rpms/sssd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
c8fb340975
sssd/sssd.spec

623 lines
22 KiB
RPMSpec
Raw Normal View History

- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
%{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
%endif
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
# Determine the location of the LDB modules directory
%global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)
%global ldb_version 1.0.2
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Name: sssd
New upstream release 1.5.5 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 Fixes for several crash bugs LDAP group lookups will no longer abort if there is a zero-length member attribute Add automatic fallback to 'cn' if the 'gecos' attribute does not exist
2011-04-12 15:14:23 +00:00
Version: 1.5.5
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
Release: 1%{?dist}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Group: Applications/System
Summary: System Security Services Daemon
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
License: GPLv3+
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
URL: http://fedorahosted.org/sssd/
Fix tarball URL
2010-10-18 20:04:39 +00:00
Source0: https://fedorahosted.org/released/sssd/%{name}-%{version}.tar.gz
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
### Patches ###
- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf
2010-11-16 17:48:57 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
### Dependencies ###
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
Requires: libldb = %{ldb_version}
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
Requires: libtdb >= 1.1.3
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
Requires: sssd-client = %{version}-%{release}
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild
2011-01-27 19:38:13 +00:00
Requires: cyrus-sasl-gssapi
- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes
2011-01-27 18:50:21 +00:00
Requires: krb5-libs >= 1.9
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
Requires(post): initscripts chkconfig /sbin/ldconfig
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Requires(preun): initscripts chkconfig
- Fix pre and post script requirements
2010-10-04 13:47:22 +00:00
Requires(postun): initscripts chkconfig /sbin/ldconfig
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
%global servicename sssd
%global sssdstatedir %{_localstatedir}/lib/sss
%global dbpath %{sssdstatedir}/db
%global pipepath %{sssdstatedir}/pipes
%global pubconfpath %{sssdstatedir}/pubconf
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
### Build Dependencies ###
BuildRequires: autoconf
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
BuildRequires: automake
BuildRequires: libtool
BuildRequires: m4
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{?fedora:BuildRequires: popt-devel}
David O'Brien (1): Copy-edit sssd-ipa man page Dmitri Pal (5): COMMON Improvements to the trace macro COLLECTION Create reference to the top level collection Cleaning FIXME comments Cleaning FIXME comments. INI Correcting build warnings. Fabian Affolter (1): Add German translation Göran Uddeborg (2): Add Swedish translation for sss_client Add Swedish translation for SSSD server Jakub Hrozek (13): Warn visibly about permission problems with the config file Better error message when there is no local domain configured Setup ldap child logging from IPA backend Check the services started against a list of known services Handle spaces in config parser Fail on nonexistent input file Do not start with provider=files Reduce code duplication between LDAP child and Kerberos child Change ares usage to be c-ares 1.7.0 compatible Import ares 1.7.0 helpers Don't build the SRV and TXT parsing code except for tests Document the failover feature in manpages Consolidate code for splitting strings by separator Martin Nagy (3): Fix egg-info file generation in the spec file Add some debugging statements to fail_over and resolver Correctly restart server status after the timeout Simo Sorce (17): Fix tabs Fix memberof plugin Compute and save memberuid in cache as well Use memberuid and not member in group enumerations Use the custom password field in groups too. Resolve nested groups also when rfc2307bis is used Make strdn build functions more available Fix nested group memberships Allow nesting to fix #310 Fix bug #311, properly set callback attribute Change dhash API to be talloc-friendly Add private pointer for delete callback Add comments to document latest changes Add rebuild task to memberof plugin Handle the special 02 upgrade case for 04->05 Fix for #316 Fix for #322, update from old database versions. Stephen Gallagher (28): Remove ELAPI from build and tarball Stop configuring ELAPI Make debug log timestamps human-readable Raise debug log level for LDB_DEBUG_WARNING Add allocation error check Avoid returning uninitialized result. Fix potential uninitialized value errors in nsssrv_cmd.c Fix potential uninitialized value error in responder_dp.c SSSDDomain.remove_provider() requires only the provider type Make SSSDDomain.remove_provider() remove configured options Run dhash tests Add SSSDDomain.set_name() function to SSSDConfig API Reduce the verbosity of the SSSDConfigTest Fix broken SSSDChangeConf.set() function Fix SSSDConfig API bugs around [de-]activation of domains Fix RPM spec for RHEL6 fix deactivate_domain() SSSDConfig.get_domain() should properly detect active state Ensure that list_active_domains returns the real value Properly deny id_provider=files Add missing options to sssd-ipa configuraion Add missing SSSDConfig file for IPA for make install Fix processing of Boolean values in SSSDConfig Add 'permit' and 'deny' access providers to SSSDConfig API Remove default for ldap_use_start_tls in IPA providers Run SSSDConfig tests during 'make check' Fix stupid copy-paste error Updating to version 0.99.1 Sumit Bose (13): Do not include libsss_ipa.la in rpm package Immediately return a krb5 change password request when offline Check LDAP structure before calling ldap_unbind_ext() Add sysdb_search_custom request Do not treat missing proc files as errors. Add basic OS detection Make packaging of *.egg-info files more flexible Try to renew Kerberos credentials Add checks to test the memberuid handling Add offline support for ipa_access Add dummy credentials to an empty ccache file Always update sysdb to the latest version Fix DEBUG message for sysdb_init beckerde (1): Add Spanish translation ruigo (1): Add Portuguese translation
2009-12-11 14:16:51 +00:00
%if 0%{?rhel} <= 5
BuildRequires: popt
%endif
%if 0%{?rhel} >= 6
BuildRequires: popt-devel
%endif
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
BuildRequires: libtalloc-devel
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
BuildRequires: libtevent-devel
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
BuildRequires: libtdb-devel
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
BuildRequires: libldb-devel = %{ldb_version}
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
BuildRequires: libdhash-devel >= 0.4.2
BuildRequires: libcollection-devel
BuildRequires: libini_config-devel
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
BuildRequires: dbus-devel
BuildRequires: dbus-libs
BuildRequires: openldap-devel
BuildRequires: pam-devel
BuildRequires: nss-devel
BuildRequires: nspr-devel
Some more build requires
2009-04-13 17:11:39 +00:00
BuildRequires: pcre-devel
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
BuildRequires: libxslt
BuildRequires: libxml2
BuildRequires: docbook-style-xsl
- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes
2011-01-27 18:50:21 +00:00
BuildRequires: krb5-devel >= 1.9
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
BuildRequires: c-ares-devel
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
BuildRequires: python-devel
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
BuildRequires: check-devel
BuildRequires: doxygen
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
BuildRequires: libselinux-devel
BuildRequires: libsemanage-devel
BuildRequires: bind-utils
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
BuildRequires: keyutils-libs-devel
- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection
2010-07-09 18:52:22 +00:00
BuildRequires: libnl-devel
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
BuildRequires: nscd
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
BuildRequires: gettext-devel
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%description
Provides a set of daemons to manage access to remote directories and
authentication mechanisms. It provides an NSS and PAM interface toward
the system and a pluggable backend system to connect to multiple different
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%package client
Summary: SSSD Client libraries for NSS and PAM
Group: Applications/System
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
License: LGPLv3+
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%description client
Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD
service.
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%package tools
Summary: Userspace tools for use with the SSSD
Group: Applications/System
License: GPLv3+
Requires: sssd = %{version}-%{release}
%description tools
Provides userspace tools for manipulating users, groups, and nested groups in
SSSD when using id_provider = local in /etc/sssd/sssd.conf.
Also provides a userspace tool for generating an obfuscated LDAP password for
use with ldap_default_authtok_type = obfuscated_password.
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%prep
%setup -q
%build
- Add support for libldb 1.0.0
2011-02-11 14:36:41 +00:00
autoreconf -ivf
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
%configure \
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
--with-db-path=%{dbpath} \
--with-pipe-path=%{pipepath} \
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
--with-pubconf-path=%{pubconfpath} \
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
--with-init-dir=%{_initrddir} \
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
--enable-nsslibdir=/%{_lib} \
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
2010-09-16 13:32:53 +00:00
--enable-pammoddir=/%{_lib}/security \
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
--disable-static \
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
--disable-rpath \
--with-test-dir=/dev/shm
- Version 0.3.0 - Provides file based configuration and lots of improvements
2009-04-13 15:49:54 +00:00
make %{?_smp_mflags}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%check
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
export CK_TIMEOUT_MULTIPLIER=10
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
make %{?_smp_mflags} check
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
unset CK_TIMEOUT_MULTIPLIER
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%install
rm -rf $RPM_BUILD_ROOT
make install DESTDIR=$RPM_BUILD_ROOT
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
# Prepare language files
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
/usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
# Copy default sssd.conf file
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sssd
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
install -m600 src/examples/sssd.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.conf
install -m400 src/config/etc/sssd.api.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.conf
install -m400 src/config/etc/sssd.api.d/* $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.d/
# Copy default logrotate file
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
# Make sure SSSD is able to run on read-only root
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
# Remove .la files created by libtool
rm -f \
$RPM_BUILD_ROOT/%{_lib}/libnss_sss.la \
$RPM_BUILD_ROOT/%{_lib}/security/pam_sss.la \
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
$RPM_BUILD_ROOT/%{ldb_modulesdir}/memberof.la \
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ldap.la \
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_proxy.la \
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_krb5.la \
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ipa.la \
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_simple.la \
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
$RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.la \
$RPM_BUILD_ROOT/%{python_sitearch}/pysss.la
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
# Older versions of rpmbuild can only handle one -f option
# So we need to append to the sssd.lang file
David O'Brien (1): Copy-edit sssd-ipa man page Dmitri Pal (5): COMMON Improvements to the trace macro COLLECTION Create reference to the top level collection Cleaning FIXME comments Cleaning FIXME comments. INI Correcting build warnings. Fabian Affolter (1): Add German translation Göran Uddeborg (2): Add Swedish translation for sss_client Add Swedish translation for SSSD server Jakub Hrozek (13): Warn visibly about permission problems with the config file Better error message when there is no local domain configured Setup ldap child logging from IPA backend Check the services started against a list of known services Handle spaces in config parser Fail on nonexistent input file Do not start with provider=files Reduce code duplication between LDAP child and Kerberos child Change ares usage to be c-ares 1.7.0 compatible Import ares 1.7.0 helpers Don't build the SRV and TXT parsing code except for tests Document the failover feature in manpages Consolidate code for splitting strings by separator Martin Nagy (3): Fix egg-info file generation in the spec file Add some debugging statements to fail_over and resolver Correctly restart server status after the timeout Simo Sorce (17): Fix tabs Fix memberof plugin Compute and save memberuid in cache as well Use memberuid and not member in group enumerations Use the custom password field in groups too. Resolve nested groups also when rfc2307bis is used Make strdn build functions more available Fix nested group memberships Allow nesting to fix #310 Fix bug #311, properly set callback attribute Change dhash API to be talloc-friendly Add private pointer for delete callback Add comments to document latest changes Add rebuild task to memberof plugin Handle the special 02 upgrade case for 04->05 Fix for #316 Fix for #322, update from old database versions. Stephen Gallagher (28): Remove ELAPI from build and tarball Stop configuring ELAPI Make debug log timestamps human-readable Raise debug log level for LDB_DEBUG_WARNING Add allocation error check Avoid returning uninitialized result. Fix potential uninitialized value errors in nsssrv_cmd.c Fix potential uninitialized value error in responder_dp.c SSSDDomain.remove_provider() requires only the provider type Make SSSDDomain.remove_provider() remove configured options Run dhash tests Add SSSDDomain.set_name() function to SSSDConfig API Reduce the verbosity of the SSSDConfigTest Fix broken SSSDChangeConf.set() function Fix SSSDConfig API bugs around [de-]activation of domains Fix RPM spec for RHEL6 fix deactivate_domain() SSSDConfig.get_domain() should properly detect active state Ensure that list_active_domains returns the real value Properly deny id_provider=files Add missing options to sssd-ipa configuraion Add missing SSSDConfig file for IPA for make install Fix processing of Boolean values in SSSDConfig Add 'permit' and 'deny' access providers to SSSDConfig API Remove default for ldap_use_start_tls in IPA providers Run SSSDConfig tests during 'make check' Fix stupid copy-paste error Updating to version 0.99.1 Sumit Bose (13): Do not include libsss_ipa.la in rpm package Immediately return a krb5 change password request when offline Check LDAP structure before calling ldap_unbind_ext() Add sysdb_search_custom request Do not treat missing proc files as errors. Add basic OS detection Make packaging of *.egg-info files more flexible Try to renew Kerberos credentials Add checks to test the memberuid handling Add offline support for ipa_access Add dummy credentials to an empty ccache file Always update sysdb to the latest version Fix DEBUG message for sysdb_init beckerde (1): Add Spanish translation ruigo (1): Add Portuguese translation
2009-12-11 14:16:51 +00:00
for file in `ls $RPM_BUILD_ROOT/%{python_sitelib}/*.egg-info 2> /dev/null`
do
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
echo %{python_sitelib}/`basename $file` >> sssd.lang
David O'Brien (1): Copy-edit sssd-ipa man page Dmitri Pal (5): COMMON Improvements to the trace macro COLLECTION Create reference to the top level collection Cleaning FIXME comments Cleaning FIXME comments. INI Correcting build warnings. Fabian Affolter (1): Add German translation Göran Uddeborg (2): Add Swedish translation for sss_client Add Swedish translation for SSSD server Jakub Hrozek (13): Warn visibly about permission problems with the config file Better error message when there is no local domain configured Setup ldap child logging from IPA backend Check the services started against a list of known services Handle spaces in config parser Fail on nonexistent input file Do not start with provider=files Reduce code duplication between LDAP child and Kerberos child Change ares usage to be c-ares 1.7.0 compatible Import ares 1.7.0 helpers Don't build the SRV and TXT parsing code except for tests Document the failover feature in manpages Consolidate code for splitting strings by separator Martin Nagy (3): Fix egg-info file generation in the spec file Add some debugging statements to fail_over and resolver Correctly restart server status after the timeout Simo Sorce (17): Fix tabs Fix memberof plugin Compute and save memberuid in cache as well Use memberuid and not member in group enumerations Use the custom password field in groups too. Resolve nested groups also when rfc2307bis is used Make strdn build functions more available Fix nested group memberships Allow nesting to fix #310 Fix bug #311, properly set callback attribute Change dhash API to be talloc-friendly Add private pointer for delete callback Add comments to document latest changes Add rebuild task to memberof plugin Handle the special 02 upgrade case for 04->05 Fix for #316 Fix for #322, update from old database versions. Stephen Gallagher (28): Remove ELAPI from build and tarball Stop configuring ELAPI Make debug log timestamps human-readable Raise debug log level for LDB_DEBUG_WARNING Add allocation error check Avoid returning uninitialized result. Fix potential uninitialized value errors in nsssrv_cmd.c Fix potential uninitialized value error in responder_dp.c SSSDDomain.remove_provider() requires only the provider type Make SSSDDomain.remove_provider() remove configured options Run dhash tests Add SSSDDomain.set_name() function to SSSDConfig API Reduce the verbosity of the SSSDConfigTest Fix broken SSSDChangeConf.set() function Fix SSSDConfig API bugs around [de-]activation of domains Fix RPM spec for RHEL6 fix deactivate_domain() SSSDConfig.get_domain() should properly detect active state Ensure that list_active_domains returns the real value Properly deny id_provider=files Add missing options to sssd-ipa configuraion Add missing SSSDConfig file for IPA for make install Fix processing of Boolean values in SSSDConfig Add 'permit' and 'deny' access providers to SSSDConfig API Remove default for ldap_use_start_tls in IPA providers Run SSSDConfig tests during 'make check' Fix stupid copy-paste error Updating to version 0.99.1 Sumit Bose (13): Do not include libsss_ipa.la in rpm package Immediately return a krb5 change password request when offline Check LDAP structure before calling ldap_unbind_ext() Add sysdb_search_custom request Do not treat missing proc files as errors. Add basic OS detection Make packaging of *.egg-info files more flexible Try to renew Kerberos credentials Add checks to test the memberuid handling Add offline support for ipa_access Add dummy credentials to an empty ccache file Always update sysdb to the latest version Fix DEBUG message for sysdb_init beckerde (1): Add Spanish translation ruigo (1): Add Portuguese translation
2009-12-11 14:16:51 +00:00
done
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
touch sssd_tools.lang
for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
do
lang=`echo $man | cut -c 1-2`
case `basename $man` in
sss_*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
;;
*)
echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
;;
esac
done
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%clean
rm -rf $RPM_BUILD_ROOT
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
%files -f sssd.lang
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%defattr(-,root,root,-)
%doc COPYING
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
%{_initrddir}/%{name}
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%{_sbindir}/sssd
%{_libexecdir}/%{servicename}/
%{_libdir}/%{name}/
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
%{ldb_modulesdir}/memberof.so
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
%dir %{sssdstatedir}
%attr(700,root,root) %dir %{dbpath}
%attr(755,root,root) %dir %{pipepath}
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
%attr(755,root,root) %dir %{pubconfpath}
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
%attr(700,root,root) %dir %{pipepath}/private
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%attr(750,root,root) %dir %{_var}/log/%{name}
- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust
2009-10-13 20:25:50 +00:00
%attr(700,root,root) %dir %{_sysconfdir}/sssd
- Version 0.3.0 - Provides file based configuration and lots of improvements
2009-04-13 15:49:54 +00:00
%config(noreplace) %{_sysconfdir}/sssd/sssd.conf
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%config(noreplace) %{_sysconfdir}/logrotate.d/sssd
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
%config(noreplace) %{_sysconfdir}/rwtab.d/sssd
- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust
2009-10-13 20:25:50 +00:00
%config %{_sysconfdir}/sssd/sssd.api.conf
%attr(700,root,root) %dir %{_sysconfdir}/sssd/sssd.api.d
%config %{_sysconfdir}/sssd/sssd.api.d/
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man5/sssd.conf.5*
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
%{_mandir}/man5/sssd-ipa.5*
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man5/sssd-krb5.5*
%{_mandir}/man5/sssd-ldap.5*
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%{_mandir}/man5/sssd-simple.5*
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man8/sssd.8*
%{python_sitearch}/pysss.so
- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust
2009-10-13 20:25:50 +00:00
%{python_sitelib}/*.py*
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
%files client -f sssd_tools.lang
Fix missing file permissions for sssd-clients
2009-10-15 13:26:44 +00:00
%defattr(-,root,root,-)
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
/%{_lib}/libnss_sss.so.2
/%{_lib}/security/pam_sss.so
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
2010-09-16 13:32:53 +00:00
%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
%{_mandir}/man8/pam_sss.8*
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
%{_mandir}/man8/sssd_krb5_locator_plugin.8*
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
%files tools
%defattr(-,root,root,-)
%doc COPYING
%{_sbindir}/sss_useradd
%{_sbindir}/sss_userdel
%{_sbindir}/sss_usermod
%{_sbindir}/sss_groupadd
%{_sbindir}/sss_groupdel
%{_sbindir}/sss_groupmod
%{_sbindir}/sss_groupshow
%{_sbindir}/sss_obfuscate
%{_mandir}/man8/sss_groupadd.8*
%{_mandir}/man8/sss_groupdel.8*
%{_mandir}/man8/sss_groupmod.8*
%{_mandir}/man8/sss_groupshow.8*
%{_mandir}/man8/sss_useradd.8*
%{_mandir}/man8/sss_userdel.8*
%{_mandir}/man8/sss_usermod.8*
%{_mandir}/man8/sss_obfuscate.8*
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%post
/sbin/ldconfig
/sbin/chkconfig --add %{servicename}
- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection
2010-07-09 18:52:22 +00:00
if [ $1 -ge 1 ] ; then
/sbin/service %{servicename} condrestart 2>&1 > /dev/null
fi
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%preun
if [ $1 = 0 ]; then
/sbin/service %{servicename} stop 2>&1 > /dev/null
/sbin/chkconfig --del %{servicename}
fi
- Resolves: rhbz#606887 - sssd stops on upgrade
2010-10-04 13:23:20 +00:00
%postun -p /sbin/ldconfig
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
%post client -p /sbin/ldconfig
%postun client -p /sbin/ldconfig
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
%changelog
New upstream release 1.5.5 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5 Fixes for several crash bugs LDAP group lookups will no longer abort if there is a zero-length member attribute Add automatic fallback to 'cn' if the 'gecos' attribute does not exist
2011-04-12 15:14:23 +00:00
* Tue Apr 12 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.5-1
- New upstream release 1.5.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.5
- Fixes for several crash bugs
- LDAP group lookups will no longer abort if there is a zero-length member
- attribute
- Add automatic fallback to 'cn' if the 'gecos' attribute does not exist
Update to SSSD 1.5.4 Improve the way we detect the LDB plugin location New upstream release 1.5.4 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4 Fixes for Active Directory when not all users and groups have POSIX attributes Fixes for handling users and groups that have name aliases (aliases are ignored) Fix group memberships after initgroups in the IPA provider
2011-03-24 19:17:41 +00:00
* Thu Mar 24 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.4-1
- New upstream release 1.5.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.4
- Fixes for Active Directory when not all users and groups have POSIX attributes
- Fixes for handling users and groups that have name aliases (aliases are ignored)
- Fix group memberships after initgroups in the IPA provider
Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication
2011-03-17 15:47:25 +00:00
* Thu Mar 17 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.3-2
- Resolves: rhbz#683267 - sssd 1.5.1-9 breaks AD authentication
New upstream release 1.5.3 Support for libldb >= 1.0.0
2011-03-11 18:50:22 +00:00
* Fri Mar 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.3-1
- New upstream release 1.5.3
- Support for libldb >= 1.0.0
New upstream release 1.5.2 https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2 Fixes for support of FreeIPA v2 Fixes for failover if DNS entries change Improved sss_obfuscate tool with better interactive mode Fix several crash bugs Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this Delete users from the local cache if initgroups calls return 'no such user' (previously only worked for getpwnam/getpwuid) Use new Transifex.net translations Better support for automatic TGT renewal (now survives restart) Netgroup fixes
2011-03-10 20:00:40 +00:00
* Thu Mar 10 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.2-1
- New upstream release 1.5.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.2
- Fixes for support of FreeIPA v2
- Fixes for failover if DNS entries change
- Improved sss_obfuscate tool with better interactive mode
- Fix several crash bugs
- Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this
- Delete users from the local cache if initgroups calls return 'no such user'
- (previously only worked for getpwnam/getpwuid)
- Use new Transifex.net translations
- Better support for automatic TGT renewal (now survives restart)
- Netgroup fixes
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again. - Related: rhbz#677425
2011-02-28 02:54:52 +00:00
* Sun Feb 27 2011 Simo Sorce <ssorce@redhat.com> - 1.5.1-9
- Rebuild sssd against libldb 1.0.2 so the memberof module loads again.
- Related: rhbz#677425
- Resolves: rhbz#677768 - name service caches names, so id command shows - recently deleted users
2011-02-21 20:42:00 +00:00
* Mon Feb 21 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-8
- Resolves: rhbz#677768 - name service caches names, so id command shows
- recently deleted users
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later - Remove .la for memberOf
2011-02-11 16:41:33 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-7
- Ensure that SSSD builds against libldb-1.0.0 on F15 and later
- Remove .la for memberOf
- Fix memberOf install path
2011-02-11 16:22:33 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
- Fix memberOf install path
- Add support for libldb 1.0.0
2011-02-11 14:36:41 +00:00
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
- Add support for libldb 1.0.0
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2011-02-09 16:00:19 +00:00
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.1-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
- Fix nested group member filter sanitization for RFC2307bis - Put translated tool manpages into the sssd-tools subpackage
2011-02-01 13:40:52 +00:00
* Tue Feb 01 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
- Fix nested group member filter sanitization for RFC2307bis
- Put translated tool manpages into the sssd-tools subpackage
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during - rpmbuild
2011-01-27 19:38:13 +00:00
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-2
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during
- rpmbuild
- New upstream release 1.5.1 - Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins - Vast performance improvements when enumerate = true - All PAM actions will now perform a forced initgroups lookup instead of just - a user information lookup - This guarantees that all group information is available to other - providers, such as the simple provider. - For backwards-compatibility, DNS lookups will also fall back to trying the - SSSD domain name as a DNS discovery domain. - Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory - Support for ldap_tls_{cert,key,cipher_suite} config options -Assorted bugfixes
2011-01-27 18:50:21 +00:00
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
- New upstream release 1.5.1
- Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- Vast performance improvements when enumerate = true
- All PAM actions will now perform a forced initgroups lookup instead of just
- a user information lookup
- This guarantees that all group information is available to other
- providers, such as the simple provider.
- For backwards-compatibility, DNS lookups will also fall back to trying the
- SSSD domain name as a DNS discovery domain.
- Support for more password expiration policies in LDAP
- 389 Directory Server
- FreeIPA
- ActiveDirectory
- Support for ldap_tls_{cert,key,cipher_suite} config options
-Assorted bugfixes
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
2011-01-11 17:32:39 +00:00
* Tue Jan 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
- New upstream release 1.5.0 - Fixed issues with LDAP search filters that needed to be escaped - Add Kerberos FAST support on platforms that support it - Reduced verbosity of PAM_TEXT_INFO messages for cached credentials - Added a Kerberos access provider to honor .k5login - Addressed several thread-safety issues in the sss_client code - Improved support for delayed online Kerberos auth - Significantly reduced time between connecting to the network/VPN and - acquiring a TGT - Added feature for automatic Kerberos ticket renewal - Provides the kerberos ticket for long-lived processes or cron jobs - even when the user logs out - Added several new features to the LDAP access provider - Support for 'shadow' access control - Support for authorizedService access control - Ability to mix-and-match LDAP access control features - Added an option for a separate password-change LDAP server for those - platforms where LDAP referrals are not supported - Added support for manpage translations
2010-12-22 19:08:33 +00:00
* Wed Dec 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
- New upstream release 1.5.0
- Fixed issues with LDAP search filters that needed to be escaped
- Add Kerberos FAST support on platforms that support it
- Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
- Added a Kerberos access provider to honor .k5login
- Addressed several thread-safety issues in the sss_client code
- Improved support for delayed online Kerberos auth
- Significantly reduced time between connecting to the network/VPN and
- acquiring a TGT
- Added feature for automatic Kerberos ticket renewal
- Provides the kerberos ticket for long-lived processes or cron jobs
- even when the user logs out
- Added several new features to the LDAP access provider
- Support for 'shadow' access control
- Support for authorizedService access control
- Ability to mix-and-match LDAP access control features
- Added an option for a separate password-change LDAP server for those
- platforms where LDAP referrals are not supported
- Added support for manpage translations
- Solve a shutdown race-condition that sometimes left processes running - Resolves: rhbz#606887 - SSSD stops on upgrade
2010-11-18 13:41:39 +00:00
* Thu Nov 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
- Solve a shutdown race-condition that sometimes left processes running
- Resolves: rhbz#606887 - SSSD stops on upgrade
- Log startup errors to the syslog - Allow cache cleanup to be disabled in sssd.conf
2010-11-16 17:48:57 +00:00
* Tue Nov 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-2
- Log startup errors to the syslog
- Allow cache cleanup to be disabled in sssd.conf
- New upstream release 1.4.1 - Add support for netgroups to the proxy provider - Fixes a minor bug with UIDs/GIDs >= 2^31 - Fixes a segfault in the kerberos provider - Fixes a segfault in the NSS responder if a data provider crashes - Correctly use sdap_netgroup_search_base
2010-11-01 13:02:47 +00:00
* Mon Nov 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
- New upstream release 1.4.1
- Add support for netgroups to the proxy provider
- Fixes a minor bug with UIDs/GIDs >= 2^31
- Fixes a segfault in the kerberos provider
- Fixes a segfault in the NSS responder if a data provider crashes
- Correctly use sdap_netgroup_search_base
Fix incorrect tarball URL
2010-10-18 20:06:09 +00:00
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-2
- Fix incorrect tarball URL
- New upstream release 1.4.0 - Added support for netgroups to the LDAP provider - Performance improvements made to group processing of RFC2307 LDAP servers - Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin - Build-system improvements to support Gentoo - Split out several libraries into the ding-libs tarball - Manpage reviewed and updated
2010-10-18 18:44:48 +00:00
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
- New upstream release 1.4.0
- Added support for netgroups to the LDAP provider
- Performance improvements made to group processing of RFC2307 LDAP servers
- Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
- Build-system improvements to support Gentoo
- Split out several libraries into the ding-libs tarball
- Manpage reviewed and updated
- Fix pre and post script requirements
2010-10-04 13:47:22 +00:00
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-35
- Fix pre and post script requirements
- Resolves: rhbz#606887 - sssd stops on upgrade
2010-10-04 13:23:20 +00:00
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-34
- Resolves: rhbz#606887 - sssd stops on upgrade
- Resolves: rhbz#626205 - Unable to unlock screen
2010-10-04 13:13:13 +00:00
* Fri Oct 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-33
- Resolves: rhbz#626205 - Unable to unlock screen
- Resolves: 637955 - libini_config-devel needs libcollection-devel but - doesn't require it
2010-09-28 11:49:22 +00:00
* Tue Sep 28 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
Bump release number and fix changelog message
2010-09-28 11:55:09 +00:00
- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
- doesn't require it
- Resolves: 637955 - libini_config-devel needs libcollection-devel but - doesn't require it
2010-09-28 11:49:22 +00:00
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
2010-09-16 13:32:53 +00:00
* Thu Sep 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-31
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
Resolves: CVE-2010-2940
2010-08-24 16:10:04 +00:00
* Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
- against LDAP
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
2010-07-22 06:37:10 +00:00
* Thu Jul 22 2010 David Malcolm <dmalcolm@redhat.com> - 1.2.91-21
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
- New upstream version 1.2.91 (1.3.0rc1) - Improved LDAP failover - Synchronous sysdb API (provides performance enhancements) - Better online reconnection detection
2010-07-09 18:52:22 +00:00
* Fri Jul 09 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
- New upstream version 1.2.91 (1.3.0rc1)
- Improved LDAP failover
- Synchronous sysdb API (provides performance enhancements)
- Better online reconnection detection
- New stable upstream version 1.2.1 - Resolves: rhbz#595529 - spec file should eschew %define in favor of - %global - Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service - to fail while restart. - Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel - keyring - Resolves: rhbz#599724 - sssd is broken on Rawhide
2010-06-21 11:37:06 +00:00
* Mon Jun 21 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
- New stable upstream version 1.2.1
- Resolves: rhbz#595529 - spec file should eschew %%define in favor of
- %%global
- Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
- to fail while restart.
- Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
- keyring
- Resolves: rhbz#599724 - sssd is broken on Rawhide
- New stable upstream version 1.2.0 - Support ServiceGroups for FreeIPA v2 HBAC rules - Fix long-standing issue with auth_provider = proxy - Better logging for TLS issues in LDAP
2010-05-24 19:19:33 +00:00
* Mon May 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP
- New LDAP access provider allows for filtering user access by LDAP attribute - Reduced default timeout for detecting offline status with LDAP - GSSAPI ticket lifetime made configurable - Better offline->online transition support in Kerberos
2010-05-18 18:02:30 +00:00
* Tue May 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline->online transition support in Kerberos
- Release new upstream version 1.1.91 - Enhancements when using SSSD with FreeIPA v2 - Support for deferred kinit - Support for DNS SRV records for failover
2010-05-07 21:36:48 +00:00
* Fri May 07 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover
- Bump up release number to avoid library sub-packages version issues with previous releases.
2010-04-02 15:48:31 +00:00
* Fri Apr 02 2010 Simo Sorce <ssorce@redhat.com> - 1.1.1-3
- Bump up release number to avoid library sub-packages version issues with
previous releases.
- New upstream release 1.1.1 - Fixed the IPA provider (which was segfaulting at start) - Fixed a bug in the SSSDConfig API causing some options to revert to - their defaults - This impacted the Authconfig UI - Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
2010-04-01 15:19:19 +00:00
* Thu Apr 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
- Release SSSD 1.1.0 final - Fix two potential segfaults - Fix memory leak in monitor - Better error message for unusable confdb
2010-03-22 19:54:48 +00:00
* Tue Mar 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb
- Release candidate for SSSD 1.1 - Add simple access provider - Create subpackages for libcollection, libini_config, libdhash and librefarray - Support IPv6 - Support LDAP referrals - Fix cache issues - Better feedback from PAM when offline
2010-03-17 16:53:01 +00:00
* Wed Mar 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline
- Rebuild against new libtevent
2010-02-24 20:44:32 +00:00
* Wed Feb 24 2010 Stephen Gallagehr <sgallagh@redhat.com> - 1.0.5-2
- Rebuild against new libtevent
- Fix licenses in sources and on RPMs
2010-02-19 15:39:59 +00:00
* Fri Feb 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.5-1
- Fix licenses in sources and on RPMs
- Fix regression on 64-bit platforms
2010-01-25 18:52:14 +00:00
* Mon Jan 25 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.4-1
- Fix regression on 64-bit platforms
- Fixes link error on platforms that do not do implicit linking - Fixes double-free segfault in PAM - Fixes double-free error in async resolver - Fixes support for TCP-based DNS lookups in async resolver - Fixes memory alignment issues on ARM processors - Manpage fixes
2010-01-22 15:15:20 +00:00
* Fri Jan 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online - Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests - Several segfault bugfixes
2010-01-14 17:03:05 +00:00
* Thu Jan 14 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes
Updating to SSSD 1.0.1 Fixes: CVE-2010-0014
2010-01-11 14:23:23 +00:00
* Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
- Fix CVE-2010-0014
Fix https://bugzilla.redhat.com/show_bug.cgi?id=549482
2009-12-21 20:39:34 +00:00
* Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
== Highlights == One serious security issue was resolved related to the kerberos provider. Users who authenticate against Kerberos and have cached credentials could log in with a zero-length password The network exposure of this bug was limited, as users logged in this way would not have valid network credentials (by lucky accident). This issue was present only in the 0.99.x preview releases and not in any of the stable releases (0.7.1 and earlier) Stability fixes since the 0.99.1 preview release Added or updated several translations Fixed long-standing "I have no name!" issue with X-based terminals SSSD now passes "make distcheck" cleanly SSSD PAM now conforms better to standards regarding PAM_PRELIM_CHECK == Detailed Changelog == Göran Uddeborg (2): Update SV translation Update SV translation Marina Latini (1): Update IT translation Martin Nagy (2): Don't consider one address with different port numbers as the same Change the first server pick logic Sergei V. Kovylov (1): sssd.spec for SLES Simo Sorce (2): Fix upgrade bug #323 Fix ldap child memory hierarchy and other issues Stephen Gallagher (14): Properly close STDERR when daemonizing Fix tight loop in monitor Don't set explicit default for "timeout" in domains Fix warning in server.c Raise DEBUG level of sdap_get_generic_done() Change default for enumeration to TRUE Fix tight-loop in monitor part 2 Properly handle EINTR from poll() Updating ES translation Add DEBUG messages to getpwnam_callback and getpwuid_callback Clarify access_provider manpage entry Do not blindly accept zero-length passwords Fix broken password changes for local users Release SSSD 1.0 Sumit Bose (9): Use sys.exit instead of exit Check for minimal version of check Build python modules in builddir Use --with-ldb-lib-dir while running make distcheck Cleanup db files after test run disable password migration code Handle chauthtok with PAM_PRELIM_CHECK separately Do not overwrite valid TGTs when offline Fix for #345
2009-12-18 23:53:16 +00:00
* Fri Dec 18 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
- New upstream stable release 1.0.0
David O'Brien (1): Copy-edit sssd-ipa man page Dmitri Pal (5): COMMON Improvements to the trace macro COLLECTION Create reference to the top level collection Cleaning FIXME comments Cleaning FIXME comments. INI Correcting build warnings. Fabian Affolter (1): Add German translation Göran Uddeborg (2): Add Swedish translation for sss_client Add Swedish translation for SSSD server Jakub Hrozek (13): Warn visibly about permission problems with the config file Better error message when there is no local domain configured Setup ldap child logging from IPA backend Check the services started against a list of known services Handle spaces in config parser Fail on nonexistent input file Do not start with provider=files Reduce code duplication between LDAP child and Kerberos child Change ares usage to be c-ares 1.7.0 compatible Import ares 1.7.0 helpers Don't build the SRV and TXT parsing code except for tests Document the failover feature in manpages Consolidate code for splitting strings by separator Martin Nagy (3): Fix egg-info file generation in the spec file Add some debugging statements to fail_over and resolver Correctly restart server status after the timeout Simo Sorce (17): Fix tabs Fix memberof plugin Compute and save memberuid in cache as well Use memberuid and not member in group enumerations Use the custom password field in groups too. Resolve nested groups also when rfc2307bis is used Make strdn build functions more available Fix nested group memberships Allow nesting to fix #310 Fix bug #311, properly set callback attribute Change dhash API to be talloc-friendly Add private pointer for delete callback Add comments to document latest changes Add rebuild task to memberof plugin Handle the special 02 upgrade case for 04->05 Fix for #316 Fix for #322, update from old database versions. Stephen Gallagher (28): Remove ELAPI from build and tarball Stop configuring ELAPI Make debug log timestamps human-readable Raise debug log level for LDB_DEBUG_WARNING Add allocation error check Avoid returning uninitialized result. Fix potential uninitialized value errors in nsssrv_cmd.c Fix potential uninitialized value error in responder_dp.c SSSDDomain.remove_provider() requires only the provider type Make SSSDDomain.remove_provider() remove configured options Run dhash tests Add SSSDDomain.set_name() function to SSSDConfig API Reduce the verbosity of the SSSDConfigTest Fix broken SSSDChangeConf.set() function Fix SSSDConfig API bugs around [de-]activation of domains Fix RPM spec for RHEL6 fix deactivate_domain() SSSDConfig.get_domain() should properly detect active state Ensure that list_active_domains returns the real value Properly deny id_provider=files Add missing options to sssd-ipa configuraion Add missing SSSDConfig file for IPA for make install Fix processing of Boolean values in SSSDConfig Add 'permit' and 'deny' access providers to SSSDConfig API Remove default for ldap_use_start_tls in IPA providers Run SSSDConfig tests during 'make check' Fix stupid copy-paste error Updating to version 0.99.1 Sumit Bose (13): Do not include libsss_ipa.la in rpm package Immediately return a krb5 change password request when offline Check LDAP structure before calling ldap_unbind_ext() Add sysdb_search_custom request Do not treat missing proc files as errors. Add basic OS detection Make packaging of *.egg-info files more flexible Try to renew Kerberos credentials Add checks to test the memberuid handling Add offline support for ipa_access Add dummy credentials to an empty ccache file Always update sysdb to the latest version Fix DEBUG message for sysdb_init beckerde (1): Add Spanish translation ruigo (1): Add Portuguese translation
2009-12-11 14:16:51 +00:00
* Fri Dec 11 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.1-1
- New upstream bugfix release 0.99.1
== Highlights == Enhanced IPA provider with host-based access control support Added server failover feature Vast performance enhancements to enumerations Performance enhancements to offline user lookups Improvements to the SSSDConfig API and configuration upgrade scripts. They will now retain comments and ordering. Several new translations == Known Bugs == Nested groups are known to be broken in 0.99. A fix is basically ready, but was too late for inclusion in this release. This will be fixed before the 1.0 release. == Detailed changes since 0.7.1 == Bouska (1): Add French translation to sss_client Jakub Hrozek (17): Fix migration script for pre-0.5 local domains Do not migrate Data Provider Free the PCRE regexp with destructor Do not delete users, groups outside domain range Add missing include IPA time rules parsing routines Fix regression in error message when deleting groups Assorted manpage fixes Make the password field configurable in NSS Add Simo's ipachangeconf SSSDChangeConf - a wrapper around ipachangeconf Change the upgrade script to use ipachangeconf Convert SSSDConfig API to ipachangeconf SSSDConfigAPI fixes upgrade_config fixes for SSSD 0.6 and later Split helpers for child processes Get TGT in a child process. Martin Nagy (5): Add missing include file to files-tests.c Fix a bad free in async_resolv.c Add DLIST_FOR_EACH() macro Add simple reference counting wrappers for talloc Add fail over utility functions Piotr Drąg (1): Updating polish translation for 0.7.0 Simo Sorce (48): Copy option overrides. Read the right buffer, avoids potential segfaults Add IPA conf template Zero pointers on free Use standard coding practice to set last login Fix segfault Add proper support for IPA/AD schemas Move responsibility for entry expiration timeout Kill the ldap connection when we go offline Tidy up ipa options Add support to get rootDSE from the LDAP server. Fix segfault when SASL is not used at all Rename sdap_id_map to sdap_attr_map Make available method to quickly retrive string Make useful function more broadly available. Store the original memberof attributes if any Unify parse routines, use maps in generic searches Fix and enhance initgroups call Unify code to use the generic search interface Reorganize ldap id provider files Split async helpers in multiple files Always set last update and expire time Fix build Fix ldap driver Check return, zero free hostent, adhere to style Fix enumerations Fix tevent_req error checking. Refactor delete functions and add a few Add cleanup task Try to fix offline logins Fix double free case. Fix check_cache bug in dealing with the callback Change var name to make its use more clear. Fix crash due to uninitialized timeout variable Change initgroups code to use and check the cache Change the pam code to perform an initgroups call Store initgr expire time on initgr call Failover fixes and additions Better behavior on cleanup Correctly escape DN value. Add reference to sssd-krb5 man page. Optimize sysdb_enumgrent Filter by id range before actually storing entries. Raise some timeouts Add initial failover support for ldap and ipa Fix ticket #289 Fix internal options numbers test In IPA, the realm is always the domain uppercased. Stephen Gallagher (32): Remove DP from example configuration Remove [dp] section from example config Fix sssd.api.conf with correct entry_cache_timeout Clean up warnings in dhash tests Make config_file_version a hidden setting in SSSDConfig API Remove magic_private_groups from SSSDConfig API schema Add support for option descriptions to SSSDConfig API Localize SSSDConfig strings Add complete pydoc for SSSDConfig API cyrus-sasl-gssapi Simplify debug_fn() Add configure check for sasl.h Update midpoint refresh logic to be relative to cache timeout Increase the sbus dispatch DEBUG level to 9 Build files.c only for tools Clean up unused dependencies Update sssd.spec to use only the required KRB5_LIBS and NSS_LIBS Fix segfault on unknown user/domain sssd-client line in specfile Make the sysdb user and group names case-sensitive Upgrade cache and local databases to case-sensitive names Update translatable strings Fix sysdb upgrade bug Add empty NL translation Only display errors in unit tests Update PL translation Update NL translation Make backend request type a bitfield Speed up user requests while offline Update translation strings for string freeze Fix bug with bad ldb pkg-config files Update version to 0.99.0 Sumit Bose (32): store original DN with cached group objects if available added a ASQ search API for sysdb Allow sysdb_search_entry request to return more than one result Add AM_CFLAGS to unit tests Fix compiler warnings in krb5_utils-tests. remove old sysdb file before starting tests set ipa_hostname if not given in config file Make debug message less irritating. add sysdb_delete_recursive request to sysdb API Add sysdb_attrs_replace_name to sysdb API. Fix for a seg fault during recursive delete add replacements for missing Kerberos calls Check is ccache structure is initialized before calling krb5_cc_destroy added access module of IPA provider Simplify krb5 child handler Add check for access-time rules to ipa_access. Add support for host, source host and user category Fix inconsistent use of krb5_ccname_template Fixes for proxy provider Make 'permit' the default for the access target Fix option name krb5_changepw_principal Validate Kerberos credentials with local keytab Improve handling of ccache files Add ipa_auth Enhance check for remote hosts Add ldap_pwd_policy option Read KDC info from file instead from environment Really check return value from pam_set_item Use ldb modules from build root for tests Make ldb lib dir configurable Fix an internal error when cache_credentials=FALSE Remove unneeded debugging code deneb (1): Add Italian translation for sss_client noriko (1): Adding Japanese translation raven (1): Update PL translation
2009-11-30 15:39:15 +00:00
* Mon Nov 30 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.0-1
- New upstream release 0.99.0
New upstream release Fix segfaults and upgrade issues. Provide newer default configuration.
2009-10-27 19:29:01 +00:00
* Tue Oct 27 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal
Fix upgrade issues from old (pre-0.5.0) releases of SSSD Configuration files before 0.5.0 did not enforce provider= in local domains it did special-case by domain name (LOCAL). Our script was relying on provider= value, this patch adds the special-casing in case the domain was called LOCAL.
2009-10-26 13:08:58 +00:00
* Mon Oct 26 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-2
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD
Dmitri Pal (10): COLLECTION Adding item comparison and sorting COLLECTION Realigning collection code COLLECTION Making iterations pinnable COLLECTION Enhancing hashing and iteration functions ELAPI Event resolver ELAPI Resolving message attribute ELAPI Fixing warnings in the example ELAPI Rename variables and functions not to use word template ELAPI Fixed the host name resolution ELAPI Compatibility code for getifaddr() Jakub Hrozek (3): Fix python sync operations and mem hierarchy Fix error messages in tools User home directories management Martin Nagy (7): Use correct talloc context in sss_names_init() Fix potential memory leaks in the data provider Use talloc_get_type() for type safety Use talloc to copy data from c-ares Add a new set of helpful common functions for tests Various improvements to the resolv test suite Delete sssd-i18n.h and put it's old contents into util.h Piotr Dr?g (1): Update polish translation for 0.6.0 Ralf Haferkamp (2): LDAP provider needs to link against krb libraries SUSE specific init script Simo Sorce (21): Tighten up permission. Initial implementation of sasl bind support Fix tools sync operations and mem hierarchy Fix long timeout on ldap operation Make dp requests more robust Differentiate between search and network timeouts Remove DP process Start responders predictably after providers Remove magicPrivateGroups option Fix services startup when only LOCAL is configured Make options parser available to all providers Move ldap provider configuration into its own file Fix offline authentication Return the dp error from the providers Move all ldap provider init functions Move all krb5 provider init functions Add first basic IPA provider Always list inputs before outputs Start implementing ipa specific options. Better offline/enumeration behavior Fix setting the schema in the ipa provider Stephen Gallagher (24): Update version to 0.6.0 Fix infinite loop with empty group enumeration Updating release script to use the VERSION file Change requirement on libldb to libldb >= 0.9.3 INI Add config_from_fd() to ini_config Remove unused btreemap code Add new SSSDConfig python API Add plugin configuration schema for proxy provider Package SSSDConfig API Clean up warnings in pysss.c Remove warnings caused by 5e2301b8a75d10e5cbbe11e26e5192b894af6ad7 Remove two unused functions. Fix segfault when using SSS tools with no local provider Do not allow setting auth, access or chpass providers for LOCAL Add krb5_common.h to the list of headers to 'make dist' Use Python 3-compatible sitearch and sitelib Better detect installed language files Clean up rpmlint errors and warnings in sssd-client package Set the Default-Stop LSB option for the SSSD sysv init script Fix RPM builds on older versions of rpmbuild Bring SSSDConfig API options up-to-date Add pam_ctx (similar to nss_ctx) for storing global PAM config Add support for offline auth cache timeout Update version to 0.7.0 Sumit Bose (28): update sysdb tests to new config file version add utility call check_and_open_readonly more documentation and test for sssd.conf handle expired password during authentication move password handling into subroutines ask for new password if password is expired remove redundant talloc_free add description of chpass_provider option to sssd.conf man page add support for server side LDAP password policies add syslog message similar to pam_unix use the correct kerberos context for each target fix a wrong argument to unpack_buffer add -Werror-implicit-function-declaration to default gcc flags add a replacement if ldap_control_create is missing use PYTHON_PREFIX to install SSSDConfig python API add missing %defattr to the filelist of the client package make sdap_id_connect_* independent of sdap_id_ctx send a message if a backend target is not configured use old password if available during password change set chpass_provider implicit if not set explicit more implicit provider target settings enable debugging of krb5_child Check for expired passwords in LDAP provider added generic LDAP search sdap_get_generic_send/_recv add store/search/delete interface for custom sysdb objects update krb5 option handling to new option scheme update ipa auth options to new option scheme fix a compiler warning about redefinition of DEBUG
2009-10-23 19:52:18 +00:00
* Fri Oct 23 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-1
- New upstream release 0.7.0
Fix missing file permissions for sssd-clients
2009-10-15 13:26:44 +00:00
* Thu Oct 15 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-2
- Fix missing file permissions for sssd-clients
- Add SSSDConfig API - Update polish translation for 0.6.0 - Fix long timeout on ldap operation - Make dp requests more robust
2009-10-13 20:25:50 +00:00
* Tue Oct 13 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust
Add missing changelog updates
2009-09-29 12:41:09 +00:00
* Tue Sep 29 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
- Ensure that the configuration upgrade script always writes the config
file with 0600 permissions
- Eliminate an infinite loop in group enumerations
New upstream release 0.6.0
2009-09-28 08:51:24 +00:00
* Mon Sep 28 2009 Sumit Bose <sbose@redhat.com> - 0.6.0-0
- New upstream release 0.6.0
- New upstream release 0.5.0
2009-08-24 18:56:24 +00:00
* Mon Aug 24 2009 Simo Sorce <ssorce@redhat.com> - 0.5.0-0
- New upstream release 0.5.0
Fix for CVE-2009-2410 - Native SSSD users with no password set could log in without a password. (Patch by Stephen Gallagher)
2009-07-29 11:21:47 +00:00
* Wed Jul 29 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
without a password. (Patch by Stephen Gallagher)
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2009-07-27 04:48:02 +00:00
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
- Fix a couple of segfaults that may happen on reload
2009-06-22 14:49:00 +00:00
* Mon Jun 22 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-2
- Fix a couple of segfaults that may happen on reload
- add missing configure check that broke stopping the daemon - also fix default config to add a missing required option
2009-06-11 14:13:16 +00:00
* Thu Jun 11 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-1
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option
- latest upstream release. - also add a patch that fixes debugging output (potential segfault)
2009-06-08 16:22:13 +00:00
* Mon Jun 8 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-0
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)
- release out of the official 0.3.2 tarball
2009-04-20 19:59:37 +00:00
* Mon Apr 20 2009 Simo Sorce <ssorce@redhat.com> - 0.3.2-2
- release out of the official 0.3.2 tarball
Update to 0.3.2
2009-04-20 18:17:19 +00:00
* Mon Apr 20 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600
- Add last minute bug fixes, found in testing the package
2009-04-14 21:24:36 +00:00
* Tue Apr 14 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-2
- Add last minute bug fixes, found in testing the package
- Version 0.3.1 - includes previous release patches
2009-04-13 22:37:11 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-1
- Version 0.3.1
- includes previous release patches
- Try to fix build adding automake as an explicit BuildRequire
2009-04-13 16:04:16 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-2
- Try to fix build adding automake as an explicit BuildRequire
- Try to fix build adding automake as an explicit BuildRequire - Add also a couple of last minute patches from upstream
2009-04-13 17:48:03 +00:00
- Add also a couple of last minute patches from upstream
- Try to fix build adding automake as an explicit BuildRequire
2009-04-13 16:04:16 +00:00
- Version 0.3.0 - Provides file based configuration and lots of improvements
2009-04-13 15:49:54 +00:00
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-1
- Version 0.3.0
- Provides file based configuration and lots of improvements
- Version 0.2.1
2009-03-10 21:34:16 +00:00
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.1-1
- Version 0.2.1
- Version 0.2.0
2009-03-10 20:43:08 +00:00
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.0-1
- Version 0.2.0
Initial import of sssd into Fedora
2009-03-09 17:07:25 +00:00
* Sun Mar 08 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-5.20090309git691c9b3
- package git snapshot
* Fri Mar 06 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-4
- fixed items found during review
- added initscript
* Thu Mar 05 2009 Sumit Bose <sbose@redhat.com> - 0.1.0-3
- added sss_client
* Mon Feb 23 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-2
- Small cleanup and fixes in the spec file
* Thu Feb 12 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.1.0-1
- Initial release (based on version 0.1.0 upstream code)
Reference in New Issue Copy Permalink