rpms/sssd
7
0
Fork 0
Code Issues Pull Requests Releases Activity
426 Commits 10 Branches 75 Tags 6.3 MiB
163543f40b
Commit Graph

404 Commits

Author SHA1 Message Date
Fabiano Fidêncio
163543f40b Resolves: upstream#3726 - SSSD with ID provider 'ad' should give a warning in case the ldap schema is manually changed to something different than 'ad'. 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-05-14 09:55:01 +02:00
Fabiano Fidêncio
510134aa02 Resolves: upstream#3725 - sssd not honoring dyndns_server if the DNS update process is terminated with a signal 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-05-14 09:54:10 +02:00
Fabiano Fidêncio
5e1db8fc3e Related: upstream#3436 - Certificates used in unit tests have limited lifetime 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-05-14 09:53:04 +02:00
Fabiano Fidêncio
5254cdcca5 Resolves: rhbz#1574778 - sssd fails to download known_hosts from freeipa 
Patch 0018-sysdb-custom-completely-replace-old-object-instead-o.patch
caused a regression, caught by lslebodn and reported by a few users.

Let's comment out this patch for now and uncomment it when we have a fix
that do not cause a regression.

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-05-05 21:42:38 +02:00
Fabiano Fidêncio
767645dca2 Add gcc to build dependencies 
gcc will be revomed from buildroot in fedora 29
http://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot

Upstream patch from Lukáš Slebodnik <lslebodn@redhat.com>

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:12 +02:00
Fabiano Fidêncio
90dd145c92 Resolves: upstream#3520 - Files provider supports only BE_FILTER_ENUM 
Also ...
Resolves: rhbz#1540703 - FreeIPA/SSSD implicit_file sssd_nss error: The Data
                         Provider returned an error
                         [org.freedesktop.sssd.Error.DataProvider.Fatal]

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:12 +02:00
Fabiano Fidêncio
a305fc11b7 Resolves: upstream#3680 - GPO: SSSD fails to process GPOs If a rule is defined, but contains no SIDs 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:12 +02:00
Fabiano Fidêncio
b6696d97c4 Document which principal does the AD provider use 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:12 +02:00
Fabiano Fidêncio
2dd8451396 Resolves: upstream#2653 - Group renaming issue when "id_provider = ldap" is set. 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:12 +02:00
Fabiano Fidêncio
209701ef7f Resolves: upstream#3715 - ipa 389-ds-base crash in krb5-libs - k5_copy_etypes list out of bound? 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
3115154117 Improve docs/debug message about GC detection 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
f47c82bc8d Resolves: upstream#3469 - extend sss-certmap man page regarding priority processing 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
64b69ec813 Resolves: upstream#3634 - sssctl COMMAND --help fails if sssd is not configured 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
8d67726a47 Resolves: upstream#3679 - Make nss netgroup requests more robust 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
8565df471c Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
9709b73a3f Resolves: upstream#3402 - Support alternative sources for the files provider 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
a7d4f0b3f4 Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
ab53ba849a IPA: Qualify the externalUser sudo attribute 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
ef1d48a0c2 Tone down shutdown messages for socket activated responders 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
fcff118bbf Resolves: upstream#3558 - sudo: report error when two rules share cn 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:11 +02:00
Fabiano Fidêncio
f3d06df50d Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-04-27 22:12:10 +02:00
Fabiano Fidêncio
32f2c81e59 A few KCM misc fixes 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:47:05 +02:00
Fabiano Fidêncio
99da72db23 Resolves: upstream#3666 - Fix usage of str.decode() in our test 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:45:42 +02:00
Fabiano Fidêncio
1c7376afc5 Resolves: upstream#3386 - KCM: Payload buffer is too small 
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:43:19 +02:00
Fabiano Fidêncio
73735e9522 Resolves: usptream#3687 - KCM: Don't pass a non null terminated string to json_loads() 
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:38:32 +02:00
Fabiano Fidêncio
563dd33f72 Resolves: upstream#3658 - Application domain is not interpreted correctly 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:35:59 +02:00
Fabiano Fidêncio
2c812f3cba Resolves: upstream#3660 - confdb_expand_app_domains() always fails 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:33:25 +02:00
Fabiano Fidêncio
40fe76feb8 Resolves: upstream#3573 - sssd won't show netgroups with blank domai 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-30 14:30:01 +02:00
Fabiano Fidêncio
62a3258629 New upstream release 1.16.1 
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-03-09 15:42:19 +01:00
Lukas Slebodnik
5eba7a8f1f Resolves: upstream#3621 - backport bug found by static analyzers 2018-02-20 15:12:59 +01:00
Fabiano Fidêncio
4b1fe8a0ab Resolves: upstream#3621: FleetCommander integration must not require capability DAC_OVERRIDE 
Together with the patches backported from upstream, we're changing
the deskprofilepath permissions from 755 to 751, reflecting the
upstream spec file changes.

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-02-14 23:03:25 +01:00
Fabiano Fidêncio
199a72e62a Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set 
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
 2018-02-14 22:15:04 +01:00
Igor Gnatenko
11c6ee78b8 Remove BuildRoot definition 
None of currently supported distributions need that.
It was needed last for EL5 which is EOL now

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-02-14 00:40:17 +01:00
Lukas Slebodnik
18ae44bc79 Resolves: upstream#3618 - selinux_child segfaults in a docker container 2018-02-07 22:04:27 +01:00
Lukas Slebodnik
f55e235d75 Resolves: rhbz#1431153 - sssd: libsss_proxy.so needs to be linked with -ldl 2018-02-06 13:11:55 +01:00
Lukas Slebodnik
e242e8ef93 Fix systemd executions/requirements 
systemd was added to BuildRequires because it provides rpm macros
/usr/lib/rpm/macros.d/macros.systemd and it is unreliable to rely
on indirect dependency between systemd-devel and systemd

Related to: https://src.fedoraproject.org/rpms/sssd/pull-request/1
 2018-02-06 13:04:26 +01:00
Lukas Slebodnik
6d370601d4 Revert "Workaround for BZ1537183" 
This reverts commit 0a5a392684.

nsupdate is fixed on rawhide.i686
 2018-02-06 12:57:05 +01:00
Igor Gnatenko
a3b937064c Fix systemd executions/requirements 
Merges: https://src.fedoraproject.org/rpms/sssd/pull-request/1

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
 2018-01-25 20:42:01 +01:00
Lukas Slebodnik
ebdebbe467 Do not try to link with -Wl,-z,defs 
https://bugzilla.redhat.com/show_bug.cgi?id=1535422
https://fedoraproject.org/wiki/Changes/BINUTILS2291
https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/master/f/buildflags.md#strict-symbol-checks-in-the-link-editor-ld

sssd cannot be linked with -Wl,-z,defs atm.
 2018-01-25 20:23:09 +01:00
Lukas Slebodnik
27d7dcb5bb Revert "Override linker flags done in redhat-rpm-config-84-1.fc28" 
This reverts commit 7cda4fbc6f.
 2018-01-25 20:18:39 +01:00
Lukas Slebodnik
b4343b24b6 Fix building on rawhide. Remove -Wl,-z,defs from LDFLAGS 2018-01-25 11:39:00 +01:00
Lukas Slebodnik
0a5a392684 Workaround for BZ1537183 
unit test will pass but sssd will not be able to use nsupdate with realm
on i686
 2018-01-23 15:11:46 +01:00
Lukas Slebodnik
7cda4fbc6f Override linker flags done in redhat-rpm-config-84-1.fc28 
https://bugzilla.redhat.com/show_bug.cgi?id=1535422
https://fedoraproject.org/wiki/Changes/BINUTILS2291

sssd cannot be linked with -Wl,-z,defs atm.
 2018-01-23 14:37:32 +01:00
Lukas Slebodnik
b390855a98 Fix building of sssd-nfs-idmap with libnfsidmap.so.1 2018-01-11 16:53:36 +01:00
Björn Esser
f9e6094ac5
Rebuilt for libnfsidmap.so.1 2018-01-11 12:01:37 +01:00
Lukas Slebodnik
1dedfbb334 Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout 
Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                          or machine swaps
Resolves: failure in glibc tests
          https://sourceware.org/bugzilla/show_bug.cgi?id=22530
Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                          auth_provider ldap, login fails if the LDAP server
                          is not allowing anonymous binds
Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                          corrected with AD
Resolves: upstream#3586 - Give a more detailed debug and system-log message
                          if krb5_init_context() failed
Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                         in /etc/systemd/system
Backport few upstream features from 1.16.1
 2017-12-04 21:42:37 +01:00
Lukas Slebodnik
ce65f7d9ee Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next 2017-11-21 17:57:44 +01:00
Lukas Slebodnik
87763840cd Revert "Disable nfsplugin due to bug rhbz#1509063" 
This reverts commit b5c435b10b.

nfs-utils are fixed
 2017-11-21 17:56:54 +01:00
Jakub Hrozek
7781c9e992 Backport extended NSS API from upstream master branch 2017-11-17 18:06:26 +01:00
Lukas Slebodnik
b5c435b10b Disable nfsplugin due to bug rhbz#1509063 2017-11-03 22:58:37 +01:00