New upstream release 1.5.12
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.12 Fixes a regression introduced in 1.5.11 with hostname resolution Fixes an issue where sssd_pam would leak file descriptors until resource exhaustion Complete rewrite of the FreeIPA Host-Based Access Control (HBAC) resolver New shared library for HBAC access-control Fixes for password expiration handling with LDAP auth New option to veto certain centrally-managed shells (Patch by John Hodrien) Conflicts: sssd.spec
This commit is contained in:
parent
a7f0d3bcea
commit
54472e5fa7
|
@ -15,3 +15,4 @@ sssd-1.2.91.tar.gz
|
||||||
/sssd-1.5.9.tar.gz
|
/sssd-1.5.9.tar.gz
|
||||||
/sssd-1.5.10.tar.gz
|
/sssd-1.5.10.tar.gz
|
||||||
/sssd-1.5.11.tar.gz
|
/sssd-1.5.11.tar.gz
|
||||||
|
/sssd-1.5.12.tar.gz
|
||||||
|
|
2
sources
2
sources
|
@ -1 +1 @@
|
||||||
d4c7d20098f73a48053bf41d47d98b7b sssd-1.5.11.tar.gz
|
9aab979366c1143d7f8f40940ffe3146 sssd-1.5.12.tar.gz
|
||||||
|
|
68
sssd.spec
68
sssd.spec
|
@ -8,8 +8,8 @@
|
||||||
%global ldb_version 0.9.10
|
%global ldb_version 0.9.10
|
||||||
|
|
||||||
Name: sssd
|
Name: sssd
|
||||||
Version: 1.5.11
|
Version: 1.5.12
|
||||||
Release: 2%{?dist}
|
Release: 1%{?dist}
|
||||||
Group: Applications/System
|
Group: Applications/System
|
||||||
Summary: System Security Services Daemon
|
Summary: System Security Services Daemon
|
||||||
License: GPLv3+
|
License: GPLv3+
|
||||||
|
@ -24,6 +24,7 @@ BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
||||||
Requires: libldb = %{ldb_version}
|
Requires: libldb = %{ldb_version}
|
||||||
Requires: libtdb >= 1.1.3
|
Requires: libtdb >= 1.1.3
|
||||||
Requires: sssd-client = %{version}-%{release}
|
Requires: sssd-client = %{version}-%{release}
|
||||||
|
Requires: libipa_hbac = %{version}-%{release}
|
||||||
Requires: cyrus-sasl-gssapi
|
Requires: cyrus-sasl-gssapi
|
||||||
Requires(post): initscripts chkconfig /sbin/ldconfig
|
Requires(post): initscripts chkconfig /sbin/ldconfig
|
||||||
Requires(preun): initscripts chkconfig
|
Requires(preun): initscripts chkconfig
|
||||||
|
@ -78,6 +79,7 @@ BuildRequires: libnl-devel
|
||||||
BuildRequires: nscd
|
BuildRequires: nscd
|
||||||
BuildRequires: gettext-devel
|
BuildRequires: gettext-devel
|
||||||
BuildRequires: pkgconfig
|
BuildRequires: pkgconfig
|
||||||
|
BuildRequires: libunistring-devel
|
||||||
|
|
||||||
%description
|
%description
|
||||||
Provides a set of daemons to manage access to remote directories and
|
Provides a set of daemons to manage access to remote directories and
|
||||||
|
@ -108,6 +110,34 @@ SSSD when using id_provider = local in /etc/sssd/sssd.conf.
|
||||||
Also provides a userspace tool for generating an obfuscated LDAP password for
|
Also provides a userspace tool for generating an obfuscated LDAP password for
|
||||||
use with ldap_default_authtok_type = obfuscated_password.
|
use with ldap_default_authtok_type = obfuscated_password.
|
||||||
|
|
||||||
|
%package -n libipa_hbac
|
||||||
|
Summary: FreeIPA HBAC Evaluator library
|
||||||
|
Group: Development/Libraries
|
||||||
|
License: LGPLv3+
|
||||||
|
|
||||||
|
%description -n libipa_hbac
|
||||||
|
Utility library to validate FreeIPA HBAC rules for authorization requests
|
||||||
|
|
||||||
|
%package -n libipa_hbac-devel
|
||||||
|
Summary: FreeIPA HBAC Evaluator library
|
||||||
|
Group: Development/Libraries
|
||||||
|
License: LGPLv3+
|
||||||
|
Requires: libipa_hbac = %{version}-%{release}
|
||||||
|
|
||||||
|
%description -n libipa_hbac-devel
|
||||||
|
Utility library to validate FreeIPA HBAC rules for authorization requests
|
||||||
|
|
||||||
|
%package -n libipa_hbac-python
|
||||||
|
Summary: Python bindings for the FreeIPA HBAC Evaluator library
|
||||||
|
Group: Development/Libraries
|
||||||
|
License: LGPLv3+
|
||||||
|
Requires: libipa_hbac = %{version}-%{release}
|
||||||
|
|
||||||
|
%description -n libipa_hbac-python
|
||||||
|
The libipa_hbac-python contains the bindings so that libipa_hbac can be
|
||||||
|
used by Python applications.
|
||||||
|
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
|
|
||||||
|
@ -164,7 +194,9 @@ rm -f \
|
||||||
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ipa.la \
|
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ipa.la \
|
||||||
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_simple.la \
|
$RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_simple.la \
|
||||||
$RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.la \
|
$RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.la \
|
||||||
$RPM_BUILD_ROOT/%{python_sitearch}/pysss.la
|
$RPM_BUILD_ROOT/%{_libdir}/libipa_hbac.la \
|
||||||
|
$RPM_BUILD_ROOT/%{python_sitearch}/pysss.la \
|
||||||
|
$RPM_BUILD_ROOT/%{python_sitearch}/pyhbac.la
|
||||||
|
|
||||||
# Older versions of rpmbuild can only handle one -f option
|
# Older versions of rpmbuild can only handle one -f option
|
||||||
# So we need to append to the sssd.lang file
|
# So we need to append to the sssd.lang file
|
||||||
|
@ -249,6 +281,21 @@ rm -rf $RPM_BUILD_ROOT
|
||||||
%{_mandir}/man8/sss_usermod.8*
|
%{_mandir}/man8/sss_usermod.8*
|
||||||
%{_mandir}/man8/sss_obfuscate.8*
|
%{_mandir}/man8/sss_obfuscate.8*
|
||||||
|
|
||||||
|
%files -n libipa_hbac
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
|
||||||
|
%{_libdir}/libipa_hbac.so.*
|
||||||
|
|
||||||
|
%files -n libipa_hbac-devel
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{_includedir}/ipa_hbac.h
|
||||||
|
%{_libdir}/libipa_hbac.so
|
||||||
|
%{_libdir}/pkgconfig/ipa_hbac.pc
|
||||||
|
|
||||||
|
%files -n libipa_hbac-python
|
||||||
|
%defattr(-,root,root,-)
|
||||||
|
%{python_sitearch}/pyhbac.so
|
||||||
|
|
||||||
%post
|
%post
|
||||||
/sbin/ldconfig
|
/sbin/ldconfig
|
||||||
/sbin/chkconfig --add %{servicename}
|
/sbin/chkconfig --add %{servicename}
|
||||||
|
@ -269,7 +316,22 @@ fi
|
||||||
|
|
||||||
%postun client -p /sbin/ldconfig
|
%postun client -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%post -n libipa_hbac -p /sbin/ldconfig
|
||||||
|
|
||||||
|
%postun -n libipa_hbac -p /sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Fri Aug 05 2011 Stephen Gallagher <sgallagh@redhat.ocm> - 1.5.12-1
|
||||||
|
- New upstream release 1.5.12
|
||||||
|
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.12
|
||||||
|
- Fixes a regression introduced in 1.5.11 with hostname resolution
|
||||||
|
- Fixes an issue where sssd_pam would leak file descriptors until resource
|
||||||
|
exhaustion
|
||||||
|
- Complete rewrite of the FreeIPA Host-Based Access Control (HBAC) resolver
|
||||||
|
- New shared library for HBAC access-control
|
||||||
|
- Fixes for password expiration handling with LDAP auth
|
||||||
|
- New option to veto certain centrally-managed shells (Patch by John Hodrien)
|
||||||
|
|
||||||
* Tue Jul 05 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
|
* Tue Jul 05 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.11-2
|
||||||
- New upstream release 1.5.11
|
- New upstream release 1.5.11
|
||||||
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
|
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.5.11
|
||||||
|
|
Loading…
Reference in New Issue