<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "Menlo"), DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: var(--default-regular-font, -apple-system),BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Timo Aaltonen pushed to branch master at <a href="https://salsa.debian.org/sssd-team/sssd">Debian SSSD packaging / sssd</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6a2de710b1db0dee4f1c5a7fe50d0e9c7b8e94f5">6a2de710</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-10-07T12:58:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version in version.m4 to track the next release
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7a1976c948f1811b845b186066503476d527a9ff">7a1976c9</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-10-10T13:07:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fido2: register key with helper process
Create a helper process to handle the FIDO2 key registration. In order
to do that the helper process will parse the command line arguments,
list the connected devices, select the first one in the list, prepare
the user credentials, generate the key credentials, verify them to
ensure that everything has worked correctly and print the credentials.
FIDO U2F fallback has been disabled to force a PIN usage, thus
increasing the security as a lost or stolen key would be unusable with
it.
Moreover, include the libfido2 dependency in the configuration and the
spec file.
Finally, several test cases have been added to the unit tests. Most of
them just check the happy path but some error handling is also tested.
:packaging: include libfido2 dependency
:config: New config to build passkey authentication
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5b27a353aaac139ceb433718d0125ed963ba97d8">5b27a353</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-10-10T13:07:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fido2 child: Add missing options
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9a2548ea03452dea38a8d08083f9faa99c677773">9a2548ea</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-10-10T13:07:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fido2: make the build conditional
Add a condition to build the FIDO2 support.
Resolves: SSSD#6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f800471e2a895553dee3f2b9da0276cb6c9037b1">f800471e</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-10-10T13:07:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sssd.supp: suppress leak errors
The suppression rule for popt malloc needs to be more generic. Moreover,
create a new suppression rule for sssd debug initialization when being
executed twice: from the production code and from the unit-tests.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8bdcc02874d87c751b1f01f3bf591b43f9420887">8bdcc028</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-10-10T13:07:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: change fido2 to passkey
Passkey is a more general term that the industry is using currently.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ab89455be398f4688f95489b805c8ae204ba6f0d">ab89455b</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-10-12T14:22:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: Build srpm fix for illegal version tag '-'
error: line 45: Illegal char '-' (0x2d) in: Version: sssd-2-7
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a5403f7896a685d09f6449915d5216b6b1224bcb">a5403f78</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-10-13T21:00:10+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: "trusted user not found" isn't an error
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b38fdc8185fcd6a2e5d4b483d3119964f9922070">b38fdc81</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-10-13T21:00:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>confdb: avoid syslog message when no domains are enabled
This syslog message would also appear when calling other tools like
sss_cache which is confusing. We return specific error code instead
and let the error be syslogged in the monitor in monitor.c:main (this
is already implemented).
Resolves: https://github.com/SSSD/sssd/issues/6387
:fixes: A regression when running sss_cache when no SSSD domain is
enabled would produce a syslog critical message was fixed.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4da861368b88c03b22993f95de5b508ad5637c25">4da86136</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-10-13T21:00:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>monitor: read all enabled domains in add_implicit_services
Reading sssd/domains option is no longer sufficient since domains
can be enabled through domain/enabled.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/64c22dd1c4f79f953b879fc167b535de928f4bfd">64c22dd1</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-10-13T21:00:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_cache: use ERR_NO_DOMAIN_ENABLED instead of ENOENT
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/df55b1f16ea2fb5e56f0fe69419904d50b7e2476">df55b1f1</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-10-13T21:00:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>confdb: chande debug level when no domain are found in confdb_get_domains
We print the error as fatal error in the monitor to make sure the
message is correctly visible. However, the error is not fatal for tools
like sss_cache and it should not be printed there by default.
Since the tools have default debug level set to SSSDBG_FATAL_FAILURE, it
is sufficient to just drop the level to critical.
Resolves: https://github.com/SSSD/sssd/issues/6387
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a05719fab953728787ff788d8237496efcdfd20d">a05719fa</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-10-13T21:01:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Porting the AD-Access-control test-suite to pytest
Minor docstring modifcations. Adding detailed expectedresults
instead of 'should succeed' in docstrings of testcases
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6c0ae779fca1450d3256e9d718164dfb75880cdf">6c0ae779</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-10-20T11:04:07+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: port proxy_provider/rfc2307
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/tree/RHEL8.6/client/proxy_provider/rfc2307
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8a2fd06b2928189bcf0c3373c9e38437063b5241">8a2fd06b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-01T17:15:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CFG RULES: allow 'fallback_to_nss' option
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/71466a8dbdb1d755ace15680cc2b4b11b68a0573">71466a8d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-01T17:19:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: pre-existence of MPG group in the cache isn't an error
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/103a48887f4e9bdeba7090ef4914082347467384">103a4888</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-01T17:19:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>autofs: do not yield warning on default configuratoin
This warning has been there for a long time now (since 1.14, 7 years,
see 999d6066c7a96f102b692d31435d76114478e874) and it was intended to
be removed eventually.
:relnote: SSSD will no longer warn about changed defaults when using
`ldap_schema = rfc2307` and default autofs mapping. This warning was
introduced in 1.14 to loudly warn about different default values.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6d87af5ef4a383e236d403a8fd812ef7fd8f34f6">6d87af5e</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-01T17:19:56+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: Add passkey exec command
Simple wrapper which calls the passkey_child process, planned to be
used with passkey_child --register and also for troubleshooting.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ee0d73a2c513a11466cb206caa091c3b2b9936df">ee0d73a2</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-01T17:19:56+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: Use wrapper function for analyze
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/62458d49090ae94b1d65ac0642ec6e3b3cd75a05">62458d49</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-01T17:37:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: enable ci for sssd-2-8 branch
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c526acbaea0b1cd1e0a554820f860e2e20e2ae6d">c526acba</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-01T17:37:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: switch to actions/checkout@v3
checkout@v3 runs on node16 so it will remove deprecation warning:
https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/770bf7bf3afada064df8ed9d47445d912d5f0a4c">770bf7bf</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-01T17:37:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: use GITHUB_OUTPUT instead of set-output
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b2d193b9370eb7d2bd9ffb713e58cbd936f411b7">b2d193b9</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-01T17:37:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: switch to actions/upload-artifact@v3
upload-artifact@v3 runs on node16 so it will remove deprecation warning:
https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2070000a3b80e2dc13bd19b3da99efaa08c34fac">2070000a</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-02T15:58:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CACHE_REQ: Do not use timestamp optimization on "files" provider.
Avoid requesting only the latest updates when using the "files"
provider as it only updates the cache if /etc/files or /etc/group
is touched.
Added a test for this situation.
Resolves: https://github.com/SSSD/sssd/issues/6398
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4c678cbb4ace4be413847fa297bce0c7c8cc42b6">4c678cbb</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-03T11:08:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Analyzer: Optimize list verbose output
Modify the analyzer to parse the responder log file in one pass. This
avoids repeated parsing of a single log file. This operation will now
store log lines in a dictionary on a single pass then format and print
the output accordingly. Does not affect 'list' or 'show' output.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/214540e72a6743e1112b35d562efc595594b1a82">214540e7</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Cache: String has to be duplicated instead of copied
input->name.attr has to be duplicated when not NULL.
Just copying the pointer is not a good thing.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/719c92533c52aad091c8b58e7a82b9e3b88f8e62">719c9253</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CACHE_REQ: Initialize domain with NULL
Variable domain is compared to NULL before checking sss_parse_inp_recv()'s
return value. Let's initialize it to NULL.
Warning: sss_parse_inp_recv() modifies domain's value when returning EOK
or ERR_DOMAIN_NOT_FOUND. The situation is not perfect but is better than
before.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8f7c35eae22aaa9649db1cf2d07d17d8c4b92e82">8f7c35ea</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CACHE_REQ: Do not return duplicated values.
For each domain, a multi-domain search is done and all the results for
each domain are returned each time. This produces several copies of the
same results.
Function cache_req_input_parsed() decides whether to launch a multi- or
single-domain search based on the domain the user requested. If the user
didn’t request a domain (such as in a call to ListByName()), a
multi-domain search is launched, even if we are only looking for the
current domain. In that case a single-domain search is enough.
Resolves: https://github.com/SSSD/sssd/issues/6360
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a97962826efdf5c51fed7553e761a803c48f6675">a9796282</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: Correct ListByAttr()'s test
Now that ListByName() and ListBy Attr are fixed, the test needs to
be corrected as it was explicitly avoiding that case.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/569dca5f24e2e92aa86c7a2800f772e29211fc31">569dca5f</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CACHE_REQ: Consider the domain when looking names in the cache
Using a fully-qualified name based on the expresion the user provided,
when looking for names in the cache.
Resolves: https://github.com/SSSD/sssd/issues/6361
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/09895561a34592de1d58af211db1725388d86d5e">09895561</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: New test for D-Bus' ListByName()
Added a test for the D-Bus function ListByName().
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c3453e4e82796c5ae578671f25568c74919cad13">c3453e4e</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-03T11:15:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CACHE_REQ: Use a const struct in cache_req_data_create()
The structure data is not modified in the function. The const modifier
can be used.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ba5439c0fdb53a345517b85b59444abba1d79463">ba5439c0</a></strong>
<div>
<span> by Weblate </span> <i> at 2022-11-04T11:27:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Korean) currently translated at 51.0% (1331 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 50.6% (1320 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Korean) currently translated at 49.9% (1302 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Polish) currently translated at 4.7% (126 of 2658 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pl/
po: update translations
(Polish) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/
po: update translations
(Polish) currently translated at 1.4% (39 of 2658 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pl/
po: update translations
(Korean) currently translated at 49.2% (1283 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Ukrainian) currently translated at 100.0% (2686 of 2686 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Russian) currently translated at 100.0% (2686 of 2686 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Ukrainian) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
po: update translations
(Russian) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ru/
po: update translations
(Ukrainian) currently translated at 99.3% (659 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
po: update translations
(Polish) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/
Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/
po: update translations
(Polish) currently translated at 1.4% (38 of 2662 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pl/
po: update translations
(Korean) currently translated at 46.5% (1215 of 2609 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/92347d98f84842283ea1692173891f7b654cf052">92347d98</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-11-04T11:28:28+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: GSSAPI ssh login failing due to a missing directive
Adding the missing pxssh module import
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a22af6f00870382eaee9a087fcd0948a0da190cf">a22af6f0</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-04T11:35:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update translations
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/955192b12fafdb55daaa0b12381322031fd20816">955192b1</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-11-09T10:00:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: gssapi ssh login minor fix
Trivial fix, the kinit command was missing '@' after usename. It was
causing obvious failure to fetch krb ticket.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dab19a4d678e3304da4cf7a3afd3fde181bd36e5">dab19a4d</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-11-09T20:25:30+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Removing tests from gating pipe line
test_bz1368467 --- this one looks more perfomance than gatting
test_avoid_interlocking_among_threads --- feature not supported
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Steeve Goveas <sgoveas@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6077230633849afb8f682333682a3353244951a0">60772306</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-11-09T20:25:50+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Use negative cache better for lookup by SIDs
Minor change, adding import of re module
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7c907a7c9725f0a00dab2ea20656434a2e1ed61f">7c907a7c</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-11-10T14:04:18+05:30 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Removing tests from gating pipe line
test_bz1368467 --- this one looks more perfomance than gatting
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/419b9b8f64f58f01075879b7c4495cc1b18f9674">419b9b8f</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2022-11-10T09:22:52-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Adding Ported DynDNS Testcases
This is merged branch of two following PRs, 6363 and 6344 which are now closed.
6344 Add the tests but are unreliable.
6363 contains the following changes, rewriting the suite.
* change_hostname fixture would revert back to the hostname in /etc/hostname, updated fixture
* disabled DNS recursion, lookups were being forwarded to authoritative servers resulting in false passing tests
* removed ipv6 address about part of the del_record, would result in passing but the wrong thing be searched
* created a DNSAD object to search for records directly on the DNS server, stabling results and skipping any cache
* cleaned up the functions and code for readability
Signed-off-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f24b6daa908712d023fac4e444f64b39c7df7991">f24b6daa</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-11T10:30:19+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: replace erroneous description
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/28124cfbd806530b72fbd2846c25079285d65184">28124cfb</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-11T10:30:19+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: print PEM formatted public key
When registering a key print the public key in PEM format.
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3e02de933d234e4039d096a9534cd282ce170548">3e02de93</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-15T10:42:28+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: socket connect: added missing new line and adjusted log level to more appropriate
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a21c666255c81a6da062d801a4c0d95c30bd2f66">a21c6662</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-15T10:43:20+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a test for bz1964121 override homedir to lowercase
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1964121
Verifies: #6210
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/25eae1c08a6c1df4b310eee13b0ca1414a89c3a3">25eae1c0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T14:47:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: use `sss_strerror()` to handle `ERR_GID_DUPLICATED`
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/93ed5e58e0bfa9d67fc83ee2643687ed24151fb0">93ed5e58</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T14:48:39+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: got rid of deprecated `inet_netof()` to please 'rpminspect'.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6ef3aade0394e32540242f902c9f21bb8d6c41f2">6ef3aade</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T15:48:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TOOLS: don't export internal helpers
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7af46ba0e925da61b7b4003c3fa6d51c05c1116e">7af46ba0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T15:48:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TOOLS: fixed handling of init error
Before execution of `tool_cmd_init()` `init_err` wasn't set,
so `sss_tools_handles_init_error()` check was a no-op.
Consequently, a proper check after `tool_cmd_init()` was missing.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/99791400bec1054cf0081884e013a3cbed75fe8a">99791400</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T15:48:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: don't require 'root' for "analyze" cmd
:relnote: `sssctl analyze` tool doesn't require anymore to be run under root.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d4d9aa65499e5fbd7b451c1b660f7c813d34a460">d4d9aa65</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-11-18T15:48:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: don't require 'root' for "passkey-exec" cmd
:relnote: `sssctl passkey-exec` tool doesn't require anymore to be run under root.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a7759ab30b12b92c1a21aec5549f8a05dcc98947">a7759ab3</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-18T15:59:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add the missing admisc pytest marker.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bce2b0c8037250ad2d8d817e747a78439bd6610c">bce2b0c8</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-18T15:59:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Wait a bit before collection log in test_0015_ad_parameters_ad_hostname_machine.
This test is unstable on other architectures (ppc64le, aarch64) and it seems that
adding a 15s wait before collecting the log gives it enough time to wtrite it properly.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d7e7efe93deabbbfff24664799e1fdb60c5a2fbc">d7e7efe9</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-18T15:59:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix E126 in test_adparameters_ported.py
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/36e5479b2200747b69af2b01adca899b9222ef82">36e5479b</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-11-18T16:00:24+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: Fix some warnings thrown while building
Some of them are not actually needed (false positives) but this
helps to have a clean build and identify real warnings.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/285f1703194fa260b4886133d9bcd79de70f24ff">285f1703</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-11-18T16:00:45+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: fix test_bz1368467
This test was failing due to login error.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bfa8d50c479cf8ef7b299eb5848309a3a9ea7f12">bfa8d50c</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-18T16:01:58+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Analyzer: Ensure parsed id contains digit
In analyzer list verbose output, we parse the last field of cache_req_search_send() lines.
Certain log messages need to be filtered out by ensuring the parsed field is
a digit, such as the last line below.
[cache_req_search_send] (0x0400): [CID#1] CR #1: Looking up GID:1031401119@testrealm.test
[cache_req_search_send] (0x0400): [CID#1] CR #1: Looking up GID:1031401119@testrealm.test
[cache_req_search_send] (0x0400): [CID#1] CR #1: Looking up GID:1031401119@domain-zflo.com
[cache_req_search_send] (0x0400): [CID#1] CR #1: Returning [GID:1031401119@domain-zflo.com] from cache
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/790e7a779f4385b8ad95878ee79a44fdaac46325">790e7a77</a></strong>
<div>
<span> by Steeve Goveas </span> <i> at 2022-11-18T18:08:51+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Cannot SSH with AD user to ipa-client with invalid keytab
`krb5_validate` and `pac_check` settings conflict. Setting krb5_validate
to false skips the pac_check enabling the login
Verifies:
#6355
https://bugzilla.redhat.com/show_bug.cgi?id=2127822
https://bugzilla.redhat.com/show_bug.cgi?id=2128902
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/14748ff981ac5825a55c06350db05dce23732299">14748ff9</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-22T18:36:33+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Update fixture using adcli to handle password from stdin.
Adcli changed handling password dialog for bz2124030 so
the automation needs to be updated to work properly.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2f99cd31bc43406a9d400129260654ebd6bccc15">2f99cd31</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-22T18:37:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: Add debug option to help message
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ab6910ae0e4e32692cbab357129a4bde8d2217bf">ab6910ae</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-22T18:37:41+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: verify assertion
Include the assertion verification in the passkey helper process. For
that purpose, prepare the assertion request data, select the device to
use, get the device options and compare them with the organization
policy, decode the public key, request the assert and verify it.
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2b0a8f2757c013ecdaad2047f6254f2ef3794cb4">2b0a8f27</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-22T18:37:41+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: public key in PEM format
It helps us obtain the cryptographic algorithm used to generate the key.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6b0d175f8fad63c9c41e0b990c4a5632e96cc3f7">6b0d175f</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-22T18:37:41+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: input PIN via stdin
For the registration process add a new "quiet" option to suppress the
prompts and read the PIN from stdin. For the authentication process
always read the PIN from stdin.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f5c0e7b391879782b0e93fe02265c3bef7cb9edf">f5c0e7b3</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-25T13:25:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: make /dev/shm writable
We build SSSD in /dev/shm which is mounted on read-only file system on
new podman version. We need to mount it as tmpfs to make it writable.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ae614c17b3874862200b78e57c158554b62a8273">ae614c17</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-11-25T13:25:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: install correct python development package
The package name has changed on new Ubuntu.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/336b1facdc043f21aab7e67e46c3c736fa64d303">336b1fac</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2022-11-25T13:25:39+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: fix codeql
libsemanage1-dev renamed to libsemanage-dev in debian and its
derivatives.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4a6eb258c33c8adeb78c053aa8401729f0f6bbec">4a6eb258</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2022-11-25T13:26:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: Update core github actions
Update dependent actions to address:
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fc3fad982e39d560a80c1a8b922455a190718cb7">fc3fad98</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-11-28T06:32:58+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix automount OU removal from AD.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/340691fae95a2fc66c85d5da8db14f227b2c88a8">340691fa</a></strong>
<div>
<span> by Cole Robinson </span> <i> at 2022-11-30T16:48:06+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: Fix option typo on sssd-kcm.8
The option is called krb5_renewable_lifetime, not krb5_renew_lifetime
Signed-off-by: Cole Robinson <crobinso@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/91789449b7a8b20056e1edfedd8f8cf92f7a0a2a">91789449</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-11-30T16:50:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAC: allow to disable UPN check
Currently it was not possible to skip the UPN check which checks if the
UPN in the PAC and the one stored in SSSD's cache are different.
Additionally the related debug message will show both principals if they
differ.
Resolves: https://github.com/SSSD/sssd/issues/6451
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b3d7a4f6d4e1d4fa1bd33b296cd4301973f1860c">b3d7a4f6</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-11-30T16:50:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: do not add guessed principal to the cache
Currently on IPA clients a calculated principal based on the user name
and the Kerberos realm is added to the cached user object. This code is
quite old and might have been necessary at times when sub-domain support
was added to SSSD. But since quite some time SSSD is capable of
generating the principal on the fly during authentication if nothing is
stored in the cache.
Removing the code makes the cache more consistent with other use-cases,
e.g. with the IPA server where this attribute is empty, and allows to
properly detect a missing UPN, e.g. during the PAC validation.
Resolves: https://github.com/SSSD/sssd/issues/6451
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/51b11db8b99a77ba5ccf6f850c2e81b5a6ee9f79">51b11db8</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-11-30T16:50:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pac: relax default check
To avoid issues with the UPN check during PAC validation when
'ldap_user_principal' is set to a not existing attribute to skip reading
user principals a new 'pac_check' option, 'check_upn_allow_missing' is
added to the default options. With this option only a log message is
shown but the check will not fail.
Resolves: https://github.com/SSSD/sssd/issues/6451
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ad0a8c6a33ea5bbad8058112b95bef00bb76d5c9">ad0a8c6a</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-11-30T16:53:31+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: fix test_sssctl_local.py::Testsssctl::test_0002_bz1599207
test_sssctl_local.py::Testsssctl::test_0002_bz1599207 is affcted by
disable "implicit files provider"
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e4dd11f2c2cd59031f904a1e30ed5b67edbdd54f">e4dd11f2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-12-02T15:20:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: pre-existence of MPG group in the cache isn't an error
Addition to 71466a8dbdb1d755ace15680cc2b4b11b68a0573
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3f8bc8720ff871490c6a6233b1a21bc1d2018cf1">3f8bc872</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add support for serial number
Read the serial number of the certificate and make it available.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/10d977a3675a8145314edea0bebd7b9ac01eda89">10d977a3</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certamp: add support for subject key id
Read the subject key id from the certificate and make it available.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e1b711b2611e7390bcbcd4a9682dd18e71c3d72">9e1b711b</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add support for SID extension
Check if the SID extension is available, read the SID and make it
available.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f293507d9f6efda9908a3ec971ce7f4eac284ae1">f293507d</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: fix for SAN URI
The URI was not added to the list of subject alternative names.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c4085c9a7d1ec54c1b830583128148a0c7b807d8">c4085c9a</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add bin_to_hex() helper function
This patch adds a helper function to format hexadecimal strings of
binary data.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/11483f1ec046f1062df68f1544e49fd59473084e">11483f1e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sssctl: add cert-eval-rule sub-command
The new 'cert-eval-rule' sub-command of sssctl show the results of given
matching and mapping rules on a given certificate. This should help to
find suitable mapping and matching rules and to understand why given
certificate is matched or not.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3676a4fba473b93df2b32fb143ef0b261d04d9f6">3676a4fb</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add get_digest_list() and get_hash()
Add support to calculate hash/digest values of binary data, e.g. of a
certificate.
Resolves: https://github.com/SSSD/sssd/issues/6404
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0a906107322fffc17757480f9e540796f9f181ce">0a906107</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: dump new attributes in sss_cert_dump_content()
Add the newly discovered certificate values, i.e. serial number, subject
key id and SID to the output of sss_cert_dump_content() which is used
e.g. by 'sssctl cert-show'.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1303c6241bb27ef902787dcd526aeaae3417063a">1303c624</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add LDAPU1 mapping rules
Add mapping rule templates for the new discovered attributes, templates
for certificate hashes and templates to select individual DN components.
To avoid issues with older versions of the library the new templates
must use the prefix LDAPU1.
:feature: New mapping template for serial number, subject key id, SID,
certificate hashes and DN components are added to
libsss_certmap.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4ac53fb5ef95cd2c94f076299aa4d3213c3c9be6">4ac53fb5</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add tests for new attributes and LDAPU1 rules
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/882f560e68a881a95d7f66745a3530176bdd0a66">882f560e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: add LDAPU1 rules to man page
This patch adds the new LDAPU1 mapping rule templates to the sss-certmap
man page.
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b0bdf712eb632f94e9925d32fb703bdfd574e11d">b0bdf712</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-02T15:24:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: Add documentation for some internal functions
Resolves: https://github.com/SSSD/sssd/issues/6403
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/80690213f25855eecfa5345f43af37226bc34458">80690213</a></strong>
<div>
<span> by Weblate </span> <i> at 2022-12-02T18:27:01+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Korean) currently translated at 63.5% (1657 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 62.6% (1633 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 62.0% (1618 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Korean) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Korean) currently translated at 62.0% (1618 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Georgian) currently translated at 7.8% (52 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ka/
Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/
po: update translations
(Korean) currently translated at 61.8% (1612 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/664a436e9ce758554938183d1475e7353020e495">664a436e</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-12-05T10:18:39+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: gssapi test fix
minor flake8 fixes
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8b09c9387e55b177d6b1ec65afe65e354e19b96b">8b09c938</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-12-05T11:22:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Translations: add missing `tools/sssctl/sssctl_cert.c` and macros
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/714ababe8c96cd3a43d3c114cf853ce4a259fd0f">714ababe</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2022-12-06T16:08:00+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: deprecate `--enable-files-domain` build option
:relnote:`--enable-files-domain` configure option is deprecated and
will be removed in one of the next versions of SSSD.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2fda8e7b7e71dd5ebdc7297449d3afc52ac9eb03">2fda8e7b</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2022-12-06T16:08:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>RESOLV: Configuration option for DNS search
DNS search may increase the time of name resolution significantly.
Particularly when SSSD is misconfigured or the DNS server is
unreachable.
With this patch SSSD can avoid DNS search and the list
of domains from resolv.conf is ignored. To avoid DNS search in
kerberos library SSSD appends the dot to the server names before
they are written into KDC info file.
:relnote: SSSD can be configured not to perform a DNS search
during DNS name resolution. This behavior is governed by the
new dns_resolver_use_search_list. This parameter can
be used in the domain section. Default value is true - that
means that SSSD follows the system settings.
Resolves: https://github.com/SSSD/sssd/issues/5390
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aac303e84b71325d3c45fa7a22f83f7f54d4b7a2">aac303e8</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2022-12-09T13:22:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>p11: fix size of argument array
Currently 19 options can be set for p11_child and the a NULL at the end
the array must have 20 elements.
Resolves: https://github.com/SSSD/sssd/issues/6479
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/34d55884c6349d2c576a625bfbfcbfbc4f3c146f">34d55884</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2022-12-09T13:22:39+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BACKEND: Reload resolv.conf after initialization
Once the backend initialization is finished, in particular after D-Bus
is initialized, reload the resolv.conf file to retrieve any change
signaled through D-Bus before its initialization.
Resolves: https://github.com/SSSD/sssd/issues/6383
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/81eb0606d5ea1ce79c0fdd1d71784bb01a682e03">81eb0606</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2022-12-09T13:23:51+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Minor fixes for alltests
Enable files domain.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4a658e6ccf7a3b2cd5fb9d1827d0caec6b8dc961">4a658e6c</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2022-12-09T13:24:19+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: port proxy_provider/rfc2307bis
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/tree/RHEL8.6/client/proxy_provider/rfc2307bis
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7c5dd878392c1e69cb9675e856a1112a90d56883">7c5dd878</a></strong>
<div>
<span> by Weblate </span> <i> at 2022-12-09T13:25:51+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Chinese (Simplified) (zh_CN)) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/zh_CN/
po: update translations
(Japanese) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ja/
po: update translations
(French) currently translated at 100.0% (663 of 663 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fr/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c6053c4310b94c0448fda94ca5e03f55b093e462">c6053c43</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-12-09T13:35:31+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update pot files
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/153b1c91349eb80b81d4a5040604a8ef143bf4f9">153b1c91</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-12-15T20:02:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add mark tier1_4 so pytest is not throwing warnings.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f43d8c9a0d1892c08db5b00e287ac59bf4ff48a5">f43d8c9a</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-12-15T21:13:31+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: increase timeout for covscan
Covscan task started recently taking more then six hours to finish.
Six hours is the default timeout and maximum limit for github-hosted
runner but we can increase it for self-hosted runner.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/24a5366387d29bdae51e3f4c4e8f200f46417f88">24a53663</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-12-15T21:15:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: port bash idmap testcase to pytest
Adding return messages and backup/restore of sssd
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e8b97c14b8ef218d6ea23214be28d25dba13886">7e8b97c1</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2022-12-16T12:10:55+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ldap: update shadow last change in sysdb as well
Otherwise pam can use the changed information whe id chaching is
enabled, so next authentication that fits into the id timeout
(5 seconds by default) will still sees the password as expired.
Resolves: https://github.com/SSSD/sssd/issues/6477
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ddd85f95db69b49202d8da012597460b743ce460">ddd85f95</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-12-20T13:15:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: change tier of dyndns tests
dropping dyndns from gating, till tests are
stable
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/02bdef7d7577aa0eaf10e1920714870d36c277a6">02bdef7d</a></strong>
<div>
<span> by MCJ Vasseur </span> <i> at 2022-12-20T17:57:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typo (pasword -> password)
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2fa80dbd27300198fd3f3e0210498ec37821a050">2fa80dbd</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2022-12-23T14:25:10+05:30 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Dropping idmap
Test is unstable, moving out of gating for
further investigation
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/08784536316dee88d6e351d34e2c52b6094b9a88">08784536</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2022-12-23T11:49:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>cfg_rules.ini update
The option kr5_realm was listed twice. The option krb5_kdcinfo_lookahead
was missing.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c4ea28511c4df96e2d3c663d0c7af7d956ab6df4">c4ea2851</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2022-12-23T11:53:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Move some less important scenarios from tier 1 to tier 2.
Skip test_0015_ad_parameters_ad_hostname_machine on multiarch
as it is unstable there.
Move test_0002_improved_use_negative_sid_for_sid_lookup to tier 2
as it is unstable so it does not block gating.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/42842c16ad7b6c39e65f8cb2156f05b3c8c01d7a">42842c16</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-01-05T13:30:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: bz2110091 sssd starting offline after reboot
changing tier. logs and cache are cleared.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0da99b73e5cf50552a6460c9d3080d2c1e2864ff">0da99b73</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SDAP: Fixed header file
The sdap_access.h header file was not including the sdap_id_op.h
header file it depends on.
Build worked because sdap_id_op.h happened to be always included before
sdap_access.h.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/11dab864e1dcf8ec362610263010e920556f6b93">11dab864</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Localize some forgotten words.
The units (days, hours, minutes) were not localized although they were
used in a localized sentence.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/475052a29ba368a5da8b287c8b2e889769af1d3e">475052a2</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LDAP: Moved and renamed set_access_rules()
Function set_access_rules() was renamed to sdap_set_access_rules(),
moved from ldap_init.c to sdap_access.c and made public.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ae74a9d1f8e8698afdf38a2634d18018890c13d6">ae74a9d1</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: Add password expiration warning when using ssh keys
When using IPA as access provider, it now reads the ipa_access_order
parameters from the configuration and, between others, it can process
the pwd_expire_policy_warn.
The accepted values for ipa_access_order are:
- expire (default)
- pwd_expire_policy_reject
- pwd_expire_policy_warn
- pwd_expire_policy_renew
There is no ipa_pwd_policy parameter. Internally it is forced to the only
accepted value: mit-kerberos.
Resolves: https://github.com/SSSD/sssd/issues/5080
:config: ipa_access_order parameter introduced. It behaves much like
ldap_access_order but affecting IPA domains (id_provider = ipa) and
accepting limited values. Please see sssd-ipa(5) for more information.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be84d6ee83e5c0f8ff6e0fd988f5cf344b25efe5">be84d6ee</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Warn that the password has expired when using ssh keys
When using ssh keys and the LDAP_ACCESS_EXPIRE_POLICY_WARN flag,
the user is notified is the password is about to expire, but
nothing was said if the password had already expired.
This patch introduces a message when the password has expired.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ede02a201762df5130ccf8578f247bede9088b89">ede02a20</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:31:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: Cosmetic changes to sssd-ldap.5
Three values of ldap_access_order are presented as an itemized list.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cfd71fec6e01ae0c81157bc43ef526ba464fbb25">cfd71fec</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MONITOR: Move the file monitoring code to util.
Everything still works as before, but now the code used in sssd to
monitor resolv.conf is moved to a separate file (util/file_watch.c)
and everything is more loosely coupled.
This is in preparation to move the monitoring to the backends.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d4e574475be2ec754376886ac0f0315ae78ec417">d4e57447</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: Add a test for file-watch
New tests using the file watching feature with both inotify and
polling.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e1c0af26e63788a686415ee579fd8c19a4e75007">e1c0af26</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN PAGES: Make try_inotify dependent on HAVE_INOTIFY.
When HAVE_INOTIFY is not defined (inotify not present), the descrition
of try_inotify in sssd.conf.5 man page will only tell that this is not
used in systems without inotify.
If HAVE_INOTIFY is defined, the full description if provided.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fadd8eb6cda21b6e44b15d51593e7fa3e1186ed2">fadd8eb6</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BACKEND: Move resolv.conf watching to the backends
Moved from the monitor, which no longer reads the file neither
notifies the backends they must read it.
The file is now monitored by the backends and read immediately
after start watching it.
Resolves: https://github.com/SSSD/sssd/issues/6383
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2e3fa180dc720a7b393c4763ed401496ff0c8ab6">2e3fa180</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>D-BUS: Remove resInit() method from sssd.services
This method was used by the monitor to tell the backends to reload
/etc/resolv.conf when it detected a change in the file. It is no longer
used as the backends now watch resolv.conf by themselves.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c97d92754baec4f4bd2de1af9dfba6d4b18a10f2">c97d9275</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>FILE WATCH: Get rid of parent_ctx
parent_ctx pointed to the memory context to use for the timers.
It pointed to the file_watch_ctx which contained it, so better use
the file_watch_ctx and avoid having an extra field, and having to
pass the memory context as a parameter.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/729c1fc2da38fb7eb529e494a2a26be4f85e2720">729c1fc2</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-01-05T13:45:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>FILE WATCH: Simplify watching on missing files.
This code is needlessly repeated in fw_watch_file() and missing_file(),
and it's enough to simply call missing_file(). But since now this
function is used even before knowing whether the file exists, it is
better to rename it to set_file_watching().
A side effect of this is that watch_file() (which ends up calling
inotify_add_watch()) returns EOK even when the file is missing,
and thus the callback is invoked once. Considering that the flag
IN_CREATE was always passed to inotify_add_watch(), I think this
could have been hidden by the old code.
Polling for the file creation is no longuer used when inotify is used.
But because it is still required when inotify fails to initialize (not
installed) or use_inotify is set to false, this code cannot be removed.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/29326450900a483ff8f4818c3bf55110d1938961">29326450</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-06T20:15:51+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SBUS: don't call `dbus_server_get_address(NULL)`
Resolves: https://github.com/SSSD/sssd/issues/6465
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/76c7fa46302da86a3598c8b69c8568f0e615e3c6">76c7fa46</a></strong>
<div>
<span> by aborah </span> <i> at 2023-01-13T08:59:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: make corresponding tests capture SSSD logs
To capture sssd logs in IDM-CI incase of sssd test failure.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8cda19e28162f02a7406816fbb30326144e3a37c">8cda19e2</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-01-13T08:59:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: bz2128840 automation
minor indentation fix
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2bd0c249bfb2ca7160d02e62a00f0fd232b7c247">2bd0c249</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-01-13T09:00:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Ported Bash-krb-access-provider to pytest
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a5176f4d9393de52874642fdacbdd993fa9b181c">a5176f4d</a></strong>
<div>
<span> by aborah </span> <i> at 2023-01-13T09:00:37+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: SSSD: `sssctl analyze` command shouldn't require 'root' privileged
`sssctl analyze` command shouldn't require 'root' privileged when run with `--logdir`
pointing to otherwise accessible files.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/067c550cf89b24a49cc645b91753c5525f88d4a9">067c550c</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-01-13T09:00:55+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Test for bz2144491 UPN mismatch
UPN check cannot be disabled explicitly but requires krb5_validate = false as a work-around
Bugzilla:
- https://bugzilla.redhat.com/show_bug.cgi?id=2148737
- https://bugzilla.redhat.com/show_bug.cgi?id=2144491
- https://bugzilla.redhat.com/show_bug.cgi?id=2148989
- https://bugzilla.redhat.com/show_bug.cgi?id=2148988
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4e600d9b9ba4d0f81b94e216d7e238b62edcb7a4">4e600d9b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-13T18:20:54+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Added a number of missing new lines.
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/723872f3eb245155c8aafbd3553496fa0cd7198e">723872f3</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-01-14T00:35:01+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: remove flake8 action
When a new issue is found, the action is unable to report it properly in
the PR and it fails.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b631c3174a3f8f5c169e9507969015dd79fdfd80">b631c317</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-16T13:08:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: mention `attributes` in 'see also'
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/08ccd23fb2c831d6ea918a59b777a0073d414858">08ccd23f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-16T13:09:26+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: delete key in lib destructor
pthread_key_delete() disables thread at-exit destructors.
Otherwise an attempt to execute already unloaded `sss_at_thread_exit()`
would trigger segfault.
This doesn't solve an issue with leaking on `dlclose()` FDs initialized in
multiple threads, but better than crash.
Resolves: https://github.com/SSSD/sssd/issues/6505
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/927fa8433ef5f56800a744f285bb107b7364d105">927fa843</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-01-17T12:59:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: register discoverable credentials
Apart from server-side credentials passkey should also register
discoverable credentials. Thus, a new argument has been added to select
the credential type. Moreover, the user id is also printed. Example:
passkey:credentialId,pemPublicKey,userId
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/62654e25406679beb3d194e41a690ebabf7827b8">62654e25</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-01-17T12:59:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: user id for discoverable credentials
If the credential is discoverable, then print the user id.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bd02f6378fa784b93fa1b005445a5e613e592434">bd02f637</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-01-17T12:59:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: fix uninitialized variable
616 in authenticate()
610 goto done;
611 }
612 613 ret = FIDO_OK;
614 615 done:
>>> CID 377752: Uninitialized variables (UNINIT)
>>> Using uninitialized value "pk_data.type" when calling "reset_public_key".
616 reset_public_key(&pk_data);
617 if (dev != NULL) {
618 fido_dev_close(dev);
619 }
620 fido_dev_free(&dev);
621 fido_assert_free(&assert);
622 fido_dev_info_free(&dev_list, dev_list_len);
623
624 return ret;
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7caf2da3c5e4fd4e633c71183272118bb2065d11">7caf2da3</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-01-17T11:17:12-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fixing dyndns tests
The server may not update DNS right away, updated the function to
perform a lookup up to 5 minutes, otherwise the test will have failed.
Signed-off-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4e9c2fdbeec635d723e60842a335183a20fc425a">4e9c2fdb</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-01-19T12:09:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: clean up group delete fix
from correct 'ou' group object deletion fix
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5021d2394a4611fadc15898ade99a51050212bba">5021d239</a></strong>
<div>
<span> by aborah </span> <i> at 2023-01-19T12:09:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix minor error in root privilage test
mkdir: cannot create directory ‘/tmp/sssd’: File exists
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/718afc297a46bbacf3ba20a4889a333d50bd7e90">718afc29</a></strong>
<div>
<span> by Florence Blanc-Renaud </span> <i> at 2023-01-26T12:54:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: flush stdout
IPA command "ipa user-add-passkey --register" reads the output
of passkey_child line by line in order to re-print the useful
messages and extract the generated passkey.
Flush stdout so that ipa gets the messages without delay.
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/501e05f46252ba6e097983a871c92b3896b596f2">501e05f4</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-26T12:55:06+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: remove `--enable-files-domain` build option
:relnote:Previously deprecated `--enable-files-domain` configure option
was removed.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6b048a6a12b12fb22d2ad955ab63cb7ecfab1d49">6b048a6a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-01-26T12:55:06+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>INTG TESTS: make `get_call_output()` respect `check` arg for Python < 3.7
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/708a924a1533a16af08053221ce81fe0da2ee0ff">708a924a</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-02-01T14:20:55+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Changes to the version handling and fixture create_testdir.
Function package_mgmt was not handling RHEL 9 properly.
service_sssd was doing exactly nothing on RHEL 9.
Fixture create_testdir was needlessly iterating lists via indexes
and duplicating code.
Removed some useless elses after return.
Fixed import order.
Switched to f-strings.
Disabled some pylint warnings.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/32a8b9538f02f5679d3df57745e5abb471e0255c">32a8b953</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-02-01T14:20:55+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Optimize winhost properties
QeWinHost class had properties that were repeatedly calling command line commands.
This was slow, inefficient and created mess in the test logs.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7a68ed1f6fa8a734b400530ca9d49b0d50e6c9fe">7a68ed1f</a></strong>
<div>
<span> by aborah </span> <i> at 2023-02-02T11:50:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix ipa tests wrong ipa_client_ip
Fix ipa tests wrong ipa_client_ip
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d249154c03d67ba358b2e279264111cd1b9ded38">d249154c</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-02-02T11:53:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: porting of failing rfc2307bis testcase
change to tier1_4
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c0b394ab2c72b2e8d4d6701cf604c4c3d2e15815">c0b394ab</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-02-02T12:02:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sudo: skip smart refresh if it happens inside full refresh
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fc4f0399b150f5191726e2714a1a3918fee635ea">fc4f0399</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-02-02T14:40:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix incorrect distro parsing in qe_class on Fedora.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/13d420ca70d50e2137582bab561ab873c9061e56">13d420ca</a></strong>
<div>
<span> by aborah </span> <i> at 2023-02-09T07:19:54+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix test test_0017_filesldap
Logs string has changed.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4138b0a732d30ef1eec7380e73e817e3d86e704d">4138b0a7</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-02-09T13:11:10+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: ldap_group_name enhancement with nested groups
Resolves: https://github.com/SSSD/sssd/issues/6544
Reviewed-by: Scott Poore <spoore@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fe67123cc106a57e8087e518f9ef60606c0f5f10">fe67123c</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-02-09T13:11:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONFIG-CHECK: Extracted code checking 'inherit_from'
Extracted the code checking that 'inherit_from' is not present in a
domain section from custom_sssd_checks() to its own function named
check_domain_inherit_from().
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1911ad64fbdd957235df29ee8b7315b8130e9ac4">1911ad64</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-02-09T13:11:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONFIG-CHECK: Function always returns EOK
The function custom_sssd_checks() ignored the error codes and always
returned EOK. Now it returns the corresponding error code.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/255d9f6e8974e219958204aab8623f186b9a928e">255d9f6e</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-02-09T13:11:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHECK-CONFIG: id_provider is now mandatory
For domains, the presence of 'id_provider' was accepted but no other
check was done. In particular, this option is mandatory and has a
limited set of accepted values. These changes introduce those checks.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f604d033f89f49ec6061ef5e9de40554731fca23">f604d033</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-02-09T13:11:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: Test mandatory id_provider
Adapter the existing tests for the mandatory 'id_provider' and
created a test for the case when 'id_provider' is missing.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f283248ffc238d4601da561bfd1717601d556436">f283248f</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-02-09T13:11:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONFIG-CHECK: inherit_from is not a typo
The error message asked the user if introducing `inherit_from`
in a domain was a typo. This is an error but not a typo.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/53c8e8f0732e1d493e5bc4fc58542542149e8c18">53c8e8f0</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-02-13T12:54:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Removing unnecessary restart unnecessary restart
This allows us to do minimal changes to run existing tests, not as
the root user. Testing the non root feature of SSSD. Adding an
ansible play that creates a stub configuration file in /etc/sssd/conf.d/
i.e. /etc/sssd/conf.d/nonroot.conf containing
[sssd]
user = sssd
This sssd restart happens before SSSD is configured and when it contains
the stub file, it is an invalid configuration.
Signed-off-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3dfc82a058c31953a5cd0663e50cd00d2b052b21">3dfc82a0</a></strong>
<div>
<span> by aborah </span> <i> at 2023-02-13T12:56:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix subidranges test
Add removal of maps.sh and unshare.pid
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6ffd46d1104fa5b8150c3ace9344590394999db7">6ffd46d1</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-13T12:57:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: remove "experimental" notice off LDAP access control based on NDS attributes.
It's there since 37e7e93f1996cf50677cf59fd8af6938dd5d85b2,
clearly not "experimental" anymore.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aa5c0c9c08b74f42c5645fc9c653a2ca2bff75bb">aa5c0c9c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-13T12:57:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: remove long time unused '--enable-all-experimental-features'
It haven't been used since b2f9e5b7d553172401a340eb4a9c3abda6b5db43
:relnote: Long time unused '--enable-all-experimental-features'
configure option was removed.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0b8638d8de435384562f17d041655887b73523cd">0b8638d8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-13T12:57:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: fix error codes returned by common read/write/check helpers.
It's kind of expected that in case `(POLLERR | POLLHUP | POLLNVAL)`
error condition is detected, regular `POLLIN/POLLOUT` won't be set.
Error code set by error condition should have a priority. This enables
users of this helper to retry attempt (as designed).
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ef93284b5a1f196425d9a61e8e24de8972240eb3">ef93284b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-13T12:57:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: if poll() returns POLLNVAL then socket is alredy closed (or wasn't open) so it shouldn't be closed again. Otherwise there is a risk to close "foreign" socket opened in another thread.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bf3f73ea0ee123fe4e7c4bdd2287ac5a5e6d9082">bf3f73ea</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-13T12:57:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM_SSS: close(sss_cli_sd) should also be protected with mutex. Otherwise a thread calling pam_end() can close socket mid pam transaction in another thread.
Bug only manifested on platforms where "lockfree client"
feature wasn't built.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7fb89ab01312bba9cb4099dc874725801f12bc78">7fb89ab0</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-02-13T12:58:31+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: do not copy more than received
Since buf is not initialized to 0 talloc_strdup() might actually copy
more data than was received.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4e65400528933ea6ce31df9ca1a98d5582111d15">4e654005</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-15T15:41:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: removed outdated comment
Comment wasn't relevant since 5dccf76aff8ac5b4adf000c8b701a7a9fae506c2
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c55bb39767dbecc085992329bf0a12262e22514c">c55bb397</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-15T15:41:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Use `is_files_provider()` helper where possible.
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8e75bb6115d9f4fac481de2b87543f37fb26302e">8e75bb61</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-15T15:41:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>RESPONDERS: get rid of `NEED_CHECK_PROVIDER` helper
Since implementation of "local" provider was removed, the only
provider that doesn't need to "check provider" is "files provider".
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6ba0187e1c2766657c81da58abd9c3c30344c5a7">6ba0187e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-02-17T15:01:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: fix to handle ediPartyName
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ced32c44e16d4f8536ad0baf54d71220c0ba2db6">ced32c44</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-02-17T15:01:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>certmap: Handle type change of x400Address
Due to CVE-2023-0286 the type of the x400Address member of the
GENERAL_NAME struct was changed from ASN1_TYPE to ASN1_STRING. The
following patch tries to make sure that the x400Address can be extracted
from the certificate in either case.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d4f7ed69dbd3aad3be2c52d2da5f75af6d32e3c0">d4f7ed69</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-17T15:02:26+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MONITOR: fix `socket_activated` flag initialization
When socket activated service connects for the first time, it is added to
`mt_ctx->svc_list` by `socket_activated_service_not_found()` with a proper
`socket_activated = true`.
But when it reconnects again, `get_service_in_the_list()` finds it in
`mt_ctx->svc_list` and overwrites `socket_activated = false` unconditionally.
This patch moves `socket_activated = false` to `start_service()`.
Resolves: https://github.com/SSSD/sssd/issues/6324
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/59d2f945e310b716fc39f1c47688bd531c0bcd64">59d2f945</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-02-17T15:03:26+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fix missing new line in sss_iface.c and docstrings.rst
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f44e586424dd5fb8cb5de0616ca6ee65f4988863">f44e5864</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-02-17T15:04:28+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: fix all flake8 issues
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/61f1b8937feb0bc5d5ec05a32548fe5eec5809dc">61f1b893</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-02-23T09:20:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Ported Bash-krb-fast-principal to pytest
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/66687d8c25e98cc9a9b202d1aa738bb96d1b02d9">66687d8c</a></strong>
<div>
<span> by aborah </span> <i> at 2023-02-23T09:20:37+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port bz785908 and bz785898
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/blob/RHEL8.8/client/ldap_provider/ldap_id_ldap_auth/bugzilla-automation.sh#L424
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/blob/RHEL8.8/client/ldap_provider/ldap_id_ldap_auth/bugzilla-automation.sh#L300
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/173d0867fda1170f8ca18c68ccd175ed2f1b750f">173d0867</a></strong>
<div>
<span> by aborah </span> <i> at 2023-02-23T09:21:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port Thread issue can cause the application to not get any identity information bz847043
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/blob/RHEL9.2/client/ldap_provider/ldap_id_ldap_auth/bugzilla-automation.sh#L774
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a75557b73c6a838f4a070c1a54d4a58fb268c65b">a75557b7</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-02-23T09:23:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: porting bash range_retrieval to pytest
removing unused import
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bd803bf6b52cb6385c9c3a5aef3e2c5924d4316f">bd803bf6</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-02-23T15:28:01+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>nssidmap: add getsidbyusername and getsidbygroupname
:feature: NSS IDMAP has two new methods: `getsidbyusername` and
`getsidbygroupname`
Resolves: https://github.com/SSSD/sssd/issues/6565
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f8e711526313dcd7b05a0044aacf09603b1c1f9">9f8e7115</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-28T21:47:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: describe security risk of `cache_credentials`
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2ce24d38d72a7f4bf921aeae73c0be92e2ce9e5e">2ce24d38</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-28T21:54:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: missing domain in `sss_parse_name()` input isn't SSSDBG_CONF_SETTINGS
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f5787878e829200e7a53b2b6173a4e6170aae1dc">f5787878</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-28T21:54:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>NSS: empty result of `..._group_by_origgid()` isn't an error
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e5fba8f97759c8c46aac7539761b399104f122ae">e5fba8f9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-02-28T22:05:43+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: fix compilation issue with musl libc
Resolves: https://github.com/SSSD/sssd/issues/6487
Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/97c671e4a75af9da919af36f1f47826eb0c49f3c">97c671e4</a></strong>
<div>
<span> by aborah </span> <i> at 2023-03-02T13:41:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port automount bash tests to pytest
https://gitlab.cee.redhat.com/aborah/sssd-qe/-/tree/RHEL8.7/client/ldap_provider/automount
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/97e040f98b5a06d50264b0c7b29e7d19e22389f4">97e040f9</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-03-03T12:51:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Set cryptopolicy for master for AD fips tests.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/61d6030b113467ec0954300c14537bea2ad7e1c7">61d6030b</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-03-03T12:51:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Added entry for krb_access_provider in readme.rst
Reviewed-by: Anuj Borah <aborah@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fb5a300b493adb5a5534e68df23b6dd83bf92c4f">fb5a300b</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: Add configuration options
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fbbe9ba3fbbd132abe0713587c367399c2e7ecd1">fbbe9ba3</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>authtok: Add Passkey type
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/57152761b23f9a5798c83861cc2948a20511ad5d">57152761</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add new option ldap_user_passkey
Retrieve user passkey mapping data from the below LDAP attributes:
IPA: ipaPasskey
AD: altSecurityIdentities
LDAP: passkey
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3f24aa71fa9dd26bf589275bb0d46775b6bf9b69">3f24aa71</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Extend IPA config search
Allow providing a custom search filter and search base, enabling this API to also
retrieve passkey configuration objects.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ec67749305ac41841d89c4808c9f9a637cc65a47">ec677493</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add DNS Domain name to struct sss_domain_info
dns_name string will be populated for IPA and AD domains
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ea9bcab65c4c81fe36a43d6283f50eafcfe2b1c4">ea9bcab6</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA Retrieve passkey configuration
Retrieve the require user verification value (on/off/default) from
the IPA passkey configuration.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b92ff263c2a918d727c016905959ed4bf7cb9c2c">b92ff263</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Call the passkey helper binary
When passkey auth is enabled, call the passkey child to interact
with the passkey device.
Resolves: https://github.com/SSSD/sssd/issues/6558
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7f8fe399496d211d365f0054edf61fc611ec86ed">7f8fe399</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Support Passkey prompting config
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/64f98463ac620b868d1ac8657bb9269707fc1f7d">64f98463</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Passkey (Pre)auth
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/938676a37e40a4345e25acd234ef79d25888ee8f">938676a3</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Passkey prompting config
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/64aa2672e806bcf4631473d22b103a0369cc53ba">64aa2672</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Add destructor for passkey pin
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5a22aefbc7acbafb2b0596eee0e9c668ea8e4b6d">5a22aefb</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-03T12:52:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Covscan NULL check for cache req result domain
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7356881cd4d8116e52fc8b82c32747b12621fa80">7356881c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:49:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SDAP: removed leftovers after 65bd6bf05d75c843e525f8bf89e9b75b02a2bfb7
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a9bc94f0e438eb2d6c9e47065d93e3dbf8a8f02a">a9bc94f0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:50:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>INTG-TESTS: add missing files to Makefile.am
Resolves: https://github.com/SSSD/sssd/issues/6588
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5c83deb5d87074ccbaf575edb28017fb8b13b8a9">5c83deb5</a></strong>
<div>
<span> by bluikko </span> <i> at 2023-03-07T20:50:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>src/util/domain_info_utils.c: fix typo
Typo in libdefaults typed as kibdefaults.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/47f82a4180ac8d3a68694dbee52974cb620ab274">47f82a41</a></strong>
<div>
<span> by Gioele Barabucci </span> <i> at 2023-03-07T20:51:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Makefile: Install dbus policy in /usr, not /etc
>From <https://bugs.debian.org/1006631>:
> dbus supports policy files in both `/usr/share/dbus-1/system.d` and
> `/etc/dbus-1/systemd`. [The] recently released dbus 1.14.0, officially
> deprecates installing packages' default policies into `/etc/dbus-1/systemd`,
> instead reserving it for the sysadmin. This is the same idea as the
> difference between `/usr/lib/udev/rules.d` and `/etc/udev/rules.d`.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/067cc5cce373a86e9b29a38a38b78aad7caf8df8">067cc5cc</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:51:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: make "files provider" build configurable
:relnote:"Files provider" (i.e. `id_provider = files`) is deprecated and
might be removed in further releases. Those who are interested to keep
using it awhile should configure its build explicitly using
`--with-files-provider` ./configure option. Or consider using "Proxy
provider" with "proxy_lib_name = files" instead.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/978ef179424bb8a969247f1430ad602a79cfe37a">978ef179</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:51:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: force inline `is_files_provider()`
This hopefully will ensure that compiler optimizer will remove unused
code that depends on `if (is_files_provider())` branch in case files
provider isn't built.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c53390a831d7fa847f1eb235fe206751ac8b1f64">c53390a8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:51:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DP: warn loudly if config uses 'files' when support wasn't built
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8962eaca5590b75b0c14e79e8333f01197f62a59">8962eaca</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-07T20:51:49+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>INTG-TESTS: enable '--with-files-provider'
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e623fac7edc69bedadedfbaf79d07d1c72d310f0">e623fac7</a></strong>
<div>
<span> by Timotej Lazar </span> <i> at 2023-03-09T11:25:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: use echo instead of /bin/echo in Makefile
The binary might be somewhere else or not available at all during build.
No special features are needed so the shell builtin is enough.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9fd8da284f34093fb32d5af85e9fcc10177c7ad3">9fd8da28</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-03-09T11:25:59+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fixed domainname value in krb_ldap_connection
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/34f1c222c90acb64ba8e32ca2e1594d622ac69d1">34f1c222</a></strong>
<div>
<span> by SargunNarula </span> <i> at 2023-03-09T11:25:59+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Reused sssdTools Instance
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/30daa0ccdae58d9182e89e2caa2a963da0d79dc9">30daa0cc</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-03-09T11:27:30+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: update to include passkey
Update the spec file to include the passkey feature. Made it
configurable so that it can be disabled, added the dependencies and the
passkey subpackage, and also include the passkey_child.
:feature: New passkey functionality, which will allow to use FIDO2
compliant devices to authenticate a centrally managed user
locally. Moreover, in the case of a FreeIPA user, it will also
issue a Kerberos ticket automatically.
:packaging: Include passkey subpackage and dependency for libfido2.
:config: New options to enable and tune passkey behaviour:
'pam_passkey_auth', 'passkey_verification',
'passkey_child_timeout', 'interactive', 'interactive_prompt',
'touch' and 'touch_prompt'.
Resolves: https://github.com/SSSD/sssd/issues/6228
Relates: https://github.com/SSSD/sssd/issues/6551
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/712377ea5c5b70a71e4fdb1b1c40ad059157778c">712377ea</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-03-09T11:28:34+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add system tests using pytest-mh framework
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9145544fdc50856cc984ad5d26bf01cff0bc18df">9145544f</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-03-10T09:28:16+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a remedy for a missing multihost_dir.
Move the create_testdir fixture to fixtures.py and make sure that it is used.
Extend it to create testdir and env.sh also on windows machines.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/50a3a1911cbd5004dda54ebdaee80469dc8db015">50a3a191</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-10T09:29:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Use correct User verification comparison
IPA require user verification configuration value changed from
"on, off, omit" to a boolean value of "True" or "False".
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1c55f0d4c86f8f4d3e669c299cd978ce6ff45ae7">1c55f0d4</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-03-13T10:40:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Refactor join ad.
Refactored pieces for joing and leaving ad to reuse more code.
Changed realm join to use DC instead of realm to mitigate machines on different
networks that breaks auto-discovery.
Lock resolv.conf so it is not broken by cloud-init after machine reboot.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/80d28babbc6e22ae88b85e528dc677acca4adbed">80d28bab</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-03-13T12:59:58+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Make sure that session_multihost.ad is always available.
We need it to be defined at least as an empty list so we do not get an
AtributeError when we try to iterate over it.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cc0545b4e851f41a690b44fbd96bca27e0ebaf25">cc0545b4</a></strong>
<div>
<span> by aborah </span> <i> at 2023-03-22T10:20:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port Bash Password Policy to pytest
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/blob/RHEL8.7/client/ldap_provider/ldap_id_ldap_auth/password_policy.sh
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/96a0e9fbebc449c8628a4c1d81f0549af976416d">96a0e9fb</a></strong>
<div>
<span> by David Härdeman </span> <i> at 2023-03-23T10:36:56+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LDAP: Handle MIT LDAP KDB password expiry
Currently SSSD only treats a missing krbPasswordExpiration attribute as
an indication that a given password never expires (which is how the
FreeIPA KDB plugin handles the expiry). The MIT implementation, however,
treats *either* a missing attribute *or* a zero attribute as meaning that
the password doesn't expire.
$ kadmin getprinc bob
Principal: bob@EXAMPLE.COM
...
Password expiration date: [never]
...
$ ldapsearch -Z -x -LLL "(uid=bob)" | grep krbPasswordExpiration
krbPasswordExpiration: 19700101000000Z
Note that 19700101000000Z == (time_t)0
Resolves: https://github.com/SSSD/sssd/issues/6612
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ce81f017f3178bcc112072285a90df5faa08c58d">ce81f017</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-03-23T10:37:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: include requirements.txt in system tests documentation requirements
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/df7a5c33ae625010759d7030a5565dbe22404353">df7a5c33</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-03-23T10:37:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: build systen tests documentation in readthedocs
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/42594c375e25c5d51468f099cfd461a79febb222">42594c37</a></strong>
<div>
<span> by HelloCarry </span> <i> at 2023-03-23T10:37:57+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fix sysvol_gpt_version may be used uninitialized
Resolves: https://github.com/SSSD/sssd/issues/6610
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9aece27dda8c1a1845008bf3b08693661d468b40">9aece27d</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-03-23T10:38:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Adding ptr zone creation to class setup
The AD server maybe provisioned onto a different subnet than the client,
adding a fixture to add both the AD server and client PTR zones to DNS.
In addition, cleaned up the find_a and find_ptr functions to remove
false positives.
Signed-off-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/92d1b4699415f70f8f46db77be2ca7378b1d4b31">92d1b469</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-03-23T11:16:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: move select authenticator
Move select authenticator logic to its own function.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bccdc2af20b895970baed58494d06adcba14ad48">bccdc2af</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-03-23T11:16:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: obtain assertion data
New action to obtain the assertion data. For that purpose, prepare the
assertion request data, select the device to use, select the
authenticator, get the device options and compare them with the
organization policy, request the assert, get the authenticator data, get
the signature and print this all information.
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f77ec4f5020fb10f4f56f86e8092f41d51dec62c">f77ec4f5</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-03-23T11:16:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: verify assertion data
New action to verify the assertion data. To this end, prepare the
assertion data, including the authenticator data and the signature;
decode the public key and verify the assertion.
Resolves: https://github.com/SSSD/sssd/issues/6228
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8218634df52dd33524e724e78dded2deb1aa283e">8218634d</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-03-23T11:16:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: replace printf by PRINT
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c6db359fa8b75ed0d03b7211c588e8c317d80c26">c6db359f</a></strong>
<div>
<span> by aborah </span> <i> at 2023-03-27T10:20:41+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix restore work for ipa test
Fix restore work for ipa test
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b3c681a7b3591c64df94b9f1e45b92097a24a0c0">b3c681a7</a></strong>
<div>
<span> by aborah </span> <i> at 2023-03-27T10:21:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port bash inmemory_cache test suit to pytest
https://gitlab.cee.redhat.com/sssd/sssd-qe/-/tree/RHEL8.7/client/ldap_provider/inmemory_cache
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/132fb4016be5e7eafe54440cce106dba3f269dd4">132fb401</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:43:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Deprecate 'sss_simpleifp' library.
:relnote:'sss_simpleifp' library is deprecated and might be
removed in further releases. Those who are interested to keep
using it awhile should configure its build explicitly using
`--with-libsifp` ./configure option.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c586b9a28f4b2d34010af7bf7cae53b418d26b06">c586b9a2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:44:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>RESPONDERS: delete obsolete 'responder_sbus.h'
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/437dbe9e1f76fa6e1c91a578c425b431237ad6a7">437dbe9e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:44:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MONITOR: currently only 'ifp' doesn't support running as non-root
This should be easier to read.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e2106c946c933759f0769e5179bb9f743abc0574">e2106c94</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:44:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUDO: fix mistype
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5159992d7e15ba6cfd16d6be80067db87c242768">5159992d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:44:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>RESPONDER: use safe helper
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/64424963a255c747973f6b71cab54e1b01bdbca9">64424963</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:44:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: sanitize `cli_creds_get_*` macro
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/55e27a423d4065aa419e1bd80db1826eb8264c4a">55e27a42</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-03-27T12:44:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Switch default caches only when there is no current default.
Only when there was a current default cache
(uuid_is_null(old_dfl_uuid) == false), the default cache was switched.
This condition should be negated so that the cache is switched when
there is no current default.
Resolves: https://github.com/SSSD/sssd/issues/6357
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0e25f0d19986d47c86c2e75ceaa3b66499a85ec9">0e25f0d1</a></strong>
<div>
<span> by answer9030 </span> <i> at 2023-03-27T12:45:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fixed pid wrapping in sss_cli_check_socket
Resolves: https://github.com/SSSD/sssd/issues/6592
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5c363bfbfb6aee507e4d966df4f45b39e5f00b91">5c363bfb</a></strong>
<div>
<span> by answer9030 </span> <i> at 2023-03-27T12:45:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fixed the problem of calling getpid() and lstat() twice in sss_cli_check_socket()
the second call to getpid() and lstat() is redundant.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ae691f0b415ad0bcf09a39d0272331fd74d65299">ae691f0b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-03-27T12:46:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>NSS: change default value of 'cache_first' to 'true'
Having 'cache_first' as 'false' is a performance degradation without a reason
in the multi-(sub)domains enviroments (typical case when AD is involved).
But there is a subtile issue that doesn't allow to switch default when
'files provider' is used.
:config: Default value of 'cache_first' option was changed to 'true' in case
SSSD is built without 'files provider'.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cfc591d6519e73572eb7750770b5e6ce3ba9a1d4">cfc591d6</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-03-27T12:47:50+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SDAP: Include struct ldb_dn in struct sdap_search_base
struct sdap_search_base includes the DN as a string. To better
compare the DNs it is better to use a struct ldb_dn, in addition to
the string.
The struct ldb_dn also needs to keep the associated struct ldb_context,
so we are also storing it in the structure.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/84e7dbc9bdd53b99a12e4625dbb2fed1e63e729a">84e7dbc9</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-03-27T12:47:50+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SDAP: Ignore the cn=views entries in nested groups
When resolving the nested groups, ignore any entry in
cn=views,cn=accounts,$BASEDN (or whatever the user configured).
Resolves: https://github.com/SSSD/sssd/issues/6548
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e9d5825d1c331bc8bfb28a1d2ac456a085ba380">9e9d5825</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-03-27T12:47:50+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Test that cn=views is ignored.
Add a new test to check the ignored search bases.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/62cb54dc2774c3118ed88ef5ff2295dace610ffc">62cb54dc</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-03-30T12:17:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: make pytest-ldap aware of TLS options
OPT_X_TLS_NEWCTX must be set to create a new TLS context after
changing TLS options in order to actually use them in python-ldap.
This is required to run the tests inside idm-ci where the internal
hostname that is used in certificate does not match the external
hostname or IP address that is used to connect to the remote host.
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/745379bc4aa9f064f10d534f413389341869b551">745379bc</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-03-31T12:30:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: Switch passkey-exec to passkey-register
Users currently only need to call --register
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f46fe473cddfa3d45c52131c15593ecbf8534334">f46fe473</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-03T09:37:32+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Skip test_0002_ad_parameters_junk_domain on multiarch
The test does not work properly on multiarch due to beaker being
on a different network than openstack.
Fixed some misleading comments.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9c17615a771aa2c28929cbbf6104d87f4fef23a6">9c17615a</a></strong>
<div>
<span> by aborah </span> <i> at 2023-04-04T12:12:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: don't fail if chattr file doesn't exist
error: DEBUG - chattr: Operation not supported while reading flags on /etc/resolv.conf
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ad68d71c3797854894f8f787251b0affb2698861">ad68d71c</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-04T12:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: add Kerberos plugins
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a16c2563cfb4e0d4c9b6f0c2aa06a04932a07ac">2a16c256</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-04T12:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>idp: switch to common API for radius-style plugin
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cdfe2c5154766fbb54d2e484112832c03da62c01">cdfe2c51</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Authtok: Support SSS_AUTHTOK_TYPE_PASSKEY{_REPLY}
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5de070f9487bd33c964d8da2f3207b7c416d3d59">5de070f9</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pam_sss: Add passkey kerberos preauth support
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7c34742c4518bd61ce391eb01314679fbef92dc7">7c34742c</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: Add passkey kerberos preauth support
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c76ba343b783718468a3a108346d424f9a70eb76">c76ba343</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: Passkey kerberos preauth support
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9869e487571d3b841c1163e247b4104a8c230dd6">9869e487</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: Increase child buffer and chunk size
Passkey data can be larger than 512 bytes.
Received passkey data from krb5 with multiple credentials
exceeds 256 bytes.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/88f4d3cf7b147c1973b8a29094159f4b08eceb03">88f4d3cf</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Add util function to prefix passkey data
Allows converting passkey child --get-assert output to
the format which the passkey krb5 plugin expects.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1032ca21d36d2145bf88030416ca6572fc2dfa50">1032ca21</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: Clarify user_verification will be overwritten
The user_verification sssd.conf option for passkey will only be used
LDAP or AD, in the non-kerberos pre-auth case.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bb21171b7405bac797d5e90411e790d4e6411e7c">bb21171b</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Changes to debug_libfido2 option
Change debug_libfido2 to passkey_debug_libfido2 and
move from passkey verification options to PAM option
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5744bad7db52f63b4387d5fcdb18dbe6168c8e93">5744bad7</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-04-04T12:13:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Amend PAM Preauth tests
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e061fc06373ed6837c1f86136150d0765c84c9e">9e061fc0</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-04T14:58:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Remove keytab on realm leave.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a5efc5e634b0ab3ea43736d7325acca1004ee0ce">a5efc5e6</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-04T14:59:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: fix type errors due to type enhancements in jc
The library we depend on `jc` made its typing more specific so we
need to check that we got the expected type.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3d0fcca3c1712ced53d97d456f245c6c867ed110">3d0fcca3</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-04T14:59:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: avoid list() and dict() as default parameter value
"Default parameter values are evaluated from left to right when the
function definition is executed." which means that the list or dict
is created only once and then the same reference is passed to the
function with each invokation, so the function calls can be affected
by the previous one.
See:
https://docs.python.org/3/reference/compound_stmts.html#function-definitions
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a825b28b1eb073565204cc64495d0f58c63db105">a825b28b</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-11T10:06:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: fix copyrights and comments in krb plugin
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/576a1c19a68fe9dab06722e18981977c0cf20482">576a1c19</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2023-04-11T10:07:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Automation of bug, bz2100789, which test id_provider parameter from domain section
Add automation of bug which check id_provider parameter from
domain section.
Conatains following two test cases:
1. Test when domain section does not have id_provider
2. Test when id_provider's value is invalid
verify:
#https://bugzilla.redhat.com/show_bug.cgi?id=2100789
#https://github.com/SSSD/sssd/pull/6550
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bc5de68686c424269f4b2ffdb71e6abcd57bd926">bc5de686</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-13T12:25:27+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a timeout to realm join for AD, modify realm leave.
The realm join gets stuck on other architectures particularly on s390x.
This makes it fail and suite can continue running instead of waiting
for timeout for the whole suite.
Handle the edge case when realm leave fails for the machine and removal from AD
is also not done resulting in the following tests unable to join as the machine
is already present on AD.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e794bfdeab6bdead49bc2456f1b63254902dec6f">e794bfde</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-14T12:11:40+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: prepend pr copr build with high version number
Currently, it is not possible to simply install the copr pull reques
package because number is considered to be higher then a string version,
therefore 2.8.0 > pr6286 and dnf considers it a potential installation
to be a downgrade which may cause conflicts.
Prepending 9 makes sure that the pull request copr build always wins.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/526aea3e8cb48dbfaabb009e06236828ad903429">526aea3e</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2023-04-14T12:12:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: Improve re_expression defaults
The original defaults of re_expressions did not use "^" so they
may skip/ignore some leading character (@ and \).
The new defaults uses ^ and $ to be sure that all characters
are used.
Resolves: https://github.com/SSSD/sssd/issues/6635
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b78b508b1dbdb78c8d17916472a3398d67f76bbd">b78b508b</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2023-04-14T12:12:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>responder: regexp cleanup
Update ifp and ssh responders to use regular expression
defined centrally.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/255c01a1c8d36ff4256b5fb1bac170091826a167">255c01a1</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-17T09:10:41+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix error in cifs tests.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c3a0b5f07d2a409c6bab99eeaec0ac802778f70f">c3a0b5f0</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-17T11:57:59+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: split system test framework into standalone repository
This change allows other project to use the framework as well.
https://github.com/SSSD/sssd-test-framework
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/08711256a2a76ad931dcea982f04a1ebde4b5ee4">08711256</a></strong>
<div>
<span> by aborah </span> <i> at 2023-04-19T15:27:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add missing package
strace was missing from installed packages
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/821455c7c00e1ceeeb3d64a5705901675081deb0">821455c7</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-04-19T15:34:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Ported cache_performance testing cases to pytest
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6d659e29e9c1b5d5d581ed4a507617136264b829">6d659e29</a></strong>
<div>
<span> by Sargun Narula </span> <i> at 2023-04-19T15:34:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fixed docstring minor changes
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/54aabca0b65037600cf5238c452698e81a407bc5">54aabca0</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-04-19T15:35:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTIL: Introduicing SPRItime
SPRItime can be used to printf() time_t values.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3463caa82c2c02c179600fdc304d69fadeef44d3">3463caa8</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-04-19T15:35:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>COVERITY: Remove several Y2K38_SAFETY warnings
Most of them are external function that receive a 32-bit integer but
SSSD provides a time_t value. For that we created the
sss_tevent_timeval_current_ofs_time_t(time_t t) wrapper function that
handles the conversion.
In another case, it was an internal function, so the function was
adapted to accept a time_t value.
Another case is a real problem caused by Kerberos storing times in the
32-bit signed krb5_timestamp, but time() returning a 64-bit value. It
seems Kerberos is planing on making unsigned this signed value. So the
recommended and adopted solution is to use the 32 lower bits.
Also de DEBUG() trace was dorrected to use the right size.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3b65d7be57f2b25e7414a1c880dca06990ba6263">3b65d7be</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-04-19T15:35:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>COVERITY: Resolve a WRITE_CONST_FIELD warning
We are initializing the structure, so it is not a problem that we write
to const fields. In addition, using talloc_memdup() is better and avoids
the warning.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c3d6cc9a374bd2d31af9ee35fda8c054fcab7c86">c3d6cc9a</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-04-19T15:40:10+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AD: Do not use the shortcut when filter_groups is set.
When using 'id <user>', a shortcut avoids creating the proper group
object but, instead, one where the SID is the group name is created.
This prevents a proper filtering of groups which requires the actual
group name.
Not using the shortcut will retrieve the group names and the filtering
will work.
Resolves: https://github.com/SSSD/sssd/issues/6617
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ebc1e460efcf4101459248a22253f0c52b9c39ab">ebc1e460</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-04-19T15:42:03+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: add joined/parent domain to [domain_realm]
So far only discovered sub-domains were adding to the [domain_realm]
section of one of the krb5 config snippets SSSD is generating. To fix
recent issues which were caused my missing entries of the joined domain
this domain is now added as well.
Resolves: https://github.com/SSSD/sssd/issues/6600
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dae5367b62203d287fc1d4fd3a894d08ffae9772">dae5367b</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-04-19T15:44:18+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test: cast to `char *` assert_string_equal() args
CI build is reporting the following error several times:
```
error: pointer targets in passing argument 2 of '_assert_string_equal'
differ in signedness [-Werror=pointer-sign]
```
Casting the arguments of assert_string_equal() to `char *` fixes the
issue.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/325fc8e1336e9228b33a05e8ae608fa989e176db">325fc8e1</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-24T11:12:51+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Improve stability of tests in TestADParamsPorted, remove un-needed backups.
There are some tests that are flaky in the suite, adding pytest.flaky
and moving them to tier2.
Made sure that flaky tests are only in one tier instead of failing in two suites.
Removed backup and restore of sssd.conf as it is done by adjoin now.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/def571ba46ed9eb50c5c4ce6acd65dd2aead44c4">def571ba</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-04-24T11:13:37+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: make sure realm is known when writing domain_realms
To make sure that no broken krb5.conf snippet is created it is checked
if the realm member is defined in the sss_domain_inof struct before
writing it to the output.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a41810bdf93851cefbfa62c68bf905cb53d357b2">a41810bd</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-04-24T11:14:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: store CodeQL configuration artifacts
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/eb4941541c7bda65b1b07c77f6c6f87aa5195311">eb494154</a></strong>
<div>
<span> by aborah </span> <i> at 2023-04-24T11:15:10+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add support for ldapi:// URLs
bz: https://bugzilla.redhat.com/show_bug.cgi?id=2152177
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/30e0b472ae9283dcd6bf94e9d66214e7e4ffd7d2">30e0b472</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-24T11:25:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add tests for BZ1765354
Bug: https://bugzilla.redhat.com/show_bug.cgi?id=1765354
Verifies: #5080
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f2d8d69159478904ffff84717776118fbbc5281">9f2d8d69</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add support for ldapi:// URLs.
Make sssd aware of unix domain sockets, allowing connections to local
LDAP servers.
Make use of struct sockaddr and socklen_t consistent across the code.
:feature: Add support for ldapi:// URLs to allow connections to local
LDAP servers
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f221341813bd38352a6c8ffef960e08b8aa3080c">f2213418</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Align sockaddr_storage to sockaddr for updated API.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/91b701232bfcf00b554efbabb264119bb60ee596">91b70123</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Ensure we touch sockaddr_len in the success case only.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4ccd5b9ac138efbd35379247e38f5db23bce8d87">4ccd5b9a</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Do not set SO_KEEPALIVE on AF_UNIX.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2d54cf5eb5d4f90f7207d168e9c08261a5e74445">2d54cf5e</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename sdap_get_server_ip_str() to sdap_get_server_peer_str()
Add support for printing AF_UNIX paths.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e004595ae3d61b8f03886e185d270fd64f79513f">e004595a</a></strong>
<div>
<span> by minfrin </span> <i> at 2023-04-24T13:12:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Don't force TLS on if we're a unix domain socket.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/559f29ffb1ef2fd24730e3ec5d173a43d263b8c7">559f29ff</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-26T10:13:58+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: load fixtures from sssd-test-framework
This makes fixtures from sssd-test-framework available in our tests.
See tests.sssd.io to list the fixtures:
https://tests.sssd.io/en/latest/api/sssd_test_framework.fixtures.html
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/52c3d6c2df4cf05838d01a7c455d25a570736f3b">52c3d6c2</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-04-26T10:13:58+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: create data directory in system tests
The directory hierarchy is as follows:
* `data/`
* files shared for all test modules
* `test_module/` (directory for `test_module.py`)
* files shared for all tests within the module `test_module.py`
* `test_module__xyz/` (directory for single test from the module)
* files relevant only for the test `test_module__xyz`
It can be accessed via datadir, moduledatadir and testdatadir fixtures.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9358a74d3a56c738890353aaf6bc956bfe72df99">9358a74d</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-04-26T10:32:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad: skip filtering if ad_enabled_domains is set
The domain filtering based on LDAP attributes might be too strict in
forests which have a long and complex history where not all attributes
might be updated to reflect the current state, e.g. membership to the
local forest. To skip the filtering the ad_enabled_domains attribute can
be set to the list of expected domains.
Resolves: https://github.com/SSSD/sssd/issues/6626
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1bf47514080cee17a8333c4e7079523b90009f6a">1bf47514</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-04-26T10:32:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: fix typo in ldapi test
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ddec8ae2dd51430b90d736c5a3d05377abe642ff">ddec8ae2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-04-27T06:52:51+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SPEC: obsolete libsss_simpleifp
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9329c09dc754a1c19b77ef10b227f09ab413a3cd">9329c09d</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-27T06:53:10+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix pytest markers to remove warnings.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/04cc2f73c0ac05833e3e136bba663e0733ae4478">04cc2f73</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-27T12:09:37+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Install libsss_simpleifp conditionally based on release.
Package libsss_simpleifp is removed from fedora and a future
major version of RHEL, install it only on RHEL/Centos 7,8,9.
See https://github.com/SSSD/sssd/pull/6701.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d735fb1e4eb00a602c4aedb052c11018f9cc24f2">d735fb1e</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-27T12:15:22+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Ignore chattr result on resolv.conf
The resolv.conf can be a symlink (because of systemd/resolved) so chattr will not work on it.
We ignore the result so error is not produced on fedora where systemd/resolved is in play.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ed2510d91216ddbffa46ee1fdef24f00ef61c9c0">ed2510d9</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-04-28T11:00:41+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add test for bz1913839 gid of filtered group gid still present in id
Verifies
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1913839
Group id of a group that should have been filtered is visible in
the id command output.
Fixed test numbering, removed un-needed backups,
moved log collection to later part of code to make the test_0016 more reliable.
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/265f6e02841d343d70459f152cb58dc1ae582dfb">265f6e02</a></strong>
<div>
<span> by Shridhar Gadekar </span> <i> at 2023-04-28T11:03:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: sss allows extraneous @ characters prefixed to username
corrected typo
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2180981
Verifies:
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c200fc01977fc94172b15f95f983b1a87a129687">c200fc01</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2023-05-03T18:53:27+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: Test nested group in view based search
Automation of BZ2151403
Test nested group entry in i cn=views,cn=accounts,$BASEDN
with id command from client.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f97cd4d4fa821913c669f562ebf2daee0782ef36">f97cd4d4</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-05-03T18:53:46+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: don't print User ID
The User ID isn't part of any signed data, thus there isn't any
indication that it's related to the token. Moreover, the effort to store
it securely on the LDAP attribute is quite big. Taking that into account
the passkey child doesn't print it and this way we avoid storing it in
the LDAP server.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9724f871a9bbf93e730b6c0b4a625b89002b2775">9724f871</a></strong>
<div>
<span> by Alexander Bokovoy </span> <i> at 2023-05-03T18:54:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: only accept the client realm as relaying party ID
FreeIPA expects relaying party ID for FIDO2 exchange to be the same as
the realm. If a rogue KDC attempted to inject another relaying party ID,
reject it.
We use server principal as opposed to the client one to allow use of
enterprise principals. Server principal in AS-REQ would be
krbtgt/REALM@REALM for the realm of the client.
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d0a6bf606d81c14e8ead3fca3601cc3c430b21de">d0a6bf60</a></strong>
<div>
<span> by Alexander Bokovoy </span> <i> at 2023-05-03T18:54:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: implement realm check for the passkey challenge
A rogue KDC might respond to us with a passkey challenge that references
domain not associated with the realm we serve. In order to check that,
convert DNS domain from the challenge to the realm using hostrealm
interface provided by the krb5 library.
For a referral realm fall back to the explicit challenge domain check.
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9bf55bf9ada9efeb2903823877f71b0f363a5a7c">9bf55bf9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-05-03T19:00:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MONITOR: disable 'user' config option in case --with-sssd-user=root
In case SSSD was configured and built --with-sssd-user=root, no other
value of 'user' config option (besides default 'root') is supported.
Having it documented in the man page in this case only brings confusion.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8b94af6eff569af3cc01c364cf57229cf557c80a">8b94af6e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-05-03T19:00:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MONITOR: validate value of 'user' option.
Only 'root' and SSSD_USER are valid values.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d486694051aceb4e3817abbce1f910be85cba962">d4866940</a></strong>
<div>
<span> by Luke Dickinson </span> <i> at 2023-05-04T10:39:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Remove the need for a keytab when using fast with anonymous pkinit
Anonymous pkinit does rely on a keytab for authentication.
Removed unnecessary call to copy keytab into memory.
Resolves: https://github.com/SSSD/sssd/issues/6531
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ede8c139209012e49df43441652577fc44956680">ede8c139</a></strong>
<div>
<span> by Weblate </span> <i> at 2023-05-04T11:11:59+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Turkish) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/tr/
po: update translations
(Korean) currently translated at 64.3% (1676 of 2606 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Czech) currently translated at 99.4% (702 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/cs/
po: update translations
(Czech) currently translated at 99.1% (700 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/cs/
po: update translations
(French) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fr/
po: update translations
(Korean) currently translated at 64.3% (1676 of 2606 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Chinese (Simplified) (zh_CN)) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/zh_CN/
po: update translations
(Japanese) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ja/
po: update translations
(French) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fr/
po: update translations
(Japanese) currently translated at 94.0% (664 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ja/
po: update translations
(Finnish) currently translated at 10.0% (71 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Georgian) currently translated at 7.9% (56 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ka/
po: update translations
(Polish) currently translated at 4.9% (132 of 2656 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pl/
po: update translations
(Korean) currently translated at 64.1% (1673 of 2606 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Finnish) currently translated at 9.9% (70 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Swedish) currently translated at 100.0% (2722 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Swedish) currently translated at 98.8% (2692 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Swedish) currently translated at 98.1% (2672 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Swedish) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/sv/
po: update translations
(Finnish) currently translated at 9.6% (68 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Korean) currently translated at 64.1% (1671 of 2606 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Finnish) currently translated at 8.9% (63 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Korean) currently translated at 63.7% (1661 of 2606 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Finnish) currently translated at 7.3% (52 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Polish) currently translated at 4.9% (131 of 2656 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pl/
po: update translations
(Georgian) currently translated at 7.7% (55 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ka/
po: update translations
(Finnish) currently translated at 7.2% (51 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Russian) currently translated at 100.0% (2722 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Russian) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ru/
po: update translations
(Ukrainian) currently translated at 100.0% (2722 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Russian) currently translated at 97.3% (687 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ru/
po: update translations
(Korean) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Ukrainian) currently translated at 99.1% (2700 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Ukrainian) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
po: update translations
(Korean) currently translated at 97.1% (686 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Ukrainian) currently translated at 98.8% (2692 of 2722 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Ukrainian) currently translated at 96.4% (681 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
po: update translations
(Polish) currently translated at 100.0% (706 of 706 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/
Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/
po: update translations
(Korean) currently translated at 63.6% (1659 of 2607 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/619ecbbc6bdad67f0c7ad957e884f557fa615e28">619ecbbc</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-05-04T13:35:09+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test: add conditional build for passkey functions
`make distcheck` is failing because two passkey functions are defined
but never used. Add conditional build for them.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e91b5d4adb5e718820421eb3ca29634a8e8b4c71">e91b5d4a</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-05-05T10:07:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: put sssd_user_name.include to builddir
Putting it to the source directory makes "make distcheck" fail when
run directly from source directory instead of different build dir.
It produces this error message:
```
/bin/sh: line 1: ../../../../src/man//sssd_user_name.include: Permission denied
```
Because the source directory copied by distcheck is not writable.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6c184c476e9ef189752a07961523ce4968b922e6">6c184c47</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-05-05T10:11:07+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update pot files
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e1195619a831727f822bba24ce232d7db809f14f">e1195619</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-06T21:18:34+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge tag '2.8.2' into m
2.8.2
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8706941fbae520dc82e0ffe26b51a756289ba36c">8706941f</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-06T21:18:38+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge branch 'master' into m
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4cfe8a548ef01943fe6d38ec73bdfb600e97821f">4cfe8a54</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-06T21:19:23+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>version bump
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4eac205fe2f07d83400b6d01b8b0ce514aed1906">4eac205f</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-06T21:20:44+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>patches: Drop an upstreamed patch.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a2a6933bc3abeed83031d5c723274815814954ab">a2a6933b</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-06T22:03:11+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop deprecated simple-ifp library and files provider.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ff5ca0bb7153fc824e5ec649252137b1faa0a043">ff5ca0bb</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2023-06-07T14:43:19+03:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 0.875rem; color: #333238; position: relative; font-family: var(--default-mono-font, "Menlo"),"DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>control, rules: Add sssd-passkey, and libfido2-dev to build-depends.
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
22 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#71da4bef7d009bfa59d0f7ca85bf6a18169fb48d">
.github/workflows/analyze-target.yml
</a>
</li>
<li class="file-stats">
<a href="#899ce9c202bf7bb5480e72836c3edc773c9c4244">
.github/workflows/ci.yml
</a>
</li>
<li class="file-stats">
<a href="#205e49e7f8cbf1a4f02d387dd32850fa09a5ef81">
.github/workflows/copr_build.yml
</a>
</li>
<li class="file-stats">
<a href="#4d938f6c1c694e539e55e88076490273a04798ba">
.github/workflows/static-code-analysis.yml
</a>
</li>
<li class="file-stats">
<a href="#a5cc2925ca8258af241be7e5b0381edf30266302">
.gitignore
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#4fd746b72d7a3976d4c1ae84db34f6173b62a1e8">
contrib/ci/configure.sh
</a>
</li>
<li class="file-stats">
<a href="#49d80aa598751b3e8c23a3bbb4e7e9c03aa770b6">
contrib/ci/deps.sh
</a>
</li>
<li class="file-stats">
<a href="#d348d65f630a357f2aeaa78fc64043f57caa4cb0">
contrib/ci/sssd.supp
</a>
</li>
<li class="file-stats">
<a href="#c3b4e77ecae6f5d5b141acb78d1a7d2302ac7764">
contrib/fedora/bashrc_sssd
</a>
</li>
<li class="file-stats">
<a href="#b8d57aa4a09effcbac8deeffe8aea9131499424f">
contrib/sssd.spec.in
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#2dc1b61adf3a02709ff95a779840581c192114f5">
<span class="deleted-file">
−
debian/libsss-simpleifp-dev.install
</span>
</a>
</li>
<li class="file-stats">
<a href="#8c9ccde33b30efbef2b534b73580f6e9b66a3851">
<span class="deleted-file">
−
debian/libsss-simpleifp0.install
</span>
</a>
</li>
<li class="file-stats">
<a href="#4fc95017045cdfae6215ed1a9501a0d1a2770db2">
<span class="deleted-file">
−
debian/patches/0004-Makefile-Install-dbus-policy-in-usr-not-etc.patch
</span>
</a>
</li>
<li class="file-stats">
<a href="#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
<li class="file-stats">
<a href="#8756c63497c8dc39f7773438edf53b220c773f67">
debian/rules
</a>
</li>
<li class="file-stats">
<a href="#888968d8696ab3370bf567424c1013cb2ad00c45">
debian/sssd-common.install
</a>
</li>
<li class="file-stats">
<a href="#907feff78d4b6f611b9be63f1ff543575fb93e39">
<span class="new-file">
+
debian/sssd-passkey.install
</span>
</a>
</li>
<li class="file-stats">
<a href="#4e573a66c66b45b45a1e180cad791738ed22cdd2">
po/bg.po
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: 0.875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #737278;">
—
<br>
<a href="https://salsa.debian.org/sssd-team/sssd/-/compare/0bc80bdb887aa850b98f2b356cecf5fcc07a87d4...ff5ca0bb7153fc824e5ec649252137b1faa0a043">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
</p>
</div>
</body>
</html>