From e23d738143bb0ff0f72548ed2bc72a52cdf3215380b54650d8f16f32e617594b Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Fri, 5 Feb 2021 12:58:17 +0000 Subject: [PATCH] - Update to release 2.4.1 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=238 --- sssd-2.4.0.tar.gz | 3 --- sssd-2.4.0.tar.gz.asc | 11 ----------- sssd-2.4.1.tar.gz | 3 +++ sssd-2.4.1.tar.gz.asc | 11 +++++++++++ sssd.changes | 19 +++++++++++++++++++ sssd.spec | 10 ++++++---- 6 files changed, 39 insertions(+), 18 deletions(-) delete mode 100644 sssd-2.4.0.tar.gz delete mode 100644 sssd-2.4.0.tar.gz.asc create mode 100644 sssd-2.4.1.tar.gz create mode 100644 sssd-2.4.1.tar.gz.asc diff --git a/sssd-2.4.0.tar.gz b/sssd-2.4.0.tar.gz deleted file mode 100644 index 02de8a8..0000000 --- a/sssd-2.4.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:13d7eeff15e582279f70a3aad32daeb40d3749ec14947a4eded35adce7490cdd -size 7280358 diff --git a/sssd-2.4.0.tar.gz.asc b/sssd-2.4.0.tar.gz.asc deleted file mode 100644 index 3672600..0000000 --- a/sssd-2.4.0.tar.gz.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAl+ELlgACgkQr/513ehQ -jhLmrQf/XCUpKoYoPm6UiUadZg7ekdju0qMLP469mwMVxp0GirHa3fNQkfnEg6OY -CxuBbD+syRlom33jjmyOudMidmJioycaOgyogMpa+mjHezlrI5fNkX2/8FsUNcqs -qoObYBRwE4moGMq5/Ym/dXD3OFJPRladkWtW14R+0W6otU23buSYVPPAkwZ4/sEo -VK5Un9+I4H7AYCGDCJuvP6zPAaRao94csOSzHUPcyLEltynu9WYYWIDRfmJ+fCjC -q3ul69DnddwiHxpnx/MqxkhlR2enHnJ6286WrIvgccjN1ytdY/LSJQkUxjCKLY/Y -XoakWNKd+Z0oXv8/tP0OhOkP6q0qTA== -=Cm3o ------END PGP SIGNATURE----- diff --git a/sssd-2.4.1.tar.gz b/sssd-2.4.1.tar.gz new file mode 100644 index 0000000..830c041 --- /dev/null +++ b/sssd-2.4.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:63428d3baf7486f0d076ee106f24372738f6172086abf884e7a7320030c39141 +size 7374100 diff --git a/sssd-2.4.1.tar.gz.asc b/sssd-2.4.1.tar.gz.asc new file mode 100644 index 0000000..71840a1 --- /dev/null +++ b/sssd-2.4.1.tar.gz.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCAAdFiEEGkHcZ1BfiaMwgotmr/513ehQjhIFAmAdOnQACgkQr/513ehQ +jhI+3wgAv3BdMtXantDdhkdWRBQW6s4abMojspIqONR0aMUrPhy9tMnicoNz/BgV ++hFBN3phoQUSaW+5A817vRQTj7lQxHg8YnqWuk2+T+vMiiB6ZMVsb/49sGk768Ii +oZ/D6rzByW8z/UAzco4CHZiYDNck8Qn+25eE3+/H7NbX4FdTsvt5kzbKY0gU/412 +zfckfHby2D5br6g32qvNwpRHFVJM+oEvhhx0nFVNa40v3Q4T/0GhvWLNloVNKoB9 +9sYYXnDDnFe8+h5PGuaMlFDWrRmpY+GZaZ4G8GQqwh2SXEHh8o9VdDlY4XGychfM +XhK3+ROESutPgjCJVMmiYmNYgpTQdA== +=f9OA +-----END PGP SIGNATURE----- diff --git a/sssd.changes b/sssd.changes index 2d71122..d34ad02 100644 --- a/sssd.changes +++ b/sssd.changes @@ -1,3 +1,22 @@ +------------------------------------------------------------------- +Fri Feb 5 12:56:44 UTC 2021 - Jan Engelhardt + +- Update to release 2.4.1 + * New PAM module pam_sss_gss for authentication using GSSAPI. + * case_sensitive=Preserving can now be set for trusted domains + with AD and IPA providers. + * krb5_use_subdomain_realm=True can now be used when sub-domain + user principal names have upnSuffixes which are not known in + the parent domain. SSSD will try to send the Kerberos request + directly to a KDC of the sub-domain. + * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald + output, to avoid issues with PID parsing in rsyslog + (BSD-style forwarder) output. + * Added pam_gssapi_check_upn to enforce authentication only + with principal that can be associated with target user. + * Added pam_gssapi_services to list PAM services that can + authenticate using GSSAPI. + ------------------------------------------------------------------- Mon Oct 12 13:10:26 UTC 2020 - Jan Engelhardt diff --git a/sssd.spec b/sssd.spec index 020ca01..908b8fa 100644 --- a/sssd.spec +++ b/sssd.spec @@ -18,15 +18,15 @@ %define _buildshell /bin/bash Name: sssd -Version: 2.4.0 +Version: 2.4.1 Release: 0 Summary: System Security Services Daemon License: GPL-3.0-or-later and LGPL-3.0-or-later Group: System/Daemons URL: https://pagure.io/SSSD/sssd #Git-Clone: https://pagure.io/SSSD/sssd -Source: https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz -Source2: https://github.com/SSSD/sssd/releases/download/sssd-2_4_0/%name-%version.tar.gz.asc +Source: https://github.com/SSSD/sssd/releases/download/2.4.1/%name-%version.tar.gz +Source2: https://github.com/SSSD/sssd/releases/download/2.4.1/%name-%version.tar.gz.asc Source3: baselibs.conf Source5: %name.keyring Patch1: krb-noversion.diff @@ -386,7 +386,7 @@ export LDFLAGS="-pie" --disable-ldb-version-check \ --without-secrets \ --without-python2-bindings -make %{?_smp_mflags} all +%make_build all %install # sss_obfuscate is compatible with both python 2 and 3 @@ -579,11 +579,13 @@ rm -f /var/lib/sss/db/*.ldb # /%_lib/libnss_sss.so.2 /%_lib/security/pam_sss.so +/%_lib/security/pam_sss_gss.so %_libdir/cifs-utils/ %_libdir/krb5/ %_libdir/%name/modules/sssd_krb5_localauth_plugin.so %_mandir/??/man8/sssd_krb5_locator_plugin.8* %_mandir/??/man8/pam_sss.8* +%_mandir/??/man8/pam_sss_gss.8* %_mandir/man8/pam_sss.8* %_mandir/man8/sssd_krb5_locator_plugin.8*