- Enable PAC responder.

PAC is an extension element returned by domain controller, to speed
  up resolution of authorisation data such as group memberships.

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=172

sssd.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Apr 18 12:24:29 UTC 2016 - hguo@suse.com
+
+- Enable PAC responder.
+  PAC is an extension element returned by domain controller, to speed
+  up resolution of authorisation data such as group memberships.
+
 -------------------------------------------------------------------
 Thu Apr 14 17:20:11 UTC 2016 - michael@stroeder.com
 

sssd.spec

@@ -81,6 +81,7 @@ BuildRequires:  pkgconfig(python)
 BuildRequires:  pkgconfig(talloc)
 BuildRequires:  pkgconfig(tdb) >= 1.1.3
 BuildRequires:  pkgconfig(tevent)
+BuildRequires:  pkgconfig(ndr_krb5pac)
 %{?systemd_requires}
 Requires:       sssd-ldap = %version-%release
 Requires(postun): pam-config
@@ -100,6 +101,7 @@ Summary:        The ActiveDirectory backend plugin for sssd
 License:        GPL-3.0+
 Group:          System/Daemons
 Requires:       %name-krb5-common = %version
+Requires:       libndr-krb5pac0
 
 %description ad
 Provides the Active Directory back end that the SSSD can utilize to
@@ -401,7 +403,6 @@ export LDFLAGS="-pie"
     --with-os=suse \
     --with-semanage=no \
     --disable-ldb-version-check \
-    --disable-pac-responder
 
 make %{?_smp_mflags} all
 
@@ -540,6 +541,7 @@ rm -f /var/lib/sss/db/*.ldb
 %dir %_libdir/%name/
 %_libdir/%name/libsss_ad.so
 %dir %_libexecdir/%name/
+%_libexecdir/%name/sssd_pac
 %_libexecdir/%name/gpo_child
 %dir %_datadir/%name/
 %dir %_datadir/%name/sssd.api.d/