dirkmueller/sssd
SHA256
1
0
Fork 0
forked from pool/sssd
Code Pull Requests Activity
397 Commits 1 Branch 0 Tags 11 MiB
5555807b30
Commit Graph

397 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Jan Engelhardt
969bc75c7f Accepting request 619100 from home:ckowalczyk:branches:network:ldap:bsc1098163-cve201810852 
- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)

OBS-URL: https://build.opensuse.org/request/show/619100
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=203
 2018-06-27 23:04:40 +00:00
Peter Varkoly
ef4bdebab8 Fix spec for new package. 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=202
 2018-06-20 13:14:56 +00:00
Peter Varkoly
4c8b88f4d2 Add patch to fix build 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=201
 2018-06-20 12:49:57 +00:00
Peter Varkoly
c906f55d9e Remove unnecessary comment. 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=200
 2018-06-20 12:19:07 +00:00
Peter Varkoly
cd01c383bf Fix requirement 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=199
 2018-06-20 09:44:16 +00:00
Peter Varkoly
0ee77493e9 Add missed requirement 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=198
 2018-06-20 09:36:04 +00:00
Peter Varkoly
12009674a9 - Update to new minor upstream release 1.16.2 
New Features:
  * The smart card authentication, or in more general certificate
    authentication code now supports OpenSSL in addition to previously
    supported NSS (#3489). In addition, the SSH responder can now
    return public SSH keys derived from the public keys stored in a
    X.509 certificate. Please refer to the ssh_use_certificate_keys
    option in the man pages.
  * The files provider now supports mirroring multiple passwd or
    group files. This enhancement can be used to use the SSSD files
    provider instead of the nss_altfiles module
Bugfixes:
  * A memory handling issue in the nss_ex interface was fixed. This
    bug would manifest in IPA environments with a trusted AD domain
    as a crash of the ns-slapd process, because a ns-slapd plugin
    loads the nss_ex interface (#3715)
  * Several fixes for the KCM deamon were merged (see #3687, #3671, #3633)
  * The ad_site override is now honored in GPO code as well (#3646)
  * Several potential crashes in the NSS responder’s netgroup code
    were fixed (#3679, #3731)
  * A potential crash in the autofs responder’s code was fixed (#3752)
  * The LDAP provider now supports group renaming (#2653)
  * The GPO access control code no longer returns an error if one
    of the relevant GPO rules contained no SIDs at all (#3680)
  * A memory leak in the IPA provider related to resolving external
    AD groups was fixed (#3719)
  * Setups that used multiple domains where one of the domains had
    its ID space limited using the min_id/max_id options did not
    resolve requests by ID properly (#3728)
  * Overriding IDs or names did not work correctly when the domain

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=197
 2018-06-20 08:48:06 +00:00
Peter Varkoly
98844f4892 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=196 2018-06-20 08:38:46 +00:00
Dominique Leuenberger
0020974137 Accepting request 602245 from network:ldap 
OBS-URL: https://build.opensuse.org/request/show/602245
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=88
 2018-05-06 12:54:53 +00:00
Jan Engelhardt
4cadadc038 Accepting request 602087 from home:ckowalczyk:branches:network:ldap:sssd-1_16_1 
- Update to new minor upstream release 1.16.1 (fate#323340):
New Features:
 * A new option auto_private_groups was added. If this option is
   enabled, SSSD will automatically create user private groups based
   on user’s UID number. The GID number is ignored in this case.
 * The SSSD smart card integration now supports a special type of PAM
   conversation implemented by GDM which allows the user to select
   the appropriate smrt card certificate in GDM.
 * A new API for accessing user and group information was added.
   This API is similar to the tradiional Name Service Switch API, but
   allows the consumer to talk to SSSD directly as well as to
   fine-tune the query with e.g. how cache should be evaluated.
 * The sssctl command line tool gained a new command access-report,
   which can generate who can access the client machine. Currently
   only generating the report on an IPA client based on HBAC rules
   is supported.
 * The hostid provider was moved from the IPA specific code to
   the generic LDAP code. This allows SSH host keys to be access by
   the generic LDAP provider as well. See the ldap_host_* options in
   the sssd-ldap manual page for more details.
 * Setting the memcache_timeout option to 0 disabled creating
   the memory cache files altogether. This can be useful in cases
   there is a bug in the memory cache that needs working around.

OBS-URL: https://build.opensuse.org/request/show/602087
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=195
 2018-04-28 09:49:26 +00:00
Dominique Leuenberger
1b8ac2c131 Accepting request 600736 from network:ldap 
OBS-URL: https://build.opensuse.org/request/show/600736
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=87
 2018-04-27 13:59:26 +00:00
Jan Engelhardt
6f604b343f Accepting request 600643 from home:ckowalczyk:branches:network:ldap:bsc1062124 
- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)

OBS-URL: https://build.opensuse.org/request/show/600643
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=194
 2018-04-24 19:16:52 +00:00
Dominique Leuenberger
6cfba6b41c Accepting request 580522 from network:ldap 
- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)

OBS-URL: https://build.opensuse.org/request/show/580522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=86
 2018-03-01 11:01:07 +00:00
Howard Guo
d0b251fd0c - Remove package descriptions for the python 2 packages that are 
no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=193
 2018-02-27 09:36:30 +00:00
Dominique Leuenberger
3349cd9021 Accepting request 548039 from network:ldap 
- Correct dependency of sss_obfuscate command line program.

- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config

OBS-URL: https://build.opensuse.org/request/show/548039
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=85
 2017-12-08 20:46:42 +00:00
Howard Guo
f149bbe067 - Correct dependency of sss_obfuscate command line program. 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=192
 2017-12-04 10:27:54 +00:00
Howard Guo
d57d7436e1 - In an ongoing effort to reduce dependency on python version 2, 
the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=191
 2017-12-01 14:37:44 +00:00
Dominique Leuenberger
348391ee50 Accepting request 536521 from network:ldap 
- Update to new upstream release 1.16.0

OBS-URL: https://build.opensuse.org/request/show/536521
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=84
 2017-10-27 11:47:11 +00:00
Jan Engelhardt
1509d47d02 undo specfile horkage 2 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=190
 2017-10-25 12:01:40 +00:00
Jan Engelhardt
b37bcee6c1 undo specfile horkage 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=189
 2017-10-25 12:00:49 +00:00
Michael Ströder
c7db1552cb Accepting request 536206 from home:stroeder:branches:network:ldap 
Update to new upstream release 1.16.0.

Successfully tested with Howard's test scripts on openSUSE Tumbleweed x86_64.

Build of man pages seems broken. But this is not caused by this sssd update because the man pages are already broken in sssd-tools-1.15.2-1.4 package in Tumbleweed.

OBS-URL: https://build.opensuse.org/request/show/536206
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=188
 2017-10-25 11:56:22 +00:00
Dominique Leuenberger
fbde2110e4 Accepting request 480497 from network:ldap 
OBS-URL: https://build.opensuse.org/request/show/480497
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=83
 2017-03-18 19:49:28 +00:00
Howard Guo
63b85c3a82 - Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to 
krb5-common sub-package. Address bsc#1024836.

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=187
 2017-03-16 13:36:38 +00:00
Jan Engelhardt
e0d45ad549 wrap to 66 cols as wiki demands 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=186
 2017-03-16 00:13:21 +00:00
Jan Engelhardt
fb25d602fc Accepting request 479818 from home:stroeder:branches:network:ldap 
update to 1.15.2

OBS-URL: https://build.opensuse.org/request/show/479818
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=185
 2017-03-15 23:57:39 +00:00
Dominique Leuenberger
529febaa1d Accepting request 478785 from network:ldap 
- Switch *all* URLs after fedorahosted.org retirement

OBS-URL: https://build.opensuse.org/request/show/478785
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=82
 2017-03-15 00:05:03 +00:00
Jan Engelhardt
96255f5760 - Switch *all* URLs after fedorahosted.org retirement 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=184
 2017-03-11 22:35:00 +00:00
Martin Pluskal
46b225a156 Accepting request 476961 from home:stroeder:branches:network:ldap 
update to upstream release 1.15.1

OBS-URL: https://build.opensuse.org/request/show/476961
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=183
 2017-03-05 08:29:21 +00:00
Dominique Leuenberger
a5f491c90f Accepting request 458770 from network:ldap 
1

OBS-URL: https://build.opensuse.org/request/show/458770
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=81
 2017-02-20 13:29:16 +00:00
Martin Pluskal
0f3b21548f Accepting request 458768 from home:kukuk:branches:network:ldap 
- Remove obsolete insserv call

OBS-URL: https://build.opensuse.org/request/show/458768
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=182
 2017-02-18 07:44:39 +00:00
Dominique Leuenberger
264a75b4d7 Accepting request 455952 from network:ldap 
1

OBS-URL: https://build.opensuse.org/request/show/455952
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=80
 2017-02-13 23:37:58 +00:00
Howard Guo
d7756cde6a Accepting request 455790 from home:luizluca:branches:network:ldap 
Simply add /etc/sssd/conf.d/ for configuration snippets

OBS-URL: https://build.opensuse.org/request/show/455790
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=181
 2017-02-10 07:40:27 +00:00
Dominique Leuenberger
6a5086be7d Accepting request 452863 from network:ldap 
Update to 1.15.0 and tested it with Howard Guo's test suite on Tumbleweed x86_64.

OBS-URL: https://build.opensuse.org/request/show/452863
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=79
 2017-01-31 11:35:14 +00:00
Jan Engelhardt
aab7330625 Accepting request 452485 from home:stroeder:branches:network:ldap 
update to 1.15.0 (testing needed)

OBS-URL: https://build.opensuse.org/request/show/452485
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=180
 2017-01-26 14:22:39 +00:00
Dominique Leuenberger
a8065f6075 Accepting request 445429 from network:ldap 
- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230. (forwarded request 445423 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/445429
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=78
 2016-12-16 10:54:16 +00:00
Jan Engelhardt
e55ddcabba Accepting request 445423 from home:dimstar:Factory 
- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.

OBS-URL: https://build.opensuse.org/request/show/445423
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=179
 2016-12-12 13:46:31 +00:00
Dominique Leuenberger
8ab328ac8c Accepting request 444636 from network:ldap 
- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.

OBS-URL: https://build.opensuse.org/request/show/444636
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=77
 2016-12-11 12:21:47 +00:00
Jan Engelhardt
e4721490fb document the patch, mention it... meh 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=178
 2016-12-07 10:52:05 +00:00
Jan Engelhardt
39a9c680c9 Accepting request 444617 from home:stroeder:branches:network:ldap 
added 0001-krb5-1.15-build-fix.patch

OBS-URL: https://build.opensuse.org/request/show/444617
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=177
 2016-12-07 10:14:54 +00:00
Dominique Leuenberger
5107618fb4 Accepting request 436480 from network:ldap 
1

OBS-URL: https://build.opensuse.org/request/show/436480
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=76
 2016-10-22 11:04:40 +00:00
Martin Pluskal
897da2abe5 Accepting request 436453 from home:stroeder:branches:network:ldap 
update to 1.14.2

OBS-URL: https://build.opensuse.org/request/show/436453
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=176
 2016-10-20 06:50:49 +00:00
Dominique Leuenberger
8828d26e95 Accepting request 423279 from network:ldap 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/423279
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=75
 2016-08-29 12:26:20 +00:00
Jan Engelhardt
d2987b14fa Accepting request 420591 from home:stroeder:branches:network:ldap 
update to 1.14.1

OBS-URL: https://build.opensuse.org/request/show/420591
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=175
 2016-08-19 19:28:03 +00:00
Dominique Leuenberger
bade06a8c3 Accepting request 408905 from network:ldap 
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/408905
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=74
 2016-07-21 05:54:10 +00:00
Jan Engelhardt
c1259b7292 sssd-1.14.0 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=174
 2016-07-08 16:12:31 +00:00
Dominique Leuenberger
05ea45fc94 Accepting request 390559 from network:ldap 
- Update to new upstream release 1.13.4

OBS-URL: https://build.opensuse.org/request/show/390559
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=73
 2016-04-30 21:28:03 +00:00
Jan Engelhardt
86273c6d97 kill stupid explicit requires 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=173
 2016-04-18 12:48:53 +00:00
Howard Guo
0320a60e67 - Enable PAC responder. 
PAC is an extension element returned by domain controller, to speed
  up resolution of authorisation data such as group memberships.

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=172
 2016-04-18 12:29:12 +00:00
Martin Pluskal
b75ea40b70 Accepting request 390020 from home:stroeder:branches:network:ldap 
update to 1.13.4

OBS-URL: https://build.opensuse.org/request/show/390020
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=171
 2016-04-14 18:01:48 +00:00
Dominique Leuenberger
77971551c1 Accepting request 358801 from network:ldap 
1

OBS-URL: https://build.opensuse.org/request/show/358801
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=72
 2016-02-17 09:30:57 +00:00