Commit Graph

191 Commits

Author SHA256 Message Date
d820ac1cfd - Build sssd's KCM.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=236
2020-08-10 12:55:49 +00:00
d15836df7f - Update to release 2.3.1
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=235
2020-07-24 19:59:43 +00:00
de1bb9ebd1 new signing entity
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=234
2020-06-02 09:46:05 +00:00
45570786c6 sssd-2.3.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=233
2020-05-19 11:46:11 +00:00
c445b52558 - Update to 2.2.3
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=232
2020-03-24 12:27:02 +00:00
a37a1b4320 Accepting request 785694 from home:scabrero:branches:network:ldap
- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0001-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch

OBS-URL: https://build.opensuse.org/request/show/785694
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=231
2020-03-16 18:49:22 +00:00
69df5c74e6 Accepting request 765650 from home:StefanBruens:branches:openSUSE:Factory
- Remove leftover python2 build dependencies
- Remove python3-devel BuildRequires in favor of pkgconfig(python3)

OBS-URL: https://build.opensuse.org/request/show/765650
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=230
2020-01-20 09:37:01 +00:00
d214c9b2db basic English
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=229
2020-01-13 20:59:37 +00:00
deb4fe685b Accepting request 764123 from home:dmulder:branches:network:ldap
- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)

OBS-URL: https://build.opensuse.org/request/show/764123
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=228
2020-01-13 20:59:00 +00:00
9f28c9b493 Accepting request 760482 from home:dmulder:branches:network:ldap
- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-2.2.2.patch; (jsc#SLE-9298)

OBS-URL: https://build.opensuse.org/request/show/760482
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=227
2020-01-02 21:52:15 +00:00
980b189e99 Accepting request 758974 from home:scabrero:branches:network:ldap
Complete changelog due to declined request 757595:

- Add systemd service unit files to manage socket or bus activated responders.
- All responders except infopipe are also managed by a socket unit file.
- Add missing post and postun hooks for libsss_certmap0 package.

OBS-URL: https://build.opensuse.org/request/show/758974
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=226
2019-12-23 12:14:51 +00:00
4da534c5ed reduce scriptlet bloat from 1439 to 113 lines
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=225
2019-12-17 16:48:36 +00:00
477ab8e21c Accepting request 757567 from home:scabrero:branches:network:ldap
- Install infopipe dbus service (bsc#1106598)

OBS-URL: https://build.opensuse.org/request/show/757567
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=224
2019-12-17 16:30:17 +00:00
129141e5ed update keyring with new owner
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=223
2019-11-28 13:32:13 +00:00
1959e01be9 - Update to release 2.2.2
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=222
2019-11-21 13:03:02 +00:00
0130eda009 make bot happy
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=221
2019-06-25 18:02:25 +00:00
747dba078f - Update to new upstream release 2.2.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=220
2019-06-18 08:59:42 +00:00
ca9fe3738d make macros look the same again
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=219
2019-06-18 07:58:18 +00:00
ee5fe3afa3 Accepting request 710336 from home:scabrero:branches:network:ldap
- Create directory to download and cache GPOs (bsc#1132879)

OBS-URL: https://build.opensuse.org/request/show/710336
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=218
2019-06-18 07:57:40 +00:00
3e5ec14f79 2.1.0 uses an alternate key
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=217
2019-04-23 12:00:09 +00:00
f0c0b7301e update build deps
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=216
2019-04-23 09:04:50 +00:00
82f0692bb1 - Update to new upstream release 2.1.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=215
2019-03-16 12:05:57 +00:00
0da5a62e10 feed through beautifier
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=214
2019-02-21 13:29:19 +00:00
34c451039c Accepting request 677966 from home:scabrero:branches:network:ldap
- Install systemd service unit file created from source's template
  (bsc#1120852)
- Install logrotate configuration (bsc#1004220)
- Set journald as system logger

OBS-URL: https://build.opensuse.org/request/show/677966
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=213
2019-02-21 13:28:33 +00:00
ffca9a8b0e trim spaces
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=212
2019-02-15 20:56:08 +00:00
e91bd65756 - Add krb-noversion.diff so sssd_pac builds even with newer krb.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=211
2019-02-15 17:36:42 +00:00
77cd22650b Accepting request 639404 from home:ckowalczyk:branches:network:ldap:adding-adcli
- Add dependency to adcli for sssd-ad
    (SLE15: fate#326619, bsc#1109849)
    (SLE12SP4: fate#326620, bsc#1110121)

OBS-URL: https://build.opensuse.org/request/show/639404
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=210
2018-10-01 14:44:53 +00:00
803f439300 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=209 2018-09-10 09:17:50 +00:00
298c91a09c - Update to new upstream release 2.0.0
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=208
2018-09-07 19:39:51 +00:00
c5d8619327 Compact overly long changelog, wrap to 66 cols as demanded
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=207
2018-08-31 11:20:00 +00:00
77a4f94e77 Accepting request 632454 from home:kbabioch:branches:network:ldap
- Update to upstream release 1.16.3

OBS-URL: https://build.opensuse.org/request/show/632454
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=206
2018-08-31 11:12:24 +00:00
Chris Kowalczyk
a03258dbe5 Accepting request 620030 from home:ckowalczyk:branches:network:ldap:fixchangelog
Fixed patch name.

OBS-URL: https://build.opensuse.org/request/show/620030
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=205
2018-07-01 13:19:46 +00:00
4fffd4a106 Restore the default changelog format
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=204
2018-06-27 23:05:06 +00:00
969bc75c7f Accepting request 619100 from home:ckowalczyk:branches:network:ldap:bsc1098163-cve201810852
- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)

OBS-URL: https://build.opensuse.org/request/show/619100
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=203
2018-06-27 23:04:40 +00:00
Peter Varkoly
ef4bdebab8 Fix spec for new package.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=202
2018-06-20 13:14:56 +00:00
Peter Varkoly
4c8b88f4d2 Add patch to fix build
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=201
2018-06-20 12:49:57 +00:00
Peter Varkoly
c906f55d9e Remove unnecessary comment.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=200
2018-06-20 12:19:07 +00:00
Peter Varkoly
cd01c383bf Fix requirement
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=199
2018-06-20 09:44:16 +00:00
Peter Varkoly
0ee77493e9 Add missed requirement
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=198
2018-06-20 09:36:04 +00:00
Peter Varkoly
12009674a9 - Update to new minor upstream release 1.16.2
New Features:
  * The smart card authentication, or in more general certificate
    authentication code now supports OpenSSL in addition to previously
    supported NSS (#3489). In addition, the SSH responder can now
    return public SSH keys derived from the public keys stored in a
    X.509 certificate. Please refer to the ssh_use_certificate_keys
    option in the man pages.
  * The files provider now supports mirroring multiple passwd or
    group files. This enhancement can be used to use the SSSD files
    provider instead of the nss_altfiles module
Bugfixes:
  * A memory handling issue in the nss_ex interface was fixed. This
    bug would manifest in IPA environments with a trusted AD domain
    as a crash of the ns-slapd process, because a ns-slapd plugin
    loads the nss_ex interface (#3715)
  * Several fixes for the KCM deamon were merged (see #3687, #3671, #3633)
  * The ad_site override is now honored in GPO code as well (#3646)
  * Several potential crashes in the NSS responder’s netgroup code
    were fixed (#3679, #3731)
  * A potential crash in the autofs responder’s code was fixed (#3752)
  * The LDAP provider now supports group renaming (#2653)
  * The GPO access control code no longer returns an error if one
    of the relevant GPO rules contained no SIDs at all (#3680)
  * A memory leak in the IPA provider related to resolving external
    AD groups was fixed (#3719)
  * Setups that used multiple domains where one of the domains had
    its ID space limited using the min_id/max_id options did not
    resolve requests by ID properly (#3728)
  * Overriding IDs or names did not work correctly when the domain

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=197
2018-06-20 08:48:06 +00:00
Peter Varkoly
98844f4892 OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=196 2018-06-20 08:38:46 +00:00
4cadadc038 Accepting request 602087 from home:ckowalczyk:branches:network:ldap:sssd-1_16_1
- Update to new minor upstream release 1.16.1 (fate#323340):
New Features:
 * A new option auto_private_groups was added. If this option is
   enabled, SSSD will automatically create user private groups based
   on user’s UID number. The GID number is ignored in this case.
 * The SSSD smart card integration now supports a special type of PAM
   conversation implemented by GDM which allows the user to select
   the appropriate smrt card certificate in GDM.
 * A new API for accessing user and group information was added.
   This API is similar to the tradiional Name Service Switch API, but
   allows the consumer to talk to SSSD directly as well as to
   fine-tune the query with e.g. how cache should be evaluated.
 * The sssctl command line tool gained a new command access-report,
   which can generate who can access the client machine. Currently
   only generating the report on an IPA client based on HBAC rules
   is supported.
 * The hostid provider was moved from the IPA specific code to
   the generic LDAP code. This allows SSH host keys to be access by
   the generic LDAP provider as well. See the ldap_host_* options in
   the sssd-ldap manual page for more details.
 * Setting the memcache_timeout option to 0 disabled creating
   the memory cache files altogether. This can be useful in cases
   there is a bug in the memory cache that needs working around.

OBS-URL: https://build.opensuse.org/request/show/602087
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=195
2018-04-28 09:49:26 +00:00
6f604b343f Accepting request 600643 from home:ckowalczyk:branches:network:ldap:bsc1062124
- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)

OBS-URL: https://build.opensuse.org/request/show/600643
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=194
2018-04-24 19:16:52 +00:00
Howard Guo
d0b251fd0c - Remove package descriptions for the python 2 packages that are
no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=193
2018-02-27 09:36:30 +00:00
Howard Guo
f149bbe067 - Correct dependency of sss_obfuscate command line program.
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=192
2017-12-04 10:27:54 +00:00
Howard Guo
d57d7436e1 - In an ongoing effort to reduce dependency on python version 2,
the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=191
2017-12-01 14:37:44 +00:00
1509d47d02 undo specfile horkage 2
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=190
2017-10-25 12:01:40 +00:00
b37bcee6c1 undo specfile horkage
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=189
2017-10-25 12:00:49 +00:00
Michael Ströder
c7db1552cb Accepting request 536206 from home:stroeder:branches:network:ldap
Update to new upstream release 1.16.0.

Successfully tested with Howard's test scripts on openSUSE Tumbleweed x86_64.

Build of man pages seems broken. But this is not caused by this sssd update because the man pages are already broken in sssd-tools-1.15.2-1.4 package in Tumbleweed.

OBS-URL: https://build.opensuse.org/request/show/536206
OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=188
2017-10-25 11:56:22 +00:00
Howard Guo
63b85c3a82 - Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
krb5-common sub-package. Address bsc#1024836.

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=187
2017-03-16 13:36:38 +00:00