- The utility sss_obfuscate uses the Python module pysss, so add a
  dependency on python-sssd-config to sssd-tools (bnc#890242) (forwarded request 245784 from leonardocf)

• Files Changed
• Browse Source

- Update to new upstream release 1.12.0

• Files Changed
• Browse Source

- fix %postun to not erroneously remove sss pam module

• Files Changed
• Browse Source

- Switch to libnl-3 so we can get rid of libnl-1. (forwarded request 235577 from elvigia)

• Files Changed
• Browse Source

- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable.
  Please remove executable permission bits.

- Detect endianness at configure time, for use by Samba's byteorder.h header;
  (bnc#876544).
  + 0001-build-detect-endianness-at-configure-time.patch (forwarded request 233706 from varkoly)

• Files Changed
• Browse Source

- Update to new upstream release 1.11.5.1
  * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain
  * SSSD pam module accepts usernames with leading spaces
  * [RFE] Expose the list of trusted domains to IPA
  * If both IPA and LDAP are set up with enumeration on, two enum tasks are running
  * sssd.conf man pages don't list a configuration option.
  * Make SSSD compilable on systems with non-standard paths to krb5 includes
  * [freebsd] pam_sss: add ignore_unknown_user option
  * MAN: Remove misleading memberof example from ldap_access_filter example
  * not retrieving homedirs of AD users with posix attributes
  * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes
  * Check IPA idranges before saving them to the cache
  * Evaluate usage of sudo LDAP provider together with the AD provider
  * Setting int option to 0 yields the default value
  * ipa-server-mode: Use lower-case user name component in home dir path
  * SSSD Does not cache SELinux map from FreeIPA correctly
  * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in
  * sssd fails to handle expired passwords when OTP is used
  * Add another Kerberos error code to trigger IPA password migration
  * Double OK when starting the service
  * SSSD should create the SELinux mapping file with format expected by pam_selinux
  * Valgrind: Invalid read of int while processing netgroup
  * other subdomains are unavailable when joined to a subdomain in the ad forest
  * Error during password change
  * configure time variables not expanded when running ./configure
  * RHEL7 IPA selinuxusermap hbac rule not always matching

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048) (forwarded request 208844 from ckornacker)

• Files Changed
• Browse Source

- Update to new upstream release 1.11.2

• Files Changed
• Browse Source

Split 13.1 from Factory

• Files Changed
• Browse Source

- Explicitly formulate SASL BuildRequires

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

Automatic submission by obs-autosubmit

• Files Changed
• Browse Source

CVE-2013-0287 (bnc#809153) (forwarded request 160207 from rhafer)

• Files Changed
• Browse Source

Factory only
- Resolve user retrieval problems when encountering binary data
  in LDAP attributes (bnc#806078),

• Files Changed
• Browse Source

bnc#796423

• Files Changed
• Browse Source

update to 1.9.4 (bnc#801036)

• Files Changed
• Browse Source

Split 12.3 from Factory

• Files Changed
• Browse Source

update to 1.9.3

• Files Changed
• Browse Source