mhurron/sssd
SHA256
1
0
Fork 0
forked from jengelh/sssd
Code Pull Requests Activity

sssd-1.14.0

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=174
This commit is contained in:
Jan Engelhardt
2016-07-08 16:12:31 +00:00
committed by Git OBS Bridge
parent 86273c6d97
commit c1259b7292
7 changed files with 77 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
sssd.changes
View File

@@ -1,3 +1,39 @@
-------------------------------------------------------------------
Fri Jul 8 10:46:59 UTC 2016 - jengelh@inai.de
- Update to new upstream release 1.14.0
* The AD provider is now able to look up users from Active
Directory domains by certificate. This change enables logins for
Active Directory users with the help of a smart card.
* The sss_override tool is now able to add certificates as local
overrides in the SSSD cache. Please note that the certificate
overrides are stored in the local cache, so removing the cache
also removes all the certificates!
* Invalid certificates are skipped instead of aborting the whole
operation when logging in with a smart card using SSH.
* This version allows several OCSP-related options such as the OCSP
responder to be configured during smart card authentication.
* SSSD is now able to determine the name of the user who logs in
from the inserted smart card without having to type in the
username. Note that this functionality must be enabled with the
allow_missing_name pam_sss option.
* The sss_cache command line tool is now able to invalidate SUDO
rules with its new -r/-R switches. Note that the sudo rules ar
not refreshed with the sss_cache tool immediately.
* A new command line tool called sssctl was added. This tool
allows to observe the status of SSSD.
* A new option local_negative_timeout was added. This option
allows the admin to specify the time during which lookups for
users that are not handled by SSSD but are present on the
system (typically in /etc/passwd and /etc/group) and prevents
repeated lookups of local users on the remote server during
initgroups operation.
* An ID-mapping plugin for the winbind deamon was added. With
this plugin, it's possible for winbind to use the same
ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
(included upstream)
-------------------------------------------------------------------
Mon Apr 18 12:24:29 UTC 2016 - hguo@suse.com