Accepting request 212033 from home:jengelh:sssd

- Update to new upstream release 1.11.3

OBS-URL: https://build.opensuse.org/request/show/212033
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=106

sssd-1.11.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:40da555ef1d81f0b73aa4e484719f9ca340dc76b7b549761f2ca775ff90b34bc
-size 3442072

sssd-1.11.2.tar.gz.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.15 (GNU/Linux)
-
-iEYEABECAAYFAlJxiVwACgkQHsardTLnvCU4CwCfU1uc5bwo9fTZXh4i0KLGp709
-wL4Anil81EFYHIFhnGsCs0L300OQmbGp
-=2QGa
------END PGP SIGNATURE-----

sssd-1.11.3.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:85b6881aa362d2686f4f5bd28bc61e33fc02fce599d7022e70cea08a3bf281c7
+size 3462928

sssd-1.11.3.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.15 (GNU/Linux)
+
+iEYEABECAAYFAlKzMroACgkQHsardTLnvCXxSgCdFD/f8rKeBmrkrRgyqRZSXU/H
+QfkAoM1o+TwKS2DcYRTdbVbpEQbg6avB
+=No1R
+-----END PGP SIGNATURE-----

sssd-ldflags.diff

@@ -1,211 +0,0 @@
-From c9b13c7e032fde96cf07c7d298bb7fa65fad220b Mon Sep 17 00:00:00 2001
-From: Jan Engelhardt <jengelh@inai.de>
-Date: Fri, 1 Nov 2013 23:01:09 +0100
-Subject: [PATCH] build: fix ordering of linker flags
-
-Libraries MUST be specified in LDADD/LIBADD, not LDFLAGS, because
-LDFLAGS appear earlier in the command line and library order is
-significant.
----
- Makefile.am |   66 ++++++++++++++++++++++++++++++------------------------------
- 1 file changed, 34 insertions(+), 32 deletions(-)
-
-Index: sssd-1.11.2/Makefile.am
-===================================================================
---- sssd-1.11.2.orig/Makefile.am
-+++ sssd-1.11.2/Makefile.am
-@@ -600,9 +600,10 @@ dist_pkgconfig_DATA += src/providers/ipa
- libipa_hbac_la_SOURCES = \
-     src/providers/ipa/hbac_evaluator.c \
-     src/util/sss_utf8.c
--libipa_hbac_la_LDFLAGS = \
--    -version-info 0:1:0 \
-+libipa_hbac_la_LIBADD = \
-     $(UNICODE_LIBS)
-+libipa_hbac_la_LDFLAGS = \
-+    -version-info 0:1:0
- 
- dist_pkgconfig_DATA += src/lib/idmap/sss_idmap.pc
- libsss_idmap_la_SOURCES = \
-@@ -617,8 +618,9 @@ libsss_nss_idmap_la_SOURCES = \
-     src/sss_client/idmap/sss_nss_idmap.c \
-     src/sss_client/common.c \
-     src/util/strtonum.c
-+libsss_nss_idmap_la_LIBADD = \
-+    $(CLIENT_LIBS)
- libsss_nss_idmap_la_LDFLAGS = \
--    $(CLIENT_LIBS) \
-     -version-info 0:1:0
- 
- include_HEADERS = \
-@@ -771,10 +773,9 @@ sss_userdel_SOURCES = \
-     $(SSSD_LCL_TOOLS_OBJ)
- sss_userdel_LDADD = \
-     $(TOOLS_LIBS) \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_userdel_CFLAGS = $(AM_CFLAGS)
--sss_userdel_LDFLAGS = \
-+    $(SSSD_INTERNAL_LTLIBS) \
-     $(CLIENT_LIBS)
-+sss_userdel_CFLAGS = $(AM_CFLAGS)
- 
- sss_groupadd_SOURCES = \
-     src/tools/sss_groupadd.c \
-@@ -788,30 +789,27 @@ sss_groupdel_SOURCES = \
-     $(SSSD_LCL_TOOLS_OBJ)
- sss_groupdel_LDADD = \
-     $(TOOLS_LIBS) \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_groupdel_CFLAGS = $(AM_CFLAGS)
--sss_groupdel_LDFLAGS = \
-+    $(SSSD_INTERNAL_LTLIBS) \
-     $(CLIENT_LIBS)
-+sss_groupdel_CFLAGS = $(AM_CFLAGS)
- 
- sss_usermod_SOURCES = \
-     src/tools/sss_usermod.c \
-     $(SSSD_LCL_TOOLS_OBJ)
- sss_usermod_LDADD = \
-     $(TOOLS_LIBS) \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_usermod_CFLAGS = $(AM_CFLAGS)
--sss_usermod_LDFLAGS = \
-+    $(SSSD_INTERNAL_LTLIBS) \
-     $(CLIENT_LIBS)
-+sss_usermod_CFLAGS = $(AM_CFLAGS)
- 
- sss_groupmod_SOURCES = \
-     src/tools/sss_groupmod.c \
-     $(SSSD_LCL_TOOLS_OBJ)
- sss_groupmod_LDADD = \
-     $(TOOLS_LIBS) \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_groupmod_CFLAGS = $(AM_CFLAGS)
--sss_groupmod_LDFLAGS = \
-+    $(SSSD_INTERNAL_LTLIBS) \
-     $(CLIENT_LIBS)
-+sss_groupmod_CFLAGS = $(AM_CFLAGS)
- 
- sss_groupshow_SOURCES = \
-     src/tools/sss_groupshow.c \
-@@ -825,10 +823,9 @@ sss_cache_SOURCES = \
-     $(SSSD_LCL_TOOLS_OBJ)
- sss_cache_LDADD = \
-     $(TOOLS_LIBS) \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_cache_CFLAGS = $(AM_CFLAGS)
--sss_cache_LDFLAGS = \
-+    $(SSSD_INTERNAL_LTLIBS) \
-     $(CLIENT_LIBS)
-+sss_cache_CFLAGS = $(AM_CFLAGS)
- 
- sss_debuglevel_SOURCES = \
-     src/tools/sss_debuglevel.c \
-@@ -851,7 +848,7 @@ sss_sudo_cli_SOURCES = \
-     src/sss_client/sudo/sss_sudo_response.c \
-     src/sss_client/sudo_testcli/sudo_testcli.c
- sss_sudo_cli_CFLAGS = $(AM_CFLAGS)
--sss_sudo_cli_LDFLAGS = $(CLIENT_LIBS)
-+sss_sudo_cli_LDADD = $(CLIENT_LIBS)
- endif
- 
- if BUILD_SSH
-@@ -861,8 +858,8 @@ sss_ssh_authorizedkeys_SOURCES = \
-     src/sss_client/ssh/sss_ssh_authorizedkeys.c
- sss_ssh_authorizedkeys_CFLAGS = $(AM_CFLAGS)
- sss_ssh_authorizedkeys_LDADD = \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_ssh_authorizedkeys_LDFLAGS = $(CLIENT_LIBS) $(TALLOC_LIBS) $(POPT_LIBS)
-+    $(SSSD_INTERNAL_LTLIBS) \
-+    $(CLIENT_LIBS) $(TALLOC_LIBS) $(POPT_LIBS)
- 
- sss_ssh_knownhostsproxy_SOURCES = \
-     src/sss_client/common.c \
-@@ -870,8 +867,8 @@ sss_ssh_knownhostsproxy_SOURCES = \
-     src/sss_client/ssh/sss_ssh_knownhostsproxy.c
- sss_ssh_knownhostsproxy_CFLAGS = $(AM_CFLAGS)
- sss_ssh_knownhostsproxy_LDADD = \
--    $(SSSD_INTERNAL_LTLIBS)
--sss_ssh_knownhostsproxy_LDFLAGS = $(CLIENT_LIBS) $(TALLOC_LIBS) $(POPT_LIBS)
-+    $(SSSD_INTERNAL_LTLIBS) \
-+    $(CLIENT_LIBS) $(TALLOC_LIBS) $(POPT_LIBS)
- endif
- 
- #################
-@@ -1402,7 +1399,7 @@ noinst_PROGRAMS += autofs_test_client
- endif
- 
- pam_test_client_SOURCES = src/sss_client/pam_test_client.c
--pam_test_client_LDFLAGS = -lpam -lpam_misc
-+pam_test_client_LDADD = -lpam -lpam_misc
- 
- if BUILD_AUTOFS
- autofs_test_client_SOURCES = \
-@@ -1410,7 +1407,7 @@ autofs_test_client_SOURCES = \
-     src/sss_client/autofs/sss_autofs.c \
-     src/sss_client/common.c
- autofs_test_client_CFLAGS = $(AM_CFLAGS)
--autofs_test_client_LDFLAGS = -lpopt $(CLIENT_LIBS)
-+autofs_test_client_LDADD = -lpopt $(CLIENT_LIBS)
- endif
- 
- ####################
-@@ -1432,8 +1429,9 @@ libnss_sss_la_SOURCES = \
-     src/sss_client/nss_mc_passwd.c \
-     src/sss_client/nss_mc_group.c \
-     src/sss_client/nss_mc.h
-+libnss_sss_la_LIBADD = \
-+    $(CLIENT_LIBS)
- libnss_sss_la_LDFLAGS = \
--    $(CLIENT_LIBS) \
-     -module \
-     -version-info 2:0:0 \
-     -Wl,--version-script,$(srcdir)/src/sss_client/sss_nss.exports
-@@ -1446,9 +1444,10 @@ pam_sss_la_SOURCES = \
-     src/util/atomic_io.c \
-     src/sss_client/sss_pam_macros.h
- 
--pam_sss_la_LDFLAGS = \
-+pam_sss_la_LIBADD = \
-     $(CLIENT_LIBS) \
--    -lpam \
-+    -lpam
-+pam_sss_la_LDFLAGS = \
-     -module \
-     -avoid-version \
-     -Wl,--version-script,$(srcdir)/src/sss_client/sss_pam.exports
-@@ -1462,8 +1461,9 @@ libsss_sudo_la_SOURCES = \
-     src/sss_client/sudo/sss_sudo.c \
-     src/sss_client/sudo/sss_sudo.h \
-     src/sss_client/sudo/sss_sudo_private.h
-+libsss_sudo_la_LIBADD = \
-+    $(CLIENT_LIBS)
- libsss_sudo_la_LDFLAGS = \
--    $(CLIENT_LIBS) \
-     -Wl,--version-script,$(srcdir)/src/sss_client/sss_sudo.exports \
-     -module \
-     -avoid-version
-@@ -1480,8 +1480,9 @@ libsss_autofs_la_SOURCES = \
-     src/sss_client/autofs/sss_autofs.c \
-     src/sss_client/autofs/sss_autofs_private.h
- 
-+libsss_autofs_la_LIBADD = \
-+    $(CLIENT_LIBS)
- libsss_autofs_la_LDFLAGS = \
--    $(CLIENT_LIBS) \
-     -module \
-     -avoid-version \
-     -Wl,--version-script,$(srcdir)/src/sss_client/autofs/sss_autofs.exports
-@@ -1831,9 +1832,10 @@ sssd_pac_plugin_la_SOURCES = \
- sssd_pac_plugin_la_CFLAGS = \
-     $(AM_CFLAGS) \
-     $(KRB5_CFLAGS)
--sssd_pac_plugin_la_LDFLAGS = \
-+sssd_pac_plugin_la_LIBADD = \
-     $(CLIENT_LIBS) \
--    -lkrb5 \
-+    -lkrb5
-+sssd_pac_plugin_la_LDFLAGS = \
-     -avoid-version \
-     -module
- 

sssd.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Fri Dec 20 21:54:58 UTC 2013 - jengelh@inai.de
+
+- Update to new upstream release 1.11.3
+* The AD provider is able to resolve group memberships for groups
+  with Global and Universal scope
+* The initgroups (get groups for user) operation for users from
+  trusted AD domains was made more reliable by reading the required
+  tokenGroups attribute from LDAP instead of Global Catalog
+* A new option ad_enable_gc was added to the AD provider. This
+  option allows the administrator to force SSSD to talk to LDAP
+  port only and never try the Global Catalog
+* The AD provider is now able to leverage the tokenGroups attribute
+  even when POSIX attributes are used, providing better performance
+  during logins.
+* A memory leak in the NSS responder that affected long-lived
+  clients that requested netgroup data was fixed
+- Remove sssd-ldflags.diff (merged upstream)
+
 -------------------------------------------------------------------
 Thu Nov 28 16:51:39 UTC 2013 - ckornacker@suse.com
 

sssd.spec

@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        1.11.2
+Version:        1.11.3
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0+ and LGPL-3.0+
@@ -28,7 +28,6 @@ Url:            https://fedorahosted.org/sssd/
 Source:         https://fedorahosted.org/released/sssd/sssd-%version.tar.gz
 Source2:        https://fedorahosted.org/released/sssd/sssd-%version.tar.gz.asc
 Source3:        baselibs.conf
-Patch1:         sssd-ldflags.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
 %define servicename	sssd
@@ -285,7 +284,6 @@ Security Services Daemon (sssd).
 %prep
 %{?gpg_verify: %gpg_verify %{S:2}}
 %setup -q
-%patch -P 1 -p1
 
 %build
 %if 0%{?suse_version} < 1210