From ee5fe3afa3614f02bed7c1f01ce60ce39955c6927a4c95a80807690984021914 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 18 Jun 2019 07:57:40 +0000 Subject: [PATCH 1/4] Accepting request 710336 from home:scabrero:branches:network:ldap - Create directory to download and cache GPOs (bsc#1132879) OBS-URL: https://build.opensuse.org/request/show/710336 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=218 --- sssd.changes | 5 +++++ sssd.spec | 3 +++ 2 files changed, 8 insertions(+) diff --git a/sssd.changes b/sssd.changes index 1d71cf4..c354268 100644 --- a/sssd.changes +++ b/sssd.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Apr 26 10:59:25 UTC 2019 - Samuel Cabrero + +- Create directory to download and cache GPOs (bsc#1132879) + ------------------------------------------------------------------- Sat Mar 16 11:50:58 UTC 2019 - Jan Engelhardt diff --git a/sssd.spec b/sssd.spec index e06fa79..bfa3581 100644 --- a/sssd.spec +++ b/sssd.spec @@ -37,6 +37,7 @@ BuildRoot: %_tmppath/%name-%version-build %define dbpath %sssdstatedir/db %define pipepath %sssdstatedir/pipes %define pubconfpath %sssdstatedir/pubconf +%define gpocachepath %{sssdstatedir}/gpo_cache BuildRequires: autoconf >= 2.59 BuildRequires: automake @@ -389,6 +390,7 @@ export LDFLAGS="-pie" --with-db-path="%dbpath" \ --with-pipe-path="%pipepath" \ --with-pubconf-path="%pubconfpath" \ + --with-gpo-cache-path="%{gpocachepath}" \ --with-init-dir="%_initrddir" \ --with-environment-file="%_sysconfdir/sysconfig/sssd" \ --with-initscript=systemd \ @@ -539,6 +541,7 @@ rm -f /var/lib/sss/db/*.ldb %attr(755,root,root) %dir %pipepath/ %attr(700,root,root) %dir %pipepath/private/ %attr(755,root,root) %dir %pubconfpath/ +%attr(755,root,root) %dir %{gpocachepath} %attr(755,root,root) %dir %sssdstatedir/mc/ %attr(700,root,root) %dir %sssdstatedir/keytabs/ %attr(750,root,root) %dir %_localstatedir/log/%name/ From ca9fe3738de3c33a4a4fe984b223fa47e40d9c0d04dd39df2aa7c23f29d550c2 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 18 Jun 2019 07:58:18 +0000 Subject: [PATCH 2/4] make macros look the same again OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=219 --- sssd.spec | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/sssd.spec b/sssd.spec index bfa3581..0766a9a 100644 --- a/sssd.spec +++ b/sssd.spec @@ -37,7 +37,7 @@ BuildRoot: %_tmppath/%name-%version-build %define dbpath %sssdstatedir/db %define pipepath %sssdstatedir/pipes %define pubconfpath %sssdstatedir/pubconf -%define gpocachepath %{sssdstatedir}/gpo_cache +%define gpocachepath %sssdstatedir/gpo_cache BuildRequires: autoconf >= 2.59 BuildRequires: automake @@ -390,7 +390,7 @@ export LDFLAGS="-pie" --with-db-path="%dbpath" \ --with-pipe-path="%pipepath" \ --with-pubconf-path="%pubconfpath" \ - --with-gpo-cache-path="%{gpocachepath}" \ + --with-gpo-cache-path="%gpocachepath" \ --with-init-dir="%_initrddir" \ --with-environment-file="%_sysconfdir/sysconfig/sssd" \ --with-initscript=systemd \ @@ -541,7 +541,7 @@ rm -f /var/lib/sss/db/*.ldb %attr(755,root,root) %dir %pipepath/ %attr(700,root,root) %dir %pipepath/private/ %attr(755,root,root) %dir %pubconfpath/ -%attr(755,root,root) %dir %{gpocachepath} +%attr(755,root,root) %dir %gpocachepath/ %attr(755,root,root) %dir %sssdstatedir/mc/ %attr(700,root,root) %dir %sssdstatedir/keytabs/ %attr(750,root,root) %dir %_localstatedir/log/%name/ From 747dba078facc367a7c48cceaa12ac80a5ad376e6bbbacecad9431ca5e717c89 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 18 Jun 2019 08:59:42 +0000 Subject: [PATCH 3/4] - Update to new upstream release 2.2.0 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=220 --- sssd-2.1.0.tar.gz | 3 --- sssd-2.1.0.tar.gz.asc | 6 ----- sssd-2.2.0.tar.gz | 3 +++ sssd-2.2.0.tar.gz.asc | 6 +++++ sssd.changes | 20 ++++++++++++++++ sssd.spec | 54 +++++++++++-------------------------------- 6 files changed, 43 insertions(+), 49 deletions(-) delete mode 100644 sssd-2.1.0.tar.gz delete mode 100644 sssd-2.1.0.tar.gz.asc create mode 100644 sssd-2.2.0.tar.gz create mode 100644 sssd-2.2.0.tar.gz.asc diff --git a/sssd-2.1.0.tar.gz b/sssd-2.1.0.tar.gz deleted file mode 100644 index 840d42f..0000000 --- a/sssd-2.1.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:10f04bd8a1ae7e888e2bcc13edc1a64ef19b4990866c09c65c667d0c72b66743 -size 6463331 diff --git a/sssd-2.1.0.tar.gz.asc b/sssd-2.1.0.tar.gz.asc deleted file mode 100644 index 3a490d1..0000000 --- a/sssd-2.1.0.tar.gz.asc +++ /dev/null @@ -1,6 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iEYEABECAAYFAlx24YkACgkQHsardTLnvCWcxgCgt5a0AYEWnuJkx7qH37pBpDj8 -nQEAn3x6FKj/f71JTCYpPrykAc47dyRD -=fQLU ------END PGP SIGNATURE----- diff --git a/sssd-2.2.0.tar.gz b/sssd-2.2.0.tar.gz new file mode 100644 index 0000000..9fba55e --- /dev/null +++ b/sssd-2.2.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ae618d73c7dc174a1481853ddbea82896bef031c623d374c77888e45b7d88558 +size 6642715 diff --git a/sssd-2.2.0.tar.gz.asc b/sssd-2.2.0.tar.gz.asc new file mode 100644 index 0000000..7e23683 --- /dev/null +++ b/sssd-2.2.0.tar.gz.asc @@ -0,0 +1,6 @@ +-----BEGIN PGP SIGNATURE----- + +iEYEABECAAYFAl0CtaMACgkQHsardTLnvCW6oQCeMs8Jlzh/ds1eM0gDswfgbiCH +jwgAn0MUQJr3icNlb84wbDfGZ1+tuGbY +=VTqa +-----END PGP SIGNATURE----- diff --git a/sssd.changes b/sssd.changes index c354268..82fd90c 100644 --- a/sssd.changes +++ b/sssd.changes @@ -1,3 +1,23 @@ +------------------------------------------------------------------- +Tue Jun 18 08:00:46 UTC 2019 - Jan Engelhardt + +- Update to new upstream release 2.2.0 + * The Kerberos provider can now include more KDC addresses or + host names when writing data for the Kerberos locator plugin. + * The 2FA prompting can now be configured. + * The LDAP authentication provider now allows to use a + different method of changing LDAP passwords using a modify + operation in addition to the default extended operation. + * The "auto_private_groups" configuration option now takes a + new value hybrid. + * A new option "ad_gpo_ignore_unreadable" was added. + * The "cached_auth_timeout" parameter is now inherited by + trusted domains. + * The "ldap_sasl_mech" option now accepts another mechanism + "GSS-SPNEGO" in addition to "GSSAPI". + * The sssctl tool has two new commands, "cert-show" and + "cert-map". + ------------------------------------------------------------------- Fri Apr 26 10:59:25 UTC 2019 - Samuel Cabrero diff --git a/sssd.spec b/sssd.spec index 0766a9a..0d211af 100644 --- a/sssd.spec +++ b/sssd.spec @@ -15,16 +15,16 @@ # Please submit bugfixes or comments via https://bugs.opensuse.org/ # +%define _buildshell /bin/bash Name: sssd -Version: 2.1.0 +Version: 2.2.0 Release: 0 Summary: System Security Services Daemon License: GPL-3.0+ and LGPL-3.0+ Group: System/Daemons -Url: https://pagure.io/SSSD/sssd - -#Git-Clone: git://git.fedorahosted.org/sssd +URL: https://pagure.io/SSSD/sssd +#Git-Clone: https://pagure.io/SSSD/sssd Source: http://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz Source2: http://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz.asc Source3: baselibs.conf @@ -476,7 +476,6 @@ rm -f /var/lib/sss/db/*.ldb %postun -n libsss_simpleifp0 -p /sbin/ldconfig %files -f sssd.lang -%defattr(-,root,root) %license COPYING %_unitdir %_unitdir/sssd.service @@ -487,26 +486,27 @@ rm -f /var/lib/sss/db/*.ldb %dir %_mandir/??/ %dir %_mandir/??/man[158]/ %_mandir/??/man1/sss_ssh_* -%_mandir/??/man5/sssd-sudo.5* -%_mandir/??/man8/sssd.8* %_mandir/??/man5/sss-certmap.5.gz %_mandir/??/man5/sssd-ad.5.gz +%_mandir/??/man5/sssd-files.5* %_mandir/??/man5/sssd-secrets.5.gz +%_mandir/??/man5/sssd-session-recording.5.gz +%_mandir/??/man5/sssd-simple.5* +%_mandir/??/man5/sssd-sudo.5* +%_mandir/??/man5/sssd-systemtap.5.gz %_mandir/??/man5/sssd.conf.5.gz %_mandir/??/man8/idmap_sss.8.gz %_mandir/??/man8/sssctl.8.gz %_mandir/??/man8/sssd-kcm.8.gz -%_mandir/??/man5/sssd-simple.5* -%_mandir/??/man5/sssd-session-recording.5.gz -%_mandir/??/man5/sssd-systemtap.5.gz +%_mandir/??/man8/sssd.8* %_mandir/man1/sss_ssh_* -%_mandir/man8/sssctl.8* +%_mandir/man5/sss-certmap.5.gz %_mandir/man5/sssd-files.5* +%_mandir/man5/sssd-session-recording.5.gz %_mandir/man5/sssd-simple.5* %_mandir/man5/sssd-sudo.5* %_mandir/man5/sssd.conf.5* -%_mandir/man5/sss-certmap.5.gz -%_mandir/man5/sssd-session-recording.5.gz +%_mandir/man8/sssctl.8* %_mandir/man8/sssd.8* %dir %_libdir/%name/ %_libdir/%name/conf/ @@ -567,12 +567,11 @@ rm -f /var/lib/sss/db/*.ldb %_libdir/krb5/ %_libdir/%name/modules/sssd_krb5_localauth_plugin.so %_mandir/??/man8/pam_sss.8* -#%_mandir/??/man8/sssd_krb5_locator_plugin.8* +%_mandir/??/man8/sssd_krb5_locator_plugin.8* %_mandir/man8/pam_sss.8* %_mandir/man8/sssd_krb5_locator_plugin.8* %files ad -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_ad.so %dir %_libexecdir/%name/ @@ -586,7 +585,6 @@ rm -f /var/lib/sss/db/*.ldb %dir %_mandir/??/man5/ %files dbus -%defattr(-,root,root) %dir %_libexecdir/sssd/ %_libexecdir/sssd/sssd_ifp %dir %_libdir/sssd/ @@ -596,7 +594,6 @@ rm -f /var/lib/sss/db/*.ldb %_mandir/??/man5/sssd-ifp.5* %files ipa -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_ipa* %dir %_datadir/%name/ @@ -608,7 +605,6 @@ rm -f /var/lib/sss/db/*.ldb %_mandir/??/man5/sssd-ipa.5* %files krb5 -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_krb5.so %dir %_datadir/%name/ @@ -620,7 +616,6 @@ rm -f /var/lib/sss/db/*.ldb %_mandir/??/man5/sssd-krb5.5* %files krb5-common -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_krb5_common.so %dir %_libexecdir/%name/ @@ -628,7 +623,6 @@ rm -f /var/lib/sss/db/*.ldb %_libexecdir/%name/ldap_child %files ldap -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_ldap* %dir %_datadir/%name/ @@ -640,7 +634,6 @@ rm -f /var/lib/sss/db/*.ldb %_mandir/??/man5/sssd-ldap.5* %files proxy -%defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_proxy.so %dir %_libexecdir/%name/ @@ -650,7 +643,6 @@ rm -f /var/lib/sss/db/*.ldb %_datadir/%name/sssd.api.d/sssd-proxy.conf %files tools -%defattr(-,root,root) %_sbindir/sss_cache %_sbindir/sss_debuglevel %_sbindir/sss_seed @@ -661,14 +653,12 @@ rm -f /var/lib/sss/db/*.ldb %_mandir/man8/sss_*.8* %files wbclient -%defattr(-,root,root) %config %_sysconfdir/ld.so.conf.d/sssd-wbclient.conf %dir %_libdir/sssd/ %dir %_libdir/sssd/modules/ %_libdir/sssd/modules/libwbclient.so.* %files wbclient-devel -%defattr(-,root,root) %_includedir/wbclient_sssd.h %dir %_libdir/sssd/ %dir %_libdir/sssd/modules/ @@ -676,84 +666,68 @@ rm -f /var/lib/sss/db/*.ldb %_libdir/pkgconfig/wbclient_sssd.pc %files winbind-idmap -%defattr(-,root,root) %_libdir/samba/ %_mandir/man8/idmap_sss.8* %files -n libipa_hbac0 -%defattr(-,root,root) %_libdir/libipa_hbac.so.0* %files -n libipa_hbac-devel -%defattr(-,root,root) %_includedir/ipa_hbac.h %_libdir/libipa_hbac.so %_libdir/pkgconfig/ipa_hbac.pc %files -n libsss_certmap0 -%defattr(-,root,root) %_libdir/libsss_certmap.so %_libdir/libsss_certmap.so.0* %files -n libsss_certmap-devel -%defattr(-,root,root) %_includedir/sss_certmap.h %_libdir/libsss_certmap.so %_libdir/pkgconfig/sss_certmap.pc %files -n libnfsidmap-sss -%defattr(-,root,root) %_libdir/libnfsidmap/ %_mandir/man5/sss_rpcidmapd.5* %dir %_mandir/??/man5/ %_mandir/??/man5/sss_rpcidmapd.5* %files -n libsss_idmap0 -%defattr(-,root,root) %_libdir/libsss_idmap.so.0* %files -n libsss_idmap-devel -%defattr(-,root,root) %_includedir/sss_idmap.h %_libdir/libsss_idmap.so %_libdir/pkgconfig/sss_idmap.pc %files -n libsss_nss_idmap0 -%defattr(-,root,root) %_libdir/libsss_nss_idmap.so.0* %files -n libsss_nss_idmap-devel -%defattr(-,root,root) %_includedir/sss_nss_idmap.h %_libdir/libsss_nss_idmap.so %_libdir/pkgconfig/sss_nss_idmap.pc %files -n libsss_simpleifp0 -%defattr(-,root,root) %_libdir/libsss_simpleifp.so.0* %files -n libsss_simpleifp-devel -%defattr(-,root,root) %_includedir/sss_sifp*.h %_libdir/libsss_simpleifp.so %_libdir/pkgconfig/sss_simpleifp.pc %files -n python3-ipa_hbac -%defattr(-,root,root) %dir %python3_sitearch %python3_sitearch/pyhbac.so %files -n python3-sss-murmur -%defattr(-,root,root) %python3_sitearch/pysss_murmur.so %files -n python3-sss_nss_idmap -%defattr(-,root,root) %dir %python3_sitearch %python3_sitearch/pysss_nss_idmap.so %files -n python3-sssd-config -%defattr(-,root,root) %python3_sitearch/pysss.so %python3_sitelib/SSSDConfig* From 0130eda009092f82dcd233ecd0e8e1bccf0c3f4e2ae177c578ecf683e3fa2079 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 25 Jun 2019 18:02:25 +0000 Subject: [PATCH 4/4] make bot happy OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=221 --- sssd.spec | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/sssd.spec b/sssd.spec index 0d211af..d480293 100644 --- a/sssd.spec +++ b/sssd.spec @@ -25,8 +25,8 @@ License: GPL-3.0+ and LGPL-3.0+ Group: System/Daemons URL: https://pagure.io/SSSD/sssd #Git-Clone: https://pagure.io/SSSD/sssd -Source: http://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz -Source2: http://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz.asc +Source: https://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz +Source2: https://releases.pagure.org/SSSD/sssd/%name-%version.tar.gz.asc Source3: baselibs.conf Source5: %name.keyring Patch1: krb-noversion.diff