Commit Graph

426 Commits

Author SHA1 Message Date
Lukas Slebodnik
d9dece9b71 Backport netlink patch for link-local addresses 2016-04-14 13:05:33 +02:00
Lukas Slebodnik
19237d03ed New upstream release 1.13.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4
2016-04-14 12:59:47 +02:00
Lukas Slebodnik
6b01857bc5 Bump release 2016-03-22 09:07:32 +01:00
Lukas Slebodnik
e37379577b Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                           by remote host" if locale not available
2016-03-22 09:06:29 +01:00
Lukas Slebodnik
e32d50862e Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                           in call to 'print'
2016-02-25 13:58:00 +01:00
Lukas Slebodnik
00dde99057 Move libsss_autofs.so outside sssd-common
It will reduce dependency chain in container world.
libsss_autofs.so depends only on libc and requires
sssd unix sockets. And sssd-common has many requirements.
2016-02-19 09:27:27 +01:00
Lukas Slebodnik
584e0c3964 Remove unnecessary requirements
We do not need to requires specific version of libldb
or libtdb because it is automatically detected from
binary/library dependencies. We also need never version
of that libraries as it was specified in spec file.

e.g.
  sh$ rpm -q --requires sssd-common | grep -E "TDB|LDB"
  libldb.so.1(LDB_0.9.10)(64bit)
  libtdb.so.1(TDB_1.2.1)(64bit)

There is also redundant dependency on sssd-common-pac
sssd -> sssd-ipa -> sssd-common-pac
     -> sssd-ad -> sssd-common-pac
     -> sssd-common-pac

  sh$ rpm -q --whatrequires sssd-common-pac
  sssd-ipa-1.13.3-1.fc23.x86_64
  sssd-ad-1.13.3-1.fc23.x86_64
  sssd-1.13.3-1.fc23.x86_64
2016-02-17 16:30:01 +01:00
Fedora Release Engineering
0a5378a924 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-05 00:37:31 +00:00
Lukas Slebodnik
c38b881d88 Package uses only $RPM_BUILD_ROOT
Note: Using both %{buildroot} and $RPM_BUILD_ROOT
See: http://fedoraproject.org/wiki/Packaging/Guidelines#macros
2016-02-02 21:45:47 +01:00
Lukas Slebodnik
5719fdd6f8 Fix rpmlint issue for libsss_simpleifp
Patch removes unnecessary requires of dbus-libs
because it's already detected from library.
However we forgot to call ldconfig after (un)installation.

sh$ rpm -q -p --requires libsss_simpleifp-1.13.90-0.fc23.x86_64.rpm | grep dbus
    libdbus-1.so.3()(64bit)
    libdbus-1.so.3(LIBDBUS_1_3)(64bit)
    sssd-dbus = 1.13.90-0.fc23

sh$ rpm -q --whatprovides "libdbus-1.so.3()(64bit)"
    dbus-libs-1.10.6-1.fc23.x86_64
2016-02-02 18:07:45 +01:00
Lukas Slebodnik
fb84da9380 Remove unnecessary clean-up of buildroot
rhel5 required to clean buildroot in install section.
The %clean section is not required for F-13 and above, and EPEL 6 and
above. EPEL 5 MUST have a %clean section that cleans the buildroot:

https://fedoraproject.org/wiki/EPEL:Packaging#Prepping_BuildRoot_For_.25install
2016-02-02 18:06:09 +01:00
Lukas Slebodnik
d384e14059 Fix rpmlint warnings
fedpkg/sssd/sssd.spec:1232: W: macro-in-%changelog %preun
fedpkg/sssd/sssd.spec:1366: W: macro-in-%changelog %{_lib}
fedpkg/sssd/sssd.spec:1366: W: macro-in-comment %{_lib}
2016-02-02 11:59:36 +01:00
Lukas Slebodnik
6d11a34b89 Additional upstream fixes 2016-01-20 18:40:57 +01:00
Lukas Slebodnik
9bfc8ef4de Resolves: rhbz#1256849 - SUDO: Support the IPA schema 2016-01-19 18:23:34 +01:00
Michal Sekletar
94f4c4dd6d Use macros and don't call systemctl directly
- Resolves: rhbz#850328 - Introduce new systemd-rpm macros in sssd spec file
2016-01-19 15:26:15 +01:00
Lukas Slebodnik
9f85549912 Fix unowned directories
- https://fedoraproject.org/wiki/Packaging:UnownedDirectories
- Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
2016-01-19 15:15:32 +01:00
Lukas Slebodnik
f50233afd2 Move libsss_sudo.so outside sssd-common
The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo.
If libsss_sudo.so was part of sssd-client then 32 bit version would
never be used on 64 bit machine and files in sssd-client can be used
by multilib applications e.g. libnss_sss.so can be indirectly "dlopened"
by 64 bit applications and 32 bit application.
(32-bit web browser; ordinary 64bit applications ...)
2016-01-19 15:06:17 +01:00
Lukas Slebodnik
aa27da2e1f Change package ownership of %{pubconfpath}/krb5.include.d
krb5 domain mapping files are stored to the directory
%{pubconfpath}/krb5.include.d. It can be stored by ipa or ad provider.
However this directory was owned by sub-package sssd-ipa. And ad provider
can be installed without this package. Therefore %{pubconfpath}/krb5.include.d
should be owned by common dependency.

The owner of this directory was also fixed to sssd.
It's already done by make install. It was changed only in spec file.
2016-01-19 15:02:47 +01:00
Lukas Slebodnik
a89ed4b83f Additional patch for upstream #2829 2015-12-16 08:51:17 +01:00
Lukas Slebodnik
5df019d5aa New upstream release 1.13.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3
2015-12-16 08:47:07 +01:00
Lukas Slebodnik
31ed44fa55 Backport patches from sssd master #2829
Use after free in failover
2015-11-20 09:47:17 +01:00
Lukas Slebodnik
bdedaaad52 New upstream release 1.13.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
2015-11-20 09:47:17 +01:00
Robert Kuska
2b3b752656 Rebuilt for Python3.5 rebuild 2015-11-06 15:40:37 +01:00
Lukas Slebodnik
9f8eeed0c9 Fix building pac responder with the krb5-1.14 2015-10-27 09:41:14 +01:00
Lukas Slebodnik
c08e64289b python-sssdconfig: Fix parssing sssd.conf without config_file_version
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed
2015-10-19 15:04:51 +02:00
Lukas Slebodnik
4bdb4e48cd Revert "Temporary disable tests due to broken krb5"
This reverts commit 1bedb06db6.

Rawhide contain krb5-1.13.2-12.fc24 which fixed bug with missing
/usr/share/krb5.conf.d. So, unit test should pass.
2015-10-07 13:42:42 +02:00
Lukas Slebodnik
69b9d3f518 Fix few segfaults
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step
2015-10-07 13:42:03 +02:00
Lukas Slebodnik
1bedb06db6 Temporary disable tests due to broken krb5
Should be fixed with krb5 >= 1.14-2.fc24
2015-10-01 08:16:23 +02:00
Lukas Slebodnik
00d900ad6f Remove unnecessary requirement
libini-config-1.1 already provides version definition
which substitute this requirement.

sh$ objdump -p /usr/lib64/libini_config.so | grep -A4 definition
Version definitions:
1 0x01 0x05f25695 libini_config.so.5
2 0x00 0x00acdc20 INI_CONFIG_1.1.0
3 0x00 0x00acdd20 INI_CONFIG_1.2.0
        INI_CONFIG_1.1.0
2015-10-01 08:16:23 +02:00
Lukas Slebodnik
05c3b14125 New upstream release 1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 08:16:16 +02:00
Lukas Slebodnik
996f9ec8f7 Fix OTP bug
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                             entered separately
2015-09-10 14:26:47 +02:00
Lukas Slebodnik
cc6c9ff159 Backport upstream patches required by FreeIPA 4.2.1 2015-09-07 18:37:40 +02:00
Lukas Slebodnik
cc1ba0d674 Fix ipa-migration bug
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                             migration mode
2015-07-21 09:11:06 +02:00
Lukas Slebodnik
b46d3ce3db New upstream release 1.13.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0
2015-07-08 19:15:17 +02:00
Lukas Slebodnik
aa1a6b1ea9 Unify return type of list_active_domains for python{2,3} 2015-06-30 16:54:06 +02:00
Lukas Slebodnik
3fa3e7c22a New upstream release 1.13 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
2015-06-22 13:52:08 +02:00
Dennis Gilmore
b4d3da407f - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-19 01:41:15 +00:00
Lukas Slebodnik
89ed4ffc3c Fix libwbclient alternatives 2015-06-12 20:50:06 +02:00
Lukas Slebodnik
aac3cde5be New upstream release 1.12.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5
    - backport important patches from upstream 1.13 prerelease
2015-06-12 14:49:22 +02:00
Lukas Slebodnik
05b6ed4f4e Update source file for new release 2015-06-12 14:49:22 +02:00
Lukas Slebodnik
70e9980ac6 Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures
2015-05-08 14:53:58 +02:00
Lukas Slebodnik
a0e4fecc9c Fix cyclic dependencies between sssd-{krb5,}-common
The upstream ticket #2507 is prerequisite for BZ1212503
Patch also enables cmocka tests with secondary architectures.
2015-05-08 14:32:52 +02:00
Lukas Slebodnik
40a97f0f88 Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
Lukas Slebodnik
6cfd9704c1 Bump version for patches related to #2624 2015-04-15 14:19:39 +02:00
Lukas Slebodnik
c4cf951d60 Fix slow login with ipa and SELinux
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one
2015-04-15 14:17:32 +02:00
Lukas Slebodnik
9a0389188d Small spec file clean-up
* remove workaround for old rpmbuild (rhel5)
* remove conversion sysv scripts to systemd
* small code style update in bash scripts
2015-04-09 18:06:13 +02:00
Lukas Slebodnik
36805df397 Fix regressions with ipa and SELinux
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u
2015-03-23 17:17:30 +01:00
Jakub Hrozek
9f97bec3b0 Also relax libldb Requires and remove --enable-ldb-version-check 2015-03-06 11:45:13 +01:00
Jakub Hrozek
9c5af4ac2d Relax libldb BuildRequires
Originally, we tried to stay on the safe side with libldb since it never
really commited to stable ABI or API, but since there were never any
issues in many years, it's safe to relax the requirement.

This change will benefit especially the storage developers who often
need a different (typically newer) libldb version and would like to
avoid to rebuild sssd for no reason.
2015-03-06 10:50:45 +01:00
Lukas Slebodnik
ed82d05320 Add support for python3 bindings
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 14:21:45 +01:00