Commit Graph

388 Commits

Author SHA1 Message Date
Fabiano Fidêncio fd2fe89420 IPA: Qualify the externalUser sudo attribute
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit ab53ba849a)
(cherry picked from commit ff80480d02)
(cherry picked from commit bb5f960239)
2018-04-27 22:31:22 +02:00
Fabiano Fidêncio ae422acc48 Tone down shutdown messages for socket activated responders
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit ef1d48a0c2)
(cherry picked from commit 11342ddfab)
(cherry picked from commit 389295064e)
2018-04-27 22:31:22 +02:00
Fabiano Fidêncio a5d334e8a4 Resolves: upstream#3558 - sudo: report error when two rules share cn
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit fcff118bbf)
(cherry picked from commit b1ddb6443b)
(cherry picked from commit f338f8cb95)
2018-04-27 22:31:22 +02:00
Fabiano Fidêncio daca1aeb60 Resolves: upstream#3684 - A group is not updated if its member is removed with the cleanup task, but the group does not change
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit f3d06df50d)
(cherry picked from commit 7809e6eedd)
(cherry picked from commit b429a75bce)
2018-04-27 22:31:22 +02:00
Fabiano Fidêncio bc49fbfb56 A few KCM misc fixes
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 32f2c81e59)
(cherry picked from commit 2540bf426d)
(cherry picked from commit 89a1543353)
2018-03-30 15:42:23 +02:00
Fabiano Fidêncio e5687b3b70 Resolves: upstream#3666 - Fix usage of str.decode() in our test
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 99da72db23)
(cherry picked from commit 4d8a2ac870)
(cherry picked from commit 4a56bc21d2)
2018-03-30 15:42:16 +02:00
Fabiano Fidêncio 5e5e26a2be Resolves: upstream#3386 - KCM: Payload buffer is too small
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 1c7376afc5)
(cherry picked from commit 7d773ed035)
(cherry picked from commit 97df14ee0f)
2018-03-30 15:42:07 +02:00
Fabiano Fidêncio 187ee74a3f Resolves: usptream#3687 - KCM: Don't pass a non null terminated string to json_loads()
Related to: rhbz#1494843 - KCM Does not work

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 73735e9522)
(cherry picked from commit 0392642064)
(cherry picked from commit 26eab693bb)
2018-03-30 15:42:00 +02:00
Fabiano Fidêncio 1feb809f48 Resolves: upstream#3658 - Application domain is not interpreted correctly
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 563dd33f72)
(cherry picked from commit 4d2103b723)
(cherry picked from commit 2a59fc635f)
2018-03-30 15:41:48 +02:00
Fabiano Fidêncio be32b69605 Resolves: upstream#3660 - confdb_expand_app_domains() always fails
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 2c812f3cba)
(cherry picked from commit c126b3174c)
(cherry picked from commit 44d6f59b93)
2018-03-30 15:41:40 +02:00
Fabiano Fidêncio e23577fdfa Resolves: upstream#3573 - sssd won't show netgroups with blank domai
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 40fe76feb8)
(cherry picked from commit 928c3e94ab)
(cherry picked from commit 46f52a9bd6)
2018-03-30 15:41:32 +02:00
Fabiano Fidêncio d2e63e3f19 New upstream release 1.16.1
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_1.html

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 62a3258629)
(cherry picked from commit d11cfce2ff)
(cherry picked from commit bfc60044d5)
2018-03-09 18:05:01 +01:00
Lukas Slebodnik 85ed6ee372 Resolves: upstream#3621 - backport bug fix found by static analyzers
(cherry picked from commit 5eba7a8f1f)
(cherry picked from commit 21443e5ebe)
2018-02-20 15:18:41 +01:00
Fabiano Fidêncio 5482e1b39f Resolves: upstream#3621: FleetCommander integration must not require capability DAC_OVERRIDE
Together with the patches backported from upstream, we're changing
the deskprofilepath permissions from 755 to 751, reflecting the
upstream spec file changes.

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 4b1fe8a0ab)
2018-02-14 23:04:07 +01:00
Fabiano Fidêncio 4110a2c340 Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile with no specific host/hostgroup set
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
(cherry picked from commit 199a72e62a)
2018-02-14 22:27:38 +01:00
Lukas Slebodnik 9270bee8ca Resolves: upstream#3618 - selinux_child segfaults in a docker container
(cherry picked from commit 18ae44bc79)
(cherry picked from commit c90915394e)
2018-02-07 22:10:24 +01:00
Lukas Slebodnik 6f4bba5546 Backport most important bug fixes
Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in
                          setnetgrent_result_timeout
Resolves: upstream#3562 - Use-after free if more sudo requests run and one
                          of them fails, causing a fail-over to a next server
Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                          or machine swaps
Resolves: failure in glibc tests
          https://sourceware.org/bugzilla/show_bug.cgi?id=22530
Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                          auth_provider ldap, login fails if the LDAP server
                          is not allowing anonymous binds
Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                          corrected with AD
Resolves: upstream#3586 - Give a more detailed debug and system-log message
                          if krb5_init_context() failed
Resolves: rhbz#1479283 - proxy to files does not work with
                         implicit_files_domain
Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                         in /etc/systemd/system
2017-12-04 22:23:49 +01:00
Lukas Slebodnik 3efadc9185 Resolves: rhbz#1494002 - sssd_nss crashed in cache_req_search_domains_next
(cherry picked from commit ce65f7d9ee)
(cherry picked from commit 8f047f7ff4)
2017-11-21 18:08:05 +01:00
Lukas Slebodnik 68e1acc3da Resolves: upstream#3529 - sssd-kcm Fix restart during/after upgrade
(cherry picked from commit 7ac8b3c4b5)
(cherry picked from commit da41c905c0)
2017-11-21 18:06:23 +01:00
Lukas Slebodnik 0982e5e83d New upstream release 1.16.0
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_16_0.html
(cherry picked from commit 4f58854911)
(cherry picked from commit ea632499ff)
2017-10-23 13:26:13 +02:00
Lukas Slebodnik 8fca7e629a Resolves: rhbz#1499354 - CVE-2017-12173
sssd: unsanitized input when searching in local cache database access on
the sock_file system_bus_socket

(cherry picked from commit 7069858231)
(cherry picked from commit 4a8ad4c174)
2017-10-11 17:51:02 +02:00
Lukas Slebodnik bbb90ca68c Fix few bugs/regressions
Resolves: rhbz#1488327 - SELinux is preventing selinux_child from write access
                         on the sock_file system_bus_socket
Resolves: rhbz#1490402 - SSSD does not create /var/lib/sss/deskprofile and
                         fails to download desktop profile data
Resolves: upstream#3485 - getsidbyid does not work with 1.15.3
Resolves: upstream#3488 - SUDO doesn't work for IPA users on IPA clients after
                          applying ID Views for them in IPA server
Resolves: upstream#3501 - Accessing IdM kerberos ticket fails while id mapping
                          is applied
(cherry picked from commit 8eda442b2e)
(cherry picked from commit e15fc49cbf)
2017-09-12 09:29:29 +02:00
Lukas Slebodnik 7e532024f0 Backport few upstream patches/fixes
(cherry picked from commit fa4807ec45)
(cherry picked from commit 323dbdee02)
2017-09-01 21:44:33 +02:00
Lukas Slebodnik 7109e61605 Simplify spec file a little bit
The plugin for cifs-utils can be built on all supported versions of fedora.
Conditions are required only in upstream spec file for older
distributions. Definition of constant with_cifs_utils_plugin is still
in the beginning of spec file for simpler comparison of changes
between upstream and fedora.

(cherry picked from commit 5ce8ae1166)
(cherry picked from commit 601bb9f4eb)
2017-09-01 21:42:16 +02:00
Lukas Slebodnik 52d4a1e424 Remove unused if condition krb5 localauth plugin
The plugin can be built on all supported versions of fedora.
And it was removed also from upstream spec file.

(cherry picked from commit 088151887a)
(cherry picked from commit e89cb59c68)
2017-09-01 21:42:09 +02:00
Ville Skyttä c01badf69e Own the %{_libdir}/%{name}/conf dir
https://bugzilla.redhat.com/show_bug.cgi?id=1483517
(cherry picked from commit 308a55f49d)
(cherry picked from commit 3b8c6ea1d5)
2017-09-01 21:42:01 +02:00
Lukas Slebodnik e076a5639e Make fedora automated tests happy
dist.python-versions failed
dist.python-versions.requires_naming_scheme failed

These RPMs use `python-` prefix without Python version in *Requires:

sssd-1.15.3-1.fc26 BuildRequires:
 * python-devel (python2-devel is available)

This is strongly discouraged and should be avoided. Please check
the required packages, and use names with either `python2-` or
`python3-` prefix.

(cherry picked from commit 1f58bd8dc4)
2017-07-25 17:56:35 +02:00
Lukas Slebodnik 39ce513212 New upstream release 1.15.3
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_3.html
2017-07-25 14:37:56 +02:00
Lukas Slebodnik a2beebd281 Disable unit tests with expired certificates 2017-06-27 15:16:50 +02:00
Lukas Slebodnik b88b74fcf2 Fix build issues: Update expided certificate in unit tests 2017-06-27 14:27:48 +02:00
Lukas Slebodnik c111ad7d59 Resolves upstream#3382 - SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules 2017-05-31 13:21:07 +02:00
Stephen Gallagher b4e6dc0d82
Revert "Temporarily disable running tests when building in the module build service"
This reverts commit 90107469a7.
2017-05-15 09:42:58 -04:00
Stephen Gallagher 90107469a7
Temporarily disable running tests when building in the module build service 2017-05-14 20:06:19 -04:00
Lukas Slebodnik 9c949c17eb Resolves: rhbz#1445680 - Properly fall back to local Smartcard authentication
Resolves: rhbz#1437199 - sssd-nfs-idmap-1.15.2-1.fc25.x86_64 conflicts with
                           file from package sssd-common-1.15.1-1.fc25.x86_64
Resolves: rhbz#1063278 - sss_ssh_knownhostsproxy doesn't fall back to ipv4
2017-04-29 23:57:03 +02:00
Lukas Slebodnik eecc431e93 Fix conflict in patches 2017-04-06 16:27:15 +02:00
Lukas Slebodnik 22e5820a7b Backport few upstrem fixes from master
Resolves: upstream#3297 Fix issue with IPA + SELinux in containers
Resolves: upstream#3360 Do not leak selinux context on clients destruction
2017-04-06 16:03:48 +02:00
Lukas Slebodnik 5c34393107 New upstream release 1.15.2
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_2.html
(cherry picked from commit d663bd4a22)
2017-03-16 10:56:07 +01:00
Lukas Slebodnik 79cc292e27 New upstream release 1.15.1
https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_1_15_1.html
(cherry picked from commit 831e9fa984)
2017-03-06 12:24:44 +01:00
Jakub Hrozek 396c651083 Cherry-pick patches from upstream that enable the files provider
Required for:
    https://bugzilla.redhat.com/show_bug.cgi?id=1357418 - SSSD fast cache for local users
2017-02-28 16:54:33 +01:00
Lukas Slebodnik 3e94aee54c Add missing %license macro 2017-02-14 19:47:29 +01:00
Fedora Release Engineering b5653d93c3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 13:57:49 +00:00
Lukas Slebodnik 850071336e New upstream release 1.15.0
https://fedorahosted.org/sssd/wiki/Releases/Notes-1.15.0
2017-01-27 20:07:00 +01:00
Miro Hrončok 4b9dd7c77c Rebuild for Python 3.6 2016-12-19 18:20:38 +01:00
Lukas Slebodnik eb6c560542 Resolves: rhbz#1369130 - nss_sss should not link against libpthread
Resolves: rhbz#1392916 - sssd failes to start after update
Resolves: rhbz#1398789 - SELinux is preventing sssd from 'write' accesses
                           on the directory /etc/sssd
2016-12-13 20:10:27 +01:00
Lukas Slebodnik 85427c072c New upstream release 1.14.2
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.14.2
2016-10-20 16:20:34 +02:00
Lukas Slebodnik 856526f769 libwbclient-sssd: update interface to version 0.13 2016-10-14 19:06:17 +02:00
Lukas Slebodnik 8dd054482d Revert "Do no use python_provide conditionally"
The macro python_provide is defined in /usr/lib/rpm/macros.d/macros.python
in the package python-rpm-macros. But this package is not part
of build root and therefore rpm cannot parse spec file.

This reverts commit 22c180263a.
2016-09-22 23:40:41 +02:00
Lukas Slebodnik 75bb1ff2e0 Fix failing test 2016-09-22 22:55:43 +02:00
Lukas Slebodnik 640e44ca24 Fix regression with krb5_map_user
- Resolves: rhbz#1375552 - krb5_map_user doesn't seem effective anymore
- Resolves: rhbz#1349286 - authconfig fails with SSSDConfig.NoDomainError:
                           default if nonexistent domain is mentioned
2016-09-22 22:28:47 +02:00
Lukas Slebodnik 0fe5246e1a Use weak dependencies 2016-09-21 12:47:08 +02:00