Commit Graph

337 Commits

Author SHA1 Message Date
Lukas Slebodnik
aa27da2e1f Change package ownership of %{pubconfpath}/krb5.include.d
krb5 domain mapping files are stored to the directory
%{pubconfpath}/krb5.include.d. It can be stored by ipa or ad provider.
However this directory was owned by sub-package sssd-ipa. And ad provider
can be installed without this package. Therefore %{pubconfpath}/krb5.include.d
should be owned by common dependency.

The owner of this directory was also fixed to sssd.
It's already done by make install. It was changed only in spec file.
2016-01-19 15:02:47 +01:00
Lukas Slebodnik
a89ed4b83f Additional patch for upstream #2829 2015-12-16 08:51:17 +01:00
Lukas Slebodnik
5df019d5aa New upstream release 1.13.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.3
2015-12-16 08:47:07 +01:00
Lukas Slebodnik
31ed44fa55 Backport patches from sssd master #2829
Use after free in failover
2015-11-20 09:47:17 +01:00
Lukas Slebodnik
bdedaaad52 New upstream release 1.13.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.2
2015-11-20 09:47:17 +01:00
Robert Kuska
2b3b752656 Rebuilt for Python3.5 rebuild 2015-11-06 15:40:37 +01:00
Lukas Slebodnik
9f8eeed0c9 Fix building pac responder with the krb5-1.14 2015-10-27 09:41:14 +01:00
Lukas Slebodnik
c08e64289b python-sssdconfig: Fix parssing sssd.conf without config_file_version
- Resolves: upstream #2837 - REGRESSION: ipa-client-automout failed
2015-10-19 15:04:51 +02:00
Lukas Slebodnik
4bdb4e48cd Revert "Temporary disable tests due to broken krb5"
This reverts commit 1bedb06db6.

Rawhide contain krb5-1.13.2-12.fc24 which fixed bug with missing
/usr/share/krb5.conf.d. So, unit test should pass.
2015-10-07 13:42:42 +02:00
Lukas Slebodnik
69b9d3f518 Fix few segfaults
- Resolves: upstream #2811 - PAM responder crashed if user was not set
- Resolves: upstream #2810 - sssd_be crashed in ipa_srv_ad_acct_lookup_step
2015-10-07 13:42:03 +02:00
Lukas Slebodnik
1bedb06db6 Temporary disable tests due to broken krb5
Should be fixed with krb5 >= 1.14-2.fc24
2015-10-01 08:16:23 +02:00
Lukas Slebodnik
00d900ad6f Remove unnecessary requirement
libini-config-1.1 already provides version definition
which substitute this requirement.

sh$ objdump -p /usr/lib64/libini_config.so | grep -A4 definition
Version definitions:
1 0x01 0x05f25695 libini_config.so.5
2 0x00 0x00acdc20 INI_CONFIG_1.1.0
3 0x00 0x00acdd20 INI_CONFIG_1.2.0
        INI_CONFIG_1.1.0
2015-10-01 08:16:23 +02:00
Lukas Slebodnik
05c3b14125 New upstream release 1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
2015-10-01 08:16:16 +02:00
Lukas Slebodnik
996f9ec8f7 Fix OTP bug
- Resolves: upstream #2729 - Do not send SSS_OTP if both factors were
                             entered separately
2015-09-10 14:26:47 +02:00
Lukas Slebodnik
cc6c9ff159 Backport upstream patches required by FreeIPA 4.2.1 2015-09-07 18:37:40 +02:00
Lukas Slebodnik
cc1ba0d674 Fix ipa-migration bug
- Resolves: upstream #2719 - IPA: returned unknown dp error code with disabled
                             migration mode
2015-07-21 09:11:06 +02:00
Lukas Slebodnik
b46d3ce3db New upstream release 1.13.0
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0
2015-07-08 19:15:17 +02:00
Lukas Slebodnik
aa1a6b1ea9 Unify return type of list_active_domains for python{2,3} 2015-06-30 16:54:06 +02:00
Lukas Slebodnik
3fa3e7c22a New upstream release 1.13 alpha
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.0alpha
2015-06-22 13:52:08 +02:00
Dennis Gilmore
b4d3da407f - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-19 01:41:15 +00:00
Lukas Slebodnik
89ed4ffc3c Fix libwbclient alternatives 2015-06-12 20:50:06 +02:00
Lukas Slebodnik
aac3cde5be New upstream release 1.12.5
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.5
    - backport important patches from upstream 1.13 prerelease
2015-06-12 14:49:22 +02:00
Lukas Slebodnik
70e9980ac6 Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures
2015-05-08 14:53:58 +02:00
Lukas Slebodnik
a0e4fecc9c Fix cyclic dependencies between sssd-{krb5,}-common
The upstream ticket #2507 is prerequisite for BZ1212503
Patch also enables cmocka tests with secondary architectures.
2015-05-08 14:32:52 +02:00
Lukas Slebodnik
40a97f0f88 Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
Lukas Slebodnik
6cfd9704c1 Bump version for patches related to #2624 2015-04-15 14:19:39 +02:00
Lukas Slebodnik
c4cf951d60 Fix slow login with ipa and SELinux
- Resolves: upstream #2624 - Only set the selinux context if the context
                             differs from the local one
2015-04-15 14:17:32 +02:00
Lukas Slebodnik
9a0389188d Small spec file clean-up
* remove workaround for old rpmbuild (rhel5)
* remove conversion sysv scripts to systemd
* small code style update in bash scripts
2015-04-09 18:06:13 +02:00
Lukas Slebodnik
36805df397 Fix regressions with ipa and SELinux
- Resolves: upstream #2587 - With empty ipaselinuxusermapdefault security
                             context on client is staff_u
2015-03-23 17:17:30 +01:00
Jakub Hrozek
9f97bec3b0 Also relax libldb Requires and remove --enable-ldb-version-check 2015-03-06 11:45:13 +01:00
Jakub Hrozek
9c5af4ac2d Relax libldb BuildRequires
Originally, we tried to stay on the safe side with libldb since it never
really commited to stable ABI or API, but since there were never any
issues in many years, it's safe to relax the requirement.

This change will benefit especially the storage developers who often
need a different (typically newer) libldb version and would like to
avoid to rebuild sssd for no reason.
2015-03-06 10:50:45 +01:00
Lukas Slebodnik
ed82d05320 Add support for python3 bindings
- Add requirement to python3 or python3 bindings
- Resolves: rhbz#1014594 - sssd: Support Python 3
2015-02-25 14:21:45 +01:00
Lukas Slebodnik
16372c2465 Replace python_* rpm macros with python2_* 2015-02-25 13:34:08 +01:00
Lukas Slebodnik
a8d019e332 Old python file names are just symbolic links
* add real files to packages as well.
2015-02-25 13:29:49 +01:00
Lukas Slebodnik
e37fc598a5 Move python bindings to separate packages
Some python bindings pysss and pysss_murmur was in package sssd-common.
Therefore package sssd-common had python as a dependency.
2015-02-25 10:35:28 +01:00
Lukas Slebodnik
7601087c69 Backport upstream patches for building python{2,3} bindings 2015-02-25 10:15:06 +01:00
Lukas Slebodnik
5e6bda777e New upstream release 1.12.4
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.4
2015-02-18 21:24:59 +01:00
Lukas Slebodnik
59bb05ded2 Reverting change of rhbz ticket in changelog
This change was part of initial patch from BZ1184623.
2015-02-14 16:36:31 +01:00
Lukas Slebodnik
3412a6a279 Backport patches with Python3 support from upstream 2015-02-14 16:20:30 +01:00
Lukas Slebodnik
781433f093 Fix bogus date 2015-02-12 22:01:16 +01:00
Lukas Slebodnik
7d37b73369 Fix double free in monitor
- Resolves: rhbz#1186887 [abrt] sssd-common: talloc_abort():
                        sssd killed by SIGABRT
2015-02-12 21:58:28 +01:00
Jakub Hrozek
42e3400582 Rebuild for new libldb 2015-01-28 10:43:17 +01:00
Lukas Slebodnik
8fcc4c26b2 Decrease priority of sssd-libwbclient
- It should be lower than priority of samba veriosn of libwbclient.
- https://bugzilla.redhat.com/show_bug.cgi?id=1175511#c18
2015-01-22 11:11:33 +01:00
Lukas Slebodnik
35a0ddc9bc Apply a number of patches from upstream to fix issues found 1.12.3
- Resolves: rhbz#1176373 - dyndns_iface does not accept multiple
                           interfaces, or isn't documented to be able to
- Resolves: rhbz#988068 - getpwnam_r fails for non-existing users when sssd is
                          not running
- Resolves: upstream #2557  authentication failure with user from AD
2015-01-19 13:39:53 +01:00
Lukas Slebodnik
1823f50b32 Reorder entries in spec file to match upstream version 2015-01-19 10:18:01 +01:00
Lukas Slebodnik
5e0303787e Minor spec file updates
- Fix build requires for libini_config-devel (we need 1.1 for gpo)
- Remove rhel5 relics
- execute lddconfig in post/postun for libsss_nss_idmap
2015-01-19 09:57:27 +01:00
Lukas Slebodnik
572b806e90 Resolves: rhbz#1164156 - libsss_simpleifp should pull sssd-dbus
Resolves: rhbz#1179379 - gzip: stdin: file size changed while
                         zipping when rotating logfile
2015-01-09 15:12:09 +01:00
Lukas Slebodnik
d747a9c497 New upstream release 1.12.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.3
- Fix spelling errors in description (fedpkg lint)
2015-01-08 21:04:11 +01:00
Lukas Slebodnik
5bb93bf105 Rebuild for libldb 1.1.19 2015-01-06 11:49:40 +01:00
Sumit Bose
a7fd9ee43a Resolves: rhbz#1175511 - sssd-libwbclient conflicts with Samba's and causes
crash in wbinfo
                           - in addition to the patch libwbclient.so is
                             filtered out of the Provides list of the package
2014-12-19 22:31:43 +01:00
Lukas Slebodnik
ebb3a9f2b4 Fix regressions and bugs in sssd upstream 1.12.2
- https://fedorahosted.org/sssd/ticket/{id}
- Regressions: #2471, #2475, #2483, #2487, #2529, #2535
- Bugs: #2287, #2445
2014-12-17 22:45:11 +01:00
Jakub Hrozek
9638a21d11 Rebuild for libldb 1.1.18 2014-12-07 20:45:08 +01:00
Jakub Hrozek
ab6f3739e8 Fix typo in libwbclient-devel %preun 2014-11-26 11:17:29 +01:00
Jakub Hrozek
1dcb9c312d Use alternatives for libwbclient 2014-11-25 14:53:03 +01:00
Jakub Hrozek
3161db3512 Backport several patches from upstream.
- Fix a potential crash against old (pre-4.0) IPA servers
2014-10-22 13:09:58 +02:00
Jakub Hrozek
1caa247c9e New upstream release 1.12.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.2
2014-10-20 17:29:11 +02:00
Jakub Hrozek
f5fb14a9ce Resolves: rhbz#1139962 - Fedora 21, FreeIPA 4.0.2: sssd does not find user private group from server 2014-09-15 10:27:34 +02:00
Jakub Hrozek
19acdd3ef7 New upstream release 1.12.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.1
2014-09-08 22:06:09 +02:00
Jakub Hrozek
34e089bd00 Do not crash on resolving a group SID in IPA server mode 2014-08-22 15:33:51 +02:00
Peter Robinson
a6a5820ca0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 03:41:37 +00:00
Stephen Gallagher
f73310eae6 Fix release version for upgrades 2014-07-10 12:41:28 -04:00
Jakub Hrozek
95cd407957 New upstream release 1.12.0 2014-07-09 21:04:06 +02:00
Dennis Gilmore
2b26bf5bcb - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-08 02:10:13 -05:00
Jakub Hrozek
1113dec8d0 New upstream release 1.12 beta1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta2
2014-06-04 21:46:10 +02:00
Jakub Hrozek
6307570cd8 Fix tests on big-endian 2014-06-02 11:08:39 +02:00
Jakub Hrozek
c9a7a9b259 New upstream release 1.12 beta1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.12.0beta1
2014-05-30 22:16:22 +02:00
Jakub Hrozek
03322d356d Rebuild against new ding-libs 2014-05-29 09:30:16 +02:00
Stephen Gallagher
793c29a821 Make LDB dependency a strict equivalency 2014-05-08 16:26:19 -04:00
Stephen Gallagher
f1284494dc Rebuild against new libldb 2014-05-08 16:14:33 -04:00
Jakub Hrozek
4c0bb78ec9 New upstream release 1.11.5.1 2014-04-11 19:34:52 +02:00
Stephen Gallagher
72f83f8ad8 Fix bug in generation of systemd unit file
There was a bug in the generation of the tarball that results in
a unit file with a path to /usr/local/sbin, which is incorrect.
2014-04-10 13:21:12 -04:00
Jakub Hrozek
5b600e343d New upstream release 1.11.5
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.5
2014-04-08 13:39:37 +02:00
Sumit Bose
cfb3146269 Handle new error code for IPA password migration 2014-03-13 20:14:42 +01:00
Jakub Hrozek
1fd6df7177 Include couple of patches from upstream 1.11 branch 2014-03-11 13:35:03 +01:00
Jakub Hrozek
4d4fe7434d New upstream release 1.11.4
- Remove upstreamed patch
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.4
2014-02-17 20:53:20 +01:00
Jakub Hrozek
4b219e485d Fix the double separator error in sssd.spec (Thanks, baude) 2014-02-12 23:15:07 +01:00
Jakub Hrozek
42c4dcb65e Fix changelog entry to be in descending order (wow, it's 2014 already) 2014-02-11 15:49:49 +01:00
Jakub Hrozek
9c2fb314df Handle OTP response from FreeIPA server gracefully 2014-02-11 15:46:54 +01:00
Jakub Hrozek
d323e2f10a New upstream release 1.11.3
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.3
2013-12-19 20:01:09 +01:00
Jakub Hrozek
4dcc16e6e6 New upstream release 1.11.2
- Remove upstreamed patches
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.2
2013-10-31 00:33:55 +01:00
Jakub Hrozek
0b3b35863c Remove the explicit ccache dir setting 2013-10-29 18:20:16 +01:00
Jakub Hrozek
797caead4f Fix potential crash with external groups in trusted IPA-AD setup 2013-10-16 14:01:28 +02:00
Sumit Bose
df4dbc81ab Add plugin for cifs-utils
- Resolves: rhbz#998544
2013-10-15 12:35:12 +02:00
Jakub Hrozek
f99cfe2513 Fix failover from Global Catalog to LDAP in case GC is not available 2013-10-08 15:26:18 +02:00
Jakub Hrozek
72c2cb49be Remove the ability to create public ccachedir (#1015089) 2013-10-04 09:51:35 +02:00
Jakub Hrozek
36fd89e84a Backport the sssd-common-pac subpackage from upstream 2013-09-27 22:42:45 +02:00
Jakub Hrozek
b524a0328d New upstream release 1.11.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.11.1
2013-09-27 22:28:08 +02:00
Jakub Hrozek
3ec8adb72a Fix multicast checks in the SSSD
- Resolves: rhbz#1007475 - The multicast check is wrong in the sudo source
                           code getting the host info
2013-09-26 01:33:52 +02:00
Jakub Hrozek
8d72fcd900 Backport simplification of ccache management from 1.11.1
- Resolves: rhbz#1010553 - sssd setting KRB5CCNAME=(null) on login
2013-09-23 14:45:29 +02:00
Jakub Hrozek
c5481c88cf Relax the libldb requirement 2013-09-02 12:13:25 +02:00
Jakub Hrozek
5a4b44398b New upstream release 1.11.0 2013-08-29 00:37:47 +02:00
Jakub Hrozek
413e09fdbc Fix #967012 and #996214 2013-08-23 15:41:45 +02:00
Jakub Hrozek
a35bab9380 Remove stray leading slash from file path
Related: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries
2013-08-09 10:28:06 +02:00
Dennis Gilmore
fd29083550 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild 2013-08-04 10:45:00 -05:00
Jakub Hrozek
6fdf7eb42e Resolves: #906427 - Do not use %{_lib} in specfile for the nss and pam libraries 2013-07-31 13:00:22 +02:00
Jakub Hrozek
b2e72bcb34 New upstream release 1.11 beta 2 2013-07-24 16:36:08 +02:00
Jakub Hrozek
8190be00e7 New upstream release 1.10.1
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.1
2013-07-18 17:29:52 +02:00
Jakub Hrozek
1c82bbb70c sssd-tools should require sssd-common, not sssd
This bug was already fixed upstream.
2013-07-08 12:16:10 +02:00
Stephen Gallagher
d7b4fa2655 Move sssd_pac to the sssd-ipa and sssd-ad subpackages
- Trim out RHEL5-specific macros since we don't build on RHEL 5
- Trim out macros for Fedora older than F18
- Update libldb requirement to 1.1.16
- Trim RPM changelog down to the last year
2013-07-02 12:31:25 -04:00
Stephen Gallagher
94bf18fb85 Move sssd_pac to the sssd-krb5 subpackage 2013-07-02 09:23:43 -04:00