rpms/sssd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
385 Commits 10 Branches 75 Tags 6.3 MiB
0a5a392684
Commit Graph

363 Commits

Author SHA1 Message Date
Lukas Slebodnik
40a97f0f88 Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
Lukas Slebodnik
6cfd9704c1 Bump version for patches related to #2624 2015-04-15 14:19:39 +02:00
Lukas Slebodnik
c4cf951d60 Fix slow login with ipa and SELinux 
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one
 2015-04-15 14:17:32 +02:00
Lukas Slebodnik
9a0389188d Small spec file clean-up 
* remove workaround for old rpmbuild (rhel5)
* remove conversion sysv scripts to systemd
* small code style update in bash scripts
 2015-04-09 18:06:13 +02:00
Lukas Slebodnik
36805df397 Fix regressions with ipa and SELinux 
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u
 2015-03-23 17:17:30 +01:00
Jakub Hrozek
9f97bec3b0 Also relax libldb Requires and remove --enable-ldb-version-check 2015-03-06 11:45:13 +01:00
Jakub Hrozek
9c5af4ac2d Relax libldb BuildRequires 
Originally, we tried to stay on the safe side with libldb since it never
really commited to stable ABI or API, but since there were never any
issues in many years, it's safe to relax the requirement.

This change will benefit especially the storage developers who often
need a different (typically newer) libldb version and would like to
avoid to rebuild sssd for no reason.
 2015-03-06 10:50:45 +01:00
Lukas Slebodnik
ed82d05320 Add support for python3 bindings 
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3
 2015-02-25 14:21:45 +01:00
Lukas Slebodnik
16372c2465 Replace python_* rpm macros with python2_* 2015-02-25 13:34:08 +01:00
Lukas Slebodnik
a8d019e332 Old python file names are just symbolic links 
* add real files to packages as well.
 2015-02-25 13:29:49 +01:00
Lukas Slebodnik
e37fc598a5 Move python bindings to separate packages 
Some python bindings pysss and pysss_murmur was in package sssd-common.
Therefore package sssd-common had python as a dependency.
 2015-02-25 10:35:28 +01:00
Lukas Slebodnik
7601087c69 Backport upstream patches for building python{2,3} bindings 2015-02-25 10:15:06 +01:00
Lukas Slebodnik
5e6bda777e New upstream release 1.12.4 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4
 2015-02-18 21:24:59 +01:00
Lukas Slebodnik
59bb05ded2 Reverting change of rhbz ticket in changelog 
This change was part of initial patch from BZ1184623.
 2015-02-14 16:36:31 +01:00
Lukas Slebodnik
3412a6a279 Backport patches with Python3 support from upstream 2015-02-14 16:20:30 +01:00
Lukas Slebodnik
781433f093 Fix bogus date 2015-02-12 22:01:16 +01:00
Lukas Slebodnik
7d37b73369 Fix double free in monitor 
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                        sssd killed by SIGABRT
 2015-02-12 21:58:28 +01:00
Jakub Hrozek
42e3400582 Rebuild for new libldb 2015-01-28 10:43:17 +01:00
Lukas Slebodnik
8fcc4c26b2 Decrease priority of sssd-libwbclient 
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18
 2015-01-22 11:11:33 +01:00
Lukas Slebodnik
35a0ddc9bc Apply a number of patches from upstream to fix issues found 1.12.3 
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                           interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                          not running
- Resolves: upstream #2557  authentication failure with user from AD
 2015-01-19 13:39:53 +01:00
Lukas Slebodnik
1823f50b32 Reorder entries in spec file to match upstream version 2015-01-19 10:18:01 +01:00
Lukas Slebodnik
5e0303787e Minor spec file updates 
- Fix build requires for libini_config-devel (we need 1.1 for gpo)
- Remove rhel5 relics
- execute lddconfig in post/postun for libsss_nss_idmap
 2015-01-19 09:57:27 +01:00
Lukas Slebodnik
572b806e90 Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus 
Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                         zipping when rotating logfile
 2015-01-09 15:12:09 +01:00
Lukas Slebodnik
d747a9c497 New upstream release 1.12.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)
 2015-01-08 21:04:11 +01:00
Lukas Slebodnik
5bb93bf105 Rebuild for libldb 1.1.19 2015-01-06 11:49:40 +01:00
Sumit Bose
a7fd9ee43a Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes 
crash in wbinfo
                           - in addition to the patch libwbclient.so is
                             filtered out of the Provides list of the package
 2014-12-19 22:31:43 +01:00
Lukas Slebodnik
ebb3a9f2b4 Fix regressions and bugs in sssd upstream 1.12.2 
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445
 2014-12-17 22:45:11 +01:00
Jakub Hrozek
9638a21d11 Rebuild for libldb 1.1.18 2014-12-07 20:45:08 +01:00
Jakub Hrozek
ab6f3739e8 Fix typo in libwbclient-devel %preun 2014-11-26 11:17:29 +01:00
Jakub Hrozek
1dcb9c312d Use alternatives for libwbclient 2014-11-25 14:53:03 +01:00
Jakub Hrozek
3161db3512 Backport several patches from upstream. 
- Fix a potential crash against old (pre-4.0) IPA servers
 2014-10-22 13:09:58 +02:00
Jakub Hrozek
1caa247c9e New upstream release 1.12.2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2
 2014-10-20 17:29:11 +02:00
Jakub Hrozek
f5fb14a9ce Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server 2014-09-15 10:27:34 +02:00
Jakub Hrozek
19acdd3ef7 New upstream release 1.12.1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
 2014-09-08 22:06:09 +02:00
Jakub Hrozek
34e089bd00 Do not crash on resolving a group SID in IPA server mode 2014-08-22 15:33:51 +02:00
Peter Robinson
a6a5820ca0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 03:41:37 +00:00
Stephen Gallagher
f73310eae6 Fix release version for upgrades 2014-07-10 12:41:28 -04:00
Jakub Hrozek
95cd407957 New upstream release 1.12.0 2014-07-09 21:04:06 +02:00
Dennis Gilmore
2b26bf5bcb - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-08 02:10:13 -05:00
Jakub Hrozek
1113dec8d0 New upstream release 1.12 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
 2014-06-04 21:46:10 +02:00
Jakub Hrozek
6307570cd8 Fix tests on big-endian 2014-06-02 11:08:39 +02:00
Jakub Hrozek
c9a7a9b259 New upstream release 1.12 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
 2014-05-30 22:16:22 +02:00
Jakub Hrozek
03322d356d Rebuild against new ding-libs 2014-05-29 09:30:16 +02:00
Stephen Gallagher
793c29a821 Make LDB dependency a strict equivalency 2014-05-08 16:26:19 -04:00
Stephen Gallagher
f1284494dc Rebuild against new libldb 2014-05-08 16:14:33 -04:00
Jakub Hrozek
4c0bb78ec9 New upstream release 1.11.5.1 2014-04-11 19:34:52 +02:00
Stephen Gallagher
72f83f8ad8 Fix bug in generation of systemd unit file 
There was a bug in the generation of the tarball that results in
a unit file with a path to /usr/local/sbin, which is incorrect.
 2014-04-10 13:21:12 -04:00
Jakub Hrozek
5b600e343d New upstream release 1.11.5 
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
 2014-04-08 13:39:37 +02:00
Sumit Bose
cfb3146269 Handle new error code for IPA password migration 2014-03-13 20:14:42 +01:00
Jakub Hrozek
1fd6df7177 Include couple of patches from upstream 1.11 branch 2014-03-11 13:35:03 +01:00
Jakub Hrozek
4d4fe7434d New upstream release 1.11.4 
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4
 2014-02-17 20:53:20 +01:00
Jakub Hrozek
4b219e485d Fix the double separator error in sssd.spec (Thanks, baude) 2014-02-12 23:15:07 +01:00
Jakub Hrozek
42c4dcb65e Fix changelog entry to be in descending order (wow, it's 2014 already) 2014-02-11 15:49:49 +01:00
Jakub Hrozek
9c2fb314df Handle OTP response from FreeIPA server gracefully 2014-02-11 15:46:54 +01:00
Jakub Hrozek
d323e2f10a New upstream release 1.11.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
 2013-12-19 20:01:09 +01:00
Jakub Hrozek
4dcc16e6e6 New upstream release 1.11.2 
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
 2013-10-31 00:33:55 +01:00
Jakub Hrozek
0b3b35863c Remove the explicit ccache dir setting 2013-10-29 18:20:16 +01:00
Jakub Hrozek
797caead4f Fix potential crash with external groups in trusted IPA-AD setup 2013-10-16 14:01:28 +02:00
Sumit Bose
df4dbc81ab Add plugin for cifs-utils 
- Resolves: rhbz#998544
 2013-10-15 12:35:12 +02:00
Jakub Hrozek
f99cfe2513 Fix failover from Global Catalog to LDAP in case GC is not available 2013-10-08 15:26:18 +02:00
Jakub Hrozek
72c2cb49be Remove the ability to create public ccachedir (#1015089) 2013-10-04 09:51:35 +02:00
Jakub Hrozek
36fd89e84a Backport the sssd-common-pac subpackage from upstream 2013-09-27 22:42:45 +02:00
Jakub Hrozek
b524a0328d New upstream release 1.11.1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
 2013-09-27 22:28:08 +02:00
Jakub Hrozek
3ec8adb72a Fix multicast checks in the SSSD 
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info
 2013-09-26 01:33:52 +02:00
Jakub Hrozek
8d72fcd900 Backport simplification of ccache management from 1.11.1 
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
 2013-09-23 14:45:29 +02:00
Jakub Hrozek
c5481c88cf Relax the libldb requirement 2013-09-02 12:13:25 +02:00
Jakub Hrozek
5a4b44398b New upstream release 1.11.0 2013-08-29 00:37:47 +02:00
Jakub Hrozek
413e09fdbc Fix #967012 and #996214 2013-08-23 15:41:45 +02:00
Jakub Hrozek
a35bab9380 Remove stray leading slash from file path 
Related: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
 2013-08-09 10:28:06 +02:00
Dennis Gilmore
fd29083550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 10:45:00 -05:00
Jakub Hrozek
6fdf7eb42e Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries 2013-07-31 13:00:22 +02:00
Jakub Hrozek
b2e72bcb34 New upstream release 1.11 beta 2 2013-07-24 16:36:08 +02:00
Jakub Hrozek
8190be00e7 New upstream release 1.10.1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
 2013-07-18 17:29:52 +02:00
Jakub Hrozek
1c82bbb70c sssd-tools should require sssd-common, not sssd 
This bug was already fixed upstream.
 2013-07-08 12:16:10 +02:00
Stephen Gallagher
d7b4fa2655 Move sssd_pac to the sssd-ipa and sssd-ad subpackages 
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year
 2013-07-02 12:31:25 -04:00
Stephen Gallagher
94bf18fb85 Move sssd_pac to the sssd-krb5 subpackage 2013-07-02 09:23:43 -04:00
Stephen Gallagher
604fe3f870 Fix Obsoletes: to account for dist tag 
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV
 2013-07-01 18:57:07 -04:00
Jakub Hrozek
e7f2b6f482 New upstream release 1.10 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0
 2013-06-27 23:36:41 +02:00
Dan Horák
bc0fb19593 - the cmocka toolkit exists only on selected arches 2013-06-17 15:43:14 +02:00
Jakub Hrozek
ba06c0ac1d Apply a number of patches from upstream to fix issues found post-beta 
In particular:
-- segfault with a high DEBUG level
-- Fix IPA password migration (upstream #1873)
-- Fix fail over when retrying SRV resolution (upstream #1886)
 2013-06-16 13:12:37 +02:00
Jakub Hrozek
31184a1e66 Only BuildRequire libcmocka on Fedora 2013-06-13 12:33:22 +02:00
Jakub Hrozek
63b3e9558a Fix typo in Requires that prevented an upgrade (#973916) 
- Use a hardcoded version in Conflicts, not less-than-current
 2013-06-13 11:14:50 +02:00
Jakub Hrozek
20cbf86dca Fix date in changelog 2013-06-12 13:03:15 +02:00
Jakub Hrozek
6739bfa630 Enable hardened build for RHEL7 2013-06-12 13:01:57 +02:00
Jakub Hrozek
b9ffc0a290 New upstream release 1.10 beta2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry
  any older krb5-libs version
 2013-06-12 12:22:15 +02:00
Jakub Hrozek
af82f760d4 Always initialize ID mapping objects 
Apply a couple of patches from upstream git that resolve crashes when
ID mapping object was not initialized properly but needed later
 2013-05-24 10:44:53 +02:00
Jakub Hrozek
2f295ac01f Backport fixes for rhbz#961278, rhbz#961278 and rhbz#961251 
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                          realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                          default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                          parent directory when logging in
 2013-05-14 16:51:09 +02:00
Jakub Hrozek
3cfed3426f Bump release number 2013-05-07 15:22:24 +02:00
Jakub Hrozek
a0794d8e0f BuildRequire recent libini_config to ensure consistent behaviour 2013-05-07 15:11:22 +02:00
Jakub Hrozek
14fef6c6d9 Update SSSD for the F19 test day 
- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name
 2013-05-07 15:02:05 +02:00
Jakub Hrozek
6d4f357f0c New upstream release 1.10 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
 2013-05-03 22:24:02 +02:00
Jakub Hrozek
90d9c5609a Add a patch to fix krb5 ccache creation issue with krb5 1.11 2013-04-17 13:35:52 +02:00
Jakub Hrozek
809727fd06 New upstream release 1.10 alpha1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1
 2013-04-02 20:08:54 +02:00
Jakub Hrozek
7ad84675dd Add a patch to fix krb5 unit tests 2013-03-29 13:59:48 +01:00
Stephen Gallagher
c0672862e6 Split internal helper libraries into a shared object 
- Significantly reduce disk-space usage
 2013-03-01 08:23:37 -05:00
Jakub Hrozek
21a05ac540 Fix the Kerberos password expiration warning (#912223) 2013-02-21 11:53:21 +01:00
Jakub Hrozek
c7ed4e1efe Do not write out dots in the domain-realm mapping file (#905650) 2013-02-14 19:47:00 +01:00
Jakub Hrozek
15e195c705 Include upstream patch to build with krb5-1.11 2013-02-11 16:04:12 +01:00
Jakub Hrozek
930a3f3778 Rebuild against new libldb 2013-02-07 11:49:02 +01:00
Jakub Hrozek
9507d125c2 Fix build with new automake versions 2013-02-04 16:38:36 +01:00
Jakub Hrozek
2da8f67cdb Recreate Kerberos ccache directory if it's missing 
Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                        directory /run/user/UID/ccdir does not exist
 2013-01-30 14:45:14 +01:00
Jakub Hrozek
e4c185bf07 Fix changelog dates to make F19 rpmbuild happy 2013-01-29 11:00:35 +01:00
Jakub Hrozek
ad9c6955a3 New upstream release 1.9.4 2013-01-28 23:42:27 +01:00
Jakub Hrozek
36b8b7a8cb New upstream release 1.9.3 2012-12-06 19:51:06 +01:00
Jakub Hrozek
a2ee98d91a rhbz#867874: sssd does not resolve group names from AD 2012-10-30 19:39:45 +01:00
Jakub Hrozek
fdd9aa55f7 rhbz:#871176 Check the validity of namingContext 2012-10-30 10:59:25 +01:00
Jakub Hrozek
81d04d0257 Move the sss_cache tool to the main package 2012-10-18 20:00:12 +02:00
Jakub Hrozek
86429099a5 Include the 1.9.2 sources for real 2012-10-14 21:45:46 +02:00
Jakub Hrozek
89ce7cbfb4 New upstream version 1.9.2 2012-10-14 21:43:04 +02:00
Jakub Hrozek
a48646c55d New upstream release 1.9.1 2012-10-07 16:17:58 +02:00
Jakub Hrozek
fbc5fa9bce Require latest libldb 2012-10-03 11:00:52 +02:00
Jakub Hrozek
3a1ca05a36 BuildRequire diffstat 2012-09-25 14:55:48 +02:00
Jakub Hrozek
1756cca820 Use mcpath insted of mcachepath macro to be consistent with upstream spec file 2012-09-25 14:13:46 +02:00
Jakub Hrozek
827279f87c New upstream release 1.9.0 2012-09-25 13:20:37 +02:00
Jakub Hrozek
6cde68d41f New upstream release 1.9.0 RC1 2012-09-14 14:36:08 +02:00
Jakub Hrozek
586ea1b402 Obsolete patches that are part of the beta7 upstream 2012-09-06 22:04:39 +02:00
Jakub Hrozek
64a7ceb4e2 New upstream release 1.9.0 beta 7 2012-09-06 21:44:03 +02:00
Jakub Hrozek
26c9bc8ead Rebuild against libldb 1.12 2012-09-03 13:10:15 +02:00
Jakub Hrozek
b19546a95d Rebuild against libldb 1.11 2012-08-28 12:46:57 +02:00
Jakub Hrozek
5be1b0deaf rhbz#851304: Change the default ccache location to DIR:/run/user/1001/krb5cc 2012-08-24 17:11:43 +02:00
Jakub Hrozek
a35b2922c3 Rebuild against libldb 1.10 2012-08-20 18:45:15 +02:00
Jakub Hrozek
66374adaa7 Only create the SELinux login file if there are SELinux mappings on the IPA server 2012-08-17 15:00:20 +02:00
Jakub Hrozek
a1657400dd Don't discard HBAC rule processing result if SELinux is on 
Resolves: rhbz#846792 (CVE-2012-3462)
 2012-08-10 22:38:17 +02:00
Jakub Hrozek
292c0dcaf2 New upstream release 1.9.0-13.beta6 2012-08-02 18:04:25 +02:00
Dennis Gilmore
61dbc61004 Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-27 03:35:23 -05:00
Jakub Hrozek
b75ed0d13d New upstream release 1.9.0 beta 5 2012-07-19 12:51:26 +02:00
Stephen Gallagher
7a12c895a2 Fix broken ARM build 
- Add missing DP_OPTION_TERMINATOR in AD provider options
 2012-07-16 09:50:52 -04:00
Jakub Hrozek
f681bd4766 Own several directories 
https://bugzilla.redhat.com/show_bug.cgi?id=839782
 2012-07-15 17:14:01 +02:00
Jakub Hrozek
32842a881b New upstream release 1.9.0 beta 4 2012-07-11 09:57:09 +02:00
Stephen Gallagher
058cfb833c New upstream release 1.9.0 beta 3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
- Add a new PAC responder for dealing with cross-realm Kerberos trusts
- Terminate idle connections to the NSS and PAM responders
 2012-06-25 13:15:35 -04:00
Stephen Gallagher
2cb25205a4 Switch unicode library from libunistring to Glib 
- Drop unnecessary explicit Requires on keyutils
- Guarantee that versioned Requires include the correct architecture
 2012-06-20 10:32:39 -04:00
Stephen Gallagher
f8c88041e5 Fix accidental disabling of the DIR cache support 2012-06-18 10:16:49 -04:00
Stephen Gallagher
666a39284d New upstream release 1.9.0 beta 2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
- Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
- Major performance enhancement when storing large groups in the cache
- Major performance enhancement when performing initgroups() against Active
  Directory
- SSSDConfig data file default locations can now be set during configure for
  easier packaging
 2012-06-15 15:43:49 -04:00
Stephen Gallagher
26151dabf9 Fix regression in endianness patch 2012-05-30 15:10:43 -04:00
Stephen Gallagher
12d78e10a6 Rebuild SSSD against ding-libs 0.3.0beta1 
- Fix endianness bug in service map protocol
 2012-05-29 11:23:46 -04:00
Stephen Gallagher
359d341a35 Fix several regressions since 1.5.x 
- Ensure that the RPM creates the /var/lib/sss/mc directory
- Add support for Netscape password warning expiration control
- Rebuild against libldb 1.1.6
 2012-05-24 08:23:25 -04:00
Stephen Gallagher
7fa00add1e New upstream release 1.9.0 beta 1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
- Add native support for autofs to the IPA provider
- Support for ID-mapping when connecting to Active Directory
- Support for handling very large (> 1500 users) groups in Active Directory
- Support for sub-domains (will be used for dealing with trust relationships)
- Add a new fast in-memory cache to speed up lookups of cached data on
  repeated requests
 2012-05-11 16:02:54 -04:00
Stephen Gallagher
05471b8b76 New upstream release 1.8.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
- Numerous manpage and translation updates
- LDAP: Handle situations where the RootDSE isn't available anonymously
- LDAP: Fix regression for users using non-standard LDAP attributes for user
  information
 2012-05-03 15:46:32 -04:00
Stephen Gallagher
77acf296a2 New upstream release 1.8.2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
- Several fixes to case-insensitive domain functions
- Fix for GSSAPI binds when the keytab contains unrelated principals
- Fixed several segfaults
- Workarounds added for LDAP servers with unreadable RootDSE
- SSH knownhostproxy will no longer enter an infinite loop preventing login
- The provided SYSV init script now starts SSSD earlier at startup and stops
  it later during shutdown
- Assorted minor fixes for issues discovered by static analysis tools
 2012-04-09 15:06:43 -04:00
Stephen Gallagher
d023298922 Don't duplicate libsss_autofs.so in two packages 
- Set explicit package contents instead of globbing
 2012-03-26 09:35:25 -04:00
Stephen Gallagher
af80d0ea8a Fix uninitialized value bug causing crashes throughout the code 
- Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup
 2012-03-21 07:36:22 -04:00
Stephen Gallagher
8c71823719 New upstream release 1.8.1 
- Resolve issue where we could enter an infinite loop trying to connect to an
  auth server
- Fix serious issue with complex (3+ levels) nested groups
- Fix netgroup support for case-insensitivity and aliases
- Fix serious issue with lookup bundling resulting in requests never
  completing
- IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
  in addition to pam_authenticate
- Fix several regressions in the proxy provider
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
 2012-03-12 19:25:42 -04:00
Stephen Gallagher
41359781c6 New upstream release 1.8.0 
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
- Include the IPA AutoFS provider
- Fixed several memory-corruption bugs
- Fixed a regression in group enumeration since 1.7.0
- Fixed a regression in the proxy provider
- Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
- Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                          logged at each login
- Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                          /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features
- Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc
 2012-02-28 15:23:22 -05:00
Stephen Gallagher
d474da7ce3 Change default kerberos credential cache location to /run/user/<username> 2012-02-22 09:11:05 -05:00
Stephen Gallagher
e16d49fc65 New upstream release 1.8.0 beta 3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
- Fixed a regression in group enumeration since 1.7.0
- Fixed several memory-corruption bugs
- Finalized the ABI for the autofs support
- Fixed a regression in the proxy provider
 2012-02-15 16:11:31 -05:00
Stephen Gallagher
14c3c0777e Fix python Provides: filtering 2012-02-15 10:38:10 -05:00
Petr Písař
111a1d5cbe Rebuild against PCRE 8.30 2012-02-10 13:08:38 +01:00
Stephen Gallagher
01ac0e1a3e New upstream release 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
- Fix two minor manpage bugs
- Include the IPA AutoFS provider
 2012-02-07 09:57:04 -05:00
Stephen Gallagher
881479933b New upstream release 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
 2012-02-06 20:08:04 -05:00
Stephen Gallagher
e8905f5363 Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for 
new LDAP features - fix netgroups and sudo as well
 2012-02-04 20:20:10 -05:00