1507d9a094
Add note about unprivileged mode security review
2024-12-20 09:20:44 +01:00
7a9befa693
sssd 2.10.1
2024-12-11 10:33:24 +01:00
Samuel Cabrero
6e6893108a
Unprivileged mode for sssd
2024-11-05 22:15:00 +01:00
Samuel Cabrero
0823836080
Use default nsslibdir
2024-11-05 21:34:50 +01:00
066c89155b
Add patches to kill extraneous INI permission checks
2024-11-05 20:41:59 +01:00
64fc4926ab
Add 0001-Configuration-make-sure-etc-sssd-and-everything.patch
...
0001-Configuration-make-sure-etc-sssd-and-everything.patch is
added ahead of the stack because it is an upstream-accepted patch.
harden_sssd-kcm.service.patch then needs a refresh for reasons of
fuzz 2.
2024-11-05 19:09:18 +01:00
Samuel Cabrero
4c1a7e3419
Fix socket activation for responders
2024-11-05 18:56:08 +01:00
d236d87ed8
sssd 2.10.0 (part 2)
2024-10-16 17:05:53 +02:00
03cfa0ca67
sssd 2.10.0
2024-10-15 15:33:24 +02:00
3a2bee3ebf
Filelist changes needed for upcoming libldb.pc from samba-4.21
2024-10-01 12:24:38 +02:00
73fb2a82f6
%{?_distconfdir:1} somehow fails to work on 15.X
2024-09-25 22:30:26 +02:00
93d212c167
Ignore libldap-data during 15.X build
2024-09-25 22:30:16 +02:00
Samuel Cabrero
bf358d8fff
Fix building for openSUSE ALP and SUSE SLFO
...
The python3_fix_shebang_path rpm macro is not available in < 1600
Signed-off-by: Samuel Cabrero <scabrero@suse.de>
2024-07-17 11:57:47 +02:00
747483e617
feed through formatter, use more widely used ?expr:1
2024-07-16 13:14:12 +02:00
8b1778e6ae
Revert the change dropping the default configuration file.
...
If usr/etc exists will be installed there, otherwise in /etc.
(bsc#1226157);
2024-07-16 13:12:59 +02:00
8368ee1997
- Update to release 2.9.5
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=312
2024-05-16 12:13:29 +00:00
303fa6397f
Accepting request 1156354 from home:pgajdos
...
- remove dependency on /usr/bin/python3 using
%python3_fix_shebang_path macro, [bsc#1212476]
OBS-URL: https://build.opensuse.org/request/show/1156354
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=310
2024-03-08 15:45:07 +00:00
503be84418
- Update to release 2.9.4
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=308
2024-01-12 14:08:36 +00:00
a80b4ff01d
add a note for why ifp is back for <1600
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=304
2023-11-21 18:24:05 +00:00
c79dc41684
Accepting request 1127890 from home:scabrero:jsc-ped6714
...
- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
* Remove package sssd-common, merged into sssd
* Continue building deprecated files provider and infopipe
responder
* Disable selinux and semanage
* Provide rcsssd shortcut
OBS-URL: https://build.opensuse.org/request/show/1127890
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=303
2023-11-21 18:20:32 +00:00
462aba7e1d
Accepting request 1127633 from home:scabrero:jsc-ped6714
...
- Fix spec file for Leap
OBS-URL: https://build.opensuse.org/request/show/1127633
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=301
2023-11-20 10:17:08 +00:00
523577d0c6
Accepting request 1127298 from home:scabrero:jsc-ped6714
...
- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
OIDC child
- Drop no longer valid --without-secrets configure switch
OBS-URL: https://build.opensuse.org/request/show/1127298
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=300
2023-11-17 14:14:26 +00:00
2f4c4a0a26
- Update to release 2.9.3
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=297
2023-11-13 12:51:39 +00:00
50ae841a7e
- Offer the sssd.conf template as %doc (for examples, do actually
...
see the "Examples" section of the sssd.conf(5) manpage)
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=295
2023-11-02 16:17:06 +00:00
cdb36fb4bb
avoid combining && and ||
...
drop init-dir
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=293
2023-10-31 16:22:04 +00:00
aa747329c7
Accepting request 1121467 from home:scabrero:branches:network:ldap
...
- Update dependencies to require the same subpackages version and
release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
"%pre"
- Move sss_analyze to sssd-tools package
OBS-URL: https://build.opensuse.org/request/show/1121467
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=292
2023-10-31 16:18:26 +00:00
72957e6cab
- Default config is unworkable, just stop installing it altogether
...
[boo#1216739]
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=291
2023-10-31 11:18:57 +00:00
23805344c9
- Update to release 2.9.2
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=289
2023-09-07 12:13:07 +00:00
5d8b276335
- Update to relese 2.9.1
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=287
2023-06-23 14:55:47 +00:00
ea64ac8953
- Update to release 2.9
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=285
2023-05-05 12:12:31 +00:00
8b3e3aa750
Accepting request 1061240 from home:gmbr3:Active
...
- Move dbus-1 system.d file to /usr (bsc#1207586)
OBS-URL: https://build.opensuse.org/request/show/1061240
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=283
2023-01-26 16:18:05 +00:00
015ebfe1b1
Accepting request 1046514 from home:schubi2:pam_usr_etc
...
- Migration of PAM settings to /usr/lib/pam.d.
OBS-URL: https://build.opensuse.org/request/show/1046514
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=281
2023-01-03 15:05:05 +00:00
c22b04d15b
- Add symvers.patch [boo#1206592]
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=279
2022-12-21 23:28:35 +00:00
ca22a8b38c
- Take systemd units off the restart list that have RefuseManualStart=yes [boo#1206592]
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=278
2022-12-21 19:31:49 +00:00
6d0aba3501
- Update to release 2.8.2
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=276
2022-12-11 14:22:43 +00:00
d8d0bddcc3
- Update to release 2.8.1
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=275
2022-11-04 12:32:42 +00:00
58bdb836fe
- Update to release 2.8.0
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=274
2022-10-07 12:15:04 +00:00
4d2abd8f93
Accepting request 1000703 from home:schubi2
...
- Migration to /usr/etc: Saving user changed configuration files
in /etc and restoring them while an RPM update.
OBS-URL: https://build.opensuse.org/request/show/1000703
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=273
2022-09-01 16:02:29 +00:00
7aa46d2e68
- Update to release 2.7.4
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=272
2022-08-26 20:57:50 +00:00
ae4a95afd7
- Update to release 2.7.3
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=271
2022-07-04 13:10:54 +00:00
c6aa571b2d
Accepting request 984137 from home:schubi2
...
- Removed %config flag for files in /usr directory.
OBS-URL: https://build.opensuse.org/request/show/984137
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=270
2022-06-21 13:46:05 +00:00
4ac5b75ba3
Accepting request 984101 from home:schubi2
...
- Moved logrotate files from user specif directory /etc/logrotate.d
to vendor specif directory /usr/etc/logrotate.d.
OBS-URL: https://build.opensuse.org/request/show/984101
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=268
2022-06-21 08:13:19 +00:00
3bf976bbd1
Accepting request 982791 from home:scabrero:branches:network:ldap
...
- Use pam rpm macros to avoid hardcoding the directory names;
(bsc#1191047);
- Do not take ownership of %_pam_confdir directory, it is owned by
pam package
OBS-URL: https://build.opensuse.org/request/show/982791
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=267
2022-06-15 12:27:00 +00:00
6cd61d4c3d
sssd-2.7.2
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=266
2022-06-13 14:50:26 +00:00
e0bab6257e
- Update to release 2.7.1
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=265
2022-06-02 15:32:20 +00:00
d571ac484c
remove 1550 condition; the package builds on TW only anyway
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=264
2022-05-16 22:01:31 +00:00
ec78c6fe44
- Enable subid_sss
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=263
2022-05-16 21:49:53 +00:00
7d719753b5
- Update to release 2.7.0
...
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=262
2022-04-14 23:20:29 +00:00
7d33d4193b
Accepting request 956514 from home:gmbr3:Active
...
- Enable selinux support
- Update Supplements to new format
OBS-URL: https://build.opensuse.org/request/show/956514
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=261
2022-02-21 17:10:16 +00:00
f58a6368cb
Accepting request 953024 from home:scabrero:branches:network:ldap
...
- Remove caches only when performing a package downgrade. The sssd
daemon takes care of upgrading the database format when necessary
(bsc#1195552)
OBS-URL: https://build.opensuse.org/request/show/953024
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=260
2022-02-10 16:12:31 +00:00