Accepting request 1296905 from network:ldap

- Update to release 2.11.1

OBS-URL: https://build.opensuse.org/request/show/1296905
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sssd?expand=0&rev=144

_scmsync.obsinfo

@@ -0,0 +1,4 @@
+mtime: 1753994117
+commit: 0e0d1361c8452d81d3f95f3e2e6ee1170e16356d1e2c4145af472ea204b6b873
+url: https://src.opensuse.org/jengelh/sssd
+revision: master

build.specials.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a31e4d0a5d8f6b3d45219c049e9bb6f29dc8d630ca5dbc7f9e4e89be2ae35fa2
+size 256

logrotate.patch

@@ -0,0 +1,48 @@
+From: Jan Engelhardt <ej@inai.de>
+Date: 2025-07-18 11:02:24.078457348 +0200
+References: https://bugzilla.suse.com/show_bug.cgi?id=1246537
+References: https://github.com/SSSD/sssd/issues/8041
+
+---
+ src/examples/logrotate.in            |    3 +--
+ src/sysv/systemd/sssd-kcm.service.in |    1 +
+ src/sysv/systemd/sssd.service.in     |    1 +
+ 3 files changed, 3 insertions(+), 2 deletions(-)
+
+Index: sssd-2.11.1/src/examples/logrotate.in
+===================================================================
+--- sssd-2.11.1.orig/src/examples/logrotate.in
++++ sssd-2.11.1/src/examples/logrotate.in
+@@ -8,7 +8,6 @@
+     delaycompress
+     su @SSSD_USER@ @SSSD_USER@
+     postrotate
+-        /bin/kill -HUP `cat @pidpath@/sssd.pid 2>/dev/null` 2> /dev/null || true
+-        /bin/pkill -HUP sssd_kcm 2> /dev/null || true
++        /usr/bin/systemctl try-reload-or-restart sssd sssd_kcm
+     endscript
+ }
+Index: sssd-2.11.1/src/sysv/systemd/sssd-kcm.service.in
+===================================================================
+--- sssd-2.11.1.orig/src/sysv/systemd/sssd-kcm.service.in
++++ sssd-2.11.1/src/sysv/systemd/sssd-kcm.service.in
+@@ -32,6 +32,7 @@ ExecStartPre=+-/bin/chmod -f g+x @sssdco
+ ExecStartPre=+-/bin/sh -c "/bin/chown -f -h @SSSD_USER@:@SSSD_USER@ @secdbpath@/*.ldb"
+ ExecStartPre=+-/bin/sh -c "/bin/chown -f -h @SSSD_USER@:@SSSD_USER@ @logpath@/sssd_kcm.log*"
+ ExecStart=@libexecdir@/sssd/sssd_kcm ${DEBUG_LOGGER}
++ExecReload=kill -HUP $MAINPID
+ CapabilityBoundingSet= CAP_DAC_READ_SEARCH CAP_SETGID CAP_SETUID
+ SecureBits=noroot noroot-locked
+ User=@SSSD_USER@
+Index: sssd-2.11.1/src/sysv/systemd/sssd.service.in
+===================================================================
+--- sssd-2.11.1.orig/src/sysv/systemd/sssd.service.in
++++ sssd-2.11.1/src/sysv/systemd/sssd.service.in
+@@ -21,6 +21,7 @@ ExecStartPre=+-/bin/sh -c "/bin/chown -f
+ ExecStartPre=+-/bin/chown -f -R -h @SSSD_USER@:@SSSD_USER@ @gpocachepath@
+ ExecStartPre=+-/bin/sh -c "/bin/chown -f -h @SSSD_USER@:@SSSD_USER@ @logpath@/*.log*"
+ ExecStart=@sbindir@/sssd -i ${DEBUG_LOGGER}
++ExecReload=kill -HUP $MAINPID
+ Type=notify
+ NotifyAccess=main
+ Restart=on-abnormal

sssd-2.11.0.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEwTzQf/stsUCORXo809IbKRDPZ1kFAmhBWQkACgkQ09IbKRDP
-Z1nnrg//ZyIWtg+Qp5bVW6MQS99kuATk0hvAQnm4tTjO8HzphWFl0Hta7h9QOsM3
-QhVs4liW13eb9yZDnHfFh44o0F+QEYzHouMikZaA6riIxzYO0Im5Rglq/jkcZGn9
-IrR4w0of45wmL9huZAsXnYosw9RtDuF5FEDB6yypcPqSyXxr+jyW3U52hEXpjaQ/
-M3XXmoeQVMeb1RmQkcMWt+7/gjOoWSjONtOOFoUlGxn3GgeIroPIzUViYqJDJZi2
-zIkBhoGw1EdKPVFV/8YTNH4u5RA3PmN92tmey9uWA5mfxH//njPUNv5sKO8RKkaU
-BD2ftTK3Vv8QzLpKEuANnJ5/P/bh5LWGjn3J6kJBn5w2Zedy0AecZfo1PKONfukv
-+QIyNKBlc9x0kts/TwMLo60p2olJqh/AKlXwgexfxAzQqcuBlcZdpMqyV279cmXl
-X78NYzdR9F5n4czKiDU8JWudndIzagVi/0NmuQJWfFCz0o3sCtI9QUj+GUH8Ynxd
-DCyxXZptN2LtobxJnaSXB3HwwJ6qKlQTrfHWwqcmzf/p2KyJIaGg93nYhwIlLrev
-HVkuTB9dTpZa0LkljWOd/i7eoGQ0zxYM3pTm2FKDy/Ff5ChPriHdjIAhYqgPxt+j
-r3wMiMOIRckv1a538CAKdbC8k8Q0nmHfYTdrt3dp+fSSr4iwZLA=
-=gdC9
------END PGP SIGNATURE-----

sssd-2.11.1.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=DoFI
+-----END PGP SIGNATURE-----

sssd.changes

@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Thu Jul 31 16:15:46 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.11.1
+  * Fixed AD users in external groups not being cleared once the
+    cache expires.
+  * Fixed `cache_credentials=true` not having any effect.
+  * Fixed socket activation not having an effect for sssd_pam.
+
+-------------------------------------------------------------------
+Fri Jul 18 09:03:19 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Add logrotate.patch [boo#1246537]
+
 -------------------------------------------------------------------
 Wed Jun 11 14:53:26 UTC 2025 - Samuel Cabrero <scabrero@suse.de>
 

sssd.spec

@@ -17,7 +17,7 @@
 
 
 Name:           sssd
-Version:        2.11.0
+Version:        2.11.1
 Release:        0
 Summary:        System Security Services Daemon
 License:        GPL-3.0-or-later AND LGPL-3.0-or-later
@@ -28,11 +28,13 @@ Source:         https://github.com/SSSD/sssd/releases/download/%version/%name-%v
 Source2:        https://github.com/SSSD/sssd/releases/download/%version/%name-%version.tar.gz.asc
 Source3:        baselibs.conf
 Source5:        %name.keyring
+Source6:        %name-rpmlintrc
 Patch1:         0001-TOOL-Fix-build-parameter-name-omitted.patch
 Patch11:        krb-noversion.diff
 Patch12:        harden_sssd-ifp.service.patch
 Patch13:        harden_sssd-kcm.service.patch
 Patch14:        symvers.patch
+Patch15:        logrotate.patch
 BuildRequires:  autoconf >= 2.59
 BuildRequires:  automake
 BuildRequires:  bind-utils
@@ -88,6 +90,7 @@ BuildRequires:  pkgconfig(p11-kit-1) >= 0.23.3
 BuildRequires:  pkgconfig(popt)
 BuildRequires:  pkgconfig(python3)
 BuildRequires:  pkgconfig(smbclient)
+BuildRequires:  pkgconfig(systemd)
 BuildRequires:  pkgconfig(talloc)
 BuildRequires:  pkgconfig(tdb) >= 1.1.3
 BuildRequires:  pkgconfig(tevent)
@@ -438,8 +441,7 @@ autoreconf -fiv
 	--with-subid
 %else
 	--with-selinux=no \
-	--with-libsifp \
-	--with-files-provider
+	--with-libsifp
 %endif
 %make_build all
 
@@ -695,9 +697,6 @@ fi
 %_libdir/%name/libsss_cert*
 %_libdir/%name/libsss_crypt*
 %_libdir/%name/libsss_debug*
-%if 0%{?suse_version} < 1600
-%_libdir/%name/libsss_files*
-%endif
 %_libdir/%name/libsss_iface*
 %_libdir/%name/libsss_sbus*
 %_libdir/%name/libsss_simple*
@@ -930,16 +929,6 @@ fi
 %_libdir/libsss_nss_idmap.so
 %_libdir/pkgconfig/sss_nss_idmap.pc
 
-%if 0%{?suse_version} < 1600
-%files -n libsss_simpleifp0
-%_libdir/libsss_simpleifp.so.0*
-
-%files -n libsss_simpleifp-devel
-%_includedir/sss_sifp*.h
-%_libdir/libsss_simpleifp.so
-%_libdir/pkgconfig/sss_simpleifp.pc
-%endif
-
 %files -n python3-ipa_hbac
 %dir %python3_sitearch
 %python3_sitearch/pyhbac.so