<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Timo Aaltonen pushed to branch upstream
at <a href="https://salsa.debian.org/sssd-team/sssd">Debian SSSD packaging / sssd</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ad8f0d35084989303669beef09eda14d76ea43d4">ad8f0d35</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-01-26T14:43:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">BUILD.txt: fix invalid link
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2054f99085c8d4105cc041576e93dff6afbcabca">2054f990</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-01-26T14:44:07+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">TESTS: fixed use-after-free
`test_ctx->filename` was allocated on the `owner` context that
is freed by this moment.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c2e2036ae2c9f48c775eaf97f395d1364b08ba8a">c2e2036a</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-01-26T14:44:07+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">UTILS: removed unused file helpers
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/23286d27eaae5d976507263793f381a9fd2dca18">23286d27</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-01-28T08:20:11+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Update/fix AD parameters tests ported from bash
Update ssh password change test to set Min Age policy on AD.
Update ktutil automation in AD params to fix tests using it.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c0f767c5513183048a3abae447881ded505cce47">c0f767c5</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-02-01T11:44:15+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Fix test_pass_krb5cname_to_pam test
Need restart and new ssd connection
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7f6c2755e77d942b1a69537a5471227d56076115">7f6c2755</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-02-01T11:44:49+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">debug: suppress backtrace for backend errors
Don't trigger backtrace in responder log in case of backend fail.
(an addition to ca8b655fb676dde48eb72cfa6a520c696ada362c)
Resolves: https://github.com/SSSD/sssd/issues/5968
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fa47bd1dd04b268754f12cddddf727c09e269da9">fa47bd1d</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-02-01T11:45:06+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CACHE_REQ: removed unused code
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/95b17d15656d6baeb4c69c6d7c6fa465163fef96">95b17d15</a></strong>
<div>
<span>by Shridhar Gadekar</span>
<i>at 2022-02-01T11:45:18+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: sssctl analyze capture tevent chain ID logic in logs
sssctl analyze should capture tevent chain ID in the logs,
verifies #5863
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e41098e55a113eb645ab6a0d6776f9e68d5444a">7e41098e</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-01T11:45:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Add a test for bz1859315 - sssd does not use kerberos port that is set.
Verifies: SSSD-2827, SSSD-4262
Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1859315
https://bugzilla.redhat.com/show_bug.cgi?id=2041560
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7f4e04ba3fecb7dfa6ec465a6a716fb4dc779324">7f4e04ba</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-02-01T11:45:39+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Port the old ns_account_lock.sh script to pytest
Port the old ns_account_lock.sh script to pytest
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fa2d7a49241df0d3bde40dd19162276f148e1ecb">fa2d7a49</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-01T16:41:25+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">TEST: fix long line pep8 error
Was introduced by c0f767c5513183048a3abae447881ded505cce47
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/10a14594c49742f5de35dc74ef0736b39f5f7741">10a14594</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-04T14:50:05+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: [SSSD-3579]: Update test_0018_bz1734040 for RHEL 9.
The logging changed in RHEL 9, so regex update was done.
To trigger the condition it was needed to query for AD user
instead of root.
Made the mode of failure more clear from assert .
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bd6f6671ff8f8e128489aa98cb363451e86bc281">bd6f6671</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-08T15:36:13+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Use lazy initialization for ad_conn property of AD.
The lazy initialization of ad_conn should prevent failing in setup
in adjoin for tests that are not actively touching AD through ldap
connection. This way we isolate the LDAPS ldap.STRONG_AUTH_REQUIRED
error only to tests/fixtures that are actively using it.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/eb85382c9cc60e2f44e81e1ac5e6a6c1b3ab0194">eb85382c</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-08T15:36:13+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Update ADOperations methods to use powershell.
Replace the direct ldap access with powershell in these functions.
Replace dsadd dsrm calls with powershell as well.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6845db5ad5376161bdb0e5b954a64933c536b43c">6845db5a</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-09T13:23:52+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Add sleep before collecting logs in flaky ad parameters tests.
The tests in TestADParamsPorted:
test_0021_ad_parameters_ssh_change_password_logon
test_0022_ad_parameters_account_disabled
test_0023_ad_parameters_account_expired
collected log immediately after event but when cloud is under load
they were randomly failing as the log was not written yet.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/121576a45964f8c8e15348d8133ff2f5e12327ab">121576a4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-10T09:54:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">util: fix rawhide compilation problem
The signature for krb5_expire_callback_func() changed in
https://github.com/krb5/krb5/commit/aedd1fea8405d857c072fb41f2d38db9df31c70d
but it wasn't updated in sssd. That was causing a compilation issue in
rawhide that this commit fixes. The change only updates the sssd
signature to match the one provided by krb5.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d1ad68fab06cb61d9c935b698c40cf745b54d672">d1ad68fa</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-10T09:56:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5_child: move FAST TGT request into a function
Make the code more flexible to add another method to get FAST
credentials.
Resolves: https://github.com/SSSD/sssd/issues/5961
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/58ab4137c45d3d284cd25ef485614a61456fad05">58ab4137</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-10T09:56:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5_child: add fast-use-anonymous-pkinit option
Add anonymous PKINIT as an alternative method to get FAST credentials.
Resolves: https://github.com/SSSD/sssd/issues/5961
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e839befe84995f28b34bf3774ae65813218e047">7e839bef</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-10T09:56:42+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: add krb5_fast_use_anonymous_pkinit option
With the new option krb5_fast_use_anonymous_pkinit SSSD can be told to
use anonymous PKINIT to get FAST credential
:relnote: Add support for anonymous PKINIT to get FAST credentials
Resolves: https://github.com/SSSD/sssd/issues/5961
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0eb8564c3f0a40bc8e74959f8c5a3ca97289c7eb">0eb8564c</a></strong>
<div>
<span>by Steeve Goveas</span>
<i>at 2022-02-10T09:57:25+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Add tests for poor man's backtrace
Tests are added to check that no duplicate backtrace is generated and it
is generated when
* no debug level is defined / default debug level
* debug level is set to 0 or 1
* no backtrace when debug level is >= 9
* backtrace can be disabled
Verifies: #5585
https://bugzilla.redhat.com/show_bug.cgi?id=1949149
https://bugzilla.redhat.com/show_bug.cgi?id=2021196
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b67caf27b1fd147358c0d429456e9b0b6d74e718">b67caf27</a></strong>
<div>
<span>by Samuel Cabrero</span>
<i>at 2022-02-10T09:57:40+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Use group1_dom1-19661 in test_pysss_nss_idmap.py
The group3_dom1-17775 group has a member referencing a user in a
different domain, which will make the test fail in the following
commits.
Signed-off-by: Samuel Cabrero <scabrero@suse.de>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/941418f436bbd3ce8bf7f70f4f0c872770869841">941418f4</a></strong>
<div>
<span>by Samuel Cabrero</span>
<i>at 2022-02-10T09:57:40+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SDAP: Add 'ldap_ignore_unreadable_references' parameter
When resolving a group using the AD provider it may happen sssd doesn't
have permissions to read the entry referenced in the 'member' attribute,
for example when the entry is located under a restricted LDAP sub-tree
for security reasons.
In this scenario, the sssd behavior is not consistent and depends on the
ldap_deref_threshold parameter, that controls if an attribute scoped
query (ASQ) will be used or if the group members will be searched
individually. If an ASQ operation is issued, the operation will fail
because the referenced entry can't be parsed and this can
lead to missing groups and makes impossible to use the group in simple
access provider. On the other hand, when the group members are looked
up individually sssd just ignores the unreadable entry.
This patch adds a new parameter 'ldap_ignore_unreadable_references' to
control if the current operation will fail when an unreadable entry is
found or the entry will be ignored, regardless if sssd issued an ASQ or
the members are looked up individually.
The issue can be replicated deploying this AD setup:
CN=users,DC=aforest,DC=ad
CN=g1,CN=users,DC=aforest,DC=ad
member: CN=g2,CN=users,DC=aforest,DC=ad
member: CN=g3,CN=users,DC=aforest,DC=ad
member: CN=g4,CN=users,DC=aforest,DC=ad
member: CN=g5,CN=users,DC=aforest,DC=ad
member: CN=user1,CN=users,DC=aforest,DC=ad
CN=g2,CN=users,DC=aforest,DC=ad
member: CN=g3,CN=users,DC=aforest,DC=ad
member: CN=g4,CN=users,DC=aforest,DC=ad
member: CN=g5,CN=users,DC=aforest,DC=ad
member: CN=user2,CN=users,DC=aforest,DC=ad
memberOf: CN=g1,CN=users,DC=aforest,DC=ad
CN=g3,CN=users,DC=aforest,DC=ad <-- Deny access to sssd account
member: CN=g4,CN=users,DC=aforest,DC=ad
member: CN=g5,CN=users,DC=aforest,DC=ad
member: CN=user3,CN=users,DC=aforest,DC=ad
memberOf: CN=g2,CN=users,DC=aforest,DC=ad
memberOf: CN=g1,CN=users,DC=aforest,DC=ad
CN=g4,CN=users,DC=aforest,DC=ad
member: CN=g5,CN=users,DC=aforest,DC=ad
member: CN=user5,CN=users,DC=aforest,DC=ad
memberOf: CN=g3,CN=users,DC=aforest,DC=ad
memberOf: CN=g2,CN=users,DC=aforest,DC=ad
memberOf: CN=g1,CN=users,DC=aforest,DC=ad
CN=g5,CN=users,DC=aforest,DC=ad
member: CN=user5,CN=users,DC=aforest,DC=ad
memberOf: CN=g4,CN=users,DC=aforest,DC=ad
memberOf: CN=g3,CN=users,DC=aforest,DC=ad
memberOf: CN=g2,CN=users,DC=aforest,DC=ad
memberOf: CN=g1,CN=users,DC=aforest,DC=ad
CN=user1,CN=users,DC=aforest,DC=ad
memberOf: CN=g1,CN=users,DC=aforest,DC=ad
CN=user2,CN=users,DC=aforest,DC=ad
memberOf: CN=g2,CN=users,DC=aforest,DC=ad
CN=user3,CN=users,DC=aforest,DC=ad
memberOf: CN=g3,CN=users,DC=aforest,DC=ad
CN=user4,CN=users,DC=aforest,DC=ad
memberOf: CN=g4,CN=users,DC=aforest,DC=ad
CN=user5,CN=users,DC=aforest,DC=ad
memberOf: CN=g5,CN=users,DC=aforest,DC=ad
And using this sssd.conf
-------------------------------------------------------------------------------
[sssd]
config_file_version = 2
services = nss, pam
domains = aforest.ad
[nss]
[pam]
[domain/aforest.ad]
auth_provider = ad
id_provider = ad
access_provider = simple
simple_allow_groups = g1
ldap_deref_threshold = 1
debug_level = 10
-------------------------------------------------------------------------------
In this setup sssd can't resolve group 'g1' because it fails parsing one
of the referenced members, 'g3':
$> getent group g1
No output.
$> id user5
uid=1862001108(user5) gid=1862000513(domain users) groups=1862000513(domain users),1862001111,18620011
When the group is used to filter access it does not work:
...
[simple_access_check_send] (0x0200): [RID#7] Simple access check for user1@aforest.ad
...
[simple_check_get_groups_send] (0x0400): [RID#7] Need to resolve 3 groups
[sdap_get_generic_ext_step] (0x0400): [RID#8] calling ldap_search_ext with [(&(objectSID=S-1-5-21-3230
...
[sdap_nested_group_hash_insert] (0x4000): [RID#8] Inserting [CN=g1,CN=Users,DC=aforest,DC=ad] into has
[sdap_nested_group_process_send] (0x2000): [RID#8] About to process group [CN=g1,CN=Users,DC=aforest,D
...
[sdap_nested_group_process_send] (0x0400): [RID#8] More members were missing than the deref threshold
[sdap_nested_group_process_send] (0x2000): [RID#8] Looking up 2/5 members of group [CN=g1,CN=Users,DC=
[sdap_nested_group_process_send] (0x2000): [RID#8] Dereferencing members of group [CN=g1,CN=Users,DC=a
[sdap_deref_search_send] (0x2000): [RID#8] Server supports ASQ
[sdap_asq_search_send] (0x0400): [RID#8] Dereferencing entry [CN=g1,CN=Users,DC=aforest,DC=ad] using A
...
[sdap_get_generic_ext_step] (0x0400): [RID#8] calling ldap_search_ext with [no filter][CN=g1,CN=Users,
...
[sdap_process_message] (0x4000): [RID#8] Message type: [LDAP_RES_SEARCH_ENTRY]
[sdap_asq_search_parse_entry] (0x0040): [RID#8] Unknown entry type, no objectClass found for DN [CN=g3
[sdap_get_generic_op_finished] (0x0020): [RID#8] reply parsing callback failed.
[sdap_op_destructor] (0x1000): [RID#8] Abandoning operation 3
[generic_ext_search_handler] (0x0020): [RID#8] sdap_get_generic_ext_recv request failed: [22]: Invalid
[sdap_deref_search_done] (0x0040): [RID#8] dereference processing failed [22]: Invalid argument
[sdap_nested_group_deref_direct_done] (0x0020): [RID#8] Error processing direct membership [22]: Inval
[sdap_nested_done] (0x0020): [RID#8] Nested group processing failed: [22][Invalid argument]
...
[simple_resolve_group_done] (0x0080): [RID#8] Cannot refresh data from DP: 3,0: Group lookup failed
...
[simple_check_get_groups_next] (0x2000): [RID#9] All groups resolved. Done.
[simple_access_check_done] (0x0040): [RID#9] Could not collect groups of user user1@aforest.ad
[simple_access_check_done] (0x0400): [RID#9] But no deny groups were defined so we can continue.
[simple_check_groups] (0x4000): [RID#9] Checking against allow list group name [g1@aforest.ad].
[simple_access_check_done] (0x2000): [RID#9] Group check done
[simple_access_check_recv] (0x1000): [RID#9] Access not granted
...
Resolves: https://github.com/SSSD/sssd/issues/4893
Signed-off-by: Samuel Cabrero <scabrero@suse.de>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5c7fb41f3f1f4b1a1bbf7ddcb3d5b123ade0becb">5c7fb41f</a></strong>
<div>
<span>by Samuel Cabrero</span>
<i>at 2022-02-10T09:57:40+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SDAP: Honor ldap_ignore_unreadable_references parameter
Signed-off-by: Samuel Cabrero <scabrero@suse.de>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/57d6af2f292c02327e4edd9070d05191c9992d13">57d6af2f</a></strong>
<div>
<span>by Samuel Cabrero</span>
<i>at 2022-02-10T09:57:40+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Add a test for the ldap_ignore_unreadable_references parameter
Signed-off-by: Samuel Cabrero <scabrero@suse.de>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bf9deea19bafa6a4a10457e5fa86f295ebe94fe1">bf9deea1</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-02-10T11:35:49+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Add 389-ds package to client machine
We need dsidm in client machine
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/00940cd1bc16dad11d45d31107333a51e0a8f935">00940cd1</a></strong>
<div>
<span>by Tomas Halman</span>
<i>at 2022-02-15T17:20:06+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">systemtap: Hard-coded path instead of @libdir@
There were hard-coded paths in the sssd.stp.in file. The probes did not
work on another platforms or if SSSD was compiled with different prefix
like /usr/local.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c41cc16cae844ee378d2799542f267e202d99a6b">c41cc16c</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-02-15T17:20:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Remove unused travis CI related files
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3935e89c1f1fb06e0571c9ef633c57ebb0263962">3935e89c</a></strong>
<div>
<span>by Tomas Halman</span>
<i>at 2022-02-15T17:20:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: discard old builds
Until now builds were kept forever or until manual removal. That
caused an issue with running out of space occasionally.
With this change all builds older than 30 days are discarded.
The second limit removes oldest builds to keep the history
up to 70 builds.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/775150b5800611191da85b01c5113b446f997d1b">775150b5</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">debug: add new dubug level SSSDBG_PERF_STAT
SSSDBG_PERF_STAT should be use for statistical or performance data, e.g
time needed for a request.
:relnote: A new debug level is added to show statistical and performance
data. Currently the duration of a backend request and of single LDAP
operations are recorded if debug_level is set to 9 or the bit 0x20000 is
set.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2fb5cbfa609eb09e0a915ea74b53e61e8bb4f299">2fb5cbfa</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">util: add time measurement helpers
Two new calls get_start_time() and get_spend_time_us() are added to make
it easy to calculate time differences in micro-seconds (us).
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3b7955306d7c8ff4b0ca23e1988f35620b0f3135">3b795530</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap: record time needed for a sdap operation
The start time of an sdap operation is stored to calculate the spend
time when the operation finished. This spend time is an upper limit for
the time the underlying LDAP operation took. The actual time of the LDAP
operation might be shorter. This might happen is many sdap operations
are running in parallel and the given operation has to wait for
processing due to the asynchronous handling of the operations.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3063a73c0f28cdce45f5fa787051a7097d97937a">3063a73c</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">dp: adding log message with spend time
The time a backend request needs from start to finish is recorded in the
logs.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/23e64beee112075e963ec76273364625433e189a">23e64bee</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap: split out function to get the server IP as string
Currently the IP address of the current LDAP server is only available in
a log message. The new call sdap_get_server_ip_str() makes it available
for other purposes as well.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5dc34b7531e7bed387b10741807f67088f5bb273">5dc34b75</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap_op: add strings member for extra statistical information
Besides the LDAP message id other information might be helpful when
collections statistics about LDAP operations.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a9b4ae62af77d3b52e623c272dd42021ea78d051">a9b4ae62</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ldap: add info string for statistics
Add the server IP address and other information about the current LDAP
request to the timing statistics.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e2082c03abc6c019b39d4f068d3787649f087cd1">e2082c03</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ipa: add info string for statistics
Add the server IPA address and other information about the current
extdom LDAP extended operation to the timing statistics.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b3646c6637169dbab04593bfe16b840278ff4fe1">b3646c66</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap: warn if request needs 80% of timeout
To easy identify LDAP request which are running longer than expected all
requests needing 80% of there timeout are recorded wit h log level
SSSDBG_IMPORTANT_INFO.
The threshold of 80% is currently hard-coded.
Please note that due to the asynchronous processing in the backend some
requests might be logged with a long execution time not because they
need the recorded time but because their processing is delayed by
another request which was processed before.
:relnote: A warning is added in the logs if an LDAP operation needs more
than 80% of the configured timeout.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/15f66efcc8052ea2a41c16f15668b6e757b0099b">15f66efc</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap: make struct sdap_op private
Only the msgid member of struct sdap_op is used for debugging messages
in some other places of the code.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5494f7ffea268fd21aa81885fccb1f46729b33ee">5494f7ff</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-02-15T17:22:09+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sdap: add sdap_get_server_ip_str_safe()
This new call is similar to sdap_get_server_ip_str() but will never
return NULL so that the caller can always expect a string.
sdap_get_server_ip_str() is replaced with the new call where needed.
Resolves: https://github.com/SSSD/sssd/issues/5967
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/27e2a0f44e104d109c99f91acd8b4cff0303d0c8">27e2a0f4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: enable CodeQL analysis
Enable the CodeQL analysis on the master branch for push, pull-request
and nightly.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bcfb1cb15f96ea5f048de7c3bf54e7e01f406b28">bcfb1cb1</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: split dependencies for Ubuntu
python-ldap, python-ldb and python-requests have been renamed in Ubuntu
to python3-*, thus the dependencies need to be split.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d53bb2be4ee4323d39529024a958a5bebe1a6d3d">d53bb2be</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sbus: Multiplication result converted to larger type
A multiplication result that is converted to a larger type can be a sign
that the result can overflow the type converted from. Using a cast to
the target type (size_t) to avoid overflow.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/923c94b43700ff75070ab55a0ec11f7d0c3a0d0e">923c94b4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Duplicate include guard
Using the same include guard macro in more than one header file may
cause unexpected behavior from the compiler. Rename the macros to avoid
problem.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5ea0c927c312c054d70fb28ce46f934dc2be7f0a">5ea0c927</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Array offset used before range check
Accessing an array offset before checking the range means that the
program may attempt to read beyond the end of a buffer. Reverse order of
conditions to avoid the problem.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/949768190f3e6c0d77e28f22808914ef8cca5bbd">94976819</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Potentially uninitialized local variable
Reading from a local variable that has not been assigned to will
typically yield garbage. Fix by assigning a value when defining the
variable.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c30356d0753f06e08eca58efadeb17ccfa0c76fe">c30356d0</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T11:04:28+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Inconsistent nullness check
The result value of a function is often checked for nullness, but not
always. Since the value is mostly checked, it is likely that the
function can return null values in some cases, and omitting the check
could crash the program. To avoid it check the return value in all
cases.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6df690524a458919f53452286288e36935e6c3fa">6df69052</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-02-17T13:13:59+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: move languages parameter to codeql init
codeql analyze does not have this parameter:
```
Warning: Unexpected input(s) 'languages', valid inputs are ['check_name', 'output', 'upload', 'cleanup-level', 'ram', 'add-snippets', 'skip-queries', 'threads', 'checkout_path', 'ref', 'sha', 'category', 'upload-database', 'wait-for-processing', 'token', 'matrix']
```
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f36deb3e39321ad53e0f8a523dbe9c2a68737836">f36deb3e</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T13:14:49+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Remove unused format_interactive_conf()
CodeQL was reporting "Wrong number of arguments in a call" for an unused
function.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dd5f233838e1570139701c3feb07bc67ec292424">dd5f2338</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-02-17T13:14:49+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Remove unused gethostbyaddr_r()
CodeQL was reporting "Potentially uninitialized local variable" in an
unused function.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2ec5187243ddcfe63a2edb9d1fb7c4b0f2c4880d">2ec51872</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-02-21T12:25:45+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Update KeytabRotation tests in AD tier 2
Remove class fixture clear_sssd_cache from TestHostKeytabRotation.
In the case that the environment is not tainted the tests fail to
restart sssd in setup because it is not configured yet resulting in ERROR..
Clearing cache and restart of sssd added in keytab_sssd_conf fixture,
where it is actually needed.
Added extra debug information when sssd fails to start.
The test Testsmbsecretrotation::test_0001_rotation needs to restart
sssd so the changed configuration is properly applied.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5f944543220fe950fc7630eb6952ee1f1ce98872">5f944543</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-02-22T12:10:39+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SIMPLE: reduce severity level of debug message in case primary group is missing in the domain cache
Since this is not treated as an error, this shouldn't trigger
a backtrace as well.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5cdb7e2c4ec5aa4f53e1f6e5a6ee80c8decc723d">5cdb7e2c</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-02-22T12:10:51+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Test: fix wrong messages
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/25faf9839091d4b0c285e2b47ffbc92a58a552c8">25faf983</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-02-22T12:10:51+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">AD/IPA: ignore 'ldap_default_authtok_type' conf setting
AD/IPA providers can't use simple bind, but this option
can be set in case AD/IPA and LDAP provider types are mixed
in the same domain, causing issues during `sdap_cli_auth_step()`
Resolves: https://github.com/SSSD/sssd/issues/5998
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d082681a0fed86babdadda3b1480ad0ae382d91c">d082681a</a></strong>
<div>
<span>by Dhairya Parmar</span>
<i>at 2022-02-22T12:11:05+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">TEST: Current value of ssh_hash_known_hosts causes error in the default configuration in FIPS mode
Explanation
- In SSSD the default value for ssh_hash_known_hosts is set to true,
It should be changed to false for consistency with the OpenSSH
setting that does not hashes host names by default
Verifies
Issue: https://github.com/SSSD/sssd/issues/5848
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2014249
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/616e69f6c9b49e23c6de3be56a83f3e5a34cdc0e">616e69f6</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-02-22T12:11:17+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">make_srpm: Add option to specify package version
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/21a91ce21f68b53129065c1b78a2c02b81fadb2f">21a91ce2</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-02-22T12:11:17+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Add internal covscan workflow to Jenkins
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b2154298773e354952239abec942a981b6b9808a">b2154298</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-02-23T12:23:54+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: build pull requests in copr
New copr project will be created for each pull request under the sssd
group. The project will be automatically deleted after 60 days or after
the pull request is closed.
The workflow works like this:
- build tarball and spec file (rvn is sssd-pr#prid-#runid)
- build srpm
- upload srpm as an artifact to the job
- create copr project @sssd/pr#prid if not exist
- cancel previous pending/running builds if there are any
- build package in centos-* and fedora-*
One job is created for each chroot.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0d7ae85f336bf8d452db12acf14995b12206a9f5">0d7ae85f</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-02-24T10:23:57+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">sifp: fix coverity issue
```
Error: GCC_ANALYZER_WARNING (CWE-457):
sssd-pr5762_14/src/lib/sifp/sss_sifp_parser.c: scope_hint: In function 'sss_sifp_parse_dict'
sssd-pr5762_14/src/lib/sifp/sss_sifp_parser.c:233:18: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'table_key.<U7260>.str'
sssd-pr5762_14/src/lib/sifp/sss_sifp_parser.c:461:5: note: in expansion of macro 'check_dbus_arg'
sssd-pr5762_14/src/lib/sifp/sss_sifp_parser.c:147:5: note: in expansion of macro 'check_dbus_arg'
231|
232| done:
233|-> if (table_key.str != NULL) {
234| _free(ctx, table_key.str);
235| }
```
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/90ad1ea469da5526c1cadb5e5e2375ff3fc84629">90ad1ea4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-01T12:10:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: Unreachable code
src/tests/multihost/alltests/conftest.py: correct indentation.
src/tests/multihost/basic/test_sudo.py: remove the unreachable code.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9bd821b6f6a848872bb795b888dd88f41fdaaa90">9bd821b6</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-01T12:10:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Comparison result is always the same
Remove the condition and clean the code.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b9783436d1201a3fc1cde4d093f5de15d79d5b92">b9783436</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-01T12:10:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ad: Empty branch of conditional
Remove condition.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/36920a04c8d4df1ad1e10c5a919681160d3f1d5e">36920a04</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-01T12:10:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Commented-out code
Remove the unused code.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f04ca9b2915df7f901338317a0a9a464009e02d3">f04ca9b2</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-01T12:10:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Implicit string concatenation in a list
Make clear the strings that need to be concatenated.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0a9c00c376ce9e0741337861bd212d2d5b742378">0a9c00c3</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-01T12:10:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Add external covscan workflow
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/81936d43694dc86512930f8d0654595cad9e4d01">81936d43</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-03-02T13:49:59+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Reduce sleeps before collecting logs in AD parameters tests.
Partially undo https://github.com/SSSD/sssd/pull/5985 where
sleep was added by a mistake to test 0021.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63ab01f386c9d239b3d4e47ab39bf289d0b68c74">63ab01f3</a></strong>
<div>
<span>by Jakub Vavra</span>
<i>at 2022-03-02T13:52:17+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Port ad-schema test suite from bash.
Reviewed-by: Kaushik Banerjee <kbanerje@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/961e320d34ea6ed029de6ee8b6e388c9590af521">961e320d</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-07T13:13:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Update apt cache
Debian based distro CI workflows may error when apt cache is not
up-to-date. For example in GitHub Actions:
Fetched 46.1 MB in 13s (3596 kB/s)
E: Failed to fetch
http://azure.archive.ubuntu.com/ubuntu/pool/main/g/glibc/libc6-dbg_2.31-0ubuntu9.2_amd64.deb
404 Not Found [IP: 40.81.13.82 80]
E: Unable to fetch some archives, maybe run apt-get update or try with
--fix-missing?
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f1573e51c5490aaffd7aa584c427cb9cd0aaa8af">f1573e51</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-03-07T13:13:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">UTILS: reduce debug level in case well_known_sid_to_name() fails
It's up to a function user to decide on a severity of a helper fail.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/439b9fc65a845db2e377ed189d7d4cbe6348f758">439b9fc6</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-09T10:59:58+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: change pycodestyle max line length
Change the maximum length from 79 to 119 characters.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/91e8c4fb1a1fa5589af5fe4fae5400d4bc68bc7f">91e8c4fb</a></strong>
<div>
<span>by Jean-Baptiste Denis</span>
<i>at 2022-03-10T13:53:25+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Increase listen backlog
The previous value (10) could introduce delays in responder answer in some highly used environment.
See https://github.com/SSSD/sssd/issues/6035 for test and details.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bab44e928da7a828f6874b8d504c1bbab0262c15">bab44e92</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix missing name (F821)
Define the missing name: missing import, missing variable declaration,
self instance variable...
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/94e5466e6497bb29b598b4d64fd62bd8e626e0fd">94e5466e</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix indentation(E12*) and whitespace(E20*)
Fix indentation and remove whitespaces.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b3244e39d331482451732af86e80ee48c809fdf0">b3244e39</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix missing whitespace after ',' (E231)
Add whitespace.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e81f89916e94a3087294b8e89134ce2d7ff9cd4a">e81f8991</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix unexpected spaces around '/' (E251)
Remove whitespace.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5be30ac0c88900e1fa9e9372a11bd4b97995cf5d">5be30ac0</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: remove 12 years old TODOs
These TODOs were being reported by flake8 for several reasons.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6bbfd1b6cde348324aa141baa93a037c57f9a878">6bbfd1b6</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix ambiguous variable (E741)
Fix the ambiguous variable name reported by flake8 by renaming it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/58605202bb7fcdab93bbb410cd244e87eacb9b52">58605202</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix shadowed variable (F402)
Fix the shadowed variable reported by flake8 by renaming it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fe46bd3bdea656d18ba62e8cc3a7e2da4076b72e">fe46bd3b</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix f-strings usage (F541)
Fix the f-strings misuse reported by flake8.
f-string is a new and improved way of formatting strings in python. It
is commonly used to concatenate strings. The code that I have changed
was either not concatenating a string so a simple string would have
been enough, or concatenating f-strings in the old way.
For more information check https://realpython.com/python-f-strings/
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/56b375200a3e0cbaca2dfa9e4cd630c0f9060a74">56b37520</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:53:50+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix comparison symbols (F632)
Fix the comparison symbols misuse reported by flake8 by using "==" or
"!=" to compare str, bytes, int, float and tuple.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/899a7df9bd35baf9cab3cadf6731fec0d4669c4d">899a7df9</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:54:03+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix indentation issues (E111 and E117)
Fix indentation issues reported by flake8.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/294debcd1744b6b80b9e843dfa7d97479ac28313">294debcd</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:54:03+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix end semicolon (E703)
Fix the end semicolon reported by flake8 by removing it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0534fd3e9b98b6b037ed831592b07809f742b0d7">0534fd3e</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:54:03+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix incorrect comparison with "==" (E711)
Fix the incorrect usage of "==" reported by flake8 by changing the
comparison to "None" using the "is" keyword instead of "==".
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/089123bd9ca1c1137ae0e7b3c206a1830bd527c6">089123bd</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-10T13:54:03+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix bare 'except' (E722)
Fix the bare 'except' reported by flake8 by specifying the exception
handler.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/556f42e10f15c4792fa59d856da7142d9d15ac9b">556f42e1</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-03-10T13:54:15+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Regressions 8.5 - alltests-tier3
1. Add new marker tier1_3
2. Fix test_krb_ldap_connection.py test script
3. Add a new test script test_krb_ldap_connection_gssapi.py with
setup_sssd_gssapi fixture
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5cf46fc8c33c55fa3a4bf3f51e7473091e6e26d4">5cf46fc8</a></strong>
<div>
<span>by Alejandro López</span>
<i>at 2022-03-10T13:56:32+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">COMMIT TEMPLATE: Fixed two typos
Twice the word "desription" was written instead of "description."
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1b24149eeb0489b8a2d35629ff41c085dbf2c538">1b24149e</a></strong>
<div>
<span>by Steeve Goveas</span>
<i>at 2022-03-11T12:17:36+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">TEST: Enable files domain, fix flake8 issues, improve test code
Steps to reproduce needs the files domain to be enabled for rhel 9.
Updated variable names for easy readability, changed %-formatting to f
strings, deleted unused variables and instead updated raiseronerr to
'True' where cmd is expected to pass and added assert to verify expected
exit code where raiseonerr is 'False', made use of 'userlist' variable
and updated steps and expectedresults in docstring.
Verifies
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1824323
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d377d1daf071e88b1421accdad5371e492fe032a">d377d1da</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-11T18:14:14+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix continuation line under-indented (E128)
Commit 1b24149eeb0489b8a2d35629ff41c085dbf2c538 introduced a linter
issue that makes all CI runs to fail. Fix it by adding an additional
whitespace.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2f742fc953508ce44e3ce0bba344cba77cf29fad">2f742fc9</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:20:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix star imports (F403 and F405)
Fix the start imports detected by flake8 by changing to the proper name.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/634c91b0fcf7ed7d0062dd5658fb6db6c91b4eec">634c91b0</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:20:38+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix imported but unused modules (F401)
Fix the unused modules detected by flake8 by removing them.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8cdfd3d29c104eedaf5f3e6162d962a9ffe434ac">8cdfd3d2</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:21:04+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix blank lines (E302 and E303)
Fix the black lines issues detected by flake8 by adding or removing
them depending on the case.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4f303da4b1538619b05b9a37119e4a04c4a25dff">4f303da4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:21:04+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix blank line at end of file (W391)
Fix the black line at the end of file detected by flake8 by removing it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/838669d9cd22393226be64a382a5749035e397a8">838669d9</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:21:04+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix line too long (E501)
Fix the too long lines detected by flake8 by moving the content to a new
line.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3f8493f94a355227333002d16097cc9bc57be25e">3f8493f9</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:36:35+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix missing name (F821)
Fix the missing name (missing import, missing variable declaration, self
instance variable...) detected by flake8 by defining it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c71d83b86ef271b603758340cde54bb1ea46b100">c71d83b8</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:36:35+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix missing whitespace after ',' (E231)
Fix the missing whitespace after ',' detected by flake8 by adding it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b8f4c1710a1f42c05d50da0ecc63870a4772e8c9">b8f4c171</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-14T14:36:35+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: block comment should start with '# ' (E265)
Fix the block comment start issue detected by flake8 by adding the
space.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b963aa3c75c7eed2de73302b63ecad35b70992f3">b963aa3c</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-03-16T11:22:13+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SDAP: sdap_nested_group_hash_insert(): don't create key copy - hash_enter() takes care of this.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/709e9cc9a12853e3f243e6aac349c02d09b12acf">709e9cc9</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">authtok: add SSS_AUTHTOK_TYPE_OAUTH2
Add a new authentication token type: SSS_AUTHTOK_TYPE_OAUTH2.
It will be used later to enable OAuth2 authentication via Kerberos.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/292bde667c8cf40eb13fd1593d9a968ab753338f">292bde66</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: add new SSS_CHILD_KEEP_ALIVE pam item
This pam item indicates that the child process performing authenticate
is kept alive and should be used to further continue with the
authentication instead of creating a new child process.
This patch only adds the pam item and forwards it back and forth pam_sss
and the backend. It will be used in following commits.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7d688556bfff7b508ce4982d4240a6e1d0bf31f4">7d688556</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: add new SSS_PAM_OAUTH2_INFO pam item
This item will hold OAuth2 authentication url and pin. It will be used
in one of the next patch to allow OAuth2 authentication via Kerberos.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8ca8fcf01d6854c739a090778bc1c3e0e3579e0c">8ca8fcf0</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">conf: add libjansson dependency
Currently required for KRB5 IdP plugins.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6731494204a623da79297047b108d133de377c97">67314942</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">make: define RUNDIR
Required for KRB5 IdP plugins.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/68a8a2d71b77fbc5e7a748307ac4164ebd8125f3">68a8a2d7</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: add idp preauth plugins
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3a2add67f897b78450291b7c41b32f18b42c17a2">3a2add67</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:26+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: support to exchange multiple messages with the same child
Previously, we expected the krb5_child to exit immediately after
receiving a response. However, now we require to exchange multiple
messages in order to maintain internal Kerberos state.
This patch adds a hash table that stores file descriptors for each child
(pid:child_io_fds). The file descriptors are closed when the child exits
but are kept open until then.
If pam_data->child_pid is not 0 we lookup the file descriptors in the
hash table and use them to continue the authentication process instead
of creating a new child.
If the pid is zero, we create a new child and store new file descriptors
in the table.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5f9e5c2e0365fd3debd48ab1fd96c77efffed05b">5f9e5c2e</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: terminate child if it fails to setup
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/689bb4f8bfc6c434f2004bf2051777637f958b35">689bb4f8</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: exchange messages with krb5_child with exact length
This is needed so we don't rely on received EOF when reading from
a pipe so we can exchange multiple messages. Now the protocol
contains a uin32_t header that contains length of the rest of
the message.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dcd7133e1ce0791dab4a7ecfcd46c228c35c2bd9">dcd7133e</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: add support for idp:oauth2 responder question
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8cba6b4b40cda6b3d50b137ec9a566d16ea9e3c8">8cba6b4b</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: fix memory hierarchy in krb5_child unpack_buffer()
Fields that belong to krb5_req were attached to pam_data which caused
unexpected troubles when kr->pd gets freed and swapped with new one.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/95495e7b4f3111cfd4508025bca3d66c84f7cd87">95495e7b</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: add keep alive timeout for krb5_child
This timeout will kill the child after a longer time in order to
allow interactive communication with the user.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/918d493c38138cf1008c7e117be4e416adae22f5">918d493c</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-16T11:22:27+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: add oauth2 url+pin prompt
Add a new prompt for oauth2 authentication. The user is prompted with
url and pin. He/she must visit the url, provide the pin and
authenticate. Then just press enter to continue the authentication.
The RADIUS server will then ask the identify provider if the
authentication was successful and then reply back.
The answer is set to the same pin, just to provide some verification
mechanism and because Kerberos requires non-empty token.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9c5632dfaf67d538727b258f0f4971cf6a7e52c0">9c5632df</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-03-17T11:54:58+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">nss: add sss_nss_getorigbyusername and sss_nss_getorigbygroupname
Since the user and group namespaces are independent in POSIX/Linux it is
important to be able to indicate if a user or a group is search by name.
Currently the sss_nss_getorigbyname() call does not allow this and this
patches adds two new calls to fix this.
Resolves: https://github.com/SSSD/sssd/issues/6042
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d241b55291419753ce3e961a1b201d62f7851513">d241b552</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-03-17T11:55:18+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">GPO: ignore non-ascii symbols in values in GPT.INI
Windows uses ANSI (extended-ASCII) to encode the GPT.INI file.
See https://lists.samba.org/archive/cifs-protocol/2019-March/003228.html
for details.
There is no trivial way to figure out actual code page used. But from
practical point of view, it seems the only key whose value might be
non-ascii is "DisplayName", and SSSD doesn't use it anyway.
This patch replaces non-ascii symbols in values of GPT.INI with '?'
character to make content compatible with libini_config parser.
Resolves: https://github.com/SSSD/sssd/issues/4138
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ad1f64e4edda11de9863ed4211f5d04050654995">ad1f64e4</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-18T11:58:34+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: fix unused variable (F841)
Fix the unused variables detected by flake8 by removing or using them.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Co-Authored-By: Steeve Goveas <sgoveas@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/abc41d0b089e67ba900dd5168853e357fb91c792">abc41d0b</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CONTRIB: Switch distro.sh to use /etc/os-release
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/59484ef0443c2ba2b9787551e185f75e34b4b611">59484ef0</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CONTRIB: Add shadow and unused-variable to SSS_WARNINGS
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/098c3fcf6b9b7be82f78151698955780b51c6a15">098c3fcf</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CONTRIB: Update rpm-spec-builddeps to python3 shebang
Needed to support using contrib/ci/deps.sh inside a
fedora:latest container.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a0f454aa077539e98e5c53e6731d69a2556c2dd1">a0f454aa</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CONTRIB: Add install dependencies option to contrib/ci/run
Add support to only install dependencies and execute no other steps.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/94254dd7a85a568ddc1e186808f03d57121fbc14">94254dd7</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Install dependencies with contrib/ci/run
Contrib/ci/run script is already used by sssd-ci/* targets, use
it as a frontend for this GH action also.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/81450b9a48daa961aba6076589a7c4e921721fbe">81450b9a</a></strong>
<div>
<span>by Justin Stephenson</span>
<i>at 2022-03-21T12:52:48+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: Add warnings enabled build and make check
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/027e89b44504bfb84b57806708b6442a2b355eaf">027e89b4</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-03-21T12:52:59+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">test: suppress memory leak in _dl_find_object_update
Some recent version of glibc have a memory leak causing a failure if the
dlopen-tests runs under valgrind.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3baf161eb378a04e910259d493bdef27a3472dc5">3baf161e</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-03-21T12:53:00+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">integration tests: switch OpenLDAP from hdb to mdb
The latest versions of OpenLDAP do not support hdb anymore.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6edbb6cdd215afb90c54982f293e87484621bb22">6edbb6cd</a></strong>
<div>
<span>by Steeve Goveas</span>
<i>at 2022-03-23T12:21:10+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: prefix 'session_' to avoid failure
It was accidently removed during the flake8 fixes
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e538db29b57e3ce898b54ecab0f559876c73de53">e538db29</a></strong>
<div>
<span>by Steeve Goveas</span>
<i>at 2022-03-23T12:21:10+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: CRB repo name has changed in IDM CI
CRB repo is prefixed with the name of the OS, adding a '*' should solve
the issue.
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0c0705e301886a5af5f0f9ed947d23e00851a104">0c0705e3</a></strong>
<div>
<span>by Tomas Halman</span>
<i>at 2022-03-23T12:21:41+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">usertools: better default for IPA/AD re_expression
Some Active Directory groups, typically those used for MS Exchange
contain an “@” sign in the name. New IPA and AD re_expression
default handles it correctly, considering that the domain is everything
that follows the last '@'.
:relnote: Better default for IPA/AD re_expression. Tunning for
group names containing '@' is no longer needed.
Resolves: https://github.com/SSSD/sssd/issues/6055
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c159f52995d211e0ccc72b918f441bd1497549f6">c159f529</a></strong>
<div>
<span>by Tomas Halman</span>
<i>at 2022-03-23T12:21:41+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">usertools: move default re_expression definition
With this patch the defaults for re_expression are moved to utils.h
and both defaults (ad/ipa and ldap) are defined in one place.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dde276e251ca0210757407b0013578d2e789bf60">dde276e2</a></strong>
<div>
<span>by Tomas Halman</span>
<i>at 2022-03-23T12:21:41+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">TESTS: New tests for IPA/AD re_expression default
New tests for default IPA/AD re_expression. This expression defines
how to parse the string containing user name and domain into these
components.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8a9458df78704b94c9d507a0c11fe2dc77831429">8a9458df</a></strong>
<div>
<span>by Alejandro López</span>
<i>at 2022-03-24T11:58:45+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">confdb: refactor confdb_get_domain_internal()
All the actions previously done in confdb_get_domain_internal() are now done
in separate functions and those functions are called from it.
Resolves: https://github.com/SSSD/sssd/issues/5380
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/51e92297157562511baf8902777f02a4aa2e70e6">51e92297</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-03-25T11:22:58+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ad: use right sdap_domain in ad_domain_info_send
Originally ad_domain_info_send() was only called when there was only a
single domain available and hence only a single sdap_domain struct with
the search bases in the sdap_domain list. Since ad_domain_info_send() is
now called at other times as well the right sdap_domain struct must be
selected so that the right search bases are used.
Resolves: https://github.com/SSSD/sssd/issues/6063
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/81d67a592315740d13e48b9a29e29baa8cc35638">81d67a59</a></strong>
<div>
<span>by Alexey Sheplyakov</span>
<i>at 2022-03-25T11:23:19+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ad: gpo: ignore GPO if SecEdit/GptTmpl.inf is missing
This makes it possible to use sssd's group policy based access control with
samba4 domain controllers `out of the box`. The problem is caused by
1) group policy based control denies access (to all users) if
`${GPO_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`
file is missing.
2) The `Default Domain Policy` and the `Default Domain Controller Policy`
GPOs created by samba4 list the Security Protocol Extension CSE GUID
{827D319E-6EAC-11D2-A4EA-00C04F79F83A} in their `gPCMachineExtensionNames`,
however there are no .../SecEdit/GptTmpl.inf files in the sysvol.
According to the section 3.2.5 of [MS-GPSM] current sssd's behavior is
correct. However Windows GPO client (at least the one in Windows 2008 r2)
just skips such broken GPOs. This patch makes sssd behave in the same way,
and makes setting up samba4 based AD domain less painful.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fd19512a56ea6f237cded8f013c466d0e82ef648">fd19512a</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-25T14:04:25+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ccpcheck: fix issues
The issues fixed fall in the following categories: invalid printf
argument type and redundant check for a pointer.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/74ef76b88173ea75284ca7304c7cee22d4dfe1dc">74ef76b8</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T11:35:25+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: avoid concurrent runs
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e8b22f2d655e331032d0e5469fcf34e6a4b97669">e8b22f2d</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T11:35:25+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: allow to run coverity scan on demand
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/71cd2822c09f5f6c8c5f024daa81b68b8bc6c265">71cd2822</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T11:35:36+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">cache_req: fallback to UPN even with cache_first = true
The condition `ret == ENOENT && state->first_iteration` was not met
with `cache_first = true` because `state->first_iteration` got set
to `false`.
Resolves: https://github.com/SSSD/sssd/issues/6059
:fixes: SSSD now correctly falls back to UPN search if the user was
not found even with `cache_first = true`.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a049ac715a79ddfad0d67d48fc5c60408cf62127">a049ac71</a></strong>
<div>
<span>by Alejandro López</span>
<i>at 2022-03-29T11:35:50+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">systemd: only relaunch after crashes and do not retry forever
Set Relaunch=on-abnormal to only relaunch after a crash. Systemd
will not try to relaunch sssd if it returned with an error code,
for instance, on a wrong configuration file.
Use StartLimitIntevalSec and StartLimitBurst to limit the number of
times it is relaunched. Avoid blocking the boot process.
Resolves: https://github.com/SSSD/sssd/issues/5753
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8b95efa2d1e0965d5b878785e02280d5c924bcb2">8b95efa2</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">intg: do not run valgrind on infopipe tests
This was done only to workaround some issue that does not exists
anymore.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ee752f8e2f122aa4cf0b0490cbeabc0a2444f2b9">ee752f8e</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">intg: make kcm renewal test user independent
intgcheck are called in nss_wrapper environment, the tests itself
are still executed with the same uid as the original user. This
means that kcm tests are running kinit as the user who called
`make intgcheck`.
Previously, `test_kcm_renewals` failed if the user uid != 1000 because
it was not found by sssd_kcm. Now, we create user with the same uid
as the caller and it works.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/52e53926cc2965cce9708af434755500fad5f73b">52e53926</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: make sure that $USER is available
USER is not set when running command on container directly through
'podman exec' or from shell created from 'podman exec -it ... /bin/bash'
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5def61fb9d434f92687842afabdfc26b7625a36e">5def61fb</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: disable mock build in contrib/ci/run
It is not possible to run mock build against RHEL-8/9 due to missing
packages and we have COPR builds in place so it is a redundant check.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/df44fc203adf69d5884176cc360e25dbe7f8c166">df44fc20</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:00+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: make intgcheck work on CentOS Stream and RHEL 9
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4ea511c651b4ffbe8e87da328dfb741153e0e462">4ea511c6</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:01+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: include acl package in basic multihost tests
Otherwise 389ds setup will fail on Fedora 36, see:
https://bugzilla.redhat.com/show_bug.cgi?id=2057436
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/562a4507b7f55cfbf3ef4362fae20b5919e52a13">562a4507</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T12:50:01+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: run intgcheck and multihost tests
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1abda8381bc194c652452f07d538f908d033a248">1abda838</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-29T12:50:13+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: enable cppcheck analysis
Enable the cppcheck analysis tool for pull-requests.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/67b12923525d6ce77b63e9f045198bb959a9decb">67b12923</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-29T12:52:14+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: enable flake8 analysis
Enable the flake8 analysis for pull-requests.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3c39d007eed47de619c5dceb5a879fa32009c7c0">3c39d007</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-29T12:52:14+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: remove unused module (F401)
Remove unused module reported by flake8.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/73bd21b379603d61f58bccc23e34f8e76853585a">73bd21b3</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-29T12:52:14+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SSSDConfig: fix indentation for bracket (E124)
Fix the closing bracket visual indentantion issue reported by flake8.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/30831cc3b6de0a94b53773e609883577a474256b">30831cc3</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-03-29T12:52:14+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">GDB: rename duplicated function (F811)
Rename duplicated function reported by flake8.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/22bbb7a04bd89869921d63e9ae821621cb40639c">22bbb7a0</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-03-29T15:00:07+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: fix concurrency group for copr
github.ref points to the target branch on pull_request_target
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6d105980ad8874cdf0f0c1f8efbfd7a40d8c4b79">6d105980</a></strong>
<div>
<span>by Madhuri Upadhye</span>
<i>at 2022-03-31T12:30:12+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: ipa: Minor fix while add users in groups in windows bash shell script.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aa054c22399e9e21f471b6831374e3a2c32b6c8b">aa054c22</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-03-31T12:30:23+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Install nss-pam-ldapd package for alltests-tier2
Install nss-pam-ldapd package for alltests-tier2
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/60c30a3fdc5207d3c009b00384190dc75b153d49">60c30a3f</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-03-31T13:18:47+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">UTILS: fixes CWE-394
like:
```
src/responder/nss/nsssrv.c:339: negative_return_fn: Function "sss_mmap_cache_init(nctx, "passwd", nctx->mc_uid, nctx->mc_gid, SSS_MC_PASSWD, mc_size_passwd * 26214UL, (time_t)memcache_timeout, &nctx->pwd_mc_ctx)" returns a negative number.
src/responder/nss/nsssrv.c:339: assign: Assigning: "ret" = "sss_mmap_cache_init(nctx, "passwd", nctx->mc_uid, nctx->mc_gid, SSS_MC_PASSWD, mc_size_passwd * 26214UL, (time_t)memcache_timeout, &nctx->pwd_mc_ctx)".
src/responder/nss/nsssrv.c:346: negative_returns: "ret" is passed to a parameter that cannot be negative.
# 344| &nctx->pwd_mc_ctx);
# 345| if (ret) {
# 346|-> DEBUG(SSSDBG_CRIT_FAILURE,
# 347| "Failed to initialize passwd mmap cache: '%s'\n",
# 348| sss_strerror(ret));
```
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d1bce130f590e7e81a8472b8c9804ebe63898852">d1bce130</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-03-31T13:19:41+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Porting of proxy provider test suits to pytest
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/tree/RHEL8.6/client/proxy_provider/krb_auth
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/38636ffaf3f5b68af517c069f990b653f13e0f31">38636ffa</a></strong>
<div>
<span>by Shridhar Gadekar</span>
<i>at 2022-04-06T11:13:49+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">minor change in testcase description
The testcase description mentioned ssh_cache instead of sss_cache.
Correcting the command in description.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d8d25758a10dbc34815c5e7b012cd4ee3eb185dc">d8d25758</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-06T11:14:02+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: fix section parsing issue
Due to a typo it was always necessary to have a `[prompting/password]`
section in sssd.conf to enable the other `prompting` section.
This patch fixes this and adds some unit test to cover that part of the
code.
Resolves: https://github.com/SSSD/sssd/issues/6081
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/34829d3bc6ff90c916162ffcd1942285a16a735d">34829d3b</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-06T11:14:02+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: add utilities for cmocka based unit tests
Calls to list all tests and run only a single test are added.
Resolves: https://github.com/SSSD/sssd/issues/6081
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5c5a6b89e73094da92a33876896c7c0e87660294">5c5a6b89</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-06T11:14:02+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">tests: allow to run single pam-srv-tests tests
Since each pam-srv-test will remove the test directory the --no-cleanup
option only makes sense if a test can be run individually.
Resolves: https://github.com/SSSD/sssd/issues/6081
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6a51ffee303006659a9a1829fa0c9cad9b166388">6a51ffee</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:39:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: add working-directory to build-sssd-srpm
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4396cd4becdbf35dff2ada88ab4691212c6cbc47">4396cd4b</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:39:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: integrate covscan into github actions
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/872bbbcc3549a508f1bf8c83ec382c04930cb444">872bbbcc</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:39:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: fix concurrency group in analyze-target workflow
github.ref points to the target branch not the the pull request
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0fbabd4a1feaff126fd734b9cc6d8935691ed87d">0fbabd4a</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:39:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: switch to next-actions
SSSD/action-build-srpm and SSSD/action-copr were move to new
next-actions organization so we do not pollute SSSD namespace with
generic and unrelated stuff.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c321fa5f3dde7f83289989c413b74421c53b9057">c321fa5f</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:39:43+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: switch to next-actions/print-logs
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a84797cb08a5b803787f08afada6a0373233ce05">a84797cb</a></strong>
<div>
<span>by Anuj Borah</span>
<i>at 2022-04-08T12:39:54+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Tests: Fix FileNotFoundError for environment_setup
Fix FileNotFoundError for environment_setup
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f853a868309fe11c591a103152c9191ea0432462">f853a868</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:40:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: switch to Proxy-State in idp plugin
State attribute can be present only once (RFC-2865), but some IdPs can
return larger data. This patch switches to Proxy-State which make take
multiple values and concatenates these into single krb5_data like we
already do with Reply-Message.
Resolves: https://github.com/SSSD/sssd/issues/6088
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63e6365cb18033114d21c6c263c4971552847481">63e6365c</a></strong>
<div>
<span>by Alexander Bokovoy</span>
<i>at 2022-04-08T12:40:05+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: switch to Proxy-State in idp plugin reply
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/74cb09ea21432e986034bbb2ee2b477644ac8ae3">74cb09ea</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T12:40:06+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">krb5: idp method is only supported if FAST channel is available
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2980f1144bd1a881a5c6110f69608025dd657dbb">2980f114</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-08T16:05:30+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: use correct checkout path for covscan
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0c568e94d7dd834f675e13bdca17359b848b18a1">0c568e94</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-11T10:51:13+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">ci: disable fedora-review for copr pr builds
fedora-review switched logic and if source can not be downloaded
from url in the spec file it is now considered an error. Pull request
do not have tarballs, so we need to disable this tool.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/42d3e28ce5c0bbfe7bce7dc555f717f7d9fe7ca9">42d3e28c</a></strong>
<div>
<span>by Iker Pedrosa</span>
<i>at 2022-04-11T12:50:48+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">CI: disable result comment for cppcheck
cppcheck action posts a result comment every time that a code changes is
pushed to a PR. This commit updates the action reference to avoid
posting the comment.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/37f90057792a0b4543f34684ed9a240fe8e869c1">37f90057</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:16+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert "usertools: force local user for sssd process user"
This reverts commit 9c447dc85853116c035bbc2f9e3b8553a65be621.
Resolves: https://github.com/SSSD/sssd/issues/6107
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3c6218aa91026e066e793ee26333ea64fd6bc50e">3c6218aa</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:16+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Revert "man: sssd.conf and sssd-ifp clarify user option"
This reverts commit 3d25724dc63dffb6d734790e58b1647e3a64e84f.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/720c39a136c7d2f955453f343bc69602f1d64974">720c39a1</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SID mem-cache: config, init, man page
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a160adb0f65a0b420bdbd66c87e9719190a927e">2a160adb</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">mem-cache: fix error in the comment
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d5e4753efeb2c757df9c5c696c3419a0516f8891">d5e4753e</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SID mem-cache: data structure and store function
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f869c69471cbfaa2c66954e332c8530b6f96b41a">f869c694</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">NSS: SID: debug message in case of collision: - fixed mistype (users -> groups) - added SIDs of colliding entries
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a87dfd624e62db73e8787a288189186bed3c6cc2">a87dfd62</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">NSS: SID: reduced code duplication
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/25426f6a59a0c61c7618c05fef247c29f09a8948">25426f6a</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">NSS: mem-cache: const correctness
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aec620f62c9fad0583770c1ca6b24c7c9bbe820c">aec620f6</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">NSS: SID: store results in mem-cache
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/483d26e9fd93c2f1a6ac5c16274ddfb169bc5b25">483d26e9</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SSS_CLIENT: sss_get_ex() should be static
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/24770866fd8e44fa9fae5432ca8b70782e719862">24770866</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SSS_CLIENT: NSS: SID: mem-cache support for sid-by-id and id-by-sid lookups
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8cee413b79c46ca68cdb5857c32d5359655c8f91">8cee413b</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">NSS: SID: don't try to deduce object type based on request type
Effectively, this code was no-op anyway as `cmd_ctx->sid_id_type` wasn't
set for SID related requests to anything but SSS_ID_TYPE_NOT_SPECIFIED
anyway.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b2be59f1d4fb272c3f1f316e301ea50f0af4b840">b2be59f1</a></strong>
<div>
<span>by Alexey Tikhonov</span>
<i>at 2022-04-14T10:56:31+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">SSS_CLIENT: NSS: SID: improved sss_nss_mc_get_sid_by_id()
Resolves: https://github.com/SSSD/sssd/issues/3768
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/731b3e668c6a659922466aee7fa8093412707325">731b3e66</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-14T10:56:46+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: add more checks for require_cert_auth
Fail authentication if no Smartcard based credentials are available if
require_cert_auth is set.
Resolves: https://github.com/SSSD/sssd/issues/6023
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4d2277f8c3065771a8c3bbc7938309a4905640f0">4d2277f8</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-14T10:56:46+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pam: better SC fallback message
If no suitable certificates were found or if gdm-smartcard was somehow
activated without a Smartcard present ask to (re)-insert a Smartcard.
Resolves: https://github.com/SSSD/sssd/issues/6022
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/878737c8ee25b40179516a302378c7cabaf4487d">878737c8</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-14T12:37:11+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">oidc_child: add initial implementation of oidc_child
Currently oidc_child will be used by FreeIPA's ipa_otpd to authenticate
a user against an IdP with the device code workflow. For the
communication with the user the recently added OAuth2 patches with the
Kerberos pre-authentication module will be used.
Later on it might be possible to add a SSSD authentication provider
which is using oidc_child as well.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cc811edf5879d4f6848d5e560eef60aca64acb7c">cc811edf</a></strong>
<div>
<span>by Sumit Bose</span>
<i>at 2022-04-14T12:37:11+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">oidc_child: make build configurable
With the configure option '--with-oidc-child=no' oidc_child is not
build.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/66f60aada4518d4b0076d41b82496bf3abd68703">66f60aad</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-14T15:18:25+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">contrib: add sssd public key
This key will be used for SSSD-related activities such as signing
release tarballs.
It is also uploaded to `keys.openpgp.org` key server, it can be fetched with:
```
gpg2 --keyserver keys.openpgp.org --recv-keys C13CD07FFB2DB1408E457A3CD3D21B2910CF6759
```
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e09ac40a229e8e60258032c6b50eca53c1454948">e09ac40a</a></strong>
<div>
<span>by Weblate</span>
<i>at 2022-04-14T15:18:54+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">po: update translations
(Korean) currently translated at 30.5% (861 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 30.2% (853 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 29.4% (830 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Finnish) currently translated at 7.7% (48 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Finnish) currently translated at 3.6% (96 of 2627 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/fi/
po: update translations
(Finnish) currently translated at 6.3% (39 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Finnish) currently translated at 3.6% (95 of 2627 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/fi/
po: update translations
(Korean) currently translated at 29.3% (829 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 29.2% (824 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 28.8% (814 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Czech) currently translated at 100.0% (619 of 619 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/cs/
po: update translations
(Korean) currently translated at 28.7% (812 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 28.5% (805 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 28.3% (799 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 26.9% (761 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Finnish) currently translated at 3.5% (94 of 2627 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/fi/
po: update translations
(Swedish) currently translated at 100.0% (2627 of 2627 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Ukrainian) currently translated at 100.0% (2627 of 2627 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Korean) currently translated at 27.3% (715 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 24.5% (641 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 18.6% (488 of 2615 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f9901d5ad44f23632db981c3d2d22e7094553f9e">f9901d5a</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-14T15:22:01+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">pot: update pot files
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f48eddc3b9224909bfb6be253260335eba80539d">f48eddc3</a></strong>
<div>
<span>by Pavel Březina</span>
<i>at 2022-04-14T15:23:57+02:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Release sssd-2.7.0
</pre>
</li>
</ul>
<h4>30 changed files:</h4>
<ul>
<li class="file-stats">
<a href="#fb74e0ab745627ca1d3a24827b12823666934e79">
.git-commit-template
</a>
</li>
<li class="file-stats">
<a href="#1685392355a2ca092645e3c824203231bdae0aca">
<span class="new-file">
+
.github/actions/build-sssd-srpm/action.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#d37a98f8b9d16f61f6e1bb28f6105f05acd2e031">
<span class="new-file">
+
.github/actions/configure/action.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#980c81f9132f0c2e81b221a9ba855c7ab9b8a0b2">
<span class="new-file">
+
.github/actions/install-dependencies/action.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#71da4bef7d009bfa59d0f7ca85bf6a18169fb48d">
<span class="new-file">
+
.github/workflows/analyze-target.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#899ce9c202bf7bb5480e72836c3edc773c9c4244">
<span class="new-file">
+
.github/workflows/ci.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#205e49e7f8cbf1a4f02d387dd32850fa09a5ef81">
<span class="new-file">
+
.github/workflows/copr_build.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#5439b3be16e91e7a13b1977539a10e7b3639a891">
<span class="new-file">
+
.github/workflows/copr_cleanup.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#f34eaf19b34e4ae5135212c79909cfd8d3c70b6b">
<span class="new-file">
+
.github/workflows/coverity.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#4d938f6c1c694e539e55e88076490273a04798ba">
<span class="new-file">
+
.github/workflows/static-code-analysis.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#dea01dd89a3b602828e630677fde5d77c06441c8">
<span class="deleted-file">
−
.travis.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#aeaeb516c0de942f0992b9ab758429dccb04ff10">
<span class="deleted-file">
−
.travis/travis-docker-build.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#a2a4240313da7c534067b5ee0328e0138025e7a9">
<span class="deleted-file">
−
.travis/travis-tasks.sh
</span>
</a>
</li>
<li class="file-stats">
<a href="#2c5c5ed7d77485b627b5ba2e90b2f87baf64be55">
BUILD.txt
</a>
</li>
<li class="file-stats">
<a href="#6651ddff6eb82c840ced7c1dddee15c6e1913dd4">
<span class="deleted-file">
−
Dockerfile
</span>
</a>
</li>
<li class="file-stats">
<a href="#4ff59043f99301504a0b609dfae19439287cf3d6">
<span class="deleted-file">
−
Dockerfile.deps
</span>
</a>
</li>
<li class="file-stats">
<a href="#0c2c5c506cef0ed2d3ad2b7e45e97980b66f5520">
Jenkinsfile
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#8ec9a00bfd09b3190ac6b22251dbb1aa95a0579d">
README.md
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#4152edb659014ecaa7be84758734dc6529428936">
contrib/ci/README.md
</a>
</li>
<li class="file-stats">
<a href="#4fd746b72d7a3976d4c1ae84db34f6173b62a1e8">
contrib/ci/configure.sh
</a>
</li>
<li class="file-stats">
<a href="#49d80aa598751b3e8c23a3bbb4e7e9c03aa770b6">
contrib/ci/deps.sh
</a>
</li>
<li class="file-stats">
<a href="#031969761fa6f19a30b8c7f03d888fec88b92193">
contrib/ci/distro.sh
</a>
</li>
<li class="file-stats">
<a href="#0aeb6d52776b667900291cb1c14a7dadddc5c3b2">
<span class="new-file">
+
contrib/ci/get-matrix.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#808187b33a9ee15ebc4dcb8196fbb2439e32a511">
contrib/ci/rpm-spec-builddeps
</a>
</li>
<li class="file-stats">
<a href="#3ead13c99a6fdcbcc0a23d3846e2a8837cc2f3e7">
contrib/ci/run
</a>
</li>
<li class="file-stats">
<a href="#d348d65f630a357f2aeaa78fc64043f57caa4cb0">
contrib/ci/sssd.supp
</a>
</li>
<li class="file-stats">
<a href="#c3b4e77ecae6f5d5b141acb78d1a7d2302ac7764">
contrib/fedora/bashrc_sssd
</a>
</li>
<li class="file-stats">
<a href="#76218f39b53d6aef0e4075d5e29fd61d2d9efca3">
contrib/fedora/make_srpm.sh
</a>
</li>
</ul>
<h5>The diff was not included because it is too large.</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">
—
<br>
<a href="https://salsa.debian.org/sssd-team/sssd/-/compare/2de0758795605ad2c71b445ea993ea7b80fd322b...f48eddc3b9224909bfb6be253260335eba80539d">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
</p>
</div>
</body>
</html>