Commit Graph

349 Commits

Author SHA1 Message Date
Lukas Slebodnik
7069858231 Resolves: rhbz#1499354 - CVE-2017-12173
sssd: unsanitized input when searching in local cache database access on
the sock_file system_bus_socket
2017-10-11 17:48:41 +02:00
Lukas Slebodnik
8eda442b2e Fix few bugs/regressions
Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access
                         on the sock_file system_bus_socket
Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                         fails to download desktop profile data
Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after
                          applying ID Views for them in IPA server
Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping
                          is applied
2017-09-12 09:22:07 +02:00
Lukas Slebodnik
fa4807ec45 Backport few upstream patches/fixes 2017-09-01 21:34:35 +02:00
Lukas Slebodnik
11cd64de1c Add krb5 conf snippet for default KCM
http://fedoraproject.org/wiki/Releases/27/ChangeSet#Kerberos_KCM_credential_cache_by_default
https://bugzilla.redhat.com/show_bug.cgi?id=1421604
2017-09-01 21:34:20 +02:00
Lukas Slebodnik
5ce8ae1166 Simplify spec file a little bit
The plugin for cifs-utils can be built on all supported versions of fedora.
Conditions are required only in upstream spec file for older
distributions. Definition of constant with_cifs_utils_plugin is still
in the beginning of spec file for simpler comparison of changes
between upstream and fedora.
2017-09-01 10:47:18 +02:00
Lukas Slebodnik
088151887a Remove unused if condition krb5 localauth plugin
The plugin can be built on all supported versions of fedora.
And it was removed also from upstream spec file.
2017-09-01 10:39:14 +02:00
Ville Skyttä
308a55f49d Own the %{_libdir}/%{name}/conf dir
https://bugzilla.redhat.com/show_bug.cgi?id=1483517
2017-08-21 12:42:13 +02:00
Fedora Release Engineering
df69f6e551 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 19:16:38 +00:00
Lukas Slebodnik
1f58bd8dc4 Make fedora automated tests happy
dist.python-versions failed
dist.python-versions.requires_naming_scheme failed

These RPMs use `python-` prefix without Python version in *Requires:

sssd-1.15.3-1.fc26 BuildRequires:
 * python-devel (python2-devel is available)

This is strongly discouraged and should be avoided. Please check
the required packages, and use names with either `python2-` or
`python3-` prefix.
2017-07-25 17:53:21 +02:00
Lukas Slebodnik
6302a22355 New upstream release 1.15.3
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 13:58:52 +02:00
Lukas Slebodnik
ca67484fda Rebuild with libldb-1.2.0
sssd buill with older version of libldb will crash

  (gdb) bt
  #0  0x0000000000000001 in ?? ()
  #1  0x00007fcb39ce28dc in ldb_db_lock_destructor () from /lib64/libldb.so.1
  #2  0x00007fcb3a103f31 in _tc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", tc=<optimized out>) at ../talloc.c:1078
  #3  _talloc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", ptr=0x55e267aebef0) at ../talloc.c:1174
  #4  _talloc_free (ptr=0x55e267aebef0, location=0x7fcb39ce9303 "../common/ldb.c:1026") at ../talloc.c:1716
  #5  0x00007fcb39ce02f2 in ldb_lock_backend_callback () from /lib64/libldb.so.1
  #6  0x00007fcb31b172ae in ltdb_callback () from /usr/lib64/ldb/modules/ldb/tdb.so
  #7  0x00007fcb3a31e8c1 in tevent_common_loop_timer_delay () from /lib64/libtevent.so.0
2017-07-07 12:44:33 +02:00
Lukas Slebodnik
538f424e10 Disable unit tests with expired certificates 2017-06-27 16:02:20 +02:00
Lukas Slebodnik
7be3dab725 Fix build issues: Update expided certificate in unit tests 2017-06-27 14:22:05 +02:00
Lukas Slebodnik
af87992184 Reduce diff between rhel and fedora 2017-05-03 15:41:35 +02:00
Lukas Slebodnik
c580b695b0 Do not patch README.md
README.md is not part of tarball
2017-05-01 09:00:54 +02:00
Lukas Slebodnik
7bddea6c90 Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 23:49:52 +02:00
Lukas Slebodnik
576a19ee5a Fix issue with IPA + SELinux in containers
Resolves: upstream https://fedorahosted.org/sssd/ticket/3297
2017-04-06 15:54:38 +02:00
Lukas Slebodnik
387014f928 Backport upstream patches for 1.15.3 pre-release
required for building freeipa-4.5.x in rawhide
2017-04-04 16:22:51 +02:00
Lukas Slebodnik
d663bd4a22 New upstream release 1.15.2
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 10:48:31 +01:00
Lukas Slebodnik
6a912ecf5d Add missing file 2017-03-06 11:41:21 +01:00
Lukas Slebodnik
831e9fa984 New upstream release 1.15.1
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
2017-03-06 10:48:38 +01:00
Jakub Hrozek
396c651083 Cherry-pick patches from upstream that enable the files provider
Required for:
    https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-28 16:54:33 +01:00
Lukas Slebodnik
3e94aee54c Add missing %license macro 2017-02-14 19:47:29 +01:00
Fedora Release Engineering
b5653d93c3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 13:57:49 +00:00
Lukas Slebodnik
850071336e New upstream release 1.15.0
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 20:07:00 +01:00
Miro Hrončok
4b9dd7c77c Rebuild for Python 3.6 2016-12-19 18:20:38 +01:00
Lukas Slebodnik
eb6c560542 Resolves: rhbz#1369130 - nss_sss should not link against libpthread
Resolves: rhbz#1392916 - sssd failes to start after update
Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                           on the directory /etc/sssd
2016-12-13 20:10:27 +01:00
Lukas Slebodnik
85427c072c New upstream release 1.14.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2
2016-10-20 16:20:34 +02:00
Lukas Slebodnik
856526f769 libwbclient-sssd: update interface to version 0.13 2016-10-14 19:06:17 +02:00
Lukas Slebodnik
8dd054482d Revert "Do no use python_provide conditionally"
The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python
in the package python-rpm-macros. But this package is not part
of build root and therefore rpm cannot parse spec file.

This reverts commit 22c180263a.
2016-09-22 23:40:41 +02:00
Lukas Slebodnik
75bb1ff2e0 Fix failing test 2016-09-22 22:55:43 +02:00
Lukas Slebodnik
640e44ca24 Fix regression with krb5_map_user
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                           default if nonexistent domain is mentioned
2016-09-22 22:28:47 +02:00
Lukas Slebodnik
0fe5246e1a Use weak dependencies 2016-09-21 12:47:08 +02:00
Lukas Slebodnik
22c180263a Do no use python_provide conditionally 2016-09-15 17:53:58 +02:00
Lukas Slebodnik
2b61bbee11 Backport important patches from upstream 1.14.2 prerelease
- Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                             boot
- Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14
2016-09-01 18:13:49 +02:00
Lukas Slebodnik
6bce0a242d New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
2016-08-19 18:02:03 +02:00
Stephen Gallagher
0e7292f369 Add workaround patch for RHBZ #1366403 2016-08-15 14:15:18 -04:00
Fedora Release Engineering
8a68f197ec - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages 2016-07-19 12:41:42 +00:00
Lukas Slebodnik
08625190c5 New upstream release 1.14.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
2016-07-08 08:47:25 +02:00
Lukas Slebodnik
a100349631 Fix few mistakes
note: fedpkg lint is your best friend
2016-07-01 10:45:16 +02:00
Lukas Slebodnik
f9539d7319 New upstream release 1.14 beta
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
2016-07-01 10:11:33 +02:00
Lukas Slebodnik
966fddcfba New upstream release 1.14 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
2016-06-21 10:58:04 +02:00
Lukas Slebodnik
e3bb60bcdb Rename python packages + using macro %python_provide 2016-05-13 11:09:38 +02:00
Lukas Slebodnik
9aeb640f15 Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element():
sssd_ifp killed by SIGSEGV
2016-05-13 11:09:38 +02:00
Lukas Slebodnik
18bea94912 Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6 2016-04-22 20:50:56 +02:00
Lukas Slebodnik
d9dece9b71 Backport netlink patch for link-local addresses 2016-04-14 13:05:33 +02:00
Lukas Slebodnik
19237d03ed New upstream release 1.13.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4
2016-04-14 12:59:47 +02:00
Lukas Slebodnik
6b01857bc5 Bump release 2016-03-22 09:07:32 +01:00
Lukas Slebodnik
e37379577b Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password
prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                           by remote host" if locale not available
2016-03-22 09:06:29 +01:00
Lukas Slebodnik
e32d50862e Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA
groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                           in call to 'print'
2016-02-25 13:58:00 +01:00