Accepting request 787787 from network:ldap

- Update to 2.2.3
- Add 0001-Fix-build-failure-against-samba-4.12.0rc1.patch

OBS-URL: https://build.opensuse.org/request/show/787787
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=102

0001-Fix-build-failure-against-samba-4.12.0rc1.patch

@@ -0,0 +1,53 @@
+From bc56b10aea999284458dcc293b54cf65288e325d Mon Sep 17 00:00:00 2001
+From: Stephen Gallagher <sgallagh@redhat.com>
+Date: Fri, 24 Jan 2020 15:17:39 +0100
+Subject: [PATCH] Fix build failure against samba 4.12.0rc1
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+The ndr_pull_get_switch() function was dropped, but it was just a wrapper
+around the ndr_token_peek() function, so we can use this approach on both
+old and new versions of libndr.
+
+Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
+
+Reviewed-by: Pavel Březina <pbrezina@redhat.com>
+---
+ src/providers/ad/ad_gpo_ndr.c | 6 +++---
+ 1 file changed, 3 insertions(+), 3 deletions(-)
+
+diff --git a/src/providers/ad/ad_gpo_ndr.c b/src/providers/ad/ad_gpo_ndr.c
+index d57303349..8f405aa62 100644
+--- a/src/providers/ad/ad_gpo_ndr.c
++++ b/src/providers/ad/ad_gpo_ndr.c
+@@ -105,7 +105,7 @@ ndr_pull_security_ace_object_type(struct ndr_pull *ndr,
+                                   union security_ace_object_type *r)
+ {
+     uint32_t level;
+-    level = ndr_pull_get_switch_value(ndr, r);
++    level = ndr_token_peek(&ndr->switch_list, r);
+     NDR_PULL_CHECK_FLAGS(ndr, ndr_flags);
+     if (ndr_flags & NDR_SCALARS) {
+         NDR_CHECK(ndr_pull_union_align(ndr, 4));
+@@ -135,7 +135,7 @@ ndr_pull_security_ace_object_inherited_type(struct ndr_pull *ndr,
+                                             union security_ace_object_inherited_type *r)
+ {
+     uint32_t level;
+-    level = ndr_pull_get_switch_value(ndr, r);
++    level = ndr_token_peek(&ndr->switch_list, r);
+     NDR_PULL_CHECK_FLAGS(ndr, ndr_flags);
+     if (ndr_flags & NDR_SCALARS) {
+         NDR_CHECK(ndr_pull_union_align(ndr, 4));
+@@ -198,7 +198,7 @@ ndr_pull_security_ace_object_ctr(struct ndr_pull *ndr,
+                                  union security_ace_object_ctr *r)
+ {
+     uint32_t level;
+-    level = ndr_pull_get_switch_value(ndr, r);
++    level = ndr_token_peek(&ndr->switch_list, r);
+     NDR_PULL_CHECK_FLAGS(ndr, ndr_flags);
+     if (ndr_flags & NDR_SCALARS) {
+         NDR_CHECK(ndr_pull_union_align(ndr, 4));
+-- 
+2.25.1
+

sssd-2.2.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:5349a809d2e79ed6bbd875a49532e7e03c1e2e732c75e8d15e9e7de57d5a07d7
-size 6767578

sssd-2.2.2.tar.gz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEFvJCKUiOc2BIlSc3uogAD+Y5gnIFAl16Zd4ACgkQuogAD+Y5
-gnLdDwf6Ap0AaI/aRYhCbhcfAtexrBrzzm647RtYx4rC8BFvBz6A2SosR9oYdRC2
-HregtyJA3YoHYNhzHoiGHWkD8/73xtZeMnuk2YX+q3veHO8q34HGFAHeks8+YIq7
-29QZENBlOJOuFdxEukGwwFpCZRXRpRTfUx6jIOfmYHOSIh6ohocDaeMk5rLH7Tfh
-1PQvNK7BUoRrgrZaDaCepH5GAyf0l7iK3j1I6N1u95bXsdfdFoFbYvgQmM4OkUvm
-iLT0aHGM+gz4x9TLbTfaQojGMdbpWQV9DCGOnZWqCTX4VD+xQUGnjLm8Olng5p+v
-HJUJtcQPi5GAY2Pqaicgu1w+0oySAw==
-=Hrnj
------END PGP SIGNATURE-----

sssd-2.2.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:11565446290e7432dbd208c4db02fcb42ab17e853d8ba4f994af9a9c57bbbb11
+size 6894302

sssd-2.2.3.tar.gz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEFvJCKUiOc2BIlSc3uogAD+Y5gnIFAl3i6dIACgkQuogAD+Y5
+gnLovgf/QSNThIaVkCIC6doJNncuIaJuuu+GkihXe+4K6xHgksbMR7C7GyIEqxJQ
+Dy2UAzH4FMUzbBoBwb9kW6Du2nt+9Rp2dVz/H/lmgNlKgX3siOVFJ4rwlCD3bJUi
+eay5t9GTTQAUzpM1N1HdQPGk0ErT0mI77d3GLr7L8S64/SFI4aai58+T/VIRlbMQ
+0t/BGo1yo4Ss97u9SrC62DSfev7Rl8mmdTMlJIYU2UAjEVYtJm5TViUDGy44eh+V
+HM1l6EpMSGvEVrr6ALm4VNNntCjs37GJxyGrXFqljjs+tiBFpZT+5ENQl/X2RBsT
+tRSZpATPjmRoYhLyqgPqLuAg5tXtaw==
+=UpXd
+-----END PGP SIGNATURE-----

sssd.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Tue Mar 24 10:49:17 UTC 2020 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to 2.2.3
+  * New features:
+  * allow_missing_name now treats empty strings the same as
+    missing names.
+  * "soft_ocsp" and "soft_crl" options have been added to make
+    the checks for revoked certificates more flexible if the
+    system is offline.
+  * Smart card authentication in polkit is now allowed by default.
+  * Fixes:
+  * Handling of FreeIPA users and groups containing ‘@’ sign now
+    works.
+  * SSSD was unable to hande ldap_uri containing URIs with
+    different port numbers, which has been rectified.
+- Add 0001-Fix-build-failure-against-samba-4.12.0rc1.patch
+
 -------------------------------------------------------------------
 Mon Mar 16 16:44:23 UTC 2020 - Samuel Cabrero <scabrero@suse.de>
 

sssd.spec

@@ -18,7 +18,7 @@
 %define _buildshell /bin/bash
 
 Name:           sssd
-Version:        2.2.2
+Version:        2.2.3
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later and LGPL-3.0-or-later
@@ -33,7 +33,7 @@ Patch1:         krb-noversion.diff
 Patch2:         sssd-gpo_host_security_filter-2.2.2.patch
 Patch3:         0001-Resolve-computer-lookup-failure-when-sam-cn.patch
 Patch4:         0001-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
-BuildRoot:      %_tmppath/%name-%version-build
+Patch5:         0001-Fix-build-failure-against-samba-4.12.0rc1.patch
 
 %define servicename	sssd
 %define sssdstatedir	%_localstatedir/lib/sss
@@ -527,6 +527,7 @@ rm -f /var/lib/sss/db/*.ldb
 %_mandir/??/man5/sss-certmap.5.gz
 %_mandir/??/man5/sssd-ad.5.gz
 %_mandir/??/man5/sssd-files.5*
+%_mandir/??/man5/sssd-ldap-attributes.5*
 %_mandir/??/man5/sssd-secrets.5.gz
 %_mandir/??/man5/sssd-session-recording.5.gz
 %_mandir/??/man5/sssd-simple.5*
@@ -540,6 +541,7 @@ rm -f /var/lib/sss/db/*.ldb
 %_mandir/man1/sss_ssh_*
 %_mandir/man5/sss-certmap.5.gz
 %_mandir/man5/sssd-files.5*
+%_mandir/man5/sssd-ldap-attributes.5*
 %_mandir/man5/sssd-session-recording.5.gz
 %_mandir/man5/sssd-simple.5*
 %_mandir/man5/sssd-sudo.5*