diff --git a/.gitignore b/.gitignore index 766e865..9ce063f 100644 --- a/.gitignore +++ b/.gitignore @@ -71,3 +71,4 @@ sssd-1.2.91.tar.gz /sssd-1.14.0alpha.tar.gz /sssd-1.14.0beta1.tar.gz /sssd-1.14.0.tar.gz +/sssd-1.14.1.tar.gz diff --git a/0001-dyndns-Add-checks-for-NULL.patch b/0001-dyndns-Add-checks-for-NULL.patch deleted file mode 100644 index 120b854..0000000 --- a/0001-dyndns-Add-checks-for-NULL.patch +++ /dev/null @@ -1,61 +0,0 @@ -From 43e2cc0fdb715b89c13dac126ac8382ef0e756cc Mon Sep 17 00:00:00 2001 -From: =?UTF-8?q?Michal=20=C5=BDidek?= -Date: Tue, 12 Jul 2016 12:11:18 +0200 -Subject: [PATCH] dyndns: Add checks for NULL -MIME-Version: 1.0 -Content-Type: text/plain; charset=UTF-8 -Content-Transfer-Encoding: 8bit - -Fixes: -https://fedorahosted.org/sssd/ticket/3076 - -We segfaulted in this area once. This patch -makes the code more defensive and adds -some DEBUG messages. - -Normally the structures are filled in online -and/or resolve callbacks. - -Reviewed-by: Pavel Březina ---- - src/providers/ipa/ipa_dyndns.c | 20 ++++++++++++++++++++ - 1 file changed, 20 insertions(+) - -diff --git a/src/providers/ipa/ipa_dyndns.c b/src/providers/ipa/ipa_dyndns.c -index 7217c61452e7ead2949a9f7d57b2f2fc58953af1..dc910770c771d4b7a7ee62d25be7c48e16c988a7 100644 ---- a/src/providers/ipa/ipa_dyndns.c -+++ b/src/providers/ipa/ipa_dyndns.c -@@ -160,10 +160,30 @@ ipa_dyndns_update_send(struct ipa_options *ctx) - if (req == NULL) { - return NULL; - } - state->ipa_ctx = ctx; - -+ /* The following three checks are here to prevent SEGFAULT -+ * from ticket #3076. */ -+ if (ctx->service == NULL) { -+ DEBUG(SSSDBG_CRIT_FAILURE, "service structure not initialized\n"); -+ ret = EINVAL; -+ goto done; -+ } -+ -+ if (ctx->service->sdap == NULL) { -+ DEBUG(SSSDBG_CRIT_FAILURE, "sdap structure not initialized\n"); -+ ret = EINVAL; -+ goto done; -+ } -+ -+ if (ctx->service->sdap->uri == NULL) { -+ DEBUG(SSSDBG_CRIT_FAILURE, "LDAP uri not set\n"); -+ ret = EINVAL; -+ goto done; -+ } -+ - if (ctx->dyndns_ctx->last_refresh + 60 > time(NULL) || - ctx->dyndns_ctx->timer_in_progress) { - DEBUG(SSSDBG_FUNC_DATA, "Last periodic update ran recently or timer " - "in progress, not scheduling another update\n"); - tevent_req_done(req); --- -2.7.4 - diff --git a/sources b/sources index 6ff4c3c..b0f01ce 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -2e1e5176d87ee829e3f92bb4f538789e sssd-1.14.0.tar.gz +cb79e3a391a537fd2be487d822bbf7c1 sssd-1.14.1.tar.gz diff --git a/sssd.spec b/sssd.spec index 0994859..1a3c62e 100644 --- a/sssd.spec +++ b/sssd.spec @@ -14,6 +14,7 @@ %global with_krb5_localauth_plugin 1 +%global enable_systemtap 1 %global enable_systemtap_opt --enable-systemtap %global libwbc_alternatives_version 0.12 @@ -24,8 +25,8 @@ %endif Name: sssd -Version: 1.14.0 -Release: 5%{?dist} +Version: 1.14.1 +Release: 1%{?dist} Group: Applications/System Summary: System Security Services Daemon License: GPLv3+ @@ -35,9 +36,6 @@ BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX) ### Patches ### -# Band-aid for RHBZ #1366403 -Patch0001: 0001-dyndns-Add-checks-for-NULL.patch - ### Dependencies ### Requires: sssd-common = %{version}-%{release} @@ -56,6 +54,7 @@ Requires: python3-sssdconfig = %{version}-%{release} %global mcpath %{sssdstatedir}/mc %global pubconfpath %{sssdstatedir}/pubconf %global gpocachepath %{sssdstatedir}/gpo_cache +%global secdbpath %{sssdstatedir}/secrets ### Build Dependencies ### @@ -106,7 +105,7 @@ BuildRequires: systemd-devel BuildRequires: cifs-utils-devel %endif BuildRequires: libnfsidmap-devel -BuildRequires: samba4-devel >= 4.0.0-59beta2 +BuildRequires: samba4-devel BuildRequires: libsmbclient-devel BuildRequires: systemtap-sdt-devel BuildRequires: http-parser-devel @@ -133,7 +132,7 @@ Conflicts: sssd < 1.10.0-8%{?dist}.beta2 Requires: sssd-client%{?_isa} = %{version}-%{release} Requires: libsss_sudo = %{version}-%{release} Requires: libsss_autofs%{?_isa} = %{version}-%{release} -Requires: libsss_idmap%{?_isa} = %{version}-%{release} +Requires: libsss_idmap = %{version}-%{release} Requires(post): systemd-units chkconfig Requires(preun): systemd-units chkconfig Requires(postun): systemd-units chkconfig @@ -517,6 +516,16 @@ License: GPLv3+ and LGPLv3+ The idmap_sss module provides a way for Winbind to call SSSD to map UIDs/GIDs and SIDs. +%package nfs-idmap +Summary: SSSD plug-in for NFSv4 rpc.idmapd +Group: Applications/System +License: GPLv3+ + +%description nfs-idmap +The libnfsidmap sssd module provides a way for rpc.idmapd to call SSSD to map +UIDs/GIDs to names and vice versa. It can be also used for mapping principal +(user) name to IDs(UID or GID) or to obtain groups which user are member of. + %prep # Update timestamps on the files touched by a patch, to avoid non-equal # .pyc/.pyo files across the multilib peers within a build, where "Level" @@ -689,6 +698,8 @@ done %doc src/examples/sssd-example.conf %{_sbindir}/sssd %{_unitdir}/sssd.service +%{_unitdir}/sssd-secrets.socket +%{_unitdir}/sssd-secrets.service %dir %{_libexecdir}/%{servicename} %{_libexecdir}/%{servicename}/sssd_be @@ -713,9 +724,6 @@ done %{_libdir}/%{name}/libsss_util.so %{_libdir}/%{name}/libsss_semanage.so -# 3rd party application libraries -%{_libdir}/libnfsidmap/sss.so - %{ldb_modulesdir}/memberof.so %{_bindir}/sss_ssh_authorizedkeys %{_bindir}/sss_ssh_knownhostsproxy @@ -726,6 +734,7 @@ done %dir %{_localstatedir}/cache/krb5rcache %attr(700,root,root) %dir %{dbpath} %attr(755,root,root) %dir %{mcpath} +%attr(700,root,root) %dir %{secdbpath} %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/passwd %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/group %ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/initgroups @@ -991,14 +1000,21 @@ done %{_libdir}/samba/idmap/sss.so %{_mandir}/man8/idmap_sss.8* +%files nfs-idmap +%{_libdir}/libnfsidmap/sss.so + %post common %systemd_post sssd.service +%systemd_post sssd-secrets.socket %preun common %systemd_preun sssd.service +%systemd_preun sssd-secrets.socket %postun common %systemd_postun_with_restart sssd.service +%systemd_postun_with_restart sssd-secrets.socket +%systemd_postun_with_restart sssd-secrets.service %if (0%{?with_cifs_utils_plugin} == 1) %post client @@ -1067,6 +1083,10 @@ fi %{_libdir}/%{name}/modules/libwbclient.so %changelog +* Fri Aug 19 2016 Lukas Slebodnik - 1.14.1-1 +- New upstream release 1.14.0 +- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1 + * Mon Aug 15 2016 Stephen Gallagher - 1.14.0-5 - Add workaround patch for RHBZ #1366403