BuildRequire python3-setuptools with Python 3.12+

distutils was removed from the Python standard library,
but setuptools can be used instead.

See https://peps.python.org/pep-0632/

.gitignore

@@ -77,3 +77,31 @@ sssd-1.2.91.tar.gz
 /sssd-1.15.1.tar.gz
 /sssd-1.15.2.tar.gz
 /sssd-1.15.3.tar.gz
+/sssd-1.16.0.tar.gz
+/sssd-1.16.1.tar.gz
+/sssd-1.16.2.tar.gz
+/sssd-2.0.0.tar.gz
+/sssd-2.1.0.tar.gz
+/sssd-2.2.0.tar.gz
+/sssd-2.2.1.tar.gz
+/sssd-2.2.2.tar.gz
+/sssd-2.2.3.tar.gz
+/sssd-2.3.0.tar.gz
+/sssd-2.3.1.tar.gz
+/sssd-2.4.0.tar.gz
+/sssd-2.4.1.tar.gz
+/sssd-2.4.2.tar.gz
+/sssd-2.5.0.tar.gz
+/sssd-2.5.1.tar.gz
+/sssd-2.5.2.tar.gz
+/sssd-2.6.0.tar.gz
+/sssd-2.6.1.tar.gz
+/sssd-2.6.2.tar.gz
+/sssd-2.6.3.tar.gz
+/sssd-2.7.0.tar.gz
+/sssd-2.7.1.tar.gz
+/sssd-2.7.3.tar.gz
+/sssd-2.7.4.tar.gz
+/sssd-2.8.0.tar.gz
+/sssd-2.8.1.tar.gz
+/sssd-2.8.2.tar.gz

0501-libwbclient-sssd-update-interface-to-version-0.14.patch

@@ -1,86 +0,0 @@
-From 213dac21410f3c7aaeac660c5fc9c09bd1ab3d59 Mon Sep 17 00:00:00 2001
-From: Sumit Bose <sbose@redhat.com>
-Date: Fri, 7 Jul 2017 11:15:20 +0200
-Subject: [PATCH] libwbclient-sssd: update interface to version 0.14
-
-The main change is a new member of the wbcAuthErrorInfo struct.
----
- src/conf_macros.m4                          | 4 ++--
- src/sss_client/libwbclient/wbclient.exports | 3 +++
- src/sss_client/libwbclient/wbclient_sssd.h  | 9 +++++++--
- 3 files changed, 12 insertions(+), 4 deletions(-)
-
-diff --git a/src/conf_macros.m4 b/src/conf_macros.m4
-index 420997229cb3c244afd8fb21b074e43a21de0eda..bd33d3aee194c23ceac01b3729ba3152d9de9f89 100644
---- a/src/conf_macros.m4
-+++ b/src/conf_macros.m4
-@@ -727,10 +727,10 @@ AC_DEFUN([WITH_LIBWBCLIENT],
-     if test x"$with_libwbclient" = xyes; then
-         AC_DEFINE(BUILD_LIBWBCLIENT, 1, [whether to build SSSD implementation of libwbclient])
- 
--        libwbclient_version="0.13"
-+        libwbclient_version="0.14"
-         AC_SUBST(libwbclient_version)
- 
--        libwbclient_version_info="13:0:13"
-+        libwbclient_version_info="14:0:14"
-         AC_SUBST(libwbclient_version_info)
-     fi
-     AM_CONDITIONAL([BUILD_LIBWBCLIENT], [test x"$with_libwbclient" = xyes])
-diff --git a/src/sss_client/libwbclient/wbclient.exports b/src/sss_client/libwbclient/wbclient.exports
-index 9d3c2040e7d393c0057d44864826cefc2e3f7a31..7abbaba6036c604177f247521e877c86720a1b4d 100644
---- a/src/sss_client/libwbclient/wbclient.exports
-+++ b/src/sss_client/libwbclient/wbclient.exports
-@@ -150,3 +150,6 @@ WBCLIENT_0.13 {
-         wbcUnixIdsToSids;
-         wbcCtxUnixIdsToSids;
- } WBCLIENT_0.12;
-+
-+WBCLIENT_0.14 {
-+} WBCLIENT_0.13;
-diff --git a/src/sss_client/libwbclient/wbclient_sssd.h b/src/sss_client/libwbclient/wbclient_sssd.h
-index 50ba7f84304df5f24a31cbbad857f22d1c70964d..f2fe8fe60e2ff55399e408056ccfbbfff044b88b 100644
---- a/src/sss_client/libwbclient/wbclient_sssd.h
-+++ b/src/sss_client/libwbclient/wbclient_sssd.h
-@@ -74,9 +74,11 @@ const char *wbcErrorString(wbcErr error);
-  *  0.11: Extended wbcAuthenticateUserEx to provide PAC parsing
-  *  0.12: Added wbcCtxCreate and friends
-  *  0.13: Added wbcCtxUnixIdsToSids and wbcUnixIdsToSids
-+ *  0.14: Added "authoritative" to wbcAuthErrorInfo
-+ *        Added WBC_SID_NAME_LABEL
-  **/
- #define WBCLIENT_MAJOR_VERSION 0
--#define WBCLIENT_MINOR_VERSION 13
-+#define WBCLIENT_MINOR_VERSION 14
- #define WBCLIENT_VENDOR_VERSION "Samba libwbclient"
- struct wbcLibraryDetails {
-     uint16_t major_version;
-@@ -138,7 +140,8 @@ enum wbcSidType {
-     WBC_SID_NAME_DELETED=6,
-     WBC_SID_NAME_INVALID=7,
-     WBC_SID_NAME_UNKNOWN=8,
--    WBC_SID_NAME_COMPUTER=9
-+    WBC_SID_NAME_COMPUTER=9,
-+    WBC_SID_NAME_LABEL=10
- };
- 
- /**
-@@ -316,6 +319,7 @@ struct wbcChangePasswordParams {
- #define WBC_MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT         0x00000020
- #define WBC_MSV1_0_RETURN_PROFILE_PATH                0x00000200
- #define WBC_MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT    0x00000800
-+#define WBC_MSV1_0_ALLOW_MSVCHAPV2                    0x00010000
- 
- /* wbcAuthUserParams->flags */
- 
-@@ -418,6 +422,7 @@ struct wbcAuthErrorInfo {
-     char *nt_string;
-     int32_t pam_error;
-     char *display_string;
-+    uint8_t authoritative;
- };
- 
- /**
--- 
-2.13.2
-

0502-SYSTEMD-Use-capabilities.patch

@@ -1,25 +0,0 @@
-From 5381ad1bd7693a6681f00bef093241f13e3a2c4f Mon Sep 17 00:00:00 2001
-From: Lukas Slebodnik <lslebodn@redhat.com>
-Date: Mon, 12 Dec 2016 21:56:16 +0100
-Subject: [PATCH] SYSTEMD: Use capabilities
-
-copied from selinux policy
----
- src/sysv/systemd/sssd.service.in | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/src/sysv/systemd/sssd.service.in b/src/sysv/systemd/sssd.service.in
-index 05cfd3705084dbff8b46fb07e736612612c58b70..e7bbbdb5093f52e4b71e3c85a9082192013385e8 100644
---- a/src/sysv/systemd/sssd.service.in
-+++ b/src/sysv/systemd/sssd.service.in
-@@ -9,6 +9,7 @@ EnvironmentFile=-@environment_file@
- ExecStart=@sbindir@/sssd -i -f
- Type=notify
- NotifyAccess=main
-+CapabilityBoundingSet=CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_DAC_OVERRIDE CAP_KILL CAP_NET_ADMIN CAP_SYS_NICE CAP_FOWNER CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_RESOURCE CAP_BLOCK_SUSPEND
- 
- [Install]
- WantedBy=multi-user.target
--- 
-2.11.0
-

sources

@@ -1 +1 @@
-SHA512 (sssd-1.15.3.tar.gz) = 92478205ee1b1cebc3d35b733576180db51cee8cc84d0c2cb78386924ffa90ae355b6ad9b7b51e5e5f5a7a4588764d1c7afb0673c035b1fe9b1a283beb79a428
+SHA512 (sssd-2.8.2.tar.gz) = 10b7a641823aefb43e30bff9e5f309a1f48446ffff421a06f86496db24ba1fbd384733b5690864507ef9b2f04c91e563fe9820536031f83f1bd6e93edfedee55