Commit Graph

597 Commits

Author SHA1 Message Date
Pavel Filipenský
574d180216 Related: RHEL-114545 - Rebase Samba to the latest 4.23.x release 2025-09-22 11:11:49 +02:00
Alexey Tikhonov
80a9e1b7ff Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.
2025-08-14 16:24:36 +02:00
Alexey Tikhonov
2c9c7e1036 Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
2025-07-31 17:19:13 +02:00
Alexey Tikhonov
99698114d0 Related: RHEL-89870 - Rebase Samba to the latest 4.22.x release 2025-06-13 11:18:28 +02:00
Alexey Tikhonov
21da70cf55 Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
Just a version bump to rebuild - previous build misses debug symbols
due to an issue with the build tools.
2025-06-06 12:11:23 +02:00
Alexey Tikhonov
a143a7d9c0 Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
Resolves: RHEL-25593 - Improve sssd-simple man page description
Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
Resolves: RHEL-4981 - p11_child currently has an infinite timeout
Resolves: RHEL-5042 - IDM homedir %%o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names
2025-06-05 14:27:19 +02:00
Andrea Bolognani
f7b406456c Resolves: RHEL-89474 - Fails to build on riscv64
Thanks: David Abdurachmanov <davidlt@rivosinc.com>
Signed-off-by: Andrea Bolognani <abologna@redhat.com>
2025-05-02 20:11:39 +02:00
Alexey Tikhonov
2bdb956c82 Resolves: RHEL-79158 - Disk cache failure with large db sizes 2025-04-07 11:58:37 +02:00
Alexey Tikhonov
c80f75cdc3 Resolves: RHEL-79158 - Disk cache failure with large db sizes 2025-04-02 19:42:44 +02:00
Alexey Tikhonov
96a29f20a8 Resolves: RHEL-78061 - 'sssd_kcm' leaks memory 2025-02-12 15:27:50 +01:00
Alexey Tikhonov
cf82e80b44 Resolves: RHEL-78061 - 'sssd_kcm' leaks memory 2025-02-10 16:12:49 +01:00
Alexey Tikhonov
0c20fbd33b Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0 2025-01-29 15:12:15 +01:00
Alexey Tikhonov
c134d235f6 Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0 2024-12-18 20:10:50 +01:00
Alexey Tikhonov
116f075756 Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0 2024-12-18 16:59:37 +01:00
Alexey Tikhonov
98cad07f1e Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups
2024-12-10 17:58:00 +01:00
Alexey Tikhonov
c4d16510de Related: RHEL-59777 - Rebase Samba to the latest 4.21.x release 2024-10-21 10:51:30 +02:00
Alexey Tikhonov
ed9df7719c Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0 2024-10-15 18:56:00 +02:00
Alexey Tikhonov
6b4990d20b Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not
2024-10-15 16:08:56 +02:00
Alexey Tikhonov
68eaf4e928 Resolves: RHEL-50243 - Please install sssd-polkit-rules by default 2024-08-22 17:18:35 +02:00
Alexey Tikhonov
a710ab4b85 Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
Resolves: RHEL-50243 - Please install sssd-polkit-rules by default
2024-08-02 12:52:18 +02:00
Alexey Tikhonov
47ebe6b93a Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
Resolves: RHEL-43259 - sudo does not work any more with krb ticket
2024-06-26 14:03:20 +02:00
Troy Dawson
e98c25fb0b Bump release for June 2024 mass rebuild 2024-06-24 09:25:30 -07:00
Alexey Tikhonov
fbb9958c33 Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
Resolves: RHEL-29303 - Issue discovered by static analyzer.
Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'
2024-06-07 13:07:21 +02:00
Jakub Vavra
b6d596256b Add gating.yaml for c10s 2024-03-25 15:48:24 +01:00
Troy Dawson
56a898d055 Bump release to rebuild on correct samba
Signed-off-by: Troy Dawson <tdawson@redhat.com>
2024-02-22 10:58:25 -08:00
Stephen Gallagher
1690289de7 Resolves: RHEL-25985 - FTBFS due to OpenSSL 3.2
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2024-02-16 17:03:17 -05:00
Stephen Gallagher
ee34878d04 Restore i686 on Fedora ELN
No decision to remove i686 support has yet been announced for RHEL 10
and at this time, dropping that support from SSSD is causing cascading
issues.

If the removal decision gets made, Fedora ELN will disable i686 builds
on the buildsystem machinery side, not in the specfiles.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2024-02-02 10:28:14 -05:00
Günther Deschner
8222ea8b56 Fix the build with Samba 4.20
Guenther
2024-01-31 11:12:53 +01:00
Alexey Tikhonov
4bcdbebd83 Disable enumeration support for IPA and AD providers.
Deprecation was announced in F39 release notes:
https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
This is a backport of upstream patch:
9240bca7dc
2024-01-24 12:09:53 +01:00
Colin Walters
d93cd0bd32 Scope ExcludeArch: ix86 to RHEL10+ 2024-01-15 13:35:40 -05:00
Colin Walters
936440d387 Scope ExcludeArch: ix86 to RHEL10+
See https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/URKAWVPEINE4CREFO4L22MGKN6TNUGQK/
2024-01-15 13:34:05 -05:00
Pavel Březina
e0023eccd6 sssd-2.9.4-1: Rebase to latest upstream release
Long deprecated files provider support has been removed.
  https://bugzilla.redhat.com/show_bug.cgi?id=2253183

Additionally, support of i686 is dropped because gdm-pam-extensions-devel
is no longer available on this architecture. This step follows [1]

[1] https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval
2024-01-12 18:42:02 +01:00
Pavel Březina
6fd6191c5e sssd-2.9.3-1: Rebase to latest upstream release 2023-11-15 17:31:12 +01:00
Pavel Březina
a603c05e97 sssd-2.9.2-3: fix obsoletes libsss_simpleifp 2023-11-09 11:24:04 +01:00
Iker Pedrosa
cddbd22e06 Fixes for passkey authentication
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-10-03 13:02:43 +02:00
Pavel Březina
b3524fa5a8 sssd-2.9.2-1: Rebase to latest upstream release 2023-09-07 13:36:20 +02:00
Alexey Tikhonov
730f7222dc Resolves sss_certmap_test fail 2023-08-15 14:15:19 +02:00
Fedora Release Engineering
6ab245b303 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-22 02:29:07 +00:00
Python Maint
46822aab6b Rebuilt for Python 3.12 2023-06-26 13:56:30 +02:00
Pavel Březina
91daf1c55b sssd-2.9.1-1: Rebase to latest upstream release 2023-06-26 12:23:07 +02:00
Python Maint
4c7f5a40f1 Rebuilt for Python 3.12 2023-06-13 21:35:35 +02:00
Pavel Březina
c92a5b7a99 SPDX migration 2023-05-15 11:29:21 +02:00
Pavel Březina
61f34a14b6 sssd-2.9.0-1: Rebase to latest upstream release 2023-05-15 11:29:21 +02:00
Miro Hrončok
d3ba8fb11a BuildRequire python3-setuptools with Python 3.12+
distutils was removed from the Python standard library,
but setuptools can be used instead.

See https://peps.python.org/pep-0632/
2023-03-31 21:06:41 +02:00
Stephen Gallagher
52b92253b5
Rebuild against libunistring 1.1
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2023-01-26 10:24:04 -05:00
Fedora Release Engineering
d754fc4089 Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-21 04:01:21 +00:00
Alexey Tikhonov
fc2376eb12 sssd-2.8.2-2: Rebuild against Samba 4.18rc1 2023-01-20 17:30:14 +01:00
Pavel Březina
a168c6ad5f sssd-2.8.2-1: Rebase to latest upstream release 2022-12-09 14:12:55 +01:00
Pavel Březina
cf2cbdba82 sssd-2.8.1-1: Rebase to latest upstream release 2022-11-04 12:27:37 +01:00
Pavel Březina
d24bcc9e43 sssd-2.8.0-2: fix syslog spamming
Resolves: rhbz#2133437
2022-10-24 12:36:26 +02:00