rpms
/
sssd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
528 Commits 34 Branches 155 Tags 4.1 MiB
Commit Graph

505 Commits

Author SHA1 Message Date
Lukas Slebodnik b5c435b10b Disable nfsplugin due to bug rhbz#1509063 2017-11-03 22:58:37 +01:00
Lukas Slebodnik 7ac8b3c4b5 Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade 2017-11-03 16:20:10 +01:00
Lukas Slebodnik 7667bd7429 Fix unit tests with libldb-1.3.0 2017-10-21 16:19:39 +02:00
Lukas Slebodnik f2e72c8931 There are not empty lang files in 1.16.0 2017-10-20 23:18:12 +02:00
Lukas Slebodnik 4f58854911 New upstream release 1.16.0 
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
 2017-10-20 18:02:02 +02:00
Lukas Slebodnik 1aff49b48c Fix build with krb5 1.16 2017-10-11 18:06:00 +02:00
Lukas Slebodnik 7069858231 Resolves: rhbz#1499354 - CVE-2017-12173 
sssd: unsanitized input when searching in local cache database access on
the sock_file system_bus_socket
 2017-10-11 17:48:41 +02:00
Lukas Slebodnik 8eda442b2e Fix few bugs/regressions 
Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access
                         on the sock_file system_bus_socket
Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                         fails to download desktop profile data
Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after
                          applying ID Views for them in IPA server
Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping
                          is applied
 2017-09-12 09:22:07 +02:00
Lukas Slebodnik fa4807ec45 Backport few upstream patches/fixes 2017-09-01 21:34:35 +02:00
Lukas Slebodnik 11cd64de1c Add krb5 conf snippet for default KCM 
http://fedoraproject.org/wiki/Releases/27/ChangeSet#Kerberos_KCM_credential_cache_by_default
https://bugzilla.redhat.com/show_bug.cgi?id=1421604
 2017-09-01 21:34:20 +02:00
Lukas Slebodnik 5ce8ae1166 Simplify spec file a little bit 
The plugin for cifs-utils can be built on all supported versions of fedora.
Conditions are required only in upstream spec file for older
distributions. Definition of constant with_cifs_utils_plugin is still
in the beginning of spec file for simpler comparison of changes
between upstream and fedora.
 2017-09-01 10:47:18 +02:00
Lukas Slebodnik 088151887a Remove unused if condition krb5 localauth plugin 
The plugin can be built on all supported versions of fedora.
And it was removed also from upstream spec file.
 2017-09-01 10:39:14 +02:00
Ville Skyttä 308a55f49d Own the %{_libdir}/%{name}/conf dir 
https://bugzilla.redhat.com/show_bug.cgi?id=1483517
 2017-08-21 12:42:13 +02:00
Fedora Release Engineering df69f6e551 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 19:16:38 +00:00
Lukas Slebodnik 1f58bd8dc4 Make fedora automated tests happy 
dist.python-versions failed
dist.python-versions.requires_naming_scheme failed

These RPMs use `python-` prefix without Python version in *Requires:

sssd-1.15.3-1.fc26 BuildRequires:
 * python-devel (python2-devel is available)

This is strongly discouraged and should be avoided. Please check
the required packages, and use names with either `python2-` or
`python3-` prefix.
 2017-07-25 17:53:21 +02:00
Lukas Slebodnik 6302a22355 New upstream release 1.15.3 
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
 2017-07-25 13:58:52 +02:00
Lukas Slebodnik ca67484fda Rebuild with libldb-1.2.0 
sssd buill with older version of libldb will crash

  (gdb) bt
  #0  0x0000000000000001 in ?? ()
  #1  0x00007fcb39ce28dc in ldb_db_lock_destructor () from /lib64/libldb.so.1
  #2  0x00007fcb3a103f31 in _tc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", tc=<optimized out>) at ../talloc.c:1078
  #3  _talloc_free_internal (location=0x7fcb39ce9303 "../common/ldb.c:1026", ptr=0x55e267aebef0) at ../talloc.c:1174
  #4  _talloc_free (ptr=0x55e267aebef0, location=0x7fcb39ce9303 "../common/ldb.c:1026") at ../talloc.c:1716
  #5  0x00007fcb39ce02f2 in ldb_lock_backend_callback () from /lib64/libldb.so.1
  #6  0x00007fcb31b172ae in ltdb_callback () from /usr/lib64/ldb/modules/ldb/tdb.so
  #7  0x00007fcb3a31e8c1 in tevent_common_loop_timer_delay () from /lib64/libtevent.so.0
 2017-07-07 12:44:33 +02:00
Lukas Slebodnik 538f424e10 Disable unit tests with expired certificates 2017-06-27 16:02:20 +02:00
Lukas Slebodnik 7be3dab725 Fix build issues: Update expided certificate in unit tests 2017-06-27 14:22:05 +02:00
Lukas Slebodnik af87992184 Reduce diff between rhel and fedora 2017-05-03 15:41:35 +02:00
Lukas Slebodnik c580b695b0 Do not patch README.md 
README.md is not part of tarball
 2017-05-01 09:00:54 +02:00
Lukas Slebodnik 7bddea6c90 Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication 
Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
 2017-04-29 23:49:52 +02:00
Lukas Slebodnik 576a19ee5a Fix issue with IPA + SELinux in containers 
Resolves: upstream https://fedorahosted.org/sssd/ticket/3297
 2017-04-06 15:54:38 +02:00
Lukas Slebodnik 387014f928 Backport upstream patches for 1.15.3 pre-release 
required for building freeipa-4.5.x in rawhide
 2017-04-04 16:22:51 +02:00
Lukas Slebodnik d663bd4a22 New upstream release 1.15.2 
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
 2017-03-16 10:48:31 +01:00
Lukas Slebodnik 6a912ecf5d Add missing file 2017-03-06 11:41:21 +01:00
Lukas Slebodnik 831e9fa984 New upstream release 1.15.1 
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
 2017-03-06 10:48:38 +01:00
Jakub Hrozek 396c651083 Cherry-pick patches from upstream that enable the files provider 
Required for:
    https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
 2017-02-28 16:54:33 +01:00
Lukas Slebodnik 3e94aee54c Add missing %license macro 2017-02-14 19:47:29 +01:00
Fedora Release Engineering b5653d93c3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 13:57:49 +00:00
Lukas Slebodnik 850071336e New upstream release 1.15.0 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
 2017-01-27 20:07:00 +01:00
Miro Hrončok 4b9dd7c77c Rebuild for Python 3.6 2016-12-19 18:20:38 +01:00
Lukas Slebodnik eb6c560542 Resolves: rhbz#1369130 - nss_sss should not link against libpthread 
Resolves: rhbz#1392916 - sssd failes to start after update
Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                           on the directory /etc/sssd
 2016-12-13 20:10:27 +01:00
Lukas Slebodnik 85427c072c New upstream release 1.14.2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2
 2016-10-20 16:20:34 +02:00
Lukas Slebodnik 856526f769 libwbclient-sssd: update interface to version 0.13 2016-10-14 19:06:17 +02:00
Lukas Slebodnik 8dd054482d Revert "Do no use python_provide conditionally" 
The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python
in the package python-rpm-macros. But this package is not part
of build root and therefore rpm cannot parse spec file.

This reverts commit 22c180263a.
 2016-09-22 23:40:41 +02:00
Lukas Slebodnik 75bb1ff2e0 Fix failing test 2016-09-22 22:55:43 +02:00
Lukas Slebodnik 640e44ca24 Fix regression with krb5_map_user 
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                           default if nonexistent domain is mentioned
 2016-09-22 22:28:47 +02:00
Lukas Slebodnik 0fe5246e1a Use weak dependencies 2016-09-21 12:47:08 +02:00
Lukas Slebodnik 22c180263a Do no use python_provide conditionally 2016-09-15 17:53:58 +02:00
Lukas Slebodnik 2b61bbee11 Backport important patches from upstream 1.14.2 prerelease 
- Resolves: upstream #3154 - sssd exits if clock is adjusted backwards after
                             boot
- Resolves: upstream #3163 - resolving IPA nested user group is broken in 1.14
 2016-09-01 18:13:49 +02:00
Lukas Slebodnik 6bce0a242d New upstream release 1.14.0 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.1
 2016-08-19 18:02:03 +02:00
Stephen Gallagher 0e7292f369 Add workaround patch for RHBZ #1366403 2016-08-15 14:15:18 -04:00
Fedora Release Engineering 8a68f197ec - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages 2016-07-19 12:41:42 +00:00
Lukas Slebodnik 08625190c5 New upstream release 1.14.0 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0
 2016-07-08 08:47:25 +02:00
Lukas Slebodnik a100349631 Fix few mistakes 
note: fedpkg lint is your best friend
 2016-07-01 10:45:16 +02:00
Lukas Slebodnik f9539d7319 New upstream release 1.14 beta 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0beta
 2016-07-01 10:11:33 +02:00
Lukas Slebodnik 966fddcfba New upstream release 1.14 alpha 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.0alpha
 2016-06-21 10:58:04 +02:00
Lukas Slebodnik e3bb60bcdb Rename python packages + using macro %python_provide 2016-05-13 11:09:38 +02:00
Lukas Slebodnik 9aeb640f15 Resolves: rhbz#1335639 - [abrt] sssd-dbus: ldb_msg_find_element(): 
sssd_ifp killed by SIGSEGV
 2016-05-13 11:09:38 +02:00
Lukas Slebodnik 18bea94912 Resolves: rhbz#1328108 - Protocol error with FreeIPA on CentOS 6 2016-04-22 20:50:56 +02:00
Lukas Slebodnik d9dece9b71 Backport netlink patch for link-local addresses 2016-04-14 13:05:33 +02:00
Lukas Slebodnik 19237d03ed New upstream release 1.13.4 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.4
 2016-04-14 12:59:47 +02:00
Lukas Slebodnik 6b01857bc5 Bump release 2016-03-22 09:07:32 +01:00
Lukas Slebodnik e37379577b Resolves: rhbz#1276868 - Sudo PAM Login should support multiple password 
prompts (e.g. Password + Token)
- Resolves: rhbz#1313041 - ssh with sssd proxy fails with "Connection closed
                           by remote host" if locale not available
 2016-03-22 09:06:29 +01:00
Lukas Slebodnik e32d50862e Resolves: rhbz#1310664 - [RFE] IPA: resolve external group memberships of IPA 
groups during getgrnam and getgrgid
- Resolves: rhbz#1301303 - sss_obfuscate: SyntaxError: Missing parentheses
                           in call to 'print'
 2016-02-25 13:58:00 +01:00
Lukas Slebodnik 00dde99057 Move libsss_autofs.so outside sssd-common 
It will reduce dependency chain in container world.
libsss_autofs.so depends only on libc and requires
sssd unix sockets. And sssd-common has many requirements.
 2016-02-19 09:27:27 +01:00
Lukas Slebodnik 584e0c3964 Remove unnecessary requirements 
We do not need to requires specific version of libldb
or libtdb because it is automatically detected from
binary/library dependencies. We also need never version
of that libraries as it was specified in spec file.

e.g.
  sh$ rpm -q --requires sssd-common | grep -E "TDB|LDB"
  libldb.so.1(LDB_0.9.10)(64bit)
  libtdb.so.1(TDB_1.2.1)(64bit)

There is also redundant dependency on sssd-common-pac
sssd -> sssd-ipa -> sssd-common-pac
     -> sssd-ad -> sssd-common-pac
     -> sssd-common-pac

  sh$ rpm -q --whatrequires sssd-common-pac
  sssd-ipa-1.13.3-1.fc23.x86_64
  sssd-ad-1.13.3-1.fc23.x86_64
  sssd-1.13.3-1.fc23.x86_64
 2016-02-17 16:30:01 +01:00
Fedora Release Engineering 0a5378a924 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild 2016-02-05 00:37:31 +00:00
Lukas Slebodnik c38b881d88 Package uses only $RPM_BUILD_ROOT 
Note: Using both %{buildroot} and $RPM_BUILD_ROOT
See: http://fedoraproject.org/wiki/Packaging/Guidelines#macros
 2016-02-02 21:45:47 +01:00
Lukas Slebodnik 5719fdd6f8 Fix rpmlint issue for libsss_simpleifp 
Patch removes unnecessary requires of dbus-libs
because it's already detected from library.
However we forgot to call ldconfig after (un)installation.

sh$ rpm -q -p --requires libsss_simpleifp-1.13.90-0.fc23.x86_64.rpm | grep dbus
    libdbus-1.so.3()(64bit)
    libdbus-1.so.3(LIBDBUS_1_3)(64bit)
    sssd-dbus = 1.13.90-0.fc23

sh$ rpm -q --whatprovides "libdbus-1.so.3()(64bit)"
    dbus-libs-1.10.6-1.fc23.x86_64
 2016-02-02 18:07:45 +01:00
Lukas Slebodnik fb84da9380 Remove unnecessary clean-up of buildroot 
rhel5 required to clean buildroot in install section.
The %clean section is not required for F-13 and above, and EPEL 6 and
above. EPEL 5 MUST have a %clean section that cleans the buildroot:

https://fedoraproject.org/wiki/EPEL:Packaging#Prepping_BuildRoot_For_.25install
 2016-02-02 18:06:09 +01:00
Lukas Slebodnik d384e14059 Fix rpmlint warnings 
fedpkg/sssd/sssd.spec:1232: W: macro-in-%changelog %preun
fedpkg/sssd/sssd.spec:1366: W: macro-in-%changelog %{_lib}
fedpkg/sssd/sssd.spec:1366: W: macro-in-comment %{_lib}
 2016-02-02 11:59:36 +01:00
Lukas Slebodnik 6d11a34b89 Additional upstream fixes 2016-01-20 18:40:57 +01:00
Lukas Slebodnik 9bfc8ef4de Resolves: rhbz#1256849 - SUDO: Support the IPA schema 2016-01-19 18:23:34 +01:00
Michal Sekletar 94f4c4dd6d Use macros and don't call systemctl directly 
- Resolves: rhbz#850328 - Introduce new systemd-rpm macros in sssd spec file
 2016-01-19 15:26:15 +01:00
Lukas Slebodnik 9f85549912 Fix unowned directories 
- https://fedoraproject.org/wiki/Packaging:UnownedDirectories
- Resolves: rhbz#1266940 - sssd-client.i686 on x86_64 has unowned directories
 2016-01-19 15:15:32 +01:00
Lukas Slebodnik f50233afd2 Move libsss_sudo.so outside sssd-common 
The module ${libdir}/libsss_sudo.so is used only by /usr/bin/sudo.
If libsss_sudo.so was part of sssd-client then 32 bit version would
never be used on 64 bit machine and files in sssd-client can be used
by multilib applications e.g. libnss_sss.so can be indirectly "dlopened"
by 64 bit applications and 32 bit application.
(32-bit web browser; ordinary 64bit applications ...)
 2016-01-19 15:06:17 +01:00
Lukas Slebodnik aa27da2e1f Change package ownership of %{pubconfpath}/krb5.include.d 
krb5 domain mapping files are stored to the directory
%{pubconfpath}/krb5.include.d. It can be stored by ipa or ad provider.
However this directory was owned by sub-package sssd-ipa. And ad provider
can be installed without this package. Therefore %{pubconfpath}/krb5.include.d
should be owned by common dependency.

The owner of this directory was also fixed to sssd.
It's already done by make install. It was changed only in spec file.
 2016-01-19 15:02:47 +01:00
Lukas Slebodnik a89ed4b83f Additional patch for upstream #2829 2015-12-16 08:51:17 +01:00
Lukas Slebodnik 5df019d5aa New upstream release 1.13.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3
 2015-12-16 08:47:07 +01:00
Lukas Slebodnik 31ed44fa55 Backport patches from sssd master #2829 
Use after free in failover
 2015-11-20 09:47:17 +01:00
Lukas Slebodnik bdedaaad52 New upstream release 1.13.2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
 2015-11-20 09:47:17 +01:00
Robert Kuska 2b3b752656 Rebuilt for Python3.5 rebuild 2015-11-06 15:40:37 +01:00
Lukas Slebodnik 9f8eeed0c9 Fix building pac responder with the krb5-1.14 2015-10-27 09:41:14 +01:00
Lukas Slebodnik c08e64289b python-sssdconfig: Fix parssing sssd.conf without config_file_version 
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed
 2015-10-19 15:04:51 +02:00
Lukas Slebodnik 4bdb4e48cd Revert "Temporary disable tests due to broken krb5" 
This reverts commit 1bedb06db6.

Rawhide contain krb5-1.13.2-12.fc24 which fixed bug with missing
/usr/share/krb5.conf.d. So, unit test should pass.
 2015-10-07 13:42:42 +02:00
Lukas Slebodnik 69b9d3f518 Fix few segfaults 
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step
 2015-10-07 13:42:03 +02:00
Lukas Slebodnik 1bedb06db6 Temporary disable tests due to broken krb5 
Should be fixed with krb5 >= 1.14-2.fc24
 2015-10-01 08:16:23 +02:00
Lukas Slebodnik 00d900ad6f Remove unnecessary requirement 
libini-config-1.1 already provides version definition
which substitute this requirement.

sh$ objdump -p /usr/lib64/libini_config.so | grep -A4 definition
Version definitions:
1 0x01 0x05f25695 libini_config.so.5
2 0x00 0x00acdc20 INI_CONFIG_1.1.0
3 0x00 0x00acdd20 INI_CONFIG_1.2.0
        INI_CONFIG_1.1.0
 2015-10-01 08:16:23 +02:00
Lukas Slebodnik 05c3b14125 New upstream release 1.13.1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
 2015-10-01 08:16:16 +02:00
Lukas Slebodnik 996f9ec8f7 Fix OTP bug 
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                             entered separately
 2015-09-10 14:26:47 +02:00
Lukas Slebodnik cc6c9ff159 Backport upstream patches required by FreeIPA 4.2.1 2015-09-07 18:37:40 +02:00
Lukas Slebodnik cc1ba0d674 Fix ipa-migration bug 
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                             migration mode
 2015-07-21 09:11:06 +02:00
Lukas Slebodnik b46d3ce3db New upstream release 1.13.0 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0
 2015-07-08 19:15:17 +02:00
Lukas Slebodnik aa1a6b1ea9 Unify return type of list_active_domains for python{2,3} 2015-06-30 16:54:06 +02:00
Lukas Slebodnik 3fa3e7c22a New upstream release 1.13 alpha 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
 2015-06-22 13:52:08 +02:00
Dennis Gilmore b4d3da407f - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-19 01:41:15 +00:00
Lukas Slebodnik 89ed4ffc3c Fix libwbclient alternatives 2015-06-12 20:50:06 +02:00
Lukas Slebodnik aac3cde5be New upstream release 1.12.5 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5
    - backport important patches from upstream 1.13 prerelease
 2015-06-12 14:49:22 +02:00
Lukas Slebodnik 70e9980ac6 Backport important patches from upstream 1.13 prerelease 
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures
 2015-05-08 14:53:58 +02:00
Lukas Slebodnik a0e4fecc9c Fix cyclic dependencies between sssd-{krb5,}-common 
The upstream ticket #2507 is prerequisite for BZ1212503
Patch also enables cmocka tests with secondary architectures.
 2015-05-08 14:32:52 +02:00
Lukas Slebodnik 40a97f0f88 Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
Lukas Slebodnik 6cfd9704c1 Bump version for patches related to #2624 2015-04-15 14:19:39 +02:00
Lukas Slebodnik c4cf951d60 Fix slow login with ipa and SELinux 
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one
 2015-04-15 14:17:32 +02:00
Lukas Slebodnik 9a0389188d Small spec file clean-up 
* remove workaround for old rpmbuild (rhel5)
* remove conversion sysv scripts to systemd
* small code style update in bash scripts
 2015-04-09 18:06:13 +02:00
Lukas Slebodnik 36805df397 Fix regressions with ipa and SELinux 
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u
 2015-03-23 17:17:30 +01:00
Jakub Hrozek 9f97bec3b0 Also relax libldb Requires and remove --enable-ldb-version-check 2015-03-06 11:45:13 +01:00
Jakub Hrozek 9c5af4ac2d Relax libldb BuildRequires 
Originally, we tried to stay on the safe side with libldb since it never
really commited to stable ABI or API, but since there were never any
issues in many years, it's safe to relax the requirement.

This change will benefit especially the storage developers who often
need a different (typically newer) libldb version and would like to
avoid to rebuild sssd for no reason.
 2015-03-06 10:50:45 +01:00
Lukas Slebodnik ed82d05320 Add support for python3 bindings 
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3
 2015-02-25 14:21:45 +01:00
Lukas Slebodnik 16372c2465 Replace python_* rpm macros with python2_* 2015-02-25 13:34:08 +01:00
Lukas Slebodnik a8d019e332 Old python file names are just symbolic links 
* add real files to packages as well.
 2015-02-25 13:29:49 +01:00
Lukas Slebodnik e37fc598a5 Move python bindings to separate packages 
Some python bindings pysss and pysss_murmur was in package sssd-common.
Therefore package sssd-common had python as a dependency.
 2015-02-25 10:35:28 +01:00
Lukas Slebodnik 7601087c69 Backport upstream patches for building python{2,3} bindings 2015-02-25 10:15:06 +01:00
Lukas Slebodnik 5e6bda777e New upstream release 1.12.4 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4
 2015-02-18 21:24:59 +01:00
Lukas Slebodnik 59bb05ded2 Reverting change of rhbz ticket in changelog 
This change was part of initial patch from BZ1184623.
 2015-02-14 16:36:31 +01:00
Lukas Slebodnik 3412a6a279 Backport patches with Python3 support from upstream 2015-02-14 16:20:30 +01:00
Lukas Slebodnik 781433f093 Fix bogus date 2015-02-12 22:01:16 +01:00
Lukas Slebodnik 7d37b73369 Fix double free in monitor 
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                        sssd killed by SIGABRT
 2015-02-12 21:58:28 +01:00
Jakub Hrozek 42e3400582 Rebuild for new libldb 2015-01-28 10:43:17 +01:00
Lukas Slebodnik 8fcc4c26b2 Decrease priority of sssd-libwbclient 
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18
 2015-01-22 11:11:33 +01:00
Lukas Slebodnik 35a0ddc9bc Apply a number of patches from upstream to fix issues found 1.12.3 
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                           interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                          not running
- Resolves: upstream #2557  authentication failure with user from AD
 2015-01-19 13:39:53 +01:00
Lukas Slebodnik 1823f50b32 Reorder entries in spec file to match upstream version 2015-01-19 10:18:01 +01:00
Lukas Slebodnik 5e0303787e Minor spec file updates 
- Fix build requires for libini_config-devel (we need 1.1 for gpo)
- Remove rhel5 relics
- execute lddconfig in post/postun for libsss_nss_idmap
 2015-01-19 09:57:27 +01:00
Lukas Slebodnik 572b806e90 Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus 
Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                         zipping when rotating logfile
 2015-01-09 15:12:09 +01:00
Lukas Slebodnik d747a9c497 New upstream release 1.12.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)
 2015-01-08 21:04:11 +01:00
Lukas Slebodnik 5bb93bf105 Rebuild for libldb 1.1.19 2015-01-06 11:49:40 +01:00
Sumit Bose a7fd9ee43a Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes 
crash in wbinfo
                           - in addition to the patch libwbclient.so is
                             filtered out of the Provides list of the package
 2014-12-19 22:31:43 +01:00
Lukas Slebodnik ebb3a9f2b4 Fix regressions and bugs in sssd upstream 1.12.2 
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445
 2014-12-17 22:45:11 +01:00
Jakub Hrozek 9638a21d11 Rebuild for libldb 1.1.18 2014-12-07 20:45:08 +01:00
Jakub Hrozek ab6f3739e8 Fix typo in libwbclient-devel %preun 2014-11-26 11:17:29 +01:00
Jakub Hrozek 1dcb9c312d Use alternatives for libwbclient 2014-11-25 14:53:03 +01:00
Jakub Hrozek 3161db3512 Backport several patches from upstream. 
- Fix a potential crash against old (pre-4.0) IPA servers
 2014-10-22 13:09:58 +02:00
Jakub Hrozek 1caa247c9e New upstream release 1.12.2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2
 2014-10-20 17:29:11 +02:00
Jakub Hrozek f5fb14a9ce Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server 2014-09-15 10:27:34 +02:00
Jakub Hrozek 19acdd3ef7 New upstream release 1.12.1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
 2014-09-08 22:06:09 +02:00
Jakub Hrozek 34e089bd00 Do not crash on resolving a group SID in IPA server mode 2014-08-22 15:33:51 +02:00
Peter Robinson a6a5820ca0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 03:41:37 +00:00
Stephen Gallagher f73310eae6 Fix release version for upgrades 2014-07-10 12:41:28 -04:00
Jakub Hrozek 95cd407957 New upstream release 1.12.0 2014-07-09 21:04:06 +02:00
Dennis Gilmore 2b26bf5bcb - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-08 02:10:13 -05:00
Jakub Hrozek 1113dec8d0 New upstream release 1.12 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
 2014-06-04 21:46:10 +02:00
Jakub Hrozek 6307570cd8 Fix tests on big-endian 2014-06-02 11:08:39 +02:00
Jakub Hrozek c9a7a9b259 New upstream release 1.12 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
 2014-05-30 22:16:22 +02:00
Jakub Hrozek 03322d356d Rebuild against new ding-libs 2014-05-29 09:30:16 +02:00
Stephen Gallagher 793c29a821 Make LDB dependency a strict equivalency 2014-05-08 16:26:19 -04:00
Stephen Gallagher f1284494dc Rebuild against new libldb 2014-05-08 16:14:33 -04:00
Jakub Hrozek 4c0bb78ec9 New upstream release 1.11.5.1 2014-04-11 19:34:52 +02:00
Stephen Gallagher 72f83f8ad8 Fix bug in generation of systemd unit file 
There was a bug in the generation of the tarball that results in
a unit file with a path to /usr/local/sbin, which is incorrect.
 2014-04-10 13:21:12 -04:00
Jakub Hrozek 5b600e343d New upstream release 1.11.5 
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
 2014-04-08 13:39:37 +02:00
Sumit Bose cfb3146269 Handle new error code for IPA password migration 2014-03-13 20:14:42 +01:00
Jakub Hrozek 1fd6df7177 Include couple of patches from upstream 1.11 branch 2014-03-11 13:35:03 +01:00
Jakub Hrozek 4d4fe7434d New upstream release 1.11.4 
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4
 2014-02-17 20:53:20 +01:00
Jakub Hrozek 4b219e485d Fix the double separator error in sssd.spec (Thanks, baude) 2014-02-12 23:15:07 +01:00
Jakub Hrozek 42c4dcb65e Fix changelog entry to be in descending order (wow, it's 2014 already) 2014-02-11 15:49:49 +01:00
Jakub Hrozek 9c2fb314df Handle OTP response from FreeIPA server gracefully 2014-02-11 15:46:54 +01:00
Jakub Hrozek d323e2f10a New upstream release 1.11.3 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
 2013-12-19 20:01:09 +01:00
Jakub Hrozek 4dcc16e6e6 New upstream release 1.11.2 
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
 2013-10-31 00:33:55 +01:00
Jakub Hrozek 0b3b35863c Remove the explicit ccache dir setting 2013-10-29 18:20:16 +01:00
Jakub Hrozek 797caead4f Fix potential crash with external groups in trusted IPA-AD setup 2013-10-16 14:01:28 +02:00
Sumit Bose df4dbc81ab Add plugin for cifs-utils 
- Resolves: rhbz#998544
 2013-10-15 12:35:12 +02:00
Jakub Hrozek f99cfe2513 Fix failover from Global Catalog to LDAP in case GC is not available 2013-10-08 15:26:18 +02:00
Jakub Hrozek 72c2cb49be Remove the ability to create public ccachedir (#1015089) 2013-10-04 09:51:35 +02:00
Jakub Hrozek 36fd89e84a Backport the sssd-common-pac subpackage from upstream 2013-09-27 22:42:45 +02:00
Jakub Hrozek b524a0328d New upstream release 1.11.1 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
 2013-09-27 22:28:08 +02:00
Jakub Hrozek 3ec8adb72a Fix multicast checks in the SSSD 
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info
 2013-09-26 01:33:52 +02:00
Jakub Hrozek 8d72fcd900 Backport simplification of ccache management from 1.11.1 
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
 2013-09-23 14:45:29 +02:00
Jakub Hrozek c5481c88cf Relax the libldb requirement 2013-09-02 12:13:25 +02:00
Jakub Hrozek 5a4b44398b New upstream release 1.11.0 2013-08-29 00:37:47 +02:00
Jakub Hrozek 413e09fdbc Fix #967012 and #996214 2013-08-23 15:41:45 +02:00
Jakub Hrozek a35bab9380 Remove stray leading slash from file path 
Related: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
 2013-08-09 10:28:06 +02:00
Dennis Gilmore fd29083550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 10:45:00 -05:00
Jakub Hrozek 6fdf7eb42e Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries 2013-07-31 13:00:22 +02:00
Jakub Hrozek b2e72bcb34 New upstream release 1.11 beta 2 2013-07-24 16:36:08 +02:00
Jakub Hrozek 8190be00e7 New upstream release 1.10.1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
 2013-07-18 17:29:52 +02:00
Jakub Hrozek 1c82bbb70c sssd-tools should require sssd-common, not sssd 
This bug was already fixed upstream.
 2013-07-08 12:16:10 +02:00
Stephen Gallagher d7b4fa2655 Move sssd_pac to the sssd-ipa and sssd-ad subpackages 
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year
 2013-07-02 12:31:25 -04:00
Stephen Gallagher 94bf18fb85 Move sssd_pac to the sssd-krb5 subpackage 2013-07-02 09:23:43 -04:00
Stephen Gallagher 604fe3f870 Fix Obsoletes: to account for dist tag 
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV
 2013-07-01 18:57:07 -04:00
Jakub Hrozek e7f2b6f482 New upstream release 1.10 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0
 2013-06-27 23:36:41 +02:00
Dan Horák bc0fb19593 - the cmocka toolkit exists only on selected arches 2013-06-17 15:43:14 +02:00
Jakub Hrozek ba06c0ac1d Apply a number of patches from upstream to fix issues found post-beta 
In particular:
-- segfault with a high DEBUG level
-- Fix IPA password migration (upstream #1873)
-- Fix fail over when retrying SRV resolution (upstream #1886)
 2013-06-16 13:12:37 +02:00
Jakub Hrozek 31184a1e66 Only BuildRequire libcmocka on Fedora 2013-06-13 12:33:22 +02:00
Jakub Hrozek 63b3e9558a Fix typo in Requires that prevented an upgrade (#973916) 
- Use a hardcoded version in Conflicts, not less-than-current
 2013-06-13 11:14:50 +02:00
Jakub Hrozek 20cbf86dca Fix date in changelog 2013-06-12 13:03:15 +02:00
Jakub Hrozek 6739bfa630 Enable hardened build for RHEL7 2013-06-12 13:01:57 +02:00
Jakub Hrozek b9ffc0a290 New upstream release 1.10 beta2 
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry
  any older krb5-libs version
 2013-06-12 12:22:15 +02:00
Jakub Hrozek af82f760d4 Always initialize ID mapping objects 
Apply a couple of patches from upstream git that resolve crashes when
ID mapping object was not initialized properly but needed later
 2013-05-24 10:44:53 +02:00
Jakub Hrozek 2f295ac01f Backport fixes for rhbz#961278, rhbz#961278 and rhbz#961251 
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                          realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                          default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                          parent directory when logging in
 2013-05-14 16:51:09 +02:00
Jakub Hrozek 3cfed3426f Bump release number 2013-05-07 15:22:24 +02:00
Jakub Hrozek a0794d8e0f BuildRequire recent libini_config to ensure consistent behaviour 2013-05-07 15:11:22 +02:00
Jakub Hrozek 14fef6c6d9 Update SSSD for the F19 test day 
- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name
 2013-05-07 15:02:05 +02:00
Jakub Hrozek 6d4f357f0c New upstream release 1.10 beta1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
 2013-05-03 22:24:02 +02:00
Jakub Hrozek 90d9c5609a Add a patch to fix krb5 ccache creation issue with krb5 1.11 2013-04-17 13:35:52 +02:00
Jakub Hrozek 809727fd06 New upstream release 1.10 alpha1 
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1
 2013-04-02 20:08:54 +02:00
Jakub Hrozek 7ad84675dd Add a patch to fix krb5 unit tests 2013-03-29 13:59:48 +01:00
Stephen Gallagher c0672862e6 Split internal helper libraries into a shared object 
- Significantly reduce disk-space usage
 2013-03-01 08:23:37 -05:00
Jakub Hrozek 21a05ac540 Fix the Kerberos password expiration warning (#912223) 2013-02-21 11:53:21 +01:00
Jakub Hrozek c7ed4e1efe Do not write out dots in the domain-realm mapping file (#905650) 2013-02-14 19:47:00 +01:00
Jakub Hrozek 15e195c705 Include upstream patch to build with krb5-1.11 2013-02-11 16:04:12 +01:00
Jakub Hrozek 930a3f3778 Rebuild against new libldb 2013-02-07 11:49:02 +01:00
Jakub Hrozek 9507d125c2 Fix build with new automake versions 2013-02-04 16:38:36 +01:00
Jakub Hrozek 2da8f67cdb Recreate Kerberos ccache directory if it's missing 
Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                        directory /run/user/UID/ccdir does not exist
 2013-01-30 14:45:14 +01:00
Jakub Hrozek e4c185bf07 Fix changelog dates to make F19 rpmbuild happy 2013-01-29 11:00:35 +01:00
Jakub Hrozek ad9c6955a3 New upstream release 1.9.4 2013-01-28 23:42:27 +01:00
Jakub Hrozek 36b8b7a8cb New upstream release 1.9.3 2012-12-06 19:51:06 +01:00
Jakub Hrozek a2ee98d91a rhbz#867874: sssd does not resolve group names from AD 2012-10-30 19:39:45 +01:00
Jakub Hrozek fdd9aa55f7 rhbz:#871176 Check the validity of namingContext 2012-10-30 10:59:25 +01:00
Jakub Hrozek 81d04d0257 Move the sss_cache tool to the main package 2012-10-18 20:00:12 +02:00
Jakub Hrozek 86429099a5 Include the 1.9.2 sources for real 2012-10-14 21:45:46 +02:00