Go to file
Lukas Slebodnik 70e9980ac6 Backport important patches from upstream 1.13 prerelease
- Resolves: rhbz#1060325 - Does sssd-ad use the most suitable
                           attribute for group name
- Resolves: upstream #2335 - Investigate using the krb5 responder
                             for driving the PAM conversation with OTPs
- Enable cmocka tests for secondary architectures
2015-05-08 14:53:58 +02:00
.gitignore New upstream release 1.12.4 2015-02-18 21:24:59 +01:00
0001-PAM-do-not-reject-abruptly.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0002-PAM-new-option-pam_account_expired_message.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0003-PAM-warn-all-services-about-account-expiration.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0004-PAM-check-return-value-of-confdb_get_string.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0005-resolv-Use-the-same-default-timeout-for-SRV-queries-.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0006-FO-Use-SRV-TTL-in-fail-over-code.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0007-SDAP-refactor-pwexpire-policy.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0008-SDAP-enable-change-phase-of-pw-expire-policy-check.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0009-LDAP-unlink-ccname_file_dummy-if-there-is-an-error.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0010-selinux-Delete-existing-user-mapping-on-empty-defaul.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0011-ldap_child-initialized-ccname_file_dummy.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0012-UTIL-convert-GeneralizedTime-to-unix-time.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0013-SDAP-Lock-out-ssh-keys-when-account-naturally-expire.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0014-SDAP-fix-minor-neglect-in-is_account_locked.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0015-be_refresh-refresh-all-domains-in-backend.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0016-sdap_handle_acct_req_send-remove-be_req.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0017-be_refresh-refactor-netgroups-refresh.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0018-be_refresh-add-sdap_refresh_init.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0019-be_refresh-support-users.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0020-be_refresh-support-groups.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0021-Log-reason-in-debug-message-why-ldb_modify-failed.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0022-ldap_child-fix-coverity-warning.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0023-NSS-Handle-ENOENT-when-doing-initgroups-by-UPN.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0024-MAN-libkrb5-and-SSSD-use-different-expansions.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0025-DEBUG-Add-missing-strings-for-error-messages.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0026-test-Check-ERR_LAST.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0027-PAM-use-the-logon_name-as-the-key-for-the-PAM-initgr.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0028-pam_initgr_check_timeout-add-debug-output.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0029-ipa-do-not-treat-missing-sub-domain-users-as-error.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0030-ipa-make-sure-extdom-expo-data-is-available.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0031-ipa_selinux-Fix-warning-may-be-used-uninitialized.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0032-LDAP-AD-do-not-resolve-group-members-during-tokenGro.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0033-IPA-idviews-check-if-view-name-is-set.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0034-selinux-Handle-setup-with-empty-default-and-no-confi.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0035-IPA-make-sure-output-variable-is-set.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0036-IPA-set-EINVAL-if-dn-can-t-be-linearized.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0037-GPO-error-out-instead-of-leaving-array-element-unini.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0038-LDAP-remove-unused-code.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0039-memberof-Do-not-create-request-with-0-attribute-valu.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0040-tests-convert-all-unit-tests-to-cmocka-1.0-or-later.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0041-RPM-BuildRequire-libcmocka-1.0.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0042-build-Only-run-cmocka-tests-if-cmocka-1.0-or-newer-i.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0043-sdap-properly-handle-binary-objectGuid-attribute.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0044-Resolv-re-read-SRV-query-every-time-if-its-TTL-is-0.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0045-IPA-Use-custom-error-codes-when-validating-HBAC-rule.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0046-IPA-Drop-useless-sysdb-parameter.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0047-IPA-Only-treat-malformed-HBAC-rules-as-fatal-if-deny.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0048-IPA-Deprecate-the-ipa_hbac_treat_deny_as-option.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0049-LDAP-fix-a-typo-in-debug-message.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0050-MAN-Update-ppolicy-description.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0051-CLIENT-Clear-errno-with-enabled-sss-default-nss-plug.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0052-GPO-Check-return-value-of-ad_gpo_store_policy_settin.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0053-enumeration-fix-talloc-context.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0054-sudo-sanitize-filter-values.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0055-SDAP-Do-not-set-gid-0-twice.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0056-SDAP-Extract-filtering-AD-group-to-function.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0057-SDAP-Filter-ad-groups-in-initgroups.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0058-selinux-Disconnect-before-closing-the-handle.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0059-selinux-Begin-and-end-the-transaction-on-the-same-ne.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0060-selinux-Only-call-semanage-if-the-context-actually-c.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0061-Option-filter_users-had-no-effect-for-retrieving-sud.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0062-AD-Clean-up-ad_access_gpo.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0063-AD-Always-get-domain-specific-ID-connection.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0064-AD-GPO-Always-look-up-GPOs-from-machine-domain.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0065-tests-Use-cmocka-1.0-API-in-test_sysdb_utils.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0066-sysdb-Add-cache_expire-to-the-default-sysdb_search_o.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0067-IPA-do-not-try-to-save-override-data-for-the-default.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0068-IPA-use-sysdb_attrs_add_string_safe-to-add-group-mem.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0069-IPA-check-ghosts-in-groups-found-by-uuid-as-well.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0070-simple-access-provider-make-user-grp-res-more-robust.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0071-IPA-allow-initgroups-by-SID-for-AD-users.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0072-IPA-fix-segfault-in-ipa_s2n_exop.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0073-autofs-fix-Cannot-allocate-memory-with-FQDNs.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0074-GPO-Do-not-ignore-missing-attrs-for-GPOs.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0075-sss_nss_idmap-tests-Use-different-prepared-buffers-f.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0076-SDAP-Fix-id-mapping-with-disabled-subdomains.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0077-IPA-do-initgroups-if-extdom-exop-supports-it.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0078-IPA-update-initgr-expire-timestamp-conditionally.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0079-IPA-enhance-ipa_initgr_get_overrides_send.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0080-IPA-search-for-overrides-during-initgroups-in-sever-.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0081-IPA-do-not-add-domain-name-unconditionally.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0082-NSS-check-for-overrides-before-calling-backend.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0083-IPA-allow-initgroups-by-UUID-for-FreeIPA-users.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0084-SPEC-Fix-cyclic-dependencies-between-sssd-krb5-commo.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0085-BUILD-Remove-unused-libraries-for-pysss.so.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0086-BUILD-Remove-unused-variables.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0087-BUILD-Remove-detection-of-type-Py_ssize_t.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0088-UTIL-Remove-python-wrapper-sss_python_set_new.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0089-UTIL-Remove-python-wrapper-sss_python_set_add.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0090-UTIL-Remove-python-wrapper-sss_python_set_check.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0091-UTIL-Remove-compatibility-macro-PyModule_AddIntMacro.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0092-UTIL-Remove-python-wrapper-sss_python_unicode_from_s.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0093-BUILD-Use-python-config-for-detection-FLAGS.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0094-SPEC-Use-new-convention-for-python-packages.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0095-SPEC-Move-python-bindings-to-separate-packages.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0096-BUILD-Add-possibility-to-build-python-2-3-bindings.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0097-TESTS-Run-python-tests-with-all-supported-python-ver.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0098-SPEC-Replace-python_-macros-with-python2_.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0099-SPEC-Build-python3-bindings-on-available-platforms.patch Backport patches from upstream 1.12.5 prerelease - contains many fixes 2015-05-08 14:13:58 +02:00
0100-ad_opts-Use-different-default-attribute-for-group-na.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0101-Add-leak-check-and-command-line-option-to-test_autht.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0102-utils-add-sss_authtok_-gs-et_2fa.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0103-pam-handle-2FA-authentication-token-in-the-responder.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0104-Add-pre-auth-request.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0105-krb5-child-add-preauth-and-split-2fa-token-support.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0106-IPA-create-preauth-indicator-file-at-startup.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0107-pam_sss-add-pre-auth-and-2fa-support.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0108-Add-cache_credentials_minimal_first_factor_length-co.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0109-sysdb-add-sysdb_cache_password_ex.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0110-krb5-save-hash-of-the-first-authentication-factor-to.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0111-krb5-try-delayed-online-authentication-only-for-sing.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0112-2FA-offline-auth.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0113-pam_sss-move-message-encoding-into-separate-file.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
0114-PAM-add-PAM-responder-unit-test.patch Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00
sources New upstream release 1.12.4 2015-02-18 21:24:59 +01:00
sssd.spec Backport important patches from upstream 1.13 prerelease 2015-05-08 14:53:58 +02:00