Changelog for
sssd-client-1.5.1-37.SEL5_5.x86_64.rpm :
Sat Aug 27 00:00:00 2011 Eddy Nigg
- Rebuild for StartCom Linux 5.0.x
Fri Jun 10 00:00:00 2011 Stephen Gallagher - 1.5.1-37
- Reverts: rhbz#680443 - Dynamic DNS update fails if multiple servers are
- given in ipa_server config option
Wed Jun 1 00:00:00 2011 Stephen Gallagher - 1.5.1-36
- Resolves: rhbz#709333 - sssd.$arch should require sssd-client.$arch
Thu May 26 00:00:00 2011 Stephen Gallagher - 1.5.1-35
- Resolves: rhbz#707340 - latest sssd fails if ldap_default_authtok_type is
- not mentioned
- Resolves: rhbz#707574 - SSSD\'s async resolver only tries the first
- nameserver in /etc/resolv.conf
Wed May 4 00:00:00 2011 Stephen Gallagher - 1.5.1-34
- Resolves: rhbz#701702 - sssd client libraries use select() but should use
- poll() instead
Tue May 3 00:00:00 2011 Stephen Gallagher - 1.5.1-33
- Related: rhbz#700858 - Automatic TGT renewal overwrites cached password
- Fix segfault in TGT renewal
Sat Apr 30 00:00:00 2011 Stephen Gallagher - 1.5.1-32
- Resolves: rhbz#700858 - Automatic TGT renewal overwrites cached password
Sat Apr 16 00:00:00 2011 Stephen Gallagher - 1.5.1-30
- Resolves: rhbz#696979 - Filters not honoured against fully-qualified users
Fri Apr 15 00:00:00 2011 Stephen Gallagher - 1.5.1-29
- Resolves: rhbz#694149 - SSSD consumes GBs of RAM, possible memory leak
Wed Apr 13 00:00:00 2011 Stephen Gallagher - 1.5.1-28
- Related: rhbz#691900 - SSSD needs to fall back to \'cn\' for GECOS
- information
Wed Apr 13 00:00:00 2011 Stephen Gallagher - 1.5.1-27
- Related: rhbz#694853 - SSSD crashes during getent when anonymous bind is
- disabled
Tue Apr 12 00:00:00 2011 Stephen Gallagher - 1.5.1-26
- Resolves: rhbz#695476 - Unable to resolve SRV record when called with
- _srv_, in ldap_uri
- Related: rhbz#694853 - SSSD crashes during getent when anonymous bind is
- disabled
Sat Apr 9 00:00:00 2011 Stephen Gallagher - 1.5.1-25
- Resolves: rhbz#694853 - SSSD crashes during getent when anonymous bind is
- disabled
Sat Apr 2 00:00:00 2011 Stephen Gallagher - 1.5.1-24
- Resolves: rhbz#692960 - Process /usr/libexec/sssd/sssd_be was killed by
- signal 11 (SIGSEGV)
- Fix is to not attempt to resolve nameless servers
Thu Mar 31 00:00:00 2011 Stephen Gallagher - 1.5.1-23
- Resolves: rhbz#691900 - SSSD needs to fall back to \'cn\' for GECOS
- information
Tue Mar 29 00:00:00 2011 Stephen Gallagher - 1.5.1-21
- Resolves: rhbz#690867 - Groups with a zero-length memberuid attribute can
- cause SSSD to stop caching and responding to
- requests
Fri Mar 25 23:00:00 2011 Stephen Gallagher - 1.5.1-20
- Resolves: rhbz#690287 - Traceback messages seen while interrupting
- sss_obfuscate using ctrl+d
- Resolves: rhbz#690814 - [abrt] sssd-1.2.1-28.el6_0.4: _talloc_free: Process
- /usr/libexec/sssd/sssd_be was killed by signal 11
- (SIGSEGV)
Wed Mar 23 23:00:00 2011 Stephen Gallagher - 1.5.1-19
- Related: rhbz#690096 - SSSD should skip over groups with multiple names
Wed Mar 23 23:00:00 2011 Stephen Gallagher - 1.5.1-18
- Resolves: rhbz#690093 - SSSD breaks on RDNs with a comma in them
- Resolves: rhbz#690096 - SSSD should skip over groups with multiple names
- Resolves: rhbz#689887 - group memberships are not populated correctly during
- IPA provider initgroups
- Resolves: rhbz#688697 - Skip users and groups that have incomplete contents
- Resolves: rhbz#688694 - authconfig fails when access_provider is set as krb5
- in sssd.conf
Thu Mar 10 23:00:00 2011 Stephen Gallagher - 1.5.1-17
- Resolves: rhbz#688677 - Build SSSD in RHEL 5.7 against openldap24-libs
- Adds support for following LDAP referrals and using Mozilla NSS for crypto
- support
Wed Mar 9 23:00:00 2011 Stephen Gallagher - 1.5.1-16
- Resolves: rhbz#683260 - sudo/ldap lookup via sssd gets stuck for 5min
- waiting on netgroup
- Resolves: rhbz#683585 - sssd consumes 100% CPU
- Related: rhbz#680441 - sssd does not handle kerberos server IP change
Tue Mar 8 23:00:00 2011 Stephen Gallagher - 1.5.1-15
- Related: rhbz#680441 - sssd does not handle kerberos server IP change
- SSSD was staying with the old server if it was still online
Mon Mar 7 23:00:00 2011 Stephen Gallagher - 1.5.1-14
- Resolves: rhbz#682853 - IPA provider should use realm instead of ipa_domain
- for base DN
Mon Mar 7 23:00:00 2011 Stephen Gallagher - 1.5.1-13
- Resolves: rhbz#682803 - sssd-be segmentation fault - ipa-client on
- ipa-server
- Resolves: rhbz#680441 - sssd does not handle kerberos server IP change
- Resolves: rhbz#680443 - Dynamic DNS update fails if multiple servers are
- given in ipa_server config option
- Resolves: rhbz#680933 - Do not delete sysdb memberOf if there is no memberOf
- attribute on the server
- Resolves: rhbz#682808 - sssd_nss core dumps with certain lookups
Tue Feb 22 23:00:00 2011 Stephen Gallagher - 1.5.1-12
- Related: rhbz#679087 - SSSD IPA provider should honor the krb5_realm option
- Related: rhbz#678615 - SSSD needs to look at IPA\'s compat tree for netgroups
Tue Feb 22 23:00:00 2011 Stephen Gallagher - 1.5.1-11
- Resolves: rhbz#679087 - SSSD IPA provider should honor the krb5_realm option
- Resolves: rhbz#679097 - Does not read renewable ccache at startup
Mon Feb 21 23:00:00 2011 Stephen Gallagher - 1.5.1-10
- Resolves: rhbz#678606 - User information not updated on login for secondary
- domains
- Resolves: rhbz#678778 - IPA provider does not update removed group
- memberships on initgroups
Sat Feb 19 23:00:00 2011 Stephen Gallagher - 1.5.1-9
- Resolves: rhbz#678780 - sssd crashes at the next tgt renewals it tries
- Resolves: rhbz#678412 - name service caches names, so id command shows
- recently deleted users
- Resolves: rhbz#678615 - SSSD needs to look at IPA\'s compat tree for
- netgroups
Thu Feb 17 23:00:00 2011 Stephen Gallagher - 1.5.1-8
- Related: rhbz#665314 - Rebase SSSD to 1.5 in RHEL 5.7
- Fix generation of translated manpages
Wed Feb 16 23:00:00 2011 Stephen Gallagher - 1.5.1-7
- Resolves: rhbz#665314 - Rebase SSSD to 1.5 in RHEL 5.7
- Resolves: rhbz#676027 - sssd segfault when first entry of ldap_uri is
- unreachable
- Resolves: rhbz#678032 - Remove HBAC time rules from SSSD
- Resolves: rhbz#675007 - sssd corrupts group cache
- Resolves: rhbz#608864 - [RFE] Support obfuscated passwords in the SSSD
- configuration
Thu Dec 2 23:00:00 2010 Stephen Gallagher - 1.2.1-39
- Resolves: rhbz#659136 - SSSD shutdown sometimes hangs
Wed Nov 24 23:00:00 2010 Stephen Gallagher - 1.2.1-38
- Resolves: rhbz#638241 - sssd stops on upgrade
Fri Nov 5 23:00:00 2010 Stephen Gallagher - 1.2.1-37
- Resolves: rhbz#649037 - Unable to set SELinux user for the userĀ“s login
Wed Nov 3 23:00:00 2010 Stephen Gallagher - 1.2.1-36
- Resolves: rhbz#649285 - SSSD will sometimes lose groups from the cache
Tue Nov 2 23:00:00 2010 Stephen Gallagher - 1.2.1-35
- Resolves: rhbz#645437 - NSS responder dies if DP dies during a request
Wed Oct 27 00:00:00 2010 Stephen Gallagher - 1.2.1-34
- Resolves: rhbz#645515 - \'getent passwd \' returns nothing if its
- uidNumber gt 2147483647
Sat Oct 23 00:00:00 2010 Stephen Gallagher - 1.2.1-33
- Resolves: rhbz#645515 - \'getent passwd \' returns nothing if its
- uidNumber gt 2147483647
Sat Oct 9 00:00:00 2010 Stephen Gallagher - 1.2.1-32
- Resolves: rhbz#636055 - SSSD initgroups does not behave as expected
- Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
- libini_config-devel
Sat Oct 9 00:00:00 2010 Stephen Gallagher - 1.2.1-31
- Resolves: rhbz#633863 - SSSD log fills up the disk
- Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
- libini_config-devel
- Resolves: rhbz#636823 - the krb5 locator plugin isn\'t packaged for multilib
- Resolves: rhbz#638241 - sssd stops on upgrade
Wed Sep 29 00:00:00 2010 Stephen Gallagher - 1.2.1-30
- Resolves: rhbz#634861 - error: %post(sssd-1.2.1-28.1.el5.s390x) scriptlet
- failed, exit status 127
Fri Sep 24 00:00:00 2010 Stephen Gallagher - 1.2.1-29
- Resolves: rhbz#636823 - the krb5 locator plugin isn\'t packaged for multilib
Wed Aug 25 00:00:00 2010 Stephen Gallagher - 1.2.1-28.1
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
- against LDAP
- Patch was included but not applied in previous version
Wed Aug 25 00:00:00 2010 Stephen Gallagher - 1.2.1-27.1
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
- against LDAP
Thu Aug 5 00:00:00 2010 Stephen Gallagher - 1.2.1-26
- Resolves: rhbz#621307 - Password changes are broken on LDAP
Thu Aug 5 00:00:00 2010 Stephen Gallagher - 1.2.1-23.1
- Initial release for Red Hat Enterprise Linux 5
Sat Jul 31 00:00:00 2010 Stephen Gallagher - 1.2.1-23
- Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
- initgroups calls
Sat Jul 24 00:00:00 2010 Stephen Gallagher - 1.2.1-21
- Resolves: rhbz#607233 - SSSD users cannot log in through GDM
- - Real issue was that long-running services
- - do not reconnect if sssd is restarted
Sat Jul 10 00:00:00 2010 Stephen Gallagher - 1.2.1-20
- Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
- /etc/krb5.keytab file
Tue Jun 29 00:00:00 2010 Stephen Gallagher - 1.2.1-19
- Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
- final
- Resolves: rhbz#608661 - SASL with OpenLDAP server fails
- Resolves: rhbz#608688 - SSSD doesn\'t properly request RootDSE attributes
Sat Jun 19 00:00:00 2010 Stephen Gallagher - 1.2.1-15
- New upstream bugfix release 1.2.1
- Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
- bugs.
- Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
- Resolves: rhbz#604704 - authconfig should provide error with no trace back
- if disabling sssd when sssd is not enabled
- Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
- auth logs continuous error messages to sssd_ldap.log
- Resolves: rhbz#596295 - Authentication fails for user from the second domain
- when the same user name is filtered out from the
- first domain
- Related: rhbz#598559 - Update translation files for SSSD before RHEL 6
- final
Fri Jun 11 00:00:00 2010 Stephen Gallagher - 1.2.0-14
- Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
- to fail while restart
- Resolves: rhbz#600352 - Wrapping the value for \"ldap_access_filter\" in
- parentheses causes ldap_search_ext to fail
- Resolves: rhbz#600468 - Segfault in krb5_child
- Related: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
- bugs.
Thu Jun 3 00:00:00 2010 Stephen Gallagher - 1.2.0-13
- Resolves: rhbz#598670 - Ccache file of a user is removed too early
- Resolves: rhbz#599057 - Incomplete comparison of a service name in
- IPA access provider
- Resolves: rhbz#598496 - Failure with IPA access provider
- Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
- kernel keyring
Tue May 25 00:00:00 2010 Stephen Gallagher - 1.2.0-12
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP
- Resolves: rhbz#584001 - Rebase sssd to 1.2
- Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
- Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
- Resolves: rhbz#587743 - Need to replicate pam_ldap\'s pam_filter in sssd.conf
- Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
- Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
- going online
- Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
- HBAC rule
Thu May 20 00:00:00 2010 Stephen Gallagher - 1.1.92-11.1
- Improve DEBUG logs for STARTTLS failures
Wed May 19 00:00:00 2010 Stephen Gallagher - 1.1.92-11
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline->online transition support in Kerberos
Sat May 8 00:00:00 2010 Stephen Gallagher - 1.1.91-10
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover
Sat Apr 3 00:00:00 2010 Simo Sorce - 1.1.1-3
- Bump up release number to avoid library sub-packages version issues with
previous releases.
Fri Apr 2 00:00:00 2010 Stephen Gallagher - 1.1.1-1
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
Mon Mar 22 23:00:00 2010 Stephen Gallagher - 1.1.0-2
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb
Wed Mar 17 23:00:00 2010 Stephen Gallagher - 1.1.0-1.pre20100317git0ea7f19
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline
Wed Feb 24 23:00:00 2010 Stephen Gallagehr - 1.0.5-2
- Rebuild against new libtevent
Fri Feb 19 23:00:00 2010 Stephen Gallagher - 1.0.5-1
- Fix licenses in sources and on RPMs
Mon Jan 25 23:00:00 2010 Stephen Gallagher - 1.0.4-1
- Fix regression on 64-bit platforms
Fri Jan 22 23:00:00 2010 Stephen Gallagher - 1.0.3-1
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes
Thu Jan 14 23:00:00 2010 Stephen Gallagher - 1.0.2-1
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes
Mon Jan 11 23:00:00 2010 Stephen Gallagher - 1.0.1-1
- Fix CVE-2010-0014
Mon Dec 21 23:00:00 2009 Stephen Gallagher - 1.0.0-2
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
Fri Dec 18 23:00:00 2009 Stephen Gallagher - 1.0.0-1
- New upstream stable release 1.0.0
Fri Dec 11 23:00:00 2009 Stephen Gallagher - 0.99.1-1
- New upstream bugfix release 0.99.1
Mon Nov 30 23:00:00 2009 Stephen Gallagher - 0.99.0-1
- New upstream release 0.99.0
Tue Oct 27 23:00:00 2009 Stephen Gallagher - 0.7.1-1
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal
Mon Oct 26 23:00:00 2009 Stephen Gallagher - 0.7.0-2
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD
Sat Oct 24 00:00:00 2009 Stephen Gallagher - 0.7.0-1
- New upstream release 0.7.0
Fri Oct 16 00:00:00 2009 Stephen Gallagher - 0.6.1-2
- Fix missing file permissions for sssd-clients
Wed Oct 14 00:00:00 2009 Stephen Gallagher - 0.6.1-1
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust
Wed Sep 30 00:00:00 2009 Stephen Gallagher - 0.6.0-1
- Ensure that the configuration upgrade script always writes the config
file with 0600 permissions
- Eliminate an infinite loop in group enumerations
Tue Sep 29 00:00:00 2009 Sumit Bose - 0.6.0-0
- New upstream release 0.6.0
Tue Aug 25 00:00:00 2009 Simo Sorce - 0.5.0-0
- New upstream release 0.5.0
Thu Jul 30 00:00:00 2009 Jakub Hrozek - 0.4.1-4
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
without a password. (Patch by Stephen Gallagher)
Mon Jul 27 00:00:00 2009 Fedora Release Engineering - 0.4.1-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
Tue Jun 23 00:00:00 2009 Simo Sorce - 0.4.1-2
- Fix a couple of segfaults that may happen on reload
Fri Jun 12 00:00:00 2009 Simo Sorce - 0.4.1-1
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option
Tue Jun 9 00:00:00 2009 Simo Sorce - 0.4.1-0
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)
Tue Apr 21 00:00:00 2009 Simo Sorce - 0.3.2-2
- release out of the official 0.3.2 tarball
Tue Apr 21 00:00:00 2009 Jakub Hrozek - 0.3.2-1
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600
Wed Apr 15 00:00:00 2009 Simo Sorce - 0.3.1-2
- Add last minute bug fixes, found in testing the package
Tue Apr 14 00:00:00 2009 Simo Sorce - 0.3.1-1
- Version 0.3.1
- includes previous release patches
Tue Apr 14 00:00:00 2009 Simo Sorce - 0.3.0-2
- Try to fix build adding automake as an explicit BuildRequire
- Add also a couple of last minute patches from upstream
Tue Apr 14 00:00:00 2009 Simo Sorce - 0.3.0-1
- Version 0.3.0
- Provides file based configuration and lots of improvements
Tue Mar 10 23:00:00 2009 Simo Sorce - 0.2.1-1
- Version 0.2.1
Tue Mar 10 23:00:00 2009 Simo Sorce - 0.2.0-1
- Version 0.2.0
Sun Mar 8 23:00:00 2009 Jakub Hrozek - 0.1.0-5.20090309git691c9b3
- package git snapshot
Fri Mar 6 23:00:00 2009 Jakub Hrozek - 0.1.0-4
- fixed items found during review
- added initscript
Thu Mar 5 23:00:00 2009 Sumit Bose - 0.1.0-3
- added sss_client
Mon Feb 23 23:00:00 2009 Jakub Hrozek - 0.1.0-2
- Small cleanup and fixes in the spec file
Thu Feb 12 23:00:00 2009 Stephen Gallagher - 0.1.0-1
- Initial release (based on version 0.1.0 upstream code)