sssd-1.8.93

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=73

0003-Allow-LDAP-to-decide-when-an-expiration-warning-is-w.patch

@@ -1,33 +0,0 @@
-From d0bf20038fddf5ad296287fb16bc80082088b770 Mon Sep 17 00:00:00 2001
-From: Stephen Gallagher <sgallagh@redhat.com>
-Date: Mon, 1 Aug 2011 10:48:06 -0400
-Subject: Allow LDAP to decide when an expiration warning is warranted
-
-Previously, we were only displaying expiration warnings if the
-password was going to expire within a day. We'll allow LDAP to
-make this decision (by whether it passes us the expiration time).
-
-In the future, we can add an option to clamp this down to a
-shorter period if the local admin prefers it.
-
-diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
-index 3c9d760..7fcf985 100644
---- a/src/responder/pam/pamsrv_cmd.c
-+++ b/src/responder/pam/pamsrv_cmd.c
-@@ -409,9 +409,10 @@ static errno_t filter_responses(struct confdb_ctx *cdb,
-                     }
-                     memcpy(&expire_warn, resp->data + sizeof(uint32_t),
-                            sizeof(uint32_t));
--                    if(expire_warn > pam_expiration_warning * (60 * 60 * 24)) {
--                        resp->do_not_send_to_client = true;
--                    }
-+                    /* TODO: Add an option to limit the display of the
-+                     * expiration warning to a specified number of
-+                     * days (e.g. 14)
-+                     */
-                     break;
-                 default:
-                     DEBUG(7, ("User info type [%d] not filtered.\n"));
--- 
-1.7.3.4
-

libdl.diff

@@ -1,29 +0,0 @@
-From: Jan Engelhardt <jengelh@inai.de>
-Date: 2012-05-11 19:34:50.087905211 +0200
-
-build: resolve link failure
-
-libtool: link: gcc -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Werror-implicit-function-declaration -fno-strict-aliasing -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -Wl,--version-script -Wl,./src/providers/sssd_be.exports -o sssd_be src/providers/data_provider_be.o src/providers/data_provider_fo.o src/providers/data_provider_opts.o src/providers/data_provider_callbacks.o src/providers/fail_over.o src/resolv/async_resolv.o -Wl,--export-dynamic  -lpam -lcares ./.libs/libsss_util.a -ltevent -ltalloc -lpopt -lldb -ldbus-1 -lpcre -lini_config -lcollection -ldhash -llber -lldap -ltdb -lunistring -lcrypto
-/usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../x86_64-suse-linux/bin/ld: src/providers/data_provider_be.o: undefined reference to symbol 'dlsym@@GLIBC_2.2.5'
-/usr/lib64/gcc/x86_64-suse-linux/4.7/../../../../x86_64-suse-linux/bin/ld: note: 'dlsym@@GLIBC_2.2.5' is defined in DSO /lib64/libdl.so.2 so try adding it to the linker command line
-/lib64/libdl.so.2: could not read symbols: Invalid operation
-collect2: error: ld returned 1 exit status
-make[2]: *** [sssd_be] Error 1
-
----
- Makefile.am |    2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-Index: sssd-1.8.3/Makefile.am
-===================================================================
---- sssd-1.8.3.orig/Makefile.am
-+++ sssd-1.8.3/Makefile.am
-@@ -547,7 +547,7 @@ sssd_be_SOURCES = \
-     src/providers/data_provider_callbacks.c \
-     $(SSSD_FAILOVER_OBJ)
- sssd_be_LDADD = \
--    $(SSSD_LIBS) \
-+    -ldl $(SSSD_LIBS) \
-     $(CARES_LIBS) \
-     libsss_util.la
- sssd_be_LDFLAGS = \

sssd-1.8.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:75ca9465db5816804fe58e250450cb08867e1d1d8557c21ca731230cd80747e3
-size 2156262

sssd-1.8.3.tar.gz.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.12 (GNU/Linux)
-
-iEYEABECAAYFAk+iz+UACgkQeiVVYja6o6MakgCeJ8poAGhQPPOTFGFQcr3sCHI/
-sv0An2lI/FR2R4+6iltEeaXZCqdvbetY
-=iKbt
------END PGP SIGNATURE-----

sssd-1.8.93.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d0577b6f27ea68ba164b701d84628c380bc82275b546fd20a624cfb752fd3e40
+size 1141600

sssd.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Wed Jun 27 12:32:05 UTC 2012 - jengelh@inai.de
+
+- Update to new upstream release 1.8.93 (1.9.0~beta3)
+* Add native support for autofs to the IPA provider
+* Support for id mapping when connecting to Active Directory
+* Support for handling very large (> 1500 users) groups in
+  Active Directory
+* Add a new fast in-memory cache to speed up lookups of cached data
+  on repeated requests
+* Add support for the Kerberos DIR cache for storing multiple TGTs
+  automatically
+* Add a new PAC responder for dealing with cross-realm Kerberos
+  trusts
+* Terminate idle connections to the NSS and PAM responders
+
 -------------------------------------------------------------------
 Thu May 10 04:22:47 UTC 2012 - jengelh@inai.de
 

sssd.spec

@@ -17,20 +17,19 @@
 
 
 Name:           sssd
-Version:        1.8.3
+Version:        1.8.93
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+
 Group:          System/Daemons
 Url:            https://fedorahosted.org/sssd/
 
-Source:         https://fedorahosted.org/released/sssd/%name-%version.tar.gz
+#Git-Clone:	git://git.fedorahosted.org/sssd
-Source2:        https://fedorahosted.org/released/sssd/%name-%version.tar.gz.asc
+Source:         %name-%version.tar.xz
 Source3:        baselibs.conf
-Patch3:         0003-Allow-LDAP-to-decide-when-an-expiration-warning-is-w.patch
 Patch5:         0005-implicit-decl.diff
-Patch6:         libdl.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+BuildRequires:  xz
 
 %define servicename sssd
 %define sssdstatedir %{_localstatedir}/lib/sss
@@ -44,11 +43,16 @@ BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %define python_sitearch %py_sitedir
 %endif
 
-### Build Dependencies ###
+#BuildRequires:	autoconf >= 2.59, automake, libtool
+BuildRequires:  bind-utils
+BuildRequires:  docbook-xsl-stylesheets
+BuildRequires:  krb5-devel
+BuildRequires:  pkgconfig >= 0.21
 %if 0%{?suse_version} >= 1210
 BuildRequires:  pkgconfig(collection) >= 0.5.1
-BuildRequires:  pkgconfig(dbus-1)
+BuildRequires:  pkgconfig(dbus-1) >= 1.0.0
 BuildRequires:  pkgconfig(dhash) >= 0.4.2
+BuildRequires:  pkgconfig(glib-2.0)
 BuildRequires:  pkgconfig(ini_config) >= 0.6.1
 BuildRequires:  pkgconfig(ldb) >= 0.9.2
 BuildRequires:  pkgconfig(libcares)
@@ -61,7 +65,8 @@ BuildRequires:  pkgconfig(talloc)
 BuildRequires:  pkgconfig(tdb) >= 1.1.3
 BuildRequires:  pkgconfig(tevent)
 %else
-BuildRequires:  dbus-1-devel
+BuildRequires:  dbus-1-devel >= 1.0.0
+BuildRequires:  glib2-devel
 BuildRequires:  libcares-devel
 BuildRequires:  libcollection-devel >= 0.5.1
 BuildRequires:  libdhash-devel >= 0.4.2
@@ -76,18 +81,6 @@ BuildRequires:  pcre-devel >= 7
 BuildRequires:  popt-devel
 BuildRequires:  python-devel
 %endif
-BuildRequires:  autoconf
-BuildRequires:  automake
-BuildRequires:  bind-utils
-BuildRequires:  docbook-xsl-stylesheets
-BuildRequires:  krb5-devel
-BuildRequires:  libtool
-%if 0%{?suse_version} >= 1140
-BuildRequires:  libunistring-devel
-%else
-# SLES 11 SP2 does not have libunistring
-BuildRequires:  glib2-devel
-%endif
 %if 0%{?suse_version} >= 1220
 BuildRequires:  libxml2-tools
 BuildRequires:  libxslt-tools
@@ -150,6 +143,23 @@ Requires:       libipa_hbac0 = %version
 Utility library to validate FreeIPA HBAC rules for authorization
 requests.
 
+%package -n libsss_idmap0
+Summary:        FreeIPA ID mapping library
+License:        LGPL-3.0+
+Group:          System/Libraries
+
+%description -n libsss_idmap0
+A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
+
+%package -n libsss_idmap-devel
+Summary:        Development files for the FreeIPA idmap library
+License:        LGPL-3.0+
+Group:          Development/Libraries/C and C++
+Requires:       libsss_idmap0 = %version
+
+%description -n libsss_idmap-devel
+A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
+
 %package -n python-ipa_hbac
 Summary:        Python bindings for the FreeIPA HBAC Evaluator library
 License:        GPL-3.0+ and LGPL-3.0+
@@ -172,10 +182,9 @@ Security Services Daemon (sssd).
 
 %prep
 %setup -q
-%patch -P 3 -P 5 -P 6 -p1
+%patch -P 5 -p1
 
 %build
-autoreconf
 %if 0%{?suse_version} < 1210
 # pkgconfig file not present
 export LDB_LIBS="-lldb"
@@ -206,7 +215,7 @@ export PATH="$PATH:/usr/sbin"
 make %{?_smp_mflags} all
 
 %install
-make install DESTDIR=$RPM_BUILD_ROOT
+make install DESTDIR="%buildroot"
 
 # Copy default sssd.conf file
 install -d %{buildroot}%{_mandir}/cs
@@ -364,6 +373,16 @@ rm -rf \
 %_libdir/libipa_hbac.so
 %_libdir/pkgconfig/ipa_hbac.pc
 
+%files -n libsss_idmap0
+%defattr(-,root,root)
+%_libdir/libsss_idmap.so.0*
+
+%files -n libsss_idmap-devel
+%defattr(-,root,root)
+%_includedir/sss_idmap.h
+%_libdir/libsss_idmap.so
+%_libdir/pkgconfig/sss_idmap.pc
+
 %files -n python-ipa_hbac
 %defattr(-,root,root)
 %python_sitearch/pyhbac.so
@@ -371,9 +390,6 @@ rm -rf \
 %files -n python-sssd-config
 %defattr(-,root,root)
 %python_sitearch/pysss.so
-%python_sitelib/SSSDConfig*.py*
+%python_sitelib/SSSDConfig*
-%python_sitelib/SSSDConfig*.egg-info
-%python_sitelib/ipachangeconf.py*
-%python_sitelib/sssd_upgrade_config.py*
 
 %changelog