parent
23b784cf95
commit
8d6343c01f
|
@ -1 +1 @@
|
||||||
sssd-1.0.0.tar.gz
|
sssd-1.0.1.tar.gz
|
||||||
|
|
|
@ -1,47 +0,0 @@
|
||||||
From a79fed1bece2e33759546f97ce0f22af3745ac80 Mon Sep 17 00:00:00 2001
|
|
||||||
From: Stephen Gallagher <sgallagh@redhat.com>
|
|
||||||
Date: Mon, 21 Dec 2009 13:03:03 -0500
|
|
||||||
Subject: [PATCH] Allow debug_timestamps setting on a per-domain basis
|
|
||||||
|
|
||||||
This was missing from the SSSDConfig API, though it was supported
|
|
||||||
by the daemon.
|
|
||||||
---
|
|
||||||
server/config/SSSDConfigTest.py | 2 ++
|
|
||||||
server/config/etc/sssd.api.conf | 1 +
|
|
||||||
2 files changed, 3 insertions(+), 0 deletions(-)
|
|
||||||
|
|
||||||
diff --git a/server/config/SSSDConfigTest.py b/server/config/SSSDConfigTest.py
|
|
||||||
index f893d98..1e79342 100755
|
|
||||||
--- a/server/config/SSSDConfigTest.py
|
|
||||||
+++ b/server/config/SSSDConfigTest.py
|
|
||||||
@@ -372,6 +372,7 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
|
|
||||||
options = domain.list_options()
|
|
||||||
control_list = [
|
|
||||||
'debug_level',
|
|
||||||
+ 'debug_timestamps',
|
|
||||||
'min_id',
|
|
||||||
'max_id',
|
|
||||||
'timeout',
|
|
||||||
@@ -586,6 +587,7 @@ class SSSDConfigTestSSSDDomain(unittest.TestCase):
|
|
||||||
options = domain.list_options()
|
|
||||||
control_list = [
|
|
||||||
'debug_level',
|
|
||||||
+ 'debug_timestamps',
|
|
||||||
'min_id',
|
|
||||||
'max_id',
|
|
||||||
'timeout',
|
|
||||||
diff --git a/server/config/etc/sssd.api.conf b/server/config/etc/sssd.api.conf
|
|
||||||
index c8ddae4..bdb6aab 100644
|
|
||||||
--- a/server/config/etc/sssd.api.conf
|
|
||||||
+++ b/server/config/etc/sssd.api.conf
|
|
||||||
@@ -42,6 +42,7 @@ chpass_provider = str, None
|
|
||||||
[domain]
|
|
||||||
# Options available to all domains
|
|
||||||
debug_level = int, None, 0
|
|
||||||
+debug_timestamps = bool, None
|
|
||||||
command = str, None
|
|
||||||
min_id = int, None, 1000
|
|
||||||
max_id = int, None
|
|
||||||
--
|
|
||||||
1.6.5.2
|
|
||||||
|
|
|
@ -1 +1,2 @@
|
||||||
sssd-0_1_0-5_20090309git691c9b3_fc10:HEAD:sssd-0.1.0-5.20090309git691c9b3.fc10.src.rpm:1236618353
|
sssd-0_1_0-5_20090309git691c9b3_fc10:HEAD:sssd-0.1.0-5.20090309git691c9b3.fc10.src.rpm:1236618353
|
||||||
|
sssd-1_0_1-1_fc13:F-11:sssd-1.0.1-1.fc13.src.rpm:1263221083
|
||||||
|
|
2
sources
2
sources
|
@ -1 +1 @@
|
||||||
b4a21cd65157e775dd5843d6a7ded10d sssd-1.0.0.tar.gz
|
695a5fb6003dad6f4af65146e4f039bf sssd-1.0.1.tar.gz
|
||||||
|
|
|
@ -1,90 +0,0 @@
|
||||||
[services]
|
|
||||||
description = Local Service Configuration
|
|
||||||
activeServices = nss, dp, pam
|
|
||||||
|
|
||||||
[services/nss]
|
|
||||||
description = NSS Responder Configuration
|
|
||||||
# the following prevents sssd for searching for the root user/group in
|
|
||||||
# all domains (you can add here a comma separated list of system accounts are
|
|
||||||
# always going to be /etc/passwd users, or that you want to filter out)
|
|
||||||
filterGroups = root
|
|
||||||
filterUsers = root
|
|
||||||
|
|
||||||
[services/dp]
|
|
||||||
description = Data Provider Configuration
|
|
||||||
|
|
||||||
[services/pam]
|
|
||||||
description = PAM Responder Configuration
|
|
||||||
|
|
||||||
[services/monitor]
|
|
||||||
description = Service Monitor Configuration
|
|
||||||
#if a backend is particularly slow you can raise this timeout here
|
|
||||||
sbusTimeout = 30
|
|
||||||
|
|
||||||
[domains]
|
|
||||||
description = Domains served by SSSD
|
|
||||||
; domains = LOCAL,LDAP
|
|
||||||
|
|
||||||
# SSSD will not start if you don't configure any domain.
|
|
||||||
# Add new domains condifgurations as [domains/<NAME>] sections.
|
|
||||||
# Then add the list of domains (in the order you want them to be
|
|
||||||
# queried in the 'domains" attribute above and uncomment it
|
|
||||||
|
|
||||||
# Example LOCAL domain that proxies to /etc/passwd and /etc/group files
|
|
||||||
# This configuration is meant mostly as a migration path to be able to store
|
|
||||||
# additional information about users while still keeping /etc/passwd
|
|
||||||
# authoritative.
|
|
||||||
|
|
||||||
; [domains/LOCAL]
|
|
||||||
; description = LOCAL migration domain
|
|
||||||
; enumerate = 3
|
|
||||||
; minId = 500
|
|
||||||
; magicPrivateGroups = FALSE
|
|
||||||
; legacy = TRUE
|
|
||||||
;
|
|
||||||
; provider = proxy
|
|
||||||
; libName = files
|
|
||||||
; libPath = libnss_files.so.2
|
|
||||||
|
|
||||||
# optionally a file named sssdproxylocal can be place in pam.d configured to
|
|
||||||
# check pam_unix only and pam_sss can be used in the normal pam stack
|
|
||||||
; auth-module = proxy
|
|
||||||
; pam-target = sssdproxylocal
|
|
||||||
|
|
||||||
# Example LOCAL domain that stores all users natively in the SSSD internal
|
|
||||||
# directory. These local users and groups are not visibile in /etc/passwd, it
|
|
||||||
# now contains only root and system accounts.
|
|
||||||
|
|
||||||
; [domains/LOCAL]
|
|
||||||
; description = LOCAL Users domain
|
|
||||||
; enumerate = 3
|
|
||||||
; minId = 500
|
|
||||||
; maxId = 999
|
|
||||||
; legacy = FALSE
|
|
||||||
; magicPrivateGroups = TRUE
|
|
||||||
; provider = local
|
|
||||||
|
|
||||||
# Example LDAP domain that uses the proxy backend and the standard nss_ldap
|
|
||||||
# and pam_ldap modules (Useful until we have good working native ldap backends).
|
|
||||||
# For this to work the /etc/ldap.conf file needs to be correctly configured just
|
|
||||||
# like you would do when using nss_ldap in nsswitch.conf, but instead of setting
|
|
||||||
# passwd: files ldap, set passwd: files, sss instead there.
|
|
||||||
# Also consider using the following setting in /etc/ldap.conf to avoid needless
|
|
||||||
# delays if the ldap server is offline:
|
|
||||||
# timelimit 10
|
|
||||||
# bind_timelimit 5
|
|
||||||
# nss_reconnect_maxsleeptime 2
|
|
||||||
# nss_reconnect_sleeptime 1
|
|
||||||
|
|
||||||
; [domains/LDAP]
|
|
||||||
; description = Proxy request to our LDAP server
|
|
||||||
; enumerate = 0
|
|
||||||
; minId = 1000
|
|
||||||
; legacy = TRUE
|
|
||||||
;
|
|
||||||
; provider = proxy
|
|
||||||
; libName = ldap
|
|
||||||
; libPath = libnss_ldap.so.2
|
|
||||||
;
|
|
||||||
#if a backend is particularly slow you can raise this timeout here
|
|
||||||
; timeout = 60
|
|
10
sssd.spec
10
sssd.spec
|
@ -2,8 +2,8 @@
|
||||||
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import *; import sys; sys.stdout.write(get_python_lib())")}
|
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import *; import sys; sys.stdout.write(get_python_lib())")}
|
||||||
|
|
||||||
Name: sssd
|
Name: sssd
|
||||||
Version: 1.0.0
|
Version: 1.0.1
|
||||||
Release: 2%{?dist}
|
Release: 1%{?dist}
|
||||||
Group: Applications/System
|
Group: Applications/System
|
||||||
Summary: System Security Services Daemon
|
Summary: System Security Services Daemon
|
||||||
# The entire source code is GPLv3+ except replace/ which is LGPLv3+
|
# The entire source code is GPLv3+ except replace/ which is LGPLv3+
|
||||||
|
@ -12,8 +12,6 @@ URL: http://fedorahosted.org/sssd
|
||||||
Source: https://fedorahosted.org/released/sssd/sssd-%{version}.tar.gz
|
Source: https://fedorahosted.org/released/sssd/sssd-%{version}.tar.gz
|
||||||
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
|
||||||
|
|
||||||
Patch1: cfg_dbg_timestamps.patch
|
|
||||||
|
|
||||||
### Patches ###
|
### Patches ###
|
||||||
|
|
||||||
### Dependencies ###
|
### Dependencies ###
|
||||||
|
@ -80,7 +78,6 @@ service.
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q
|
%setup -q
|
||||||
%patch1 -p1 -b .cfg_dbg_timestamps
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
NSS_LIBS=-lnss3 \
|
NSS_LIBS=-lnss3 \
|
||||||
|
@ -208,6 +205,9 @@ fi
|
||||||
%postun client -p /sbin/ldconfig
|
%postun client -p /sbin/ldconfig
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
|
||||||
|
- Fix CVE-2010-0014
|
||||||
|
|
||||||
* Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
|
* Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
|
||||||
- Patch SSSDConfig API to address
|
- Patch SSSDConfig API to address
|
||||||
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
|
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
|
||||||
|
|
Loading…
Reference in New Issue