (#1015089)
New upstream release 1.11.1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
2013-09-27 20:27:47 +00:00
* Fri Sep 27 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.1-1
- New upstream release 1.11.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
Fix multicast checks in the SSSD - Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source code getting the host info
2013-09-25 23:33:52 +00:00
* Thu Sep 26 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-3
- Fix multicast checks in the SSSD
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
code getting the host info
Backport simplification of ccache management from 1.11.1 - Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
2013-09-23 10:23:42 +00:00
* Wed Aug 28 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-2
- Backport simplification of ccache management from 1.11.1
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
New upstream release 1.11.0
2013-08-28 22:04:28 +00:00
* Wed Aug 28 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-1
- New upstream release 1.11.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0
Fix #967012 and #996214
2013-08-23 13:41:45 +00:00
* Fri Aug 23 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0-0.4.beta2
- Resolves: #967012 - [abrt] sssd-1.9.5-1.fc18: sss_mmap_cache_gr_invalidate_gid:
Process /usr/libexec/sssd/sssd_nss was killed by
signal 11 (SIGSEGV)
- Resolves: #996214 - sssd proxy_child segfault
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
2013-08-04 15:45:00 +00:00
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.11.0-0.3.beta2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
2013-07-31 11:00:22 +00:00
* Wed Jul 31 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.2beta2
Fix rpmlint warnings fedpkg/sssd/sssd.spec:1232: W: macro-in-%changelog %preun fedpkg/sssd/sssd.spec:1366: W: macro-in-%changelog %{_lib} fedpkg/sssd/sssd.spec:1366: W: macro-in-comment %{_lib}
2016-02-02 10:59:36 +00:00
- Resolves: #906427 - Do not use %%{_lib} in specfile for the nss and
Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
2013-07-31 11:00:22 +00:00
pam libraries
* Wed Jul 24 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.11.0.1beta2
New upstream release 1.11 beta 2
2013-07-24 14:34:57 +00:00
- New upstream release 1.11 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.0beta2
New upstream release 1.10.1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
2013-07-18 15:29:52 +00:00
* Thu Jul 18 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.1-1
- New upstream release 1.10.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
sssd-tools should require sssd-common, not sssd This bug was already fixed upstream.
2013-07-08 10:13:51 +00:00
* Mon Jul 08 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-17
- sssd-tools should require sssd-common, not sssd
Move sssd_pac to the sssd-ipa and sssd-ad subpackages - Trim out RHEL5-specific macros since we don't build on RHEL 5 - Trim out macros for Fedora older than F18 - Update libldb requirement to 1.1.16 - Trim RPM changelog down to the last year
2013-07-02 16:31:25 +00:00
* Tue Jul 02 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-16
- Move sssd_pac to the sssd-ipa and sssd-ad subpackages
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year
Move sssd_pac to the sssd-krb5 subpackage
2013-07-02 13:23:43 +00:00
* Tue Jul 02 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-15
- Move sssd_pac to the sssd-krb5 subpackage
Fix Obsoletes: to account for dist tag - Convert post and pre scripts to run on the sssd-common subpackage - Remove old conversion from SYSV
2013-07-01 22:57:07 +00:00
* Mon Jul 01 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.10.0-14
- Fix Obsoletes: to account for dist tag
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV
New upstream release 1.10 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0
2013-06-27 21:34:45 +00:00
* Thu Jun 27 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-13
- New upstream release 1.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0
- the cmocka toolkit exists only on selected arches
2013-06-17 13:43:14 +00:00
* Mon Jun 17 2013 Dan Horák <dan[at]danny.cz> - 1.10.0-12.beta2
- the cmocka toolkit exists only on selected arches
Apply a number of patches from upstream to fix issues found post-beta In particular: -- segfault with a high DEBUG level -- Fix IPA password migration (upstream #1873) -- Fix fail over when retrying SRV resolution (upstream #1886)
2013-06-16 11:12:37 +00:00
* Sun Jun 16 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-11.beta2
- Apply a number of patches from upstream to fix issues found post-beta,
in particular:
-- segfault with a high DEBUG level
-- Fix IPA password migration (upstream #1873)
-- Fix fail over when retrying SRV resolution (upstream #1886)
Only BuildRequire libcmocka on Fedora
2013-06-13 10:33:22 +00:00
* Thu Jun 13 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-10.beta2
- Only BuildRequire libcmocka on Fedora
* Thu Jun 13 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-9.beta2
Fix typo in Requires that prevented an upgrade (#973916) - Use a hardcoded version in Conflicts, not less-than-current
2013-06-13 08:28:56 +00:00
- Fix typo in Requires that prevented an upgrade (#973916)
- Use a hardcoded version in Conflicts, not less-than-current
Fix date in changelog
2013-06-12 11:03:15 +00:00
* Wed Jun 12 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta1
Enable hardened build for RHEL7
2013-06-06 09:10:42 +00:00
- Enable hardened build for RHEL7
New upstream release 1.10 beta2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2 - BuildRequire libcmocka-devel in order to run all upstream tests during build - BuildRequire libnl3 instead of libnl1 - No longer BuildRequire initscripts, we no longer use /sbin/service - Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any older krb5-libs version
2013-06-12 10:05:34 +00:00
* Wed Jun 12 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-8.beta2
- New upstream release 1.10 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry any
older krb5-libs version
Always initialize ID mapping objects Apply a couple of patches from upstream git that resolve crashes when ID mapping object was not initialized properly but needed later
2013-05-24 08:44:53 +00:00
* Fri May 24 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-7.beta1
- Apply a couple of patches from upstream git that resolve crashes when
ID mapping object was not initialized properly but needed later
Backport fixes for rhbz#961278, rhbz#961278 and rhbz#961251 - Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during realm join - Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by default for AD Provider - Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file parent directory when logging in
2013-05-14 13:22:41 +00:00
* Tue May 14 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-6.beta1
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
parent directory when logging in
Bump release number
2013-05-07 13:22:24 +00:00
* Tue May 7 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-5.beta1
- BuildRequire recent libini_config to ensure consistent behaviour
Update SSSD for the F19 test day - Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs - Fix SSH integration with fully-qualified domains - Add the ability to dynamically discover the NetBIOS name
2013-05-07 08:44:52 +00:00
* Tue May 7 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1
- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug
in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name
New upstream release 1.10 beta1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 20:24:02 +00:00
* Fri May 3 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3.beta1
- New upstream release 1.10 beta1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
Add a patch to fix krb5 ccache creation issue with krb5 1.11
2013-04-17 11:31:55 +00:00
* Wed Apr 17 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-2.alpha1
- Add a patch to fix krb5 ccache creation issue with krb5 1.11
New upstream release 1.10 alpha1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1
2013-04-02 18:08:54 +00:00
* Tue Apr 2 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-1.alpha1
- New upstream release 1.10 alpha1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1
Add a patch to fix krb5 unit tests
2013-03-29 12:59:48 +00:00
* Fri Mar 29 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.5-10
- Add a patch to fix krb5 unit tests
* Fri Mar 01 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.9.4-9
Split internal helper libraries into a shared object - Significantly reduce disk-space usage
2013-03-01 13:23:37 +00:00
- Split internal helper libraries into a shared object
- Significantly reduce disk-space usage
Fix the Kerberos password expiration warning (#912223)
2013-02-21 10:53:21 +00:00
* Thu Feb 14 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-8
- Fix the Kerberos password expiration warning (#912223)
Do not write out dots in the domain-realm mapping file (#905650)
2013-02-14 18:47:00 +00:00
* Thu Feb 14 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-7
- Do not write out dots in the domain-realm mapping file (#905650)
Include upstream patch to build with krb5-1.11
2013-02-11 15:04:12 +00:00
* Mon Feb 11 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-6
- Include upstream patch to build with krb5-1.11
Rebuild against new libldb
2013-02-07 10:49:02 +00:00
* Thu Feb 07 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-5
- Rebuild against new libldb
Fix build with new automake versions
2013-02-04 15:38:36 +00:00
* Mon Feb 04 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-4
- Fix build with new automake versions
Recreate Kerberos ccache directory if it's missing Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache directory /run/user/UID/ccdir does not exist
2013-01-30 13:41:47 +00:00
* Wed Jan 30 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3
- Recreate Kerberos ccache directory if it's missing
- Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
directory /run/user/UID/ccdir does not exist
Fix changelog dates to make F19 rpmbuild happy
2013-01-29 10:00:35 +00:00
* Tue Jan 29 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-2
- Fix changelog dates to make F19 rpmbuild happy
New upstream release 1.9.4
2013-01-28 22:42:27 +00:00
* Mon Jan 28 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-1
- New upstream release 1.9.4
New upstream release 1.9.3
2012-12-06 18:51:06 +00:00
* Thu Dec 06 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.3-1
- New upstream release 1.9.3
rhbz#867874: sssd does not resolve group names from AD
2012-10-30 18:37:27 +00:00
* Tue Oct 30 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5
- Resolve groups from AD correctly
rhbz:#871176 Check the validity of namingContext
2012-10-30 09:59:25 +00:00
* Tue Oct 30 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-4
- Check the validity of naming context
Move the sss_cache tool to the main package
2012-10-18 17:53:46 +00:00
* Thu Oct 18 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-3
- Move the sss_cache tool to the main package
Include the 1.9.2 sources for real
2012-10-14 19:45:46 +00:00
* Sun Oct 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2
- Include the 1.9.2 tarball
New upstream version 1.9.2
2012-10-14 19:43:04 +00:00
* Sun Oct 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-1
- New upstream release 1.9.2
New upstream release 1.9.1
2012-10-07 14:17:05 +00:00
* Sun Oct 07 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-1
- New upstream release 1.9.1
* Wed Oct 03 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-24
Require latest libldb
2012-10-03 09:00:02 +00:00
- require the latest libldb
Use mcpath insted of mcachepath macro to be consistent with upstream spec file
2012-09-25 12:13:28 +00:00
* Tue Sep 25 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-24
- Use mcpath insted of mcachepath macro to be consistent with
upsteam spec file
New upstream release 1.9.0
2012-09-25 11:20:37 +00:00
* Tue Sep 25 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-23
Use mcpath insted of mcachepath macro to be consistent with upstream spec file
2012-09-25 12:13:28 +00:00
- New upstream release 1.9.0
New upstream release 1.9.0
2012-09-25 11:20:37 +00:00
New upstream release 1.9.0 RC1
2012-09-14 12:36:08 +00:00
* Fri Sep 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-22.rc1
- New upstream release 1.9.0 rc1
New upstream release 1.9.0 beta 7
2012-09-06 19:44:03 +00:00
* Thu Sep 06 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-21.beta7
- New upstream release 1.9.0 beta7
Obsolete patches that are part of the beta7 upstream
2012-09-06 20:04:39 +00:00
- obsoletes patches #1-#3
New upstream release 1.9.0 beta 7
2012-09-06 19:44:03 +00:00
Rebuild against libldb 1.12
2012-09-03 11:10:15 +00:00
* Mon Sep 03 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-20.beta6
- Rebuild against libldb 1.12
Rebuild against libldb 1.11
2012-08-28 10:46:57 +00:00
* Tue Aug 28 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-19.beta6
- Rebuild against libldb 1.11
rhbz#851304: Change the default ccache location to DIR:/run/user/1001/krb5cc
2012-08-24 15:10:52 +00:00
* Fri Aug 24 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6
- Change the default ccache location to DIR:/run/user/${UID}/krb5cc
and patch man page accordingly
- Resolves: rhbz#851304
Rebuild against libldb 1.10
2012-08-20 16:44:59 +00:00
* Mon Aug 20 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-17.beta6
- Rebuild against libldb 1.10
Only create the SELinux login file if there are SELinux mappings on the IPA server
2012-08-17 12:59:01 +00:00
* Fri Aug 17 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-16.beta6
- Only create the SELinux login file if there are SELinux mappings on
the IPA server
Don't discard HBAC rule processing result if SELinux is on Resolves: rhbz#846792 (CVE-2012-3462)
2012-08-10 20:38:17 +00:00
* Fri Aug 10 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6
- Don't discard HBAC rule processing result if SELinux is on
Resolves: rhbz#846792 (CVE-2012-3462)
New upstream release 1.9.0-13.beta6
2012-08-02 15:19:01 +00:00
* Thu Aug 02 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6
- New upstream release 1.9.0 beta 6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6
- A new option, override_shell was added. If this option is set, all users
managed by SSSD will have their shell set to its value.
- Fixes for the support for setting default SELinux user context from FreeIPA.
- Fixed a regression introduced in beta 5 that broke LDAP SASL binds
- The SSSD supports the concept of a Primary Server and a Back Up Server in
failover
- A new command-line tool sss_seed is available to help prime the cache with
a user record when deploying a new machine
- SSSD is now able to discover and save the domain-realm mappings
between an IPA server and a trusted Active Directory server.
- Packaging changes to fix ldconfig usage in subpackages (#843995)
- Rebuild against libldb 1.1.9
Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
2012-07-27 08:35:23 +00:00
* Fri Jul 27 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.9.0-13.beta5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
New upstream release 1.9.0 beta 5
2012-07-19 10:45:51 +00:00
* Thu Jul 19 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-12.beta5
- New upstream release 1.9.0 beta 5
- Obsoletes the patch for missing DP_OPTION_TERMINATOR in AD provider options
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta5
- Many fixes for the support for setting default SELinux user context from
FreeIPA, most notably fixed the specificity evaluation
- Fixed an incorrect default in the krb5_canonicalize option of the AD
provider which was preventing password change operation
- The shadowLastChange attribute value is now correctly updated with the
number of days since the Epoch, not seconds
Fix changelog dates to make F19 rpmbuild happy
2013-01-29 10:00:35 +00:00
* Mon Jul 16 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-11.beta4
Fix broken ARM build - Add missing DP_OPTION_TERMINATOR in AD provider options
2012-07-16 13:50:52 +00:00
- Fix broken ARM build
- Add missing DP_OPTION_TERMINATOR in AD provider options
Own several directories https://bugzilla.redhat.com/show_bug.cgi?id=839782
2012-07-15 14:45:13 +00:00
* Wed Jul 11 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-10.beta4
- Own several directories create during make install (#839782)
New upstream release 1.9.0 beta 4
2012-07-11 07:57:09 +00:00
* Wed Jul 11 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-9.beta4
- New upstream release 1.9.0 beta 4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta4
- Add a new AD provider to improve integration with Active Directory 2008 R2
or later servers
- SUDO integration was completely rewritten. The new implementation works
with multiple domains and uses an improved refresh mechanism to download
only the necessary rules
- The IPA authentication provider now supports subdomains
- Fixed regression for setups that were setting default_tkt_enctypes
manually by reverting a previous workaround.
New upstream release 1.9.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3 - Add a new PAC responder for dealing with cross-realm Kerberos trusts - Terminate idle connections to the NSS and PAM responders
2012-06-25 17:15:35 +00:00
* Mon Jun 25 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-8.beta3
- New upstream release 1.9.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
- Add a new PAC responder for dealing with cross-realm Kerberos trusts
- Terminate idle connections to the NSS and PAM responders
Switch unicode library from libunistring to Glib - Drop unnecessary explicit Requires on keyutils - Guarantee that versioned Requires include the correct architecture
2012-06-20 14:32:39 +00:00
* Wed Jun 20 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-7.beta2
- Switch unicode library from libunistring to Glib
- Drop unnecessary explicit Requires on keyutils
- Guarantee that versioned Requires include the correct architecture
Fix accidental disabling of the DIR cache support
2012-06-18 14:16:49 +00:00
* Mon Jun 18 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-6.beta2
- Fix accidental disabling of the DIR cache support
New upstream release 1.9.0 beta 2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2 - Add support for the Kerberos DIR cache for storing multiple TGTs automatically - Major performance enhancement when storing large groups in the cache - Major performance enhancement when performing initgroups() against Active Directory - SSSDConfig data file default locations can now be set during configure for easier packaging
2012-06-15 19:43:49 +00:00
* Fri Jun 15 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-5.beta2
- New upstream release 1.9.0 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
- Add support for the Kerberos DIR cache for storing multiple TGTs
automatically
- Major performance enhancement when storing large groups in the cache
- Major performance enhancement when performing initgroups() against Active
Directory
- SSSDConfig data file default locations can now be set during configure for
easier packaging
Fix regression in endianness patch
2012-05-30 19:10:43 +00:00
* Tue May 29 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-4.beta1
- Fix regression in endianness patch
Rebuild SSSD against ding-libs 0.3.0beta1 - Fix endianness bug in service map protocol
2012-05-29 15:23:46 +00:00
* Tue May 29 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-3.beta1
- Rebuild SSSD against ding-libs 0.3.0beta1
- Fix endianness bug in service map protocol
Fix several regressions since 1.5.x - Ensure that the RPM creates the /var/lib/sss/mc directory - Add support for Netscape password warning expiration control - Rebuild against libldb 1.1.6
2012-05-24 12:23:25 +00:00
* Thu May 24 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-2.beta1
- Fix several regressions since 1.5.x
- Ensure that the RPM creates the /var/lib/sss/mc directory
- Add support for Netscape password warning expiration control
- Rebuild against libldb 1.1.6
New upstream release 1.9.0 beta 1 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1 - Add native support for autofs to the IPA provider - Support for ID-mapping when connecting to Active Directory - Support for handling very large (> 1500 users) groups in Active Directory - Support for sub-domains (will be used for dealing with trust relationships) - Add a new fast in-memory cache to speed up lookups of cached data on repeated requests
2012-05-11 20:02:54 +00:00
* Fri May 11 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.9.0-1.beta1
- New upstream release 1.9.0 beta 1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
- Add native support for autofs to the IPA provider
- Support for ID-mapping when connecting to Active Directory
- Support for handling very large (> 1500 users) groups in Active Directory
- Support for sub-domains (will be used for dealing with trust relationships)
- Add a new fast in-memory cache to speed up lookups of cached data on
repeated requests
New upstream release 1.8.3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3 - Numerous manpage and translation updates - LDAP: Handle situations where the RootDSE isn't available anonymously - LDAP: Fix regression for users using non-standard LDAP attributes for user information
2012-05-03 19:46:32 +00:00
* Thu May 03 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.3-11
- New upstream release 1.8.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
- Numerous manpage and translation updates
- LDAP: Handle situations where the RootDSE isn't available anonymously
- LDAP: Fix regression for users using non-standard LDAP attributes for user
information
New upstream release 1.8.2 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2 - Several fixes to case-insensitive domain functions - Fix for GSSAPI binds when the keytab contains unrelated principals - Fixed several segfaults - Workarounds added for LDAP servers with unreadable RootDSE - SSH knownhostproxy will no longer enter an infinite loop preventing login - The provided SYSV init script now starts SSSD earlier at startup and stops it later during shutdown - Assorted minor fixes for issues discovered by static analysis tools
2012-04-09 19:06:43 +00:00
* Mon Apr 09 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.2-10
- New upstream release 1.8.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
- Several fixes to case-insensitive domain functions
- Fix for GSSAPI binds when the keytab contains unrelated principals
- Fixed several segfaults
- Workarounds added for LDAP servers with unreadable RootDSE
- SSH knownhostproxy will no longer enter an infinite loop preventing login
- The provided SYSV init script now starts SSSD earlier at startup and stops
it later during shutdown
- Assorted minor fixes for issues discovered by static analysis tools
Don't duplicate libsss_autofs.so in two packages - Set explicit package contents instead of globbing
2012-03-26 13:35:09 +00:00
* Mon Mar 26 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-9
- Don't duplicate libsss_autofs.so in two packages
- Set explicit package contents instead of globbing
Fix uninitialized value bug causing crashes throughout the code - Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup
2012-03-21 11:35:03 +00:00
* Wed Mar 21 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-8
- Fix uninitialized value bug causing crashes throughout the code
- Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup
New upstream release 1.8.1 - Resolve issue where we could enter an infinite loop trying to connect to an auth server - Fix serious issue with complex (3+ levels) nested groups - Fix netgroup support for case-insensitivity and aliases - Fix serious issue with lookup bundling resulting in requests never completing - IPA provider will now check the value of nsAccountLock during pam_acct_mgmt in addition to pam_authenticate - Fix several regressions in the proxy provider - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 23:25:42 +00:00
* Mon Mar 12 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.1-7
- New upstream release 1.8.1
- Resolve issue where we could enter an infinite loop trying to connect to an
auth server
- Fix serious issue with complex (3+ levels) nested groups
- Fix netgroup support for case-insensitivity and aliases
- Fix serious issue with lookup bundling resulting in requests never
completing
- IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
in addition to pam_authenticate
- Fix several regressions in the proxy provider
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
against AD
- Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
New upstream release 1.8.0 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental) - Include the IPA AutoFS provider - Fixed several memory-corruption bugs - Fixed a regression in group enumeration since 1.7.0 - Fixed a regression in the proxy provider - Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD - Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is logged at each login - Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) - Resolves: rhbz#743133 - Performance regression with Kerberos authentication against AD - Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc
2012-02-28 20:23:22 +00:00
* Tue Feb 28 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-6
- New upstream release 1.8.0
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
- Include the IPA AutoFS provider
- Fixed several memory-corruption bugs
- Fixed a regression in group enumeration since 1.7.0
- Fixed a regression in the proxy provider
- Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
- Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
logged at each login
- Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
/usr/sbin/sssd was killed by signal 11 (SIGSEGV)
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
against AD
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
new LDAP features
- Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc
Change default kerberos credential cache location to /run/user/<username>
2012-02-22 14:11:05 +00:00
* Wed Feb 22 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-5.beta3
- Change default kerberos credential cache location to /run/user/<username>
New upstream release 1.8.0 beta 3 - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3 - Fixed a regression in group enumeration since 1.7.0 - Fixed several memory-corruption bugs - Finalized the ABI for the autofs support - Fixed a regression in the proxy provider
2012-02-15 21:11:31 +00:00
* Wed Feb 15 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-4.beta3
- New upstream release 1.8.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
- Fixed a regression in group enumeration since 1.7.0
- Fixed several memory-corruption bugs
- Finalized the ABI for the autofs support
- Fixed a regression in the proxy provider
Rebuild against PCRE 8.30
2012-02-10 12:08:38 +00:00
* Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 1.8.0-3.beta2
- Rebuild against PCRE 8.30
New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2 - Fix two minor manpage bugs - Include the IPA AutoFS provider
2012-02-07 14:57:04 +00:00
* Mon Feb 06 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta2
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
- Fix two minor manpage bugs
- Include the IPA AutoFS provider
New upstream release - https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1 - Support for the service map in NSS - Support for setting default SELinux user context from FreeIPA - Support for retrieving SSH user and host keys from LDAP (Experimental) - Support for caching autofs LDAP requests (Experimental) - Support for caching SUDO rules (Experimental)
2012-02-07 01:08:04 +00:00
* Mon Feb 06 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.8.0-1.beta1
- New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features - fix netgroups and sudo as well
2012-02-05 01:20:10 +00:00
* Wed Feb 01 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-5
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
new LDAP features - fix netgroups and sudo as well
Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider.
2012-02-02 19:23:16 +00:00
* Wed Feb 01 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-4
- Fixes a serious memory hierarchy bug causing unpredictable behavior in the
LDAP provider.
Fix typo in date and version
2012-02-01 19:27:24 +00:00
* Wed Feb 01 2012 Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-3
Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for new LDAP features
2012-02-01 19:22:00 +00:00
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
new LDAP features
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
2012-01-14 04:24:58 +00:00
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.7.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
New upstream release 1.7.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0 Support for case-insensitive domains Support for multiple search bases in the LDAP provider Support for the native FreeIPA netgroup implementation Reliability improvements to the process monitor New DEBUG facility with more consistent log levels New tool to change debug log levels without restarting SSSD SSSD will now disconnect from LDAP server when idle FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains Assorted performance improvements in the LDAP provider
2011-12-22 20:12:50 +00:00
* Thu Dec 22 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.7.0-1
- New upstream release 1.7.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.7.0
- Support for case-insensitive domains
- Support for multiple search bases in the LDAP provider
- Support for the native FreeIPA netgroup implementation
- Reliability improvements to the process monitor
- New DEBUG facility with more consistent log levels
- New tool to change debug log levels without restarting SSSD
- SSSD will now disconnect from LDAP server when idle
- FreeIPA HBAC rules can choose to ignore srchost options for significant
performance gains
- Assorted performance improvements in the LDAP provider
New upstream release 1.6.4 Rolls up previous patches applied to the 1.6.3 tarball Fixes a rare issue causing crashes in the failover logic Fixes an issue where SSSD would return the wrong PAM error code for users that it does not recognize.
2011-12-19 21:13:43 +00:00
* Mon Dec 19 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.4-1
- New upstream release 1.6.4
- Rolls up previous patches applied to the 1.6.3 tarball
- Fixes a rare issue causing crashes in the failover logic
- Fixes an issue where SSSD would return the wrong PAM error code for users
that it does not recognize.
Rebuild against libldb 1.1.4
2011-12-07 12:47:53 +00:00
* Wed Dec 07 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-5
- Rebuild against libldb 1.1.4
Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the username in getpwnam() Resolves: rhbz#758425 - LDAP failover not working if server refuses connections
2011-11-29 19:20:31 +00:00
* Tue Nov 29 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-4
- Resolves: rhbz#753639 - sssd_nss crashes when passed invalid UTF-8 for the
username in getpwnam()
- Resolves: rhbz#758425 - LDAP failover not working if server refuses
connections
Rebuild for libldb 1.1.3
2011-11-24 13:18:54 +00:00
* Thu Nov 24 2011 Jakub Hrozek <jhrozek@redhat.com> - 1.6.3-3
- Rebuild for libldb 1.1.3
Resolves: rhbz#752495 - Crash when apply settings
2011-11-10 17:03:57 +00:00
* Thu Nov 10 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-2
- Resolves: rhbz#752495 - Crash when apply settings
Rebuild for new libldb
2011-11-09 14:02:44 +00:00
New upstream release 1.6.3 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3 Fixes a major cache performance issue introduced in 1.6.2 Fixes a potential infinite-loop with certain LDAP layouts
2011-11-04 16:26:54 +00:00
* Fri Nov 04 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.3-1
- New upstream release 1.6.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.3
- Fixes a major cache performance issue introduced in 1.6.2
- Fixes a potential infinite-loop with certain LDAP layouts
- Rebuilt for glibc bug#747377
2011-10-27 00:24:26 +00:00
* Wed Oct 26 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.6.2-5
- Rebuilt for glibc bug#747377
Change selinux policy requirement to Conflicts: with the old version, rather than Requires: the supported version.
2011-10-23 20:48:09 +00:00
* Sun Oct 23 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-4
- Change selinux policy requirement to Conflicts: with the old version,
rather than Requires: the supported version.
Add explicit requirement on selinux-policy version to address new SBUS symlinks.
2011-10-21 15:02:25 +00:00
* Fri Oct 21 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-3
- Add explicit requirement on selinux-policy version to address new SBUS
symlinks.
Remove %%files reference to sss_debuglevel copied from wrong upstreeam spec file.
2011-10-19 11:32:09 +00:00
* Wed Oct 19 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-2
- Remove %%files reference to sss_debuglevel copied from wrong upstreeam
spec file.
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
* Tue Oct 18 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
- Improved handling of users and groups with multi-valued name attributes
(aliases)
- Performance enhancements
Initgroups on RFC2307bis/FreeIPA
Remove %%files reference to sss_debuglevel copied from wrong upstreeam spec file.
2011-10-19 11:32:09 +00:00
HBAC rule processing
Improved handling of users and groups with multi-valued name attributes (aliases) Performance enhancements Initgroups on RFC2307bis/FreeIPA HBAC rule processing Improved process-hang detection and restarting Enabled the midpoint cache refresh by default (fewer cache misses on commonly-used entries) Cleaned up the example configuration New tool to change debug level on the fly
2011-10-18 21:24:31 +00:00
- Improved process-hang detection and restarting
- Enabled the midpoint cache refresh by default (fewer cache misses on
commonly-used entries)
- Cleaned up the example configuration
- New tool to change debug level on the fly
New upstream release 1.6.1 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1 Fixes a serious issue with LDAP connections when the communication is dropped (e.g. VPN disconnection, waking from sleep) SSSD is now less strict when dealing with users/groups with multiple names when a definitive primary name cannot be determined The LDAP provider will no longer attempt to canonicalize by default when using SASL. An option to re-enable this has been provided. Fixes for non-standard LDAP attribute names (e.g. those used by Active Directory) Three HBAC regressions have been fixed. Fix for an infinite loop in the deref code
2011-08-29 19:45:02 +00:00
* Mon Aug 29 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.1-1
- New upstream release 1.6.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.1
- Fixes a serious issue with LDAP connections when the communication is
dropped (e.g. VPN disconnection, waking from sleep)
- SSSD is now less strict when dealing with users/groups with multiple names
when a definitive primary name cannot be determined
- The LDAP provider will no longer attempt to canonicalize by default when
using SASL. An option to re-enable this has been provided.
- Fixes for non-standard LDAP attribute names (e.g. those used by Active
Directory)
- Three HBAC regressions have been fixed.
- Fix for an infinite loop in the deref code
Build with _hardened_build macro
2011-08-03 13:31:33 +00:00
* Wed Aug 03 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-2
- Build with _hardened_build macro
New upstream release 1.6.0 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0 Add host access control support for LDAP (similar to pam_host_attr) Finer-grained control on principals used with Kerberos (such as for FAST or validation) Added a new tool sss_cache to allow selective expiring of cached entries Added support for LDAP DEREF and ASQ controls Added access control features for Novell Directory Server FreeIPA dynamic DNS update now checks first to see if an update is needed Complete rewrite of the HBAC library New libraries: libipa_hbac and libipa_hbac-python
2011-08-03 12:08:26 +00:00
* Wed Aug 03 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.6.0-1
- New upstream release 1.6.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.6.0
- Add host access control support for LDAP (similar to pam_host_attr)
- Finer-grained control on principals used with Kerberos (such as for FAST or
- validation)
- Added a new tool sss_cache to allow selective expiring of cached entries
- Added support for LDAP DEREF and ASQ controls
- Added access control features for Novell Directory Server
- FreeIPA dynamic DNS update now checks first to see if an update is needed
- Complete rewrite of the HBAC library
- New libraries: libipa_hbac and libipa_hbac-python
New upstream release 1.5.11 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 Fix a serious regression that prevented SSSD from working with ldaps:// URIs IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 address being saved to the AAAA record
2011-07-05 19:03:55 +00:00
* Tue Jul 05 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
New upstream release 1.5.11 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11 Fix a serious regression that prevented SSSD from working with ldaps:// URIs IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6 address being saved to the AAAA record
2011-07-05 19:00:32 +00:00
- New upstream release 1.5.11
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
- Fix a serious regression that prevented SSSD from working with ldaps:// URIs
- IPA Provider: Fix a bug with dynamic DNS that resulted in the wrong IPv6
- address being saved to the AAAA record
New upstream release 1.5.10 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10 Fixed a regression introduced in 1.5.9 that could result in blocking calls to LDAP
2011-07-01 12:31:11 +00:00
* Fri Jul 01 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.10-1
- New upstream release 1.5.10
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.10
- Fixed a regression introduced in 1.5.9 that could result in blocking calls
- to LDAP
New upstream release 1.5.9 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9 Support for overriding home directory, shell and primary GID locally Properly honor TTL values from SRV record lookups Support non-POSIX groups in nested group chains (for RFC2307bis LDAP servers) Properly escape IPv6 addresses in the failover code Do not crash if inotify fails (e.g. resource exhaustion) Don't add multiple TGT renewal callbacks (too many log messages)
2011-06-30 18:57:29 +00:00
* Thu Jun 30 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.9-1
- New upstream release 1.5.9
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.9
- Support for overriding home directory, shell and primary GID locally
- Properly honor TTL values from SRV record lookups
- Support non-POSIX groups in nested group chains (for RFC2307bis LDAP
- servers)
- Properly escape IPv6 addresses in the failover code
- Do not crash if inotify fails (e.g. resource exhaustion)
- Don't add multiple TGT renewal callbacks (too many log messages)
New upstream release 1.5.8 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8 Support for the LDAP paging control Support for multiple DNS servers for name resolution Fixes for several group membership bugs Fixes for rare crash bugs
2011-05-27 20:41:02 +00:00
* Fri May 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.8-1
- New upstream release 1.5.8
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.8
- Support for the LDAP paging control
- Support for multiple DNS servers for name resolution
- Fixes for several group membership bugs
- Fixes for rare crash bugs
Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d Make sure to properly convert to systemd if upgrading from newer updates for Fedora 14
2011-05-23 18:51:01 +00:00
* Mon May 23 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-3
- Resolves: rhbz#706740 - Orphaned links on rc0.d-rc6.d
- Make sure to properly convert to systemd if upgrading from newer
- updates for Fedora 14
Fix segfault in TGT renewal
2011-05-02 16:29:25 +00:00
* Mon May 02 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-2
- Fix segfault in TGT renewal
Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites cached password with predicatable filename
2011-04-29 18:36:34 +00:00
* Fri Apr 29 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.7-1
- Resolves: rhbz#700891 - CVE-2011-1758 sssd: automatic TGT renewal overwrites
- cached password with predicatable filename
Re-add manpage translations
2011-04-20 20:27:19 +00:00
* Wed Apr 20 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.6.1-1
- Re-add manpage translations
New upstream release 1.5.6 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6 Fixed a serious memory leak in the memberOf plugin Fixed a regression with the negative cache that caused it to be essentially nonfunctional Fixed an issue where the user's full name would sometimes be removed from the cache Fixed an issue with password changes in the kerberos provider not working with kpasswd
2011-04-20 19:26:05 +00:00
* Wed Apr 20 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.6-1
- New upstream release 1.5.6
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.6
- Fixed a serious memory leak in the memberOf plugin
- Fixed a regression with the negative cache that caused it to be essentially
- nonfunctional
- Fixed an issue where the user's full name would sometimes be removed from
- the cache
- Fixed an issue with password changes in the kerberos provider not working
- with kpasswd
Resolves: rhbz#697057 - kpasswd fails when using sssd and kadmin server != kdc server Upgrades from SysV should now maintain enabled/disabled status
2011-04-20 16:44:13 +00:00
* Wed Apr 20 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-5
- Resolves: rhbz#697057 - kpasswd fails when using sssd and
- kadmin server != kdc server
- Upgrades from SysV should now maintain enabled/disabled status
Fix %postun
2011-04-18 15:02:57 +00:00
* Mon Apr 18 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-4
- Fix %%postun
Fix systemd conversion. Upgrades from SysV to systemd weren't properly enabling the systemd service. Fix a serious memory leak in the memberOf plugin Fix an issue where the user's full name would sometimes be removed from the cache
2011-04-14 18:16:04 +00:00
* Thu Apr 14 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-3
- Fix systemd conversion. Upgrades from SysV to systemd weren't properly
- enabling the systemd service.
- Fix a serious memory leak in the memberOf plugin
- Fix an issue where the user's full name would sometimes be removed
- from the cache
Install systemd unit file instead of sysv init script
2011-04-12 15:52:28 +00:00
* Tue Apr 12 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-2
- Install systemd unit file instead of sysv init script
New upstream release 1.5.5 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 Fixes for several crash bugs LDAP group lookups will no longer abort if there is a zero-length member attribute Add automatic fallback to 'cn' if the 'gecos' attribute does not exist
2011-04-12 15:14:23 +00:00
* Tue Apr 12 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
- New upstream release 1.5.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
- Fixes for several crash bugs
- LDAP group lookups will no longer abort if there is a zero-length member
- attribute
- Add automatic fallback to 'cn' if the 'gecos' attribute does not exist
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
* Thu Mar 24 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
- New upstream release 1.5.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
- Fixes for Active Directory when not all users and groups have POSIX attributes
- Fixes for handling users and groups that have name aliases (aliases are ignored)
- Fix group memberships after initgroups in the IPA provider
Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication
2011-03-17 15:47:25 +00:00
* Thu Mar 17 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.3-2
- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication
New upstream release 1.5.3 Support for libldb >= 1.0.0
2011-03-11 18:50:22 +00:00
* Fri Mar 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.3-1
- New upstream release 1.5.3
- Support for libldb >= 1.0.0
New upstream release 1.5.2 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 Fixes for support of FreeIPA v2 Fixes for failover if DNS entries change Improved sss_obfuscate tool with better interactive mode Fix several crash bugs Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this Delete users from the local cache if initgroups calls return 'no such user' (previously only worked for getpwnam/getpwuid) Use new Transifex.net translations Better support for automatic TGT renewal (now survives restart) Netgroup fixes
2011-03-10 20:00:40 +00:00
* Thu Mar 10 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
- New upstream release 1.5.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
- Fixes for support of FreeIPA v2
- Fixes for failover if DNS entries change
- Improved sss_obfuscate tool with better interactive mode
- Fix several crash bugs
- Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
- Delete users from the local cache if initgroups calls return 'no such user'
- (previously only worked for getpwnam/getpwuid)
- Use new Transifex.net translations
- Better support for automatic TGT renewal (now survives restart)
- Netgroup fixes
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425
2011-02-28 02:54:52 +00:00
* Sun Feb 27 2011 Simo Sorce <ssorce@redhat.com> - 1.5.1-9
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again.
- Related: rhbz#677425
- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users
2011-02-21 20:42:00 +00:00
* Mon Feb 21 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
- Resolves: rhbz#677768 - name service caches names, so id command shows
- recently deleted users
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf
2011-02-11 16:41:33 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later
- Remove .la for memberOf
- Fix memberOf install path
2011-02-11 16:22:33 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
- Fix memberOf install path
- Add support for libldb 1.0.0
2011-02-11 14:36:41 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
- Add support for libldb 1.0.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2011-02-09 16:00:19 +00:00
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
* Tue Feb 01 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
- Fix nested group member filter sanitization for RFC2307bis
- Put translated tool manpages into the sssd-tools subpackage
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild
2011-01-27 19:38:13 +00:00
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-2
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during
- rpmbuild
- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes
2011-01-27 18:50:21 +00:00
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
- New upstream release 1.5.1
- Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- Vast performance improvements when enumerate = true
- All PAM actions will now perform a forced initgroups lookup instead of just
- a user information lookup
- This guarantees that all group information is available to other
- providers, such as the simple provider.
- For backwards-compatibility, DNS lookups will also fall back to trying the
- SSSD domain name as a DNS discovery domain.
- Support for more password expiration policies in LDAP
- 389 Directory Server
- FreeIPA
- ActiveDirectory
- Support for ldap_tls_{cert,key,cipher_suite} config options
-Assorted bugfixes
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
2011-01-11 17:32:39 +00:00
* Tue Jan 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
* Wed Dec 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
- New upstream release 1.5.0
- Fixed issues with LDAP search filters that needed to be escaped
- Add Kerberos FAST support on platforms that support it
- Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
- Added a Kerberos access provider to honor .k5login
- Addressed several thread-safety issues in the sss_client code
- Improved support for delayed online Kerberos auth
- Significantly reduced time between connecting to the network/VPN and
- acquiring a TGT
- Added feature for automatic Kerberos ticket renewal
- Provides the kerberos ticket for long-lived processes or cron jobs
- even when the user logs out
- Added several new features to the LDAP access provider
- Support for 'shadow' access control
- Support for authorizedService access control
- Ability to mix-and-match LDAP access control features
- Added an option for a separate password-change LDAP server for those
- platforms where LDAP referrals are not supported
- Added support for manpage translations
- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade
2010-11-18 13:41:39 +00:00
* Thu Nov 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
- Solve a shutdown race-condition that sometimes left processes running
- Resolves: rhbz#606887 - SSSD stops on upgrade
- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf
2010-11-16 17:48:57 +00:00
* Tue Nov 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-2
- Log startup errors to the syslog
- Allow cache cleanup to be disabled in sssd.conf
- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base
2010-11-01 13:02:47 +00:00
* Mon Nov 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
- New upstream release 1.4.1
- Add support for netgroups to the proxy provider
- Fixes a minor bug with UIDs/GIDs >= 2^31
- Fixes a segfault in the kerberos provider
- Fixes a segfault in the NSS responder if a data provider crashes
- Correctly use sdap_netgroup_search_base
Fix incorrect tarball URL
2010-10-18 20:06:09 +00:00
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-2
- Fix incorrect tarball URL
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
- New upstream release 1.4.0
- Added support for netgroups to the LDAP provider
- Performance improvements made to group processing of RFC2307 LDAP servers
- Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
- Build-system improvements to support Gentoo
- Split out several libraries into the ding-libs tarball
- Manpage reviewed and updated
- Fix pre and post script requirements
2010-10-04 13:47:22 +00:00
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-35
- Fix pre and post script requirements
- Resolves: rhbz#606887 - sssd stops on upgrade
2010-10-04 13:23:20 +00:00
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-34
- Resolves: rhbz#606887 - sssd stops on upgrade
- Resolves: rhbz#626205 - Unable to unlock screen
2010-10-04 13:13:13 +00:00
* Fri Oct 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-33
- Resolves: rhbz#626205 - Unable to unlock screen
- Resolves: 637955 - libini_config-devel needs libcollection-devel but - doesn't require it
2010-09-28 11:49:22 +00:00
* Tue Sep 28 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
Bump release number and fix changelog message
2010-09-28 11:55:09 +00:00
- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
- doesn't require it
- Resolves: 637955 - libini_config-devel needs libcollection-devel but - doesn't require it
2010-09-28 11:49:22 +00:00
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
2010-09-16 13:32:53 +00:00
* Thu Sep 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-31
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
Resolves: CVE-2010-2940
2010-08-24 16:10:04 +00:00
* Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
- against LDAP
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
2010-07-22 06:37:10 +00:00
* Thu Jul 22 2010 David Malcolm <dmalcolm@redhat.com> - 1.2.91-21
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection
2010-07-09 18:52:22 +00:00
* Fri Jul 09 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
- New upstream version 1.2.91 (1.3.0rc1)
- Improved LDAP failover
- Synchronous sysdb API (provides performance enhancements)
- Better online reconnection detection
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
* Mon Jun 21 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
- New stable upstream version 1.2.1
- Resolves: rhbz#595529 - spec file should eschew %%define in favor of
- %%global
- Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
- to fail while restart.
- Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
- keyring
- Resolves: rhbz#599724 - sssd is broken on Rawhide
- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP
2010-05-24 19:19:33 +00:00
* Mon May 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP
- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos
2010-05-18 18:02:30 +00:00
* Tue May 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline->online transition support in Kerberos
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
* Fri May 07 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover
- Bump up release number to avoid library sub-packages version issues with previous releases.
2010-04-02 15:48:31 +00:00
* Fri Apr 02 2010 Simo Sorce <ssorce@redhat.com> - 1.1.1-3
- Bump up release number to avoid library sub-packages version issues with
previous releases.
- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
2010-04-01 15:19:19 +00:00
* Thu Apr 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
Fix changelog dates to make F19 rpmbuild happy
2013-01-29 10:00:35 +00:00
* Tue Mar 23 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb
2010-03-22 19:54:48 +00:00
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
* Wed Mar 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline
- Rebuild against new libtevent
2010-02-24 20:44:32 +00:00
* Wed Feb 24 2010 Stephen Gallagehr <sgallagh@redhat.com> - 1.0.5-2
- Rebuild against new libtevent
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
* Fri Feb 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.5-1
- Fix licenses in sources and on RPMs
- Fix regression on 64-bit platforms
2010-01-25 18:52:14 +00:00
* Mon Jan 25 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.4-1
- Fix regression on 64-bit platforms
- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes
2010-01-22 15:15:20 +00:00
* Fri Jan 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes
2010-01-14 17:03:05 +00:00
* Thu Jan 14 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes
Updating to SSSD 1.0.1 Fixes: CVE-2010-0014
2010-01-11 14:23:23 +00:00
* Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
- Fix CVE-2010-0014
Fix https://bugzilla.redhat.com/show_bug.cgi?id=549482
2009-12-21 20:39:34 +00:00
* Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
== Highlights == One serious security issue was resolved related to the kerberos provider. Users who authenticate against Kerberos and have cached credentials could log in with a zero-length password The network exposure of this bug was limited, as users logged in this way would not have valid network credentials (by lucky accident). This issue was present only in the 0.99.x preview releases and not in any of the stable releases (0.7.1 and earlier) Stability fixes since the 0.99.1 preview release Added or updated several translations Fixed long-standing "I have no name!" issue with X-based terminals SSSD now passes "make distcheck" cleanly SSSD PAM now conforms better to standards regarding PAM_PRELIM_CHECK == Detailed Changelog == Göran Uddeborg (2): Update SV translation Update SV translation Marina Latini (1): Update IT translation Martin Nagy (2): Don't consider one address with different port numbers as the same Change the first server pick logic Sergei V. Kovylov (1): sssd.spec for SLES Simo Sorce (2): Fix upgrade bug #323 Fix ldap child memory hierarchy and other issues Stephen Gallagher (14): Properly close STDERR when daemonizing Fix tight loop in monitor Don't set explicit default for "timeout" in domains Fix warning in server.c Raise DEBUG level of sdap_get_generic_done() Change default for enumeration to TRUE Fix tight-loop in monitor part 2 Properly handle EINTR from poll() Updating ES translation Add DEBUG messages to getpwnam_callback and getpwuid_callback Clarify access_provider manpage entry Do not blindly accept zero-length passwords Fix broken password changes for local users Release SSSD 1.0 Sumit Bose (9): Use sys.exit instead of exit Check for minimal version of check Build python modules in builddir Use --with-ldb-lib-dir while running make distcheck Cleanup db files after test run disable password migration code Handle chauthtok with PAM_PRELIM_CHECK separately Do not overwrite valid TGTs when offline Fix for #345
2009-12-18 23:53:16 +00:00
* Fri Dec 18 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
- New upstream stable release 1.0.0
David O'Brien (1): Copy-edit sssd-ipa man page Dmitri Pal (5): COMMON Improvements to the trace macro COLLECTION Create reference to the top level collection Cleaning FIXME comments Cleaning FIXME comments. INI Correcting build warnings. Fabian Affolter (1): Add German translation Göran Uddeborg (2): Add Swedish translation for sss_client Add Swedish translation for SSSD server Jakub Hrozek (13): Warn visibly about permission problems with the config file Better error message when there is no local domain configured Setup ldap child logging from IPA backend Check the services started against a list of known services Handle spaces in config parser Fail on nonexistent input file Do not start with provider=files Reduce code duplication between LDAP child and Kerberos child Change ares usage to be c-ares 1.7.0 compatible Import ares 1.7.0 helpers Don't build the SRV and TXT parsing code except for tests Document the failover feature in manpages Consolidate code for splitting strings by separator Martin Nagy (3): Fix egg-info file generation in the spec file Add some debugging statements to fail_over and resolver Correctly restart server status after the timeout Simo Sorce (17): Fix tabs Fix memberof plugin Compute and save memberuid in cache as well Use memberuid and not member in group enumerations Use the custom password field in groups too. Resolve nested groups also when rfc2307bis is used Make strdn build functions more available Fix nested group memberships Allow nesting to fix #310 Fix bug #311, properly set callback attribute Change dhash API to be talloc-friendly Add private pointer for delete callback Add comments to document latest changes Add rebuild task to memberof plugin Handle the special 02 upgrade case for 04->05 Fix for #316 Fix for #322, update from old database versions. Stephen Gallagher (28): Remove ELAPI from build and tarball Stop configuring ELAPI Make debug log timestamps human-readable Raise debug log level for LDB_DEBUG_WARNING Add allocation error check Avoid returning uninitialized result. Fix potential uninitialized value errors in nsssrv_cmd.c Fix potential uninitialized value error in responder_dp.c SSSDDomain.remove_provider() requires only the provider type Make SSSDDomain.remove_provider() remove configured options Run dhash tests Add SSSDDomain.set_name() function to SSSDConfig API Reduce the verbosity of the SSSDConfigTest Fix broken SSSDChangeConf.set() function Fix SSSDConfig API bugs around [de-]activation of domains Fix RPM spec for RHEL6 fix deactivate_domain() SSSDConfig.get_domain() should properly detect active state Ensure that list_active_domains returns the real value Properly deny id_provider=files Add missing options to sssd-ipa configuraion Add missing SSSDConfig file for IPA for make install Fix processing of Boolean values in SSSDConfig Add 'permit' and 'deny' access providers to SSSDConfig API Remove default for ldap_use_start_tls in IPA providers Run SSSDConfig tests during 'make check' Fix stupid copy-paste error Updating to version 0.99.1 Sumit Bose (13): Do not include libsss_ipa.la in rpm package Immediately return a krb5 change password request when offline Check LDAP structure before calling ldap_unbind_ext() Add sysdb_search_custom request Do not treat missing proc files as errors. Add basic OS detection Make packaging of *.egg-info files more flexible Try to renew Kerberos credentials Add checks to test the memberuid handling Add offline support for ipa_access Add dummy credentials to an empty ccache file Always update sysdb to the latest version Fix DEBUG message for sysdb_init beckerde (1): Add Spanish translation ruigo (1): Add Portuguese translation
2009-12-11 14:16:51 +00:00
* Fri Dec 11 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.1-1
- New upstream bugfix release 0.99.1
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
* Mon Nov 30 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.0-1
- New upstream release 0.99.0
New upstream release Fix segfaults and upgrade issues. Provide newer default configuration.
2009-10-27 19:29:01 +00:00
* Tue Oct 27 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal
Fix upgrade issues from old (pre-0.5.0) releases of SSSD Configuration files before 0.5.0 did not enforce provider= in local domains it did special-case by domain name (LOCAL). Our script was relying on provider= value, this patch adds the special-casing in case the domain was called LOCAL.
2009-10-26 13:08:58 +00:00
* Mon Oct 26 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-2
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
* Fri Oct 23 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-1
- New upstream release 0.7.0
Fix missing file permissions for sssd-clients
2009-10-15 13:26:44 +00:00
* Thu Oct 15 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-2
- Fix missing file permissions for sssd-clients
- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust
2009-10-13 20:25:50 +00:00
* Tue Oct 13 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust
Add missing changelog updates
2009-09-29 12:41:09 +00:00
* Tue Sep 29 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
- Ensure that the configuration upgrade script always writes the config
file with 0600 permissions
- Eliminate an infinite loop in group enumerations
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
* Mon Sep 28 2009 Sumit Bose <sbose@redhat.com> - 0.6.0-0
- New upstream release 0.6.0
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
* Mon Aug 24 2009 Simo Sorce <ssorce@redhat.com> - 0.5.0-0
- New upstream release 0.5.0
Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)
2009-07-29 11:21:47 +00:00
* Wed Jul 29 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
without a password. (Patch by Stephen Gallagher)
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2009-07-27 04:48:02 +00:00
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
- Fix a couple of segfaults that may happen on reload
2009-06-22 14:49:00 +00:00
* Mon Jun 22 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-2
- Fix a couple of segfaults that may happen on reload
- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option
2009-06-11 14:13:16 +00:00
* Thu Jun 11 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-1
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
* Mon Jun 8 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-0
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)
- release out of the official 0.3.2 tarball
2009-04-20 19:59:37 +00:00
* Mon Apr 20 2009 Simo Sorce <ssorce@redhat.com> - 0.3.2-2
- release out of the official 0.3.2 tarball
Update to 0.3.2
2009-04-20 18:17:19 +00:00
* Mon Apr 20 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600
- Add last minute bug fixes, found in testing the package
2009-04-14 21:24:36 +00:00
* Tue Apr 14 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-2
- Add last minute bug fixes, found in testing the package
- Version 0.3.1 - includes previous release patches
2009-04-13 22:37:11 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-1
- Version 0.3.1
- includes previous release patches
- Try to fix build adding automake as an explicit BuildRequire
2009-04-13 16:04:16 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-2
- Try to fix build adding automake as an explicit BuildRequire
- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream
2009-04-13 17:48:03 +00:00
- Add also a couple of last minute patches from upstream
- Try to fix build adding automake as an explicit BuildRequire
2009-04-13 16:04:16 +00:00
- Version 0.3.0 - Provides file based configuration and lots of improvements
2009-04-13 15:49:54 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-1
- Version 0.3.0
- Provides file based configuration and lots of improvements
- Version 0.2.1
2009-03-10 21:34:16 +00:00
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.1-1
- Version 0.2.1
- Version 0.2.0
2009-03-10 20:43:08 +00:00
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.0-1
- Version 0.2.0
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
* Sun Mar 08 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-5.20090309git691c9b3
- package git snapshot
* Fri Mar 06 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-4
- fixed items found during review
- added initscript
* Thu Mar 05 2009 Sumit Bose <sbose@redhat.com> - 0.1.0-3
- added sss_client
* Mon Feb 23 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-2
- Small cleanup and fixes in the spec file
* Thu Feb 12 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.1.0-1
- Initial release (based on version 0.1.0 upstream code)
Reference in New Issue Copy Permalink