Commit Graph

398 Commits

Author SHA1 Message Date
Fabiano Fidêncio
2d8d8d1c8b Resolves: upstream#3646 - SSSD's GPO code ignores ad_site option
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 8565df471c)
(cherry picked from commit d4cc9f09a9)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
eefe33aff1 Resolves: upstream#3402 - Support alternative sources for the files provider
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 9709b73a3f)
(cherry picked from commit 69dd3e36eb)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
c114eb6b3f Resolves: upstream#3550 - refresh_expired_interval does not work with netgrous in 1.15
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit a7d4f0b3f4)
(cherry picked from commit 1ec14767eb)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
bb5f960239 IPA: Qualify the externalUser sudo attribute
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit ab53ba849a)
(cherry picked from commit ff80480d02)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
389295064e Tone down shutdown messages for socket activated responders
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit ef1d48a0c2)
(cherry picked from commit 11342ddfab)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
f338f8cb95 Resolves: upstream#3558 - sudo: report error when two rules share cn
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit fcff118bbf)
(cherry picked from commit b1ddb6443b)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
b429a75bce Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit f3d06df50d)
(cherry picked from commit 7809e6eedd)
2018-04-27 22:29:48 +02:00
Fabiano Fidêncio
89a1543353 A few KCM misc fixes
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 32f2c81e59)
(cherry picked from commit 2540bf426d)
2018-03-30 15:25:35 +02:00
Fabiano Fidêncio
4a56bc21d2 Resolves: upstream#3666 - Fix usage of str.decode() in our test
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 99da72db23)
(cherry picked from commit 4d8a2ac870)
2018-03-30 15:25:27 +02:00
Fabiano Fidêncio
97df14ee0f Resolves: upstream#3386 - KCM: Payload buffer is too small
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 1c7376afc5)
(cherry picked from commit 7d773ed035)
2018-03-30 15:25:18 +02:00
Fabiano Fidêncio
26eab693bb Resolves: usptream#3687 - KCM: Don't pass a non null terminated string to json_loads()
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 73735e9522)
(cherry picked from commit 0392642064)
2018-03-30 15:25:10 +02:00
Fabiano Fidêncio
2a59fc635f Resolves: upstream#3658 - Application domain is not interpreted correctly
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 563dd33f72)
(cherry picked from commit 4d2103b723)
2018-03-30 15:24:57 +02:00
Fabiano Fidêncio
44d6f59b93 Resolves: upstream#3660 - confdb_expand_app_domains() always fails
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 2c812f3cba)
(cherry picked from commit c126b3174c)
2018-03-30 15:24:44 +02:00
Fabiano Fidêncio
46f52a9bd6 Resolves: upstream#3573 - sssd won't show netgroups with blank domai
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 40fe76feb8)
(cherry picked from commit 928c3e94ab)
2018-03-30 15:24:32 +02:00
Fabiano Fidêncio
bfc60044d5 New upstream release 1.16.1
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 62a3258629)
(cherry picked from commit d11cfce2ff)
2018-03-09 16:56:17 +01:00
Lukas Slebodnik
21443e5ebe Resolves: upstream#3621 - backport bug fix found by static analyzers
(cherry picked from commit 5eba7a8f1f)
2018-02-20 15:16:21 +01:00
Fabiano Fidêncio
ca31e2be64 Resolves: upstream#3621: FleetCommander integration must not require capability DAC_OVERRIDE
Together with the patches backported from upstream, we're changing
the deskprofilepath permissions from 755 to 751, reflecting the
upstream spec file changes.

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 4b1fe8a0ab)
2018-02-14 23:03:54 +01:00
Fabiano Fidêncio
47317c5649 Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 199a72e62a)
2018-02-14 22:25:04 +01:00
Lukas Slebodnik
c90915394e Resolves: upstream#3618 - selinux_child segfaults in a docker container
(cherry picked from commit 18ae44bc79)
2018-02-07 22:08:14 +01:00
Lukas Slebodnik
01409e3d48 Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout
Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                          or machine swaps
Resolves: failure in glibc tests
          https://sourceware.org/bugzilla/show_bug.cgi?id=22530
Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                          auth_provider ldap, login fails if the LDAP server
                          is not allowing anonymous binds
Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                          corrected with AD
Resolves: upstream#3586 - Give a more detailed debug and system-log message
                          if krb5_init_context() failed
Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                         in /etc/systemd/system
Backport few upstream features from 1.16.1

(cherry picked from commit 1dedfbb334)
2017-12-04 21:53:43 +01:00
Lukas Slebodnik
8f047f7ff4 Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
(cherry picked from commit ce65f7d9ee)
2017-11-21 18:01:54 +01:00
Lukas Slebodnik
e8791c3999 Revert "Disable nfsplugin due to bug rhbz#1509063"
This reverts commit b5c435b10b.

nfs-utils are fixed

(cherry picked from commit 87763840cd)
2017-11-21 18:01:44 +01:00
Jakub Hrozek
bb0cc30393 Backport extended NSS API from upstream master branch 2017-11-17 19:41:03 +01:00
Lukas Slebodnik
f206fae248 Disable nfsplugin due to bug rhbz#1509063
(cherry picked from commit b5c435b10b)
2017-11-03 23:07:25 +01:00
Lukas Slebodnik
da41c905c0 Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade
(cherry picked from commit 7ac8b3c4b5)
2017-11-03 16:27:54 +01:00
Lukas Slebodnik
71b7ed1da0 Add workaround for unit test failures with libldb-1.3 2017-11-03 16:27:27 +01:00
Lukas Slebodnik
ea632499ff New upstream release 1.16.0
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
(cherry picked from commit 4f58854911)
2017-10-20 18:05:32 +02:00
Lukas Slebodnik
4a8ad4c174 Resolves: rhbz#1499354 - CVE-2017-12173
sssd: unsanitized input when searching in local cache database access on
the sock_file system_bus_socket

(cherry picked from commit 7069858231)
2017-10-11 17:50:14 +02:00
Lukas Slebodnik
e15fc49cbf Fix few bugs/regressions
Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access
                         on the sock_file system_bus_socket
Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                         fails to download desktop profile data
Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after
                          applying ID Views for them in IPA server
Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping
                          is applied
(cherry picked from commit 8eda442b2e)
2017-09-12 09:28:42 +02:00
Lukas Slebodnik
323dbdee02 Backport few upstream patches/fixes
(cherry picked from commit fa4807ec45)
2017-09-01 21:40:30 +02:00
Lukas Slebodnik
2aa9f3bb10 Add krb5 conf snippet for default KCM
http://fedoraproject.org/wiki/Releases/27/ChangeSet#Kerberos_KCM_credential_cache_by_default
https://bugzilla.redhat.com/show_bug.cgi?id=1421604
(cherry picked from commit 11cd64de1c)
2017-09-01 21:40:30 +02:00
Lukas Slebodnik
601bb9f4eb Simplify spec file a little bit
The plugin for cifs-utils can be built on all supported versions of fedora.
Conditions are required only in upstream spec file for older
distributions. Definition of constant with_cifs_utils_plugin is still
in the beginning of spec file for simpler comparison of changes
between upstream and fedora.

(cherry picked from commit 5ce8ae1166)
2017-09-01 21:40:30 +02:00
Lukas Slebodnik
e89cb59c68 Remove unused if condition krb5 localauth plugin
The plugin can be built on all supported versions of fedora.
And it was removed also from upstream spec file.

(cherry picked from commit 088151887a)
2017-09-01 21:40:30 +02:00
Ville Skyttä
3b8c6ea1d5 Own the %{_libdir}/%{name}/conf dir
https://bugzilla.redhat.com/show_bug.cgi?id=1483517
(cherry picked from commit 308a55f49d)
2017-09-01 21:40:30 +02:00
Fedora Release Engineering
df69f6e551 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 19:16:38 +00:00
Lukas Slebodnik
1f58bd8dc4 Make fedora automated tests happy
dist.python-versions failed
dist.python-versions.requires_naming_scheme failed

These RPMs use `python-` prefix without Python version in *Requires:

sssd-1.15.3-1.fc26 BuildRequires:
 * python-devel (python2-devel is available)

This is strongly discouraged and should be avoided. Please check
the required packages, and use names with either `python2-` or
`python3-` prefix.
2017-07-25 17:53:21 +02:00
Lukas Slebodnik
6302a22355 New upstream release 1.15.3
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 13:58:52 +02:00
Lukas Slebodnik
ca67484fda Rebuild with libldb-1.2.0
sssd buill with older version of libldb will crash

  (gdb) bt
  #0  0x0000000000000001 in ?? ()
  #1  0x00007fcb39ce28dc in ldb_db_lock_destructor () from /lib64/libldb.so.1
  #2  0x00007fcb3a103f31 in _tc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", tc=<optimized out>) at ../talloc.c:1078
  #3  _talloc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", ptr=0x55e267aebef0) at ../talloc.c:1174
  #4  _talloc_free (ptr=0x55e267aebef0, location=0x7fcb39ce9303 "../common/ldb.c:1026") at ../talloc.c:1716
  #5  0x00007fcb39ce02f2 in ldb_lock_backend_callback () from /lib64/libldb.so.1
  #6  0x00007fcb31b172ae in ltdb_callback () from /usr/lib64/ldb/modules/ldb/tdb.so
  #7  0x00007fcb3a31e8c1 in tevent_common_loop_timer_delay () from /lib64/libtevent.so.0
2017-07-07 12:44:33 +02:00
Lukas Slebodnik
538f424e10 Disable unit tests with expired certificates 2017-06-27 16:02:20 +02:00
Lukas Slebodnik
7be3dab725 Fix build issues: Update expided certificate in unit tests 2017-06-27 14:22:05 +02:00
Lukas Slebodnik
af87992184 Reduce diff between rhel and fedora 2017-05-03 15:41:35 +02:00
Lukas Slebodnik
c580b695b0 Do not patch README.md
README.md is not part of tarball
2017-05-01 09:00:54 +02:00
Lukas Slebodnik
7bddea6c90 Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 23:49:52 +02:00
Lukas Slebodnik
576a19ee5a Fix issue with IPA + SELinux in containers
Resolves: upstream https://fedorahosted.org/sssd/ticket/3297
2017-04-06 15:54:38 +02:00
Lukas Slebodnik
387014f928 Backport upstream patches for 1.15.3 pre-release
required for building freeipa-4.5.x in rawhide
2017-04-04 16:22:51 +02:00
Lukas Slebodnik
d663bd4a22 New upstream release 1.15.2
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
2017-03-16 10:48:31 +01:00
Lukas Slebodnik
6a912ecf5d Add missing file 2017-03-06 11:41:21 +01:00
Lukas Slebodnik
831e9fa984 New upstream release 1.15.1
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
2017-03-06 10:48:38 +01:00
Jakub Hrozek
396c651083 Cherry-pick patches from upstream that enable the files provider
Required for:
    https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-28 16:54:33 +01:00
Lukas Slebodnik
3e94aee54c Add missing %license macro 2017-02-14 19:47:29 +01:00