diff --git a/sssd.changes b/sssd.changes index df7287f..71b378c 100644 --- a/sssd.changes +++ b/sssd.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Jun 11 14:53:26 UTC 2025 - Samuel Cabrero + +- Install file in krb5.conf.d to include sssd krb5 config snippets; + (bsc#1244325); + ------------------------------------------------------------------- Thu Jun 5 12:14:03 UTC 2025 - Jan Engelhardt diff --git a/sssd.spec b/sssd.spec index 6b05fab..21ee43b 100644 --- a/sssd.spec +++ b/sssd.spec @@ -511,6 +511,10 @@ cat >"$b/%permissions_path/sssd" <<-EOF +capabilities cap_dac_read_search=p EOF +mkdir -pv "$b/%_sysconfdir/krb5.conf.d" +ln -sv %_datadir/%name/krb5-snippets/enable_sssd_conf_dir \ + "$b/%_sysconfdir/krb5.conf.d/enable_sssd_conf_dir" + %check # sss_config-tests fails %make_build check || : @@ -720,7 +724,6 @@ fi %attr(755,%sssd_user,%sssd_user) %dir %pipepath/ %attr(700,%sssd_user,%sssd_user) %dir %pipepath/private/ %attr(755,%sssd_user,%sssd_user) %dir %pubconfpath/ -%attr(755,%sssd_user,%sssd_user) %dir %pubconfpath/krb5.include.d %attr(755,%sssd_user,%sssd_user) %dir %gpocachepath/ %attr(755,%sssd_user,%sssd_user) %dir %mcpath/ %attr(700,%sssd_user,%sssd_user) %dir %keytabdir/ @@ -824,7 +827,6 @@ fi %dir %_libdir/%name/ %_libdir/%name/libsss_krb5.so %dir %_datadir/%name/ -%exclude %_datadir/%name/krb5-snippets/ %dir %_datadir/%name/sssd.api.d/ %_datadir/%name/sssd.api.d/sssd-krb5.conf %dir %_mandir/??/ @@ -833,11 +835,16 @@ fi %_mandir/??/man5/sssd-krb5.5* %files krb5-common +%attr(755,root,root) %dir %pubconfpath/krb5.include.d +%config(noreplace,missingok) %{_sysconfdir}/krb5.conf.d/enable_sssd_conf_dir %dir %_libdir/%name/ %_libdir/%name/libsss_krb5_common.so %dir %_libexecdir/%name/ %attr(750,root,%sssd_user) %caps(cap_dac_read_search,cap_setgid,cap_setuid=p) %_libexecdir/%name/krb5_child %attr(750,root,%sssd_user) %caps(cap_dac_read_search=p) %_libexecdir/%name/ldap_child +%dir %{_datadir}/sssd/krb5-snippets +%_datadir/%name/krb5-snippets/enable_sssd_conf_dir +%_datadir/%name/krb5-snippets/sssd_enable_idp %files ldap %dir %_libdir/%name/