969bc75c7f
Accepting request 619100 from home:ckowalczyk:branches:network:ldap:bsc1098163-cve201810852
...
- Introduce patches:
* Create sockets with right permissions:
0001-SUDO-Create-the-socket-with-stricter-permissions.patch
(bsc#1098377, CVE-2018-10852)
* Fix for sssd upstream integration tests
0002-intg-Do-not-hardcode-nsslibdir.patch
(bsc#1098163)
OBS-URL: https://build.opensuse.org/request/show/619100
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=203
2018-06-27 23:04:40 +00:00
Peter Varkoly
12009674a9
- Update to new minor upstream release 1.16.2
...
New Features:
* The smart card authentication, or in more general certificate
authentication code now supports OpenSSL in addition to previously
supported NSS (#3489 ). In addition, the SSH responder can now
return public SSH keys derived from the public keys stored in a
X.509 certificate. Please refer to the ssh_use_certificate_keys
option in the man pages.
* The files provider now supports mirroring multiple passwd or
group files. This enhancement can be used to use the SSSD files
provider instead of the nss_altfiles module
Bugfixes:
* A memory handling issue in the nss_ex interface was fixed. This
bug would manifest in IPA environments with a trusted AD domain
as a crash of the ns-slapd process, because a ns-slapd plugin
loads the nss_ex interface (#3715 )
* Several fixes for the KCM deamon were merged (see #3687 , #3671 , #3633 )
* The ad_site override is now honored in GPO code as well (#3646 )
* Several potential crashes in the NSS responder’s netgroup code
were fixed (#3679 , #3731 )
* A potential crash in the autofs responder’s code was fixed (#3752 )
* The LDAP provider now supports group renaming (#2653 )
* The GPO access control code no longer returns an error if one
of the relevant GPO rules contained no SIDs at all (#3680 )
* A memory leak in the IPA provider related to resolving external
AD groups was fixed (#3719 )
* Setups that used multiple domains where one of the domains had
its ID space limited using the min_id/max_id options did not
resolve requests by ID properly (#3728 )
* Overriding IDs or names did not work correctly when the domain
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=197
2018-06-20 08:48:06 +00:00
4cadadc038
Accepting request 602087 from home:ckowalczyk:branches:network:ldap:sssd-1_16_1
...
- Update to new minor upstream release 1.16.1 (fate#323340):
New Features:
* A new option auto_private_groups was added. If this option is
enabled, SSSD will automatically create user private groups based
on user’s UID number. The GID number is ignored in this case.
* The SSSD smart card integration now supports a special type of PAM
conversation implemented by GDM which allows the user to select
the appropriate smrt card certificate in GDM.
* A new API for accessing user and group information was added.
This API is similar to the tradiional Name Service Switch API, but
allows the consumer to talk to SSSD directly as well as to
fine-tune the query with e.g. how cache should be evaluated.
* The sssctl command line tool gained a new command access-report,
which can generate who can access the client machine. Currently
only generating the report on an IPA client based on HBAC rules
is supported.
* The hostid provider was moved from the IPA specific code to
the generic LDAP code. This allows SSH host keys to be access by
the generic LDAP provider as well. See the ldap_host_* options in
the sssd-ldap manual page for more details.
* Setting the memcache_timeout option to 0 disabled creating
the memory cache files altogether. This can be useful in cases
there is a bug in the memory cache that needs working around.
OBS-URL: https://build.opensuse.org/request/show/602087
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=195
2018-04-28 09:49:26 +00:00
6f604b343f
Accepting request 600643 from home:ckowalczyk:branches:network:ldap:bsc1062124
...
- Updated sssd.spec:
The IPA provider depends on AD provider's PAC executable, hence
introducing the package dependency. (bsc#1021441, bsc#1062124)
OBS-URL: https://build.opensuse.org/request/show/600643
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=194
2018-04-24 19:16:52 +00:00
Howard Guo
d0b251fd0c
- Remove package descriptions for the python 2 packages that are
...
no longer distributed:
* python-ipa_hbac
* python-sss-murmur
* python-sss_nss_idmap
* python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=193
2018-02-27 09:36:30 +00:00
Howard Guo
f149bbe067
- Correct dependency of sss_obfuscate command line program.
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=192
2017-12-04 10:27:54 +00:00
Howard Guo
d57d7436e1
- In an ongoing effort to reduce dependency on python version 2,
...
the following python libraries are no longer built. Nevertheless
their python3 counterparts remain in place:
* python-ipa_hbac
* python-sss-murmur
* python-sss_nss_idmap
* python-sssd-config
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=191
2017-12-01 14:37:44 +00:00
b37bcee6c1
undo specfile horkage
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=189
2017-10-25 12:00:49 +00:00
Michael Ströder
c7db1552cb
Accepting request 536206 from home:stroeder:branches:network:ldap
...
Update to new upstream release 1.16.0.
Successfully tested with Howard's test scripts on openSUSE Tumbleweed x86_64.
Build of man pages seems broken. But this is not caused by this sssd update because the man pages are already broken in sssd-tools-1.15.2-1.4 package in Tumbleweed.
OBS-URL: https://build.opensuse.org/request/show/536206
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=188
2017-10-25 11:56:22 +00:00
Howard Guo
63b85c3a82
- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
...
krb5-common sub-package. Address bsc#1024836.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=187
2017-03-16 13:36:38 +00:00
e0d45ad549
wrap to 66 cols as wiki demands
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=186
2017-03-16 00:13:21 +00:00
fb25d602fc
Accepting request 479818 from home:stroeder:branches:network:ldap
...
update to 1.15.2
OBS-URL: https://build.opensuse.org/request/show/479818
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=185
2017-03-15 23:57:39 +00:00
96255f5760
- Switch *all* URLs after fedorahosted.org retirement
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=184
2017-03-11 22:35:00 +00:00
Martin Pluskal
46b225a156
Accepting request 476961 from home:stroeder:branches:network:ldap
...
update to upstream release 1.15.1
OBS-URL: https://build.opensuse.org/request/show/476961
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=183
2017-03-05 08:29:21 +00:00
Martin Pluskal
0f3b21548f
Accepting request 458768 from home:kukuk:branches:network:ldap
...
- Remove obsolete insserv call
OBS-URL: https://build.opensuse.org/request/show/458768
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=182
2017-02-18 07:44:39 +00:00
Howard Guo
d7756cde6a
Accepting request 455790 from home:luizluca:branches:network:ldap
...
Simply add /etc/sssd/conf.d/ for configuration snippets
OBS-URL: https://build.opensuse.org/request/show/455790
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=181
2017-02-10 07:40:27 +00:00
aab7330625
Accepting request 452485 from home:stroeder:branches:network:ldap
...
update to 1.15.0 (testing needed)
OBS-URL: https://build.opensuse.org/request/show/452485
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=180
2017-01-26 14:22:39 +00:00
e55ddcabba
Accepting request 445423 from home:dimstar:Factory
...
- BuildRequire pkgconfig(libsystemd) instead of
pkgconfig(libsystemd-login): the latter has been deprecated since
systemd 209 and finally removed with systemd 230.
OBS-URL: https://build.opensuse.org/request/show/445423
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=179
2016-12-12 13:46:31 +00:00
e4721490fb
document the patch, mention it... meh
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=178
2016-12-07 10:52:05 +00:00
39a9c680c9
Accepting request 444617 from home:stroeder:branches:network:ldap
...
added 0001-krb5-1.15-build-fix.patch
OBS-URL: https://build.opensuse.org/request/show/444617
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=177
2016-12-07 10:14:54 +00:00
Martin Pluskal
897da2abe5
Accepting request 436453 from home:stroeder:branches:network:ldap
...
update to 1.14.2
OBS-URL: https://build.opensuse.org/request/show/436453
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=176
2016-10-20 06:50:49 +00:00
d2987b14fa
Accepting request 420591 from home:stroeder:branches:network:ldap
...
update to 1.14.1
OBS-URL: https://build.opensuse.org/request/show/420591
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=175
2016-08-19 19:28:03 +00:00
c1259b7292
sssd-1.14.0
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=174
2016-07-08 16:12:31 +00:00
Howard Guo
0320a60e67
- Enable PAC responder.
...
PAC is an extension element returned by domain controller, to speed
up resolution of authorisation data such as group memberships.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=172
2016-04-18 12:29:12 +00:00
Martin Pluskal
b75ea40b70
Accepting request 390020 from home:stroeder:branches:network:ldap
...
update to 1.13.4
OBS-URL: https://build.opensuse.org/request/show/390020
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=171
2016-04-14 18:01:48 +00:00
Howard Guo
9b0795bf33
Accepting request 358748 from home:pluskalm:branches:network:ldap
...
- Enable internal testsuite
OBS-URL: https://build.opensuse.org/request/show/358748
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=170
2016-02-11 07:15:11 +00:00
27f09c1927
- Update to new maintenance release 1.13.3
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=165
2015-12-16 14:09:08 +00:00
3cd3228f53
resolve conflict
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=164
2015-12-07 08:26:52 +00:00
d60438c424
Trim changelog. The attention span of users is a exponentially decreasing curve.
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=161
2015-09-30 17:16:14 +00:00
Howard Guo
242b37bf26
Accepting request 334998 from home:stroeder:branches:network:ldap
...
update to 1.13.1, successfully tested on openSUSE 13.2 with sssd-ldap
OBS-URL: https://build.opensuse.org/request/show/334998
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=160
2015-09-30 13:29:05 +00:00
828ab1693b
sssd-1.13
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=158
2015-08-20 08:53:21 +00:00
17833a44b8
- Kill unused libsss_sudo-devel solvable.
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=156
2015-08-12 18:28:40 +00:00
ce81c1f6dc
osc copypac from project:network:ldap package:sssd revision:153
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=155
2015-08-12 17:46:44 +00:00
04c133d345
osc copypac from project:network:ldap package:sssd revision:152
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=154
2015-08-12 16:43:15 +00:00
Howard Guo
22cf72b7ed
obsolete/provide libsss_sudo
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=153
2015-08-11 07:42:49 +00:00
ab1fc857cd
Accepting request 313709 from home:elvigia:branches:network:ldap
...
- sssd.service: add Before= and Wants=nss-user-lookup.target
correct fix for bsc#926961
OBS-URL: https://build.opensuse.org/request/show/313709
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=151
2015-06-25 18:18:07 +00:00
48ad59e229
Trim changelog by smart grammatical reordering
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=149
2015-06-14 20:54:24 +00:00
b39414e572
Accepting request 311988 from home:stroeder:branches:network:ldap
...
update to 1.12.5
OBS-URL: https://build.opensuse.org/request/show/311988
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=148
2015-06-14 20:48:52 +00:00
7a747e45df
Accepting request 286738 from home:guohouzuo
...
OBS-URL: https://build.opensuse.org/request/show/286738
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=146
2015-02-19 11:27:30 +00:00
df5d2d0f39
Accepting request 286307 from home:guohouzuo
...
A minor rpmspec cleanup to get rid of five rpmlint warnings
OBS-URL: https://build.opensuse.org/request/show/286307
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=145
2015-02-16 10:34:43 +00:00
b1d6287bca
sssd-1.12.3
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=143
2015-01-08 22:43:40 +00:00
86656f23a4
Accepting request 266999 from home:msmeissn:branches:network:ldap
...
- build with PIE
OBS-URL: https://build.opensuse.org/request/show/266999
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=141
2015-01-01 23:00:25 +00:00
c3f2b68a07
Accepting request 260566 from home:Ledest:misc
...
fix bashism in postun script
OBS-URL: https://build.opensuse.org/request/show/260566
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=139
2014-12-08 22:59:07 +00:00
f5f2db69d2
- Update to new upstream release 1.12.2 (bugfix release, bnc#900159)
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=136
2014-10-30 20:04:24 +00:00
938cdaff2f
sssd-1.12.2
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=135
2014-10-30 13:18:09 +00:00
44b6230c6d
Add 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=134
2014-10-11 13:39:47 +00:00
1a9ba34fc6
Accepting request 255031 from home:elvigia:branches:network:ldap
...
- 0001-build-detect-endianness-at-configure-time.patch
Correct defective endianness test.
OBS-URL: https://build.opensuse.org/request/show/255031
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=133
2014-10-11 12:40:55 +00:00
8ca2d3df1c
Changelog summary from varkoly
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=128
2014-10-10 07:25:15 +00:00
0d211d8609
Accepting request 245784 from home:leonardocf:branches:network:ldap
...
- The utility sss_obfuscate uses the Python module pysss, so add a
dependency on python-sssd-config to sssd-tools (bnc#890242)
OBS-URL: https://build.opensuse.org/request/show/245784
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=125
2014-08-22 19:03:55 +00:00
992327eeeb
Clear caches; rcsssd
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=122
2014-08-10 15:23:36 +00:00