- Update to release 2.9

OBS-URL: https://build.opensuse.org/package/show/network:ldap/sssd?expand=0&rev=285

sssd-2.8.2.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEwTzQf/stsUCORXo809IbKRDPZ1kFAmOTMrkACgkQ09IbKRDP
-Z1kFrw//T/qEAStAfg8Fx6PDiTpgNazXQjgxDzdAhggrq7whqKFc5hiWLnzzYEHT
-9M0f6ZpLEn02oTpv27qLtQU8Sq2tDH0vpWXSSWs2XHS4yMhqK0QiGG/chmYEt57c
-mEIBXm5xiNATzFNYKyb44e5afCXO8w1e7YChZamIRftqwSZWqGzCge+Itn16yPO7
-CIycneia1d5rZz2O5gTO2lkBNz9v5CLiWYtop2ey7PoPn967TZ9USh/1Y71wwQuc
-3tPHsk651Wn5RzupB2YAeU3NHCc5FrI5nN9fm6bo+BZe6jCXmS2oLR9QPNCEVjW6
-FPxsXS6/n7ZsrBvyxAAcDOB+xgwv9aLHCoJuhmzasjjuWQQMUi1YNPSbpCMa8XRl
-T0MbYheqIhkJtcLF2/ZVTcSUIHEjVQVlDkHXGQXC4+qshhkNv/Eg5HQO66A0Y++Z
-nQ83D5dNPEpnbySfm0mTQGT0A06EAmPs11E+FJMnHGmnfI/icOX7gs8Iif31lSFF
-5az4QFD/E7gQl4ByP0REvYHoW2KvHgypJicFPxhSyznRuYsNzQvjYDWD4R8PMN22
-96rnXzWlKgRL4ETA+/1eiW+l3ODj/SZfffvK887t3AvetxepkJ0LMaPkNoTowf2T
-4XU0ii7mFrkwuLUn0Bkv6iEWaO3zf+hVqmDFP4B8UJrtjdiYd68=
-=M9gu
------END PGP SIGNATURE-----

sssd-2.9.0.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7c1abbfae46219c2f2b8e34654490113aa9c0943454a3909c702b118f0459735
+size 7935100

sssd-2.9.0.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=0QRz
+-----END PGP SIGNATURE-----

sssd.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Fri May  5 10:47:41 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.9
+  * The sss_simpleifp library is deprecated (and for openSUSE,
+    already removed)
+  * The "Files provider" (i.e. id_provider = files) is deprecated
+    (and for openSUSE, already removed)
+  * SSSD will no longer warn about changed defaults when using
+    ldap_schema = rfc2307 and default autofs mapping.
+  * New passkey functionality, which will allow the use of FIDO2
+    compliant devices to authenticate a centrally managed user
+    locally.
+  * Add support for ldapi:// URLs to allow connections to local
+    LDAP servers.
+  * NSS IDMAP has two new methods: getsidbyusername and
+    getsidbygroupname.
+
 -------------------------------------------------------------------
 Thu Jan 26 15:23:54 UTC 2023 - Callum Farmer <gmbr3@opensuse.org>
 

sssd.spec

@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        2.8.2
+Version:        2.9.0
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later AND LGPL-3.0-or-later
@@ -296,26 +296,6 @@ Requires:       libsss_nss_idmap0 = %version
 %description -n libsss_nss_idmap-devel
 A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
 
-%package -n libsss_simpleifp0
-Summary:        The SSSD D-Bus responder helper library
-License:        GPL-3.0-or-later
-Group:          System/Libraries
-
-%description -n libsss_simpleifp0
-This subpackage provides a library that simplifies the D-Bus API for
-the SSSD InfoPipe responder.
-
-%package -n libsss_simpleifp-devel
-Summary:        Development files for the SSSD D-Bus responder helper library
-License:        GPL-3.0-or-later
-Group:          Development/Libraries/C and C++
-Requires:       libsss_simpleifp0 = %version
-
-%description -n libsss_simpleifp-devel
-This subpackage provides the development files for sssd's simpleifp,
-a library that simplifies the D-Bus API for the SSSD InfoPipe
-responder.
-
 %package -n libsss_sudo
 Summary:        A library to allow communication between sudo and SSSD
 License:        LGPL-3.0-or-later
@@ -469,8 +449,6 @@ fi
 %postun -n libsss_idmap0 -p /sbin/ldconfig
 %post   -n libsss_nss_idmap0 -p /sbin/ldconfig
 %postun -n libsss_nss_idmap0 -p /sbin/ldconfig
-%post   -n libsss_simpleifp0 -p /sbin/ldconfig
-%postun -n libsss_simpleifp0 -p /sbin/ldconfig
 
 %triggerun -- %{name} < %{version}-%{release}
 # sssd takes care of upgrading the database but it doesn't handle downgrades.
@@ -542,7 +520,6 @@ done
 %_mandir/??/man1/sss_ssh_*
 %_mandir/??/man5/sss-certmap.5*
 %_mandir/??/man5/sssd-ad.5*
-%_mandir/??/man5/sssd-files.5*
 %_mandir/??/man5/sssd-ldap-attributes.5*
 %_mandir/??/man5/sssd-session-recording.5*
 %_mandir/??/man5/sssd-simple.5*
@@ -553,7 +530,6 @@ done
 %_mandir/??/man8/sssd.8*
 %_mandir/man1/sss_ssh_*
 %_mandir/man5/sss-certmap.5*
-%_mandir/man5/sssd-files.5*
 %_mandir/man5/sssd-ldap-attributes.5*
 %_mandir/man5/sssd-session-recording.5*
 %_mandir/man5/sssd-simple.5*
@@ -567,7 +543,6 @@ done
 %_libdir/%name/libsss_cert*
 %_libdir/%name/libsss_crypt*
 %_libdir/%name/libsss_debug*
-%_libdir/%name/libsss_files*
 %_libdir/%name/libsss_iface*
 %_libdir/%name/libsss_semanage*
 %_libdir/%name/libsss_sbus*
@@ -614,7 +589,7 @@ done
 %_datadir/%name/sssd.api.conf
 %dir %_datadir/%name/sssd.api.d/
 %_datadir/%name/sssd.api.d/sssd-simple.conf
-%_datadir/%name/sssd.api.d/sssd-files.conf
+%exclude /usr/share/man/*/*/sssd-files.5.gz
 #
 # sssd-client
 #
@@ -780,14 +755,6 @@ done
 %_libdir/libsss_nss_idmap.so
 %_libdir/pkgconfig/sss_nss_idmap.pc
 
-%files -n libsss_simpleifp0
-%_libdir/libsss_simpleifp.so.0*
-
-%files -n libsss_simpleifp-devel
-%_includedir/sss_sifp*.h
-%_libdir/libsss_simpleifp.so
-%_libdir/pkgconfig/sss_simpleifp.pc
-
 %files -n python3-ipa_hbac
 %dir %python3_sitearch
 %python3_sitearch/pyhbac.so

symvers.patch

@@ -15,11 +15,11 @@ the system only has libsss_util.so(-2.8.2) at this point.
  Makefile.am |   47 ++++++++++++++++++++++++++++++++---------------
  1 file changed, 32 insertions(+), 15 deletions(-)
 
-Index: sssd-2.8.2/Makefile.am
+Index: sssd-2.9.0/Makefile.am
 ===================================================================
---- sssd-2.8.2.orig/Makefile.am
+--- sssd-2.9.0.orig/Makefile.am
-+++ sssd-2.8.2/Makefile.am
++++ sssd-2.9.0/Makefile.am
-@@ -941,7 +941,11 @@ libsss_debug_la_SOURCES = \
+@@ -953,7 +953,11 @@ libsss_debug_la_SOURCES = \
  libsss_debug_la_LIBADD = \
      $(SYSLOG_LIBS)
  libsss_debug_la_LDFLAGS = \
@@ -32,7 +32,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_child.la
  libsss_child_la_SOURCES = src/util/child_common.c
-@@ -951,7 +955,8 @@ libsss_child_la_LIBADD = \
+@@ -963,7 +967,8 @@ libsss_child_la_LIBADD = \
      $(DHASH_LIBS) \
      libsss_debug.la \
      $(NULL)
@@ -42,7 +42,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_crypt.la
  
-@@ -990,7 +995,8 @@ libsss_crypt_la_LIBADD = \
+@@ -1002,7 +1007,8 @@ libsss_crypt_la_LIBADD = \
      libsss_debug.la \
      $(NULL)
  libsss_crypt_la_LDFLAGS = \
@@ -52,7 +52,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_cert.la
  
-@@ -1015,8 +1021,9 @@ libsss_cert_la_LIBADD = \
+@@ -1027,8 +1033,9 @@ libsss_cert_la_LIBADD = \
      libsss_debug.la \
      $(NULL)
  libsss_cert_la_LDFLAGS = \
@@ -63,7 +63,7 @@ Index: sssd-2.8.2/Makefile.am
  
  generate-sbus-code:
  	$(builddir)/sbus_generate.sh $(abs_srcdir)
-@@ -1117,8 +1124,9 @@ libsss_sbus_la_CFLAGS = \
+@@ -1129,8 +1136,9 @@ libsss_sbus_la_CFLAGS = \
      $(DBUS_CFLAGS) \
      $(NULL)
  libsss_sbus_la_LDFLAGS = \
@@ -74,7 +74,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_sbus_sync.la
  libsss_sbus_sync_la_SOURCES = \
-@@ -1153,8 +1161,9 @@ libsss_sbus_sync_la_CFLAGS = \
+@@ -1165,8 +1173,9 @@ libsss_sbus_sync_la_CFLAGS = \
      $(UNICODE_LIBS) \
      $(NULL)
  libsss_sbus_sync_la_LDFLAGS = \
@@ -85,7 +85,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_iface.la
  libsss_iface_la_SOURCES = \
-@@ -1183,8 +1192,9 @@ libsss_iface_la_CFLAGS = \
+@@ -1195,8 +1204,9 @@ libsss_iface_la_CFLAGS = \
      $(DBUS_CFLAGS) \
      $(NULL)
  libsss_iface_la_LDFLAGS = \
@@ -96,7 +96,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_iface_sync.la
  libsss_iface_sync_la_SOURCES = \
-@@ -1211,8 +1221,9 @@ libsss_iface_sync_la_CFLAGS = \
+@@ -1223,8 +1233,9 @@ libsss_iface_sync_la_CFLAGS = \
      $(DBUS_CFLAGS) \
      $(NULL)
  libsss_iface_sync_la_LDFLAGS = \
@@ -107,17 +107,17 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libsss_util.la
  libsss_util_la_SOURCES = \
-@@ -1303,7 +1314,8 @@ endif
+@@ -1318,7 +1329,8 @@ if BUILD_SYSTEMTAP
- if BUILD_SYSTEMTAP
  libsss_util_la_LIBADD += stap_generated_probes.lo
  endif
+ libsss_util_la_SOURCES += src/db/sysdb_passkey_user_verification.c
 -libsss_util_la_LDFLAGS = -avoid-version
 +libsss_util_la_LDFLAGS = -avoid-version ${symv}
 +EXTRA_libsss_util_la_DEPENDENCIES = x.sym
  
  pkglib_LTLIBRARIES += libsss_semanage.la
  libsss_semanage_la_CFLAGS = \
-@@ -1322,7 +1334,8 @@ libsss_semanage_la_LIBADD += $(SEMANAGE_
+@@ -1337,7 +1349,8 @@ libsss_semanage_la_LIBADD += $(SEMANAGE_
  endif
  
  libsss_semanage_la_LDFLAGS = \
@@ -127,7 +127,7 @@ Index: sssd-2.8.2/Makefile.am
  
  SSSD_INTERNAL_LTLIBS = \
      libsss_util.la \
-@@ -1338,7 +1351,7 @@ lib_LTLIBRARIES = libipa_hbac.la \
+@@ -1353,7 +1366,7 @@ lib_LTLIBRARIES = libipa_hbac.la \
                    $(NULL)
  
  pkgconfig_DATA += src/lib/ipa_hbac/ipa_hbac.pc
@@ -136,7 +136,7 @@ Index: sssd-2.8.2/Makefile.am
  libipa_hbac_la_SOURCES = \
      src/lib/ipa_hbac/hbac_evaluator.c \
      src/util/sss_utf8.c
-@@ -1664,8 +1677,9 @@ libifp_iface_la_CFLAGS = \
+@@ -1682,8 +1695,9 @@ libifp_iface_la_CFLAGS = \
      $(DBUS_CFLAGS) \
      $(NULL)
  libifp_iface_la_LDFLAGS = \
@@ -147,7 +147,7 @@ Index: sssd-2.8.2/Makefile.am
  
  pkglib_LTLIBRARIES += libifp_iface_sync.la
  libifp_iface_sync_la_SOURCES = \
-@@ -1690,8 +1704,9 @@ libifp_iface_sync_la_CFLAGS = \
+@@ -1708,8 +1722,9 @@ libifp_iface_sync_la_CFLAGS = \
      $(DBUS_CFLAGS) \
      $(NULL)
  libifp_iface_sync_la_LDFLAGS = \
@@ -158,7 +158,7 @@ Index: sssd-2.8.2/Makefile.am
  
  sssd_ifp_SOURCES = \
      src/responder/ifp/ifpsrv.c \
-@@ -4196,8 +4211,9 @@ libsss_ldap_common_la_LIBADD = \
+@@ -4303,8 +4318,9 @@ libsss_ldap_common_la_LIBADD = \
      $(SSSD_INTERNAL_LTLIBS) \
      $(NULL)
  libsss_ldap_common_la_LDFLAGS = \
@@ -169,7 +169,7 @@ Index: sssd-2.8.2/Makefile.am
  if BUILD_SYSTEMTAP
  libsss_ldap_common_la_LIBADD += stap_generated_probes.lo
  endif
-@@ -4254,7 +4270,8 @@ libsss_krb5_common_la_LIBADD = \
+@@ -4361,7 +4377,8 @@ libsss_krb5_common_la_LIBADD = \
      $(SSSD_INTERNAL_LTLIBS) \
      $(NULL)
  libsss_krb5_common_la_LDFLAGS = \