Commit Graph

259 Commits

Author SHA1 Message Date
Jakub Hrozek
d323e2f10a New upstream release 1.11.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
2013-12-19 20:01:09 +01:00
Jakub Hrozek
4dcc16e6e6 New upstream release 1.11.2
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
2013-10-31 00:33:55 +01:00
Jakub Hrozek
0b3b35863c Remove the explicit ccache dir setting 2013-10-29 18:20:16 +01:00
Jakub Hrozek
797caead4f Fix potential crash with external groups in trusted IPA-AD setup 2013-10-16 14:01:28 +02:00
Sumit Bose
df4dbc81ab Add plugin for cifs-utils
- Resolves: rhbz#998544
2013-10-15 12:35:12 +02:00
Jakub Hrozek
f99cfe2513 Fix failover from Global Catalog to LDAP in case GC is not available 2013-10-08 15:26:18 +02:00
Jakub Hrozek
72c2cb49be Remove the ability to create public ccachedir (#1015089) 2013-10-04 09:51:35 +02:00
Jakub Hrozek
36fd89e84a Backport the sssd-common-pac subpackage from upstream 2013-09-27 22:42:45 +02:00
Jakub Hrozek
b524a0328d New upstream release 1.11.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
2013-09-27 22:28:08 +02:00
Jakub Hrozek
3ec8adb72a Fix multicast checks in the SSSD
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info
2013-09-26 01:33:52 +02:00
Jakub Hrozek
8d72fcd900 Backport simplification of ccache management from 1.11.1
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
2013-09-23 14:45:29 +02:00
Jakub Hrozek
c5481c88cf Relax the libldb requirement 2013-09-02 12:13:25 +02:00
Jakub Hrozek
5a4b44398b New upstream release 1.11.0 2013-08-29 00:37:47 +02:00
Jakub Hrozek
413e09fdbc Fix #967012 and #996214 2013-08-23 15:41:45 +02:00
Jakub Hrozek
a35bab9380 Remove stray leading slash from file path
Related: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
2013-08-09 10:28:06 +02:00
Dennis Gilmore
fd29083550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 10:45:00 -05:00
Jakub Hrozek
6fdf7eb42e Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries 2013-07-31 13:00:22 +02:00
Jakub Hrozek
b2e72bcb34 New upstream release 1.11 beta 2 2013-07-24 16:36:08 +02:00
Jakub Hrozek
8190be00e7 New upstream release 1.10.1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
2013-07-18 17:29:52 +02:00
Jakub Hrozek
1c82bbb70c sssd-tools should require sssd-common, not sssd
This bug was already fixed upstream.
2013-07-08 12:16:10 +02:00
Stephen Gallagher
d7b4fa2655 Move sssd_pac to the sssd-ipa and sssd-ad subpackages
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year
2013-07-02 12:31:25 -04:00
Stephen Gallagher
94bf18fb85 Move sssd_pac to the sssd-krb5 subpackage 2013-07-02 09:23:43 -04:00
Stephen Gallagher
604fe3f870 Fix Obsoletes: to account for dist tag
- Convert post and pre scripts to run on the sssd-common subpackage
- Remove old conversion from SYSV
2013-07-01 18:57:07 -04:00
Jakub Hrozek
e7f2b6f482 New upstream release 1.10
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0
2013-06-27 23:36:41 +02:00
Dan Horák
bc0fb19593 - the cmocka toolkit exists only on selected arches 2013-06-17 15:43:14 +02:00
Jakub Hrozek
ba06c0ac1d Apply a number of patches from upstream to fix issues found post-beta
In particular:
-- segfault with a high DEBUG level
-- Fix IPA password migration (upstream #1873)
-- Fix fail over when retrying SRV resolution (upstream #1886)
2013-06-16 13:12:37 +02:00
Jakub Hrozek
31184a1e66 Only BuildRequire libcmocka on Fedora 2013-06-13 12:33:22 +02:00
Jakub Hrozek
63b3e9558a Fix typo in Requires that prevented an upgrade (#973916)
- Use a hardcoded version in Conflicts, not less-than-current
2013-06-13 11:14:50 +02:00
Jakub Hrozek
20cbf86dca Fix date in changelog 2013-06-12 13:03:15 +02:00
Jakub Hrozek
6739bfa630 Enable hardened build for RHEL7 2013-06-12 13:01:57 +02:00
Jakub Hrozek
b9ffc0a290 New upstream release 1.10 beta2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta2
- BuildRequire libcmocka-devel in order to run all upstream tests during build
- BuildRequire libnl3 instead of libnl1
- No longer BuildRequire initscripts, we no longer use /sbin/service
- Remove explicit krb5-libs >= 1.10 requires; this platform doensn't carry
  any older krb5-libs version
2013-06-12 12:22:15 +02:00
Jakub Hrozek
af82f760d4 Always initialize ID mapping objects
Apply a couple of patches from upstream git that resolve crashes when
ID mapping object was not initialized properly but needed later
2013-05-24 10:44:53 +02:00
Jakub Hrozek
2f295ac01f Backport fixes for rhbz#961278, rhbz#961278 and rhbz#961251
- Resolves: rhbz#961357 - Missing dyndns_update entry in sssd.conf during
                          realm join
- Resolves: rhbz#961278 - Login failure: Enterprise Principal enabled by
                          default for AD Provider
- Resolves: rhbz#961251 - sssd does not create user's krb5 ccache dir/file
                          parent directory when logging in
2013-05-14 16:51:09 +02:00
Jakub Hrozek
3cfed3426f Bump release number 2013-05-07 15:22:24 +02:00
Jakub Hrozek
a0794d8e0f BuildRequire recent libini_config to ensure consistent behaviour 2013-05-07 15:11:22 +02:00
Jakub Hrozek
14fef6c6d9 Update SSSD for the F19 test day
- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug in ding-libs
- Fix SSH integration with fully-qualified domains
- Add the ability to dynamically discover the NetBIOS name
2013-05-07 15:02:05 +02:00
Jakub Hrozek
6d4f357f0c New upstream release 1.10 beta1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1
2013-05-03 22:24:02 +02:00
Jakub Hrozek
90d9c5609a Add a patch to fix krb5 ccache creation issue with krb5 1.11 2013-04-17 13:35:52 +02:00
Jakub Hrozek
809727fd06 New upstream release 1.10 alpha1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1
2013-04-02 20:08:54 +02:00
Jakub Hrozek
7ad84675dd Add a patch to fix krb5 unit tests 2013-03-29 13:59:48 +01:00
Stephen Gallagher
c0672862e6 Split internal helper libraries into a shared object
- Significantly reduce disk-space usage
2013-03-01 08:23:37 -05:00
Jakub Hrozek
21a05ac540 Fix the Kerberos password expiration warning (#912223) 2013-02-21 11:53:21 +01:00
Jakub Hrozek
c7ed4e1efe Do not write out dots in the domain-realm mapping file (#905650) 2013-02-14 19:47:00 +01:00
Jakub Hrozek
15e195c705 Include upstream patch to build with krb5-1.11 2013-02-11 16:04:12 +01:00
Jakub Hrozek
930a3f3778 Rebuild against new libldb 2013-02-07 11:49:02 +01:00
Jakub Hrozek
9507d125c2 Fix build with new automake versions 2013-02-04 16:38:36 +01:00
Jakub Hrozek
2da8f67cdb Recreate Kerberos ccache directory if it's missing
Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache
                        directory /run/user/UID/ccdir does not exist
2013-01-30 14:45:14 +01:00
Jakub Hrozek
e4c185bf07 Fix changelog dates to make F19 rpmbuild happy 2013-01-29 11:00:35 +01:00
Jakub Hrozek
ad9c6955a3 New upstream release 1.9.4 2013-01-28 23:42:27 +01:00
Jakub Hrozek
36b8b7a8cb New upstream release 1.9.3 2012-12-06 19:51:06 +01:00
Jakub Hrozek
a2ee98d91a rhbz#867874: sssd does not resolve group names from AD 2012-10-30 19:39:45 +01:00
Jakub Hrozek
fdd9aa55f7 rhbz:#871176 Check the validity of namingContext 2012-10-30 10:59:25 +01:00
Jakub Hrozek
81d04d0257 Move the sss_cache tool to the main package 2012-10-18 20:00:12 +02:00
Jakub Hrozek
86429099a5 Include the 1.9.2 sources for real 2012-10-14 21:45:46 +02:00
Jakub Hrozek
89ce7cbfb4 New upstream version 1.9.2 2012-10-14 21:43:04 +02:00
Jakub Hrozek
a48646c55d New upstream release 1.9.1 2012-10-07 16:17:58 +02:00
Jakub Hrozek
fbc5fa9bce Require latest libldb 2012-10-03 11:00:52 +02:00
Jakub Hrozek
3a1ca05a36 BuildRequire diffstat 2012-09-25 14:55:48 +02:00
Jakub Hrozek
1756cca820 Use mcpath insted of mcachepath macro to be consistent with upstream spec file 2012-09-25 14:13:46 +02:00
Jakub Hrozek
827279f87c New upstream release 1.9.0 2012-09-25 13:20:37 +02:00
Jakub Hrozek
6cde68d41f New upstream release 1.9.0 RC1 2012-09-14 14:36:08 +02:00
Jakub Hrozek
586ea1b402 Obsolete patches that are part of the beta7 upstream 2012-09-06 22:04:39 +02:00
Jakub Hrozek
64a7ceb4e2 New upstream release 1.9.0 beta 7 2012-09-06 21:44:03 +02:00
Jakub Hrozek
26c9bc8ead Rebuild against libldb 1.12 2012-09-03 13:10:15 +02:00
Jakub Hrozek
b19546a95d Rebuild against libldb 1.11 2012-08-28 12:46:57 +02:00
Jakub Hrozek
5be1b0deaf rhbz#851304: Change the default ccache location to DIR:/run/user/1001/krb5cc 2012-08-24 17:11:43 +02:00
Jakub Hrozek
a35b2922c3 Rebuild against libldb 1.10 2012-08-20 18:45:15 +02:00
Jakub Hrozek
66374adaa7 Only create the SELinux login file if there are SELinux mappings on the IPA server 2012-08-17 15:00:20 +02:00
Jakub Hrozek
a1657400dd Don't discard HBAC rule processing result if SELinux is on
Resolves: rhbz#846792 (CVE-2012-3462)
2012-08-10 22:38:17 +02:00
Jakub Hrozek
292c0dcaf2 New upstream release 1.9.0-13.beta6 2012-08-02 18:04:25 +02:00
Dennis Gilmore
61dbc61004 Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-27 03:35:23 -05:00
Jakub Hrozek
b75ed0d13d New upstream release 1.9.0 beta 5 2012-07-19 12:51:26 +02:00
Stephen Gallagher
7a12c895a2 Fix broken ARM build
- Add missing DP_OPTION_TERMINATOR in AD provider options
2012-07-16 09:50:52 -04:00
Jakub Hrozek
f681bd4766 Own several directories
https://bugzilla.redhat.com/show_bug.cgi?id=839782
2012-07-15 17:14:01 +02:00
Jakub Hrozek
32842a881b New upstream release 1.9.0 beta 4 2012-07-11 09:57:09 +02:00
Stephen Gallagher
058cfb833c New upstream release 1.9.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta3
- Add a new PAC responder for dealing with cross-realm Kerberos trusts
- Terminate idle connections to the NSS and PAM responders
2012-06-25 13:15:35 -04:00
Stephen Gallagher
2cb25205a4 Switch unicode library from libunistring to Glib
- Drop unnecessary explicit Requires on keyutils
- Guarantee that versioned Requires include the correct architecture
2012-06-20 10:32:39 -04:00
Stephen Gallagher
f8c88041e5 Fix accidental disabling of the DIR cache support 2012-06-18 10:16:49 -04:00
Stephen Gallagher
666a39284d New upstream release 1.9.0 beta 2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta2
- Add support for the Kerberos DIR cache for storing multiple TGTs
  automatically
- Major performance enhancement when storing large groups in the cache
- Major performance enhancement when performing initgroups() against Active
  Directory
- SSSDConfig data file default locations can now be set during configure for
  easier packaging
2012-06-15 15:43:49 -04:00
Stephen Gallagher
26151dabf9 Fix regression in endianness patch 2012-05-30 15:10:43 -04:00
Stephen Gallagher
12d78e10a6 Rebuild SSSD against ding-libs 0.3.0beta1
- Fix endianness bug in service map protocol
2012-05-29 11:23:46 -04:00
Stephen Gallagher
359d341a35 Fix several regressions since 1.5.x
- Ensure that the RPM creates the /var/lib/sss/mc directory
- Add support for Netscape password warning expiration control
- Rebuild against libldb 1.1.6
2012-05-24 08:23:25 -04:00
Stephen Gallagher
7fa00add1e New upstream release 1.9.0 beta 1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta1
- Add native support for autofs to the IPA provider
- Support for ID-mapping when connecting to Active Directory
- Support for handling very large (> 1500 users) groups in Active Directory
- Support for sub-domains (will be used for dealing with trust relationships)
- Add a new fast in-memory cache to speed up lookups of cached data on
  repeated requests
2012-05-11 16:02:54 -04:00
Stephen Gallagher
05471b8b76 New upstream release 1.8.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.3
- Numerous manpage and translation updates
- LDAP: Handle situations where the RootDSE isn't available anonymously
- LDAP: Fix regression for users using non-standard LDAP attributes for user
  information
2012-05-03 15:46:32 -04:00
Stephen Gallagher
77acf296a2 New upstream release 1.8.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.2
- Several fixes to case-insensitive domain functions
- Fix for GSSAPI binds when the keytab contains unrelated principals
- Fixed several segfaults
- Workarounds added for LDAP servers with unreadable RootDSE
- SSH knownhostproxy will no longer enter an infinite loop preventing login
- The provided SYSV init script now starts SSSD earlier at startup and stops
  it later during shutdown
- Assorted minor fixes for issues discovered by static analysis tools
2012-04-09 15:06:43 -04:00
Stephen Gallagher
d023298922 Don't duplicate libsss_autofs.so in two packages
- Set explicit package contents instead of globbing
2012-03-26 09:35:25 -04:00
Stephen Gallagher
af80d0ea8a Fix uninitialized value bug causing crashes throughout the code
- Resolves: rhbz#804783 - [abrt] Segfault during LDAP 'services' lookup
2012-03-21 07:36:22 -04:00
Stephen Gallagher
8c71823719 New upstream release 1.8.1
- Resolve issue where we could enter an infinite loop trying to connect to an
  auth server
- Fix serious issue with complex (3+ levels) nested groups
- Fix netgroup support for case-insensitivity and aliases
- Fix serious issue with lookup bundling resulting in requests never
  completing
- IPA provider will now check the value of nsAccountLock during pam_acct_mgmt
  in addition to pam_authenticate
- Fix several regressions in the proxy provider
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#799031 - --debug option for sss_debuglevel doesn't work
2012-03-12 19:25:42 -04:00
Stephen Gallagher
41359781c6 New upstream release 1.8.0
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
- Include the IPA AutoFS provider
- Fixed several memory-corruption bugs
- Fixed a regression in group enumeration since 1.7.0
- Fixed a regression in the proxy provider
- Resolves: rhbz#741981 - Separate Cache Timeouts for SSSD
- Resolves: rhbz#797968 - sssd_be: The requested tar get is not configured is
                          logged at each login
- Resolves: rhbz#754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process
                          /usr/sbin/sssd was killed by signal 11 (SIGSEGV)
- Resolves: rhbz#743133 - Performance regression with Kerberos authentication
                          against AD
- Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
                          new LDAP features
- Resolves: rhbz#786957 - sssd and kerberos should change the default location for create the Credential Cashes to /run/usr/USERNAME/krb5cc
2012-02-28 15:23:22 -05:00
Stephen Gallagher
d474da7ce3 Change default kerberos credential cache location to /run/user/<username> 2012-02-22 09:11:05 -05:00
Stephen Gallagher
e16d49fc65 New upstream release 1.8.0 beta 3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta3
- Fixed a regression in group enumeration since 1.7.0
- Fixed several memory-corruption bugs
- Finalized the ABI for the autofs support
- Fixed a regression in the proxy provider
2012-02-15 16:11:31 -05:00
Stephen Gallagher
14c3c0777e Fix python Provides: filtering 2012-02-15 10:38:10 -05:00
Petr Písař
111a1d5cbe Rebuild against PCRE 8.30 2012-02-10 13:08:38 +01:00
Stephen Gallagher
01ac0e1a3e New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta2
- Fix two minor manpage bugs
- Include the IPA AutoFS provider
2012-02-07 09:57:04 -05:00
Stephen Gallagher
881479933b New upstream release
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.8.0beta1
- Support for the service map in NSS
- Support for setting default SELinux user context from FreeIPA
- Support for retrieving SSH user and host keys from LDAP (Experimental)
- Support for caching autofs LDAP requests (Experimental)
- Support for caching SUDO rules (Experimental)
2012-02-06 20:08:04 -05:00
Stephen Gallagher
e8905f5363 Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
new LDAP features - fix netgroups and sudo as well
2012-02-04 20:20:10 -05:00
Stephen Gallagher
b6ef581001 Fixes a serious memory hierarchy bug causing unpredictable behavior in the LDAP provider. 2012-02-02 14:23:16 -05:00
Stephen Gallagher
2381e855ec Fix typo in date and version 2012-02-01 14:27:24 -05:00
Stephen Gallagher
ae664ccc43 Resolves: rhbz#773706 - SSSD fails during autodetection of search bases for
new LDAP features
2012-02-01 14:24:12 -05:00
Dennis Gilmore
6ec779e9e4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 22:24:58 -06:00