<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: 0.875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px;
}
body {
font-family: var(--default-regular-font, "GitLab Sans"),-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,0.01) 0 0 1px; font-family: var(--default-regular-font, "GitLab Sans"),-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Timo Aaltonen pushed to branch master at <a href="https://salsa.debian.org/sssd-team/sssd">Debian SSSD packaging / sssd</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0a429107a4133760d042586a9ae80ef06ffb96e1">0a429107</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-09-08T14:41:29+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: convert multihost/basic/test_basic to test_kcm and test_authentication
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 376534022aebf11d23ee2b70ef13d17ca3842aea)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f1a11708aeddf39cdb0bef547e62eff3d9f6bf48">f1a11708</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-09-11T10:31:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Print krb5.conf when joining realm.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit 6540a67c9dac1c4b1c313797b169a32d94702819)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cb1c59c7a71b5cf19877a4018befb445118f343d">cb1c59c7</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-09-11T10:31:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Split package installation to different transactions.
When package is missing/broken the dnf does not install anything
on fedora this prevented automation working properly.
This way the "optional" packages are installed separately.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit 8fc5aadb1fbdf3ae1fdacc9dc9855db87f521650)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f117da5a0447cf1879244b70916efe6f0e7875e0">f117da5a</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-09-11T10:31:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Handle dns with systemd resolved.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit e73efe153dd2e9ee753cf416030e135700434a67)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/71ca2053bfb6d67bf074936fa03df1602a8951fa">71ca2053</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-09-15T10:50:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add sssd_test_framework.markers plugin
This loads additional markers defined in the sssd_test_framework.
Currently, there is only `builtwith` to check if SSSD was built with
particular feature (files-provider only at this moment).
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 233a846e864fe2a364e05d08c3ae91475b5916d1)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/674ee267c63222427297d66a8719b75e381e39ae">674ee267</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-09-25T13:41:52+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: adding group and importance markers
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit f05d4ec1ecdaef90f3272504dbd9ac6c2e7aa8d8)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ec8f0269c2ef1d1f174a3b1df3671ca01cd390d4">ec8f0269</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-09-26T08:16:28+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Add missing pytest marker config.
Reviewed-by: Patrik Rosecky <prosecky@redhat.com>
(cherry picked from commit 39dde256e5e9d226e63898e910b8ffda4428f933)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a4de653f5b1086f642fba6bdec7743bbda4a9572">a4de653f</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-09-26T16:14:26+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove unused clang-analyzer from dependencies
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 9474e0f4f42375b40e302da727401b9a5e28c2f5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/02bd1d7e76b3f173eb6edfc893bd139a2d6154ce">02bd1d7e</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-09-26T16:15:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Allow kerberos preauth for "false" UV
When IPA passkey configuration sets require-user-verification=false
then the user verification value will be 0. We need to allow this
configuration within the plugin.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 57dac1e29f040a8c65ff815b15b1a8c9b70c276c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a3111338995d91c721fcd0a616f0ee1a69302607">a3111338</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-09-26T16:15:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: omit user-verification
If user-verification is disabled and the key doesn't support it, then
omit it. Otherwise, the authentication will produce an error and the
user will be unable to authenticate.
I have also added a unit-test to check this condition.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit a8daf9790906b7321024fef8e636f9c1b14343ab)
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 2c05926ed1fa4deab74b80d9faf6e4c26f31f46f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/45fbcd93c2aef0bc3e2ba96609302eeceb2b90e6">45fbcd93</a></strong>
<div>
<span> by aborah </span> <i> at 2023-09-26T16:18:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Enabling proxy_fast_alias shows "ldb_modify failed: [Invalid attribute syntax]" for id lookups.
Enabling proxy_fast_alias shows "ldb_modify failed: [Invalid attribute syntax]" for id lookups.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit bcbc0b3190e01895ccdce48c60b4966d204bd2f0)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e45b32a321d6ebda817831b4151b567edab2abf">7e45b32a</a></strong>
<div>
<span> by aborah </span> <i> at 2023-09-26T16:19:42+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Port rootdse test suit to new test framework.
Port rootdse test suit to new test framework.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit 5f3c82d3c9e7ef999ebc2e754be64c81194d68a4)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b86d301c18d71bd28787f94ba741d0a46f1aa12e">b86d301c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-09-26T16:40:12+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUDO service: ${DEBUG_LOGGER} was missed for 'sudo'
service in a7277fecf7a65ab6c83b36f009c558cdfbf997d2
Resolves: https://github.com/SSSD/sssd/issues/6920
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 01bee47a1557c0d21c9f35384c53758c70cf97c5)
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5469de2fada3ca868c386a3de734914c9c298384">5469de2f</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-09-27T19:39:23+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Improve read write pipe child tests
Add test for multiple reads with a large message, and
add tests for child read/write safe calls.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit ae920b9ab3ddb107611f21b842bfddb6077290f1)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/00479693900711cf4ffb0f34db4673b9ebcde0ab">00479693</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-09-27T19:39:23+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: Realloc buffer size for atomic safe read
Realloc and increase the buffer size when safe read returns more
than CHILD_MSG_CHUNK size bytes.
This handles multiple passkey mappings returned from the krb5 child
in kerberos pre-authentication.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 1f4fffdb7f57d70151741ea7d844d020250fd309)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0705145c6301dfda0b6d5f579c2898366f68e527">0705145c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-10-02T09:51:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MC: a couple of additions to 'recover from invalid memory cache size' patch
Additions to 641e5f73d3bd5b3d32cafd551013d3bfd2a52732 :
- handle all invalidations consistently
- supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`,
not a pointer to a local var
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 88d8afbb115f18007dcc11f7ebac1b238c3ebd98)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ede391c26fc4c5610e30726adf937cff47b17b41">ede391c2</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-10-03T10:50:09+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Increase conv message size for prompting
Size needs to handle the prompts for interactive, touch, pin prompt, and
kerberos pre-auth warning message which could all be displayed.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 6f8f7c82b2b38220d99395d5d2732281b3cf1867)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/583daff7d84c253132b360ce5123d1c76c5981a4">583daff7</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-03T10:50:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: converted alltests/test_pasword_policy.py to tests/test_ldap.py
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit 64422699aed9a0024d39af00462c22dc47a8dfac)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6bba653c62982c2467851f3cc1f32756ace115bd">6bba653c</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-10-03T10:51:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: install latest SSSD code on IPA server
This allows us to test changes to the server mode as well.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 9dccf7ff61c6dda89300cd36c62830dfff1687ad)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b8b2bfaf1e1ae64c647fa6bd35feb56226c436ad">b8b2bfaf</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-03T10:52:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltest/test_sssctl_local.py converted to system/tests/sssctl.py
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 620af3b3fe160199fa92f49bd03abc91a37a04d7)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7a53c7ac74c7b5a11b53621be993ce1c7779c088">7a53c7ac</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-03T10:52:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: multihost/basic/test_files converted
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit ea7273b3d4e93f7cdf5bb6f5defcf1bd38659f8d)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/df709da527f94a89fdc297fa162035f1a75cb139">df709da5</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2023-10-03T10:56:39+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add passkey tests for sssctl and non-kerberos authentication
1. Register a key with sssctl
2. Register a key with IPA sssctl command
3. Check authentication of user with IPA, LDAP, AD and Samba
All tests cases automated with umockdev.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 66c0a2d00b872db77d59efb41bac66df0cf04c26)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c6ea805ee3ac63c06be22472db7c1edb16c965be">c6ea805e</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-10-06T11:21:19+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>NSS: Replace notification message by a less scary one
Replace the message "Unable to find primary gid" by another one that
sounds less scary and is a little bit clearer for users.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 2c59fd211a6b35022fb2a4683918d77610f76660)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a9617cff81c8a6352e2cbc3cf3fbef1a46123b3d">a9617cff</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-06T11:22:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests:alltests/test_rfc2307.py converted to test_ldap.py
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit 8ecfe20efca6696e94f64fbd2a024f6bcd7bb26d)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8d5752f44f6265cc1dd81933af5276c2b4b0a924">8d5752f4</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-06T11:22:39+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltests/test_sss_cache.py converted to multihost/test_sssctl.py
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit b07a7552aac1a1bb4985c31e6005771032d9cad6)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/129ceaed82fc47ce9ef8d5cd0dc3af81fe035233">129ceaed</a></strong>
<div>
<span> by licunlong </span> <i> at 2023-10-06T14:04:07+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>cli: caculate the wait_time in milliseconds
The timeout we pass in is 300000ms, and we sleep 1s every
time we get a EAGAIN error, so we need to multiply 1000
for sleep_time.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit a997ee7bd9d259e7faf654cb94145c0135df02f8)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3b939ce9c81eee1244b9852fcf6caa13dd7e12f4">3b939ce9</a></strong>
<div>
<span> by Scott Poore </span> <i> at 2023-10-10T15:52:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: add follow-symlinks to sed for nsswitch
The multihost/alltests/test_automount_from_bash.py test module runs a
sed against /etc/nsswitch.conf which convers it from a link to a file.
This causes issues with authselect in later tests resulting in test
errors. This can be fixed by adding the --follow-symlinks option.
The restore() from the fixture should return the config to it's original
content.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit 1082f2563f5cdc7d4f019c3a85bd0c717fc6fd16)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1fa72109e2e90479de1bf8b1222f587e9886ad58">1fa72109</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-10-11T13:43:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Remove the oldest expired credential if no more space.
:feature: When adding a new credential to KCM and the user has
already reached their limit, the oldest expired credential
will be removed to free some space.
If no expired credential is found to be removed, the operation
will fail as it happened in the previous versions.
Resolves: https://github.com/SSSD/sssd/issues/6667
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 93ee0159a0f467ced3412d034ec706dd3508901e)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/834b53697420fa0d3c536c8cacff0294a4a451f9">834b5369</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-10-11T13:43:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Display in the log the limit as set by the user
max_uid_ccaches is unconditionally incremented by 2 in ccdb_secdb_init()
to create space for some internal entries. We cannot just show this
value as it is not what the user configured.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 96d8b77ae6e7d1dd72b9add553935fc4aa6ab2c5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6218b40fb0d962d36b81e43ac0739d9de73f38e9">6218b40f</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-10-12T11:23:19+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Skip tests unstable on other archs and tweak realm join.
Unify realm join for AD params tests to use code with timeout
to prevent suite freezing in sasl authid tests.
Set the whole suite as flaky to retry when realm join freezes.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit 88a386e12a11287771d5429b11b066bf6e75e42f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c799b75dada96c57ff2652f09252bd0e28bd860c">c799b75d</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-10-16T10:23:12+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix AD param sasl tests.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit 8264cb573637c08b26c4ff8abcc44e09fd77fec0)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5e35a695b377db6ecf154864ce6f88854c3c25fc">5e35a695</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-10-16T10:23:31+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>configure: use 'LDB_CFLAGS'
Also add all common *_CFLAGS to cwrap tests.
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 421a818f8be269a72c1d78653885ee171ac7c5f5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c99f684c73fd23a95e2713f494de0f6bad305195">c99f684c</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-10-16T11:19:12+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: adjoin in test_00015_authselect_cannot_validate_its_own_files
Switch test_00015_authselect_cannot_validate_its_own_files to use adjoin
fixture instead of joining manually.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit 4a9f8ebb8032df4b2e8dffb2be80fbd6575b0e7b)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7d73571edb429e9f23c84ef2ef10b191ee15e782">7d73571e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:34:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>utils: enable talloc null tracking
With this patch talloc_enable_null_tracking() is called during
`server_setup()` to make talloc memory usage reports more useful.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit 7601918757910994894b9547647602b8c2ac806c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/42face74ea5bacafce84b63b7cc42505fcc0ccae">42face74</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>proxy: add support for certificate mapping rules
To be able to do local Smartcard authenticate the backend must be able
to map a certificate to a user based on the provided mapping rules.
With this patch the proxy provider is able to handle the certificate
mapping rules and users handled by the proxy provider can be configured
for Smartcard authentication. Besides the mapping rule local Smartcard
authentication should be enable with the 'local_auth_policy' option in
the backend and with 'pam_cert_auth' in the PAM responder.
:relnote: The proxy provider is now able to handle certificate mapping and
matching rules and users handled by the proxy provider can be
configured for local Smartcard authentication. Besides the mapping rule
local Smartcard authentication should be enable with the 'local_auth_policy'
option in the backend and with 'pam_cert_auth' in the PAM responder.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit c38699232594b8bdd79dbeed36b7afa5ba9b0512)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/351aab979b92c7286d1e1271787acb78562d01e1">351aab97</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: add NSS module for nss-wrapper support
The main use case of this NSS module is to run proxy provider tests with
cwrap's nss-wrapper. The proxy provider loads the NSS modules directly
with dlopen() and is not using glibc's NSS mechanism. Since nss-wrapper
just wraps the standard glibc calls and does not provide an NSS module
on its own we have to use this workaround to make proxy provider work
with nss-wrapper.
DO NOT USE THIS IN /etc/nsswitch.conf, it will cause an infinite loop.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit ffd467430310f0671ba78fa0ef0385426f37d51f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d36491435fb67a06a970078537526edbb13e0f40">d3649143</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: replace files with proxy provider in PAM responder test
This patch replaces the deprecated files provider in the PAM responder
tests with the proxy provider. The straight-forward replacement would be
'proxy_lib_name = files' to use libnss_files.so.2 with the proxy
provider. But the tests are using nss-wrapper which wraps the plain
glibc calls. Because of this the test is using a dedicated NSS module to
work with nss-wrapper.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 54f558966aa515370ee6218793a36d4148c80a73)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/25a913eae4e1703f621b195e02dd80dc2c48ca14">25a913ea</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>confdb: add new option for confdb_certmap_to_sysdb()
With this new boolean options the backends calling
confdb_certmap_to_sysdb() can indicate if the certificate mapping rules
should be applied for local users or not, which currently means LDAP
based mapping with a search filter string.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 8952f6d8fea4a0e7e18eebf9e6a9f35d32de93bd)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7668ed6eb7b3c2b8270a970f3cbac58c4e05df76">7668ed6e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: use file and proxy provider in PAM responder test
All Smartcard authentication related tests are run now with the proxy
provider and the deprecated files provider. If the files provider will
be removed the tests can be removed by reverting this patch.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit f5f8030ad7bc469130ed69abec4c2563eca52e17)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/04b6a22b3d920634121b00c65c568954a06f2cf1">04b6a22b</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-16T13:35:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: add proxy auth with fallback test
SSSD currently assumed that PAM modules configured for the proxy auth
provider expect passwords as input. If a Smartcard is present during the
authentication, but local Smartcard authentication is not enabled, the
user should see a password prompt.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 4d475e41a5223f4bdabc1465bad4d4f87a911064)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/793284ab91452d274edf22928500d7c1895e12c8">793284ab</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-10-18T15:29:20+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: Improve LDAP security wording
All communication, including the identity provided must be
encrypted to prevent attacks.
Resolves: https://github.com/SSSD/sssd/issues/6681
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a48c7445d1abbd78d428e000a6889c8f0a154de6">a48c7445</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2023-10-18T15:31:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>dyndns: PTR record updates separately
DNS server does not allow updates for different zones in one
single step. Those updates must be sent separately.
It is complicated and in some cases impossible to detect that
PTR updates does not fit into one zone because it often depends
on DNS server configuration.
With this patch PTR record updates are always sent separately.
Resolves: https://github.com/SSSD/sssd/issues/6956
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit f0bba9d5178d18e7b08aaa58375916d111dfeb59)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aa3616b3400c9b4d2e9f5bbe758a250a4a837a64">aa3616b3</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-10-18T15:35:22+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating ad_multihost test
* fixing raiseonerr=False to disjoin function
* cleaned up code since the line limit has increased
* added AD from forest1 to resolv.conf and /etc/hosts
* updating test case documentation to clarify the test
Signed-off-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit bd839b85e25701116cb8453e142014973a9c6de9)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c866b5316ed66ba23049e7d1700cf33938738314">c866b531</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-10-18T15:35:22+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Updating ad_multihost test
* fixing raiseonerr=False to disjoin function
* cleaned up code since the line limit has increased
* added AD from forest1 to resolv.conf and /etc/hosts
* updating test case documentation to clarify the test
Signed-off-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit cb72984e2d533306489c6161678443ce2fe48661)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3fd19c8025784269d5e08c553f83a097dc666870">3fd19c80</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-10-18T15:35:22+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Adding test case for bz2167728
* Cleaned up lines since the character count has increased
* Added test ids to existing tests
Signed-off-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit 95678ad7e4f18e47cd67aabe660e0c26c07a2ffa)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9c4f7281dc469757f27fdfb51fee18a71266e863">9c4f7281</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-10-23T13:27:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: clarify user credentials for `cache_credentials`
It only applies to passwords, not other authentication mechanisms like
smartcards or passkeys.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 38d334ea040e2f5b0da4a3a37618215658b2c3a8)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e7a08a8062e39984e7386ec365a948cb7fb8b62">9e7a08a8</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-10-23T13:32:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>TESTS: topology set to KnownTopologyGroup.AnyProvider
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit ce117ae0c25305a5109d0f663d677a9ccae3b68a)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a9498b12b4824dbc137e54b1c18732e00e101050">a9498b12</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-10-25T15:07:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix autofs cleanups
Autofs tests were not cleaning properly leaving behind stuck/unresponsive
mounts. This was failing other tests that were executed after these suites.
Tests were stuck when trying to create a new local users or listing dirs.
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 7a3cc7a7be5eb8215709d5074d91567f7b7b60e1)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2bbc8754040d15aaa52126f3a4187fdb1c1c4e50">2bbc8754</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-10-25T15:15:27+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: reduce log level of some HBAC log messages
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit a7b19bcb47ddaaaa745a32571b444ee185e79b4c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fa33c997c79f567980cb0a2cc916ef38903467d5">fa33c997</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-10-25T15:59:27+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: build passkey for centos-9
Also include RHEL9+ to build passkey in the spec file.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit 5a211ec941acde206d52092f5547fc46737f30e5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9ebaee7771144e469ae383ba99f6a81edec38e9b">9ebaee77</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2023-10-26T11:34:13+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump DamianReeves/write-file-action
Bumps [DamianReeves/write-file-action](https://github.com/damianreeves/write-file-action) from 41569a7dac64c252caacca7bceefe28b70b38db1 to 0a7fcbe1960c53fc08fe789fa4850d24885f4d84.
- [Release notes](https://github.com/damianreeves/write-file-action/releases)
- [Commits](https://github.com/damianreeves/write-file-action/compare/41569a7dac64c252caacca7bceefe28b70b38db1...0a7fcbe1960c53fc08fe789fa4850d24885f4d84)
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 0456ecad643428b2ac28c932cb7435c8b914529a)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d154f72d01cc0c79bb8e4be6e8448a6b3c3c5941">d154f72d</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2023-10-26T11:34:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump actions/checkout from 3 to 4
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 2f5b299996ea8e4d0bdded3eb0b020ed311209f9)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/66d115cc83b4e1d370d56af42121451bad87ba0a">66d115cc</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2023-10-26T11:35:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump vapier/coverity-scan-action from 1.2.0 to 1.7.0
Bumps [vapier/coverity-scan-action](https://github.com/vapier/coverity-scan-action) from 1.2.0 to 1.7.0.
- [Release notes](https://github.com/vapier/coverity-scan-action/releases)
- [Commits](https://github.com/vapier/coverity-scan-action/compare/v1.2.0...v1.7.0)
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit ff42d88994a13c9f130741a13ee7fe4dac63a5df)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/155584ee2320901b6af4b9a6b563beb377af66dc">155584ee</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2023-10-26T11:36:59+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump linuxdeepin/action-cppcheck
Bumps [linuxdeepin/action-cppcheck](https://github.com/linuxdeepin/action-cppcheck) from 9ef62c4ec8cd5660952cd02c58b83fa57c16a42b to e63fb1d3f321e0467737aa9de7f691360fb1b8fb.
- [Release notes](https://github.com/linuxdeepin/action-cppcheck/releases)
- [Commits](https://github.com/linuxdeepin/action-cppcheck/compare/9ef62c4ec8cd5660952cd02c58b83fa57c16a42b...e63fb1d3f321e0467737aa9de7f691360fb1b8fb)
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit cbb107314100bf2be9f55aa2b967a60d149440ca)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/380eafa5b2eac6830b0ed0ec1c5113ef998b9f80">380eafa5</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-10-27T13:15:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: return status code for calls requiring it in fake nss module
To avoid gcc warning that a function is not returning value.
```
/shared/workspace/sssd/src/tests/intg/nss_call.c: In function '_nss_call_setpwent':
/shared/workspace/sssd/src/tests/intg/nss_call.c:63:1: error: control reaches end of non-void function [-Werror=return-type]
63 | }
| ^
/shared/workspace/sssd/src/tests/intg/nss_call.c: In function '_nss_call_endpwent':
/shared/workspace/sssd/src/tests/intg/nss_call.c:77:1: error: control reaches end of non-void function [-Werror=return-type]
77 | }
| ^
/shared/workspace/sssd/src/tests/intg/nss_call.c: In function '_nss_call_setgrent':
/shared/workspace/sssd/src/tests/intg/nss_call.c:98:1: error: control reaches end of non-void function [-Werror=return-type]
98 | }
| ^
/shared/workspace/sssd/src/tests/intg/nss_call.c: In function '_nss_call_endgrent':
/shared/workspace/sssd/src/tests/intg/nss_call.c:111:1: error: control reaches end of non-void function [-Werror=return-type]
111 | }
| ^
```
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 4f5b1a25a0bd108cbba77a63dfe50f64f2249764)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e217fa8262696d441de2eca9475a8eda87dfc16f">e217fa82</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-11-02T13:59:45+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: get frozen Fedora releases in the matrix
A Fedora release may be in a frozen state (beta freeze, final freeze),
in such case, it is not temporarily visible under "pending"
but under "frozen".
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 17cf4bbb7e7969d6cba4e1a61ef2bb7b6a879c50)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ef5370e96bff79025cb9a0f9e62c4d3684f55512">ef5370e9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-11-03T12:07:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: replace `__thread` with `pthread_*specific()`
in sss_client code to properly handle OOM condition (with `__thread`
glibc terminates process in this case).
Solution relies on the fact that `sss_cli_check_socket()` is always
executed first, before touching socket.
Nonetheless, there are sanity guards in setters/getters just in case.
It's possible to move context initialization code into a separate
function and call it in every getter/setter, but probably not worth it.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Carlos O'Donell <codonell@redhat.com>
(cherry picked from commit b0212b04f109875936612a52a7b30a80e5a85ee5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5a546c84e666cdb35b358ac377035c063f7a18e8">5a546c84</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-11-09T12:23:19+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: do not go offline if group does not have SID
This happens during applying overrides on cached group
during initgroups of trusted user. If the group does not
have SID (it's GID is outside the sidgen range), SSSD goes
offline.
Only SSSD running in server_mode is affected.
This patch ignores error in single group and rather continues
processing the remaining groups.
Resolves: https://github.com/SSSD/sssd/issues/6942
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 26047f07c0f7aa61a44543de8674ec7d0904812e)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3da54579e7deb9a1f59d9495cee330e1ecd20fbf">3da54579</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-11-10T11:38:43+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: fix Smartcard offline authentication
Even if a Smartcard was inserted and proper certificates were found
offline authentication with the Smartcard was not possible because the
certificate information was accidentally removed from the reply send to
the PAM module.
Resolves: https://github.com/SSSD/sssd/issues/7009
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 962e9d0529c5ffd4e9b3c342b038daa5dbaa75e9)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2eae8ab44ab8f1f2d966aab6505d85d2f34d76cb">2eae8ab4</a></strong>
<div>
<span> by Weblate </span> <i> at 2023-11-13T11:47:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Russian) currently translated at 100.0% (717 of 717 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/ru/
po: update translations
(Polish) currently translated at 100.0% (717 of 717 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/pl/
po: update translations
(Korean) currently translated at 100.0% (717 of 717 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/ko/
po: update translations
(Georgian) currently translated at 13.2% (95 of 717 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/ka/
Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/
po: update translations
(Polish) currently translated at 100.0% (714 of 714 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/pl/
po: update translations
(Georgian) currently translated at 13.0% (93 of 714 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/ka/
po: update translations
(Finnish) currently translated at 10.2% (73 of 714 strings)
Translation: SSSD/SSSD-2-9
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-9/fi/
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d380342b4a1453fb9c701a6d01103fd94efa919f">d380342b</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-11-13T11:54:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update pot files
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ee2e0cd9bce728c1cd4d53dcd6ce0ed9f962847c">ee2e0cd9</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-11-13T11:55:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Release sssd-2.9.3
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ba7b99383bd9b6a16bc42aebc9cba65534251d60">ba7b9938</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-11-14T12:44:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: clean configure.sh
Support for Fedora 36-, RHEL/CentOS 6 and 7 in master branch ended, so
let's remove them. In addition, Python2 support only exists in
RHEL/Centos 8, so make only those two dstributions use
`python2-bindings`. Finally, include RHEL/CentOS 10 for configurable
features.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 3edc04d17fbfa520f5522293e861227f5119e15f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/31617400ee055611253d26a06b1dd2db2da84ee7">31617400</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-11-14T12:44:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: clean distro.sh
Support for Fedora 36- in master branch ended, so let's remove them.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 39a0de22daa8b95feb280427876732bcbbb22583)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/52acc39402fc3e001e5f446b625983848ab9ef16">52acc394</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-11-14T12:44:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: clean deps.sh
Support for Fedora 36- in master branch ended, so let's remove them.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 05ea3f1bec1b1b51e5248c6276ada7870cf03fdc)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/776f6e19805b712710125e26b1c734d8481b0035">776f6e19</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2023-11-14T12:44:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CI: upload cwrap logs
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 292ef326b4a181d061c59a15fc7819feb8118313)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fd414aae8faaae50d7cd951551d44b7154c5f4e2">fd414aae</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-11-15T07:02:15+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a test for bz1900973 kcm delete expired tickets
Reviewed-by: Alejandro Lopez <allopez@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 0f1a6e350584924fd9f18aceae20d04c54bdd845)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f394acee8fefff4bce581c34d8abb1a2bdc521df">f394acee</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-11-17T14:09:30+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SPEC: 'sssd-proxy' requires 'libsss_certmap.so'
Resolves following rpminspect warning:
```
Subpackage sssd-proxy carries 'Requires: libsss_certmap.so.0()(64bit)' which comes from
subpackage libsss_certmap but does not carry an explicit package version requirement.
Please add 'Requires: libsss_certmap = %{version}-%{release}' to the spec file to avoid
the need to test interoperability between various combinations of old and new subpackages.
```
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 3eae4cc5282e4b76454b358e986da0757bb81d7f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4b4564c3876dc1cee85f10b31acaa1a5c75656a9">4b4564c3</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-11-17T14:10:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTIL: use proper specifier for 'DEBUG_CHAIN_ID_FMT_*'
Resolves: https://github.com/SSSD/sssd/issues/6790
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 2617dcfd6376e0bb0a44cc15b11f0e6531c33960)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1e2af0d158fed0940e73496aa96b05f4dfba911c">1e2af0d1</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-11-17T14:10:35+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Don't provide 'uint64_t' as POPT_ARG_LONG.
Sizes might not match on some platforms.
Resolves: https://github.com/SSSD/sssd/issues/6790
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 098bf64a03e5e7c054bd0e40717484d45c93d031)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b536e4b3b94abb870d666e16636820369793f035">b536e4b3</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2023-11-28T12:35:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: consolidation, refactoring and organizing, renaming of some tests
- added markers to pytest.ini
- added markers to tests
- consolidated two sssctl test files into one, sssctl_config_check.py and sssctl.py
- renamed test_id.py, to test_identity.py, just to match the marker groups
- renamed the test cases in test_identity.py to be more readable
- renamed test_ldap_extra_attrs.py to test_schema.py , after looking at the tests, its testing the schema attributes
- appended test_shadow.py to test_ldap.py , tests shadowlastchange = 0 in LDAP
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 92e85f1a135c89bca17cbd8c7efe8562d2c5beca)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/469ddcbf64333ede2312bf44bbca6eca417fd206">469ddcbf</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LOGROTATE: logrotate should also signal sssd_kcm
sssd_kcm is not registered with SSSD's monitor, so it is not signaled
when it must restart the log. Adding this command will directly signal
sssd_kcm (in addition to the monitor).
If sssd_kcm is also running in one or more containers, they will also
receive the signal. Because only the log files in the host where rotated,
the instances in the containers will go on using the same log files.
Nothing will happen except for the "Received SIGHUP. Rotating logfiles."
message in the log files. If we want to avoid this, we should implement
a PID file.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 230e7757a7805c7c530d0914936f353882bd504e)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8c83234518e9c9b98dad557f124d926448820d5e">8c832345</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Replace a hard-coded constant by a macro
The per-UID quota is internally increased by 2. This value is no
longer hard-coded but replaced by the KCM_MAX_UID_EXTRA_SECRETS macro.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit c73b7eb801ed14892e34cd8e810678220785edf5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/855d04656d69c4381e4e16ae481ed82c231205a2">855d0465</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Fixed a wrong check
The pointer to the newly allocated iobuffer is stored into
state->op_ctx->reply but the check for NULL is done on state->reply,
which we already know is not NULL because it was checked before and
not modified after that.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 3cba6d1153c102f9596335db28cc017e8338e868)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/14e7d7c038b11c527c308305b6afca4ae45b4417">14e7d7c0</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Remove unused cc_be_type from struct kcm_ccdb
This field is never set and never used. Let's remove it.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 126920546e38f9df6c1c1bda95f0bcd6991cb722)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3e740a256598897f4479ac3ca02cfcf6166e54b6">3e740a25</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: When freeing the client, check that it is not NULL.
`cc-> client` could be NULL.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 2eb67afc014878108a555fd0ac41bef954a2a962)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a5c96e29069cf0c4ae56f95e8e29ce36820437bf">a5c96e29</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: sss_iobuf_init_empty() shall not zero memory
sss_iobuf_init_empty() and related functions zero the allocated memory
even though it is not needed. Most of the time, all the fields in the
structures will be set to non-zero values. In these cases zeroing the
is useless and we stop doing it.
Only in two cases, some pointers were being left unmodified, so they
are now being manually set to NULL.
Resolves: https://github.com/SSSD/sssd/issues/7014
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit edb63cde4fcfa1089e8f39c5d0b6f1e0c184ea0d)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/78d0a97dee344201345dfabfc71e2cfc82ddc490">78d0a97d</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Reduce the amount of memory allocated for the packages
Some packages are being allocated to their maximum size, even though all
that memory is not required. When the amount of memory needed is not know,
We reduce the amount of memory allocated to the initial size defined by
the KCM_PACKET_INITIAL_SIZE macro.
The existing KCM_REPLY_MAX was replaced by KCM_PACKET_MAX_SIZE.
Resolves: https://github.com/SSSD/sssd/issues/7014
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit fe6c35addee2cfd0c32021e4b079eec7575ca90c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/60fde9d55cad8c6be016f9bced46980f12c24b8d">60fde9d5</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-11-28T13:23:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Do not zero memory when not need.
A few more cases where memory is allocated and zeroed when it is not
required.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit b4f9f63bd74722c543c7d2f3695f0d2351eba4c3)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c5d04578837370239f1be4cadc02f0d10aa89853">c5d04578</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-11-29T08:30:56+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: converted alltests/test_default_debug_level
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit e9189052a46d28e6397686c28d744d5e45f1f72d)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ff520020c6c576fc670679a7f63940cf3beef85a">ff520020</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-12-01T10:35:10+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: make valgrind suppression more relaxed for test_ipa_subdomains_server
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit e9e6d80e20fbf82c8b48ca4edbe2996018f7f7cd)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e03921e4be0516fcbc6b7ccb80967914eb28efb3">e03921e4</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-12-01T10:35:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>nssidmap: fix sss_nss_getgrouplist_timeout() with empty secondary group list
sss_nss_getgrouplist_timeout() is intended as a replacement for
getgrouplist() which only gets secondary groups from SSSD. Currently it
returns an ENOENT error if there are no secondary groups returned by
SSSD. However, as with getgrouplist(), there is the second parameter
which expects a single GID which will be added to the result. This means
that sss_nss_getgrouplist_timeout() will always return at least this GID
as a result and an ENOENT error does not make sense.
With this patch sss_nss_getgrouplist_timeout() will not return an error
anymore if there are no secondary groups but just a result with the
single GID from the second parameter.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit cffe6e09c6b4cd8afa049365bbd432ace5d2a9d9)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9a6ff9e7b082189023a79771857d8f56a0c5cac0">9a6ff9e7</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-12-04T11:25:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pam: fix Smartcard auth with files provider
It is expected that the files provider ignores the local_auth_policy
option and supports Smartcard authentication by default.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 5e7cd889d6b2554e822370d2c962791d00f26278)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a8928a9adf1b527f0b455a1d8913ae7a136bb47f">a8928a9a</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2023-12-05T22:10:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add passkey tests for authentication failures
Test cases are as follows:
4. Check auth deny for incorrect pin for LDAP, IPA, Ad and Samba.
5. Check auth deny for incorrect passkey mapping for LDAP, IPA, AD and Samba.
6. Check auth of user when server is not resolvable for IPA, LDAP, AD and Samba.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit f4c9d6efd6492ca32679aff1897b3d2593b9455d)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be5399c15bd96998f20573c36bd7603b6a5694f5">be5399c1</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2023-12-06T17:55:14+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sssctl: do not require root for user-checks
There is no requirement for root to run the test and if the user does
not has the needed privileges to access the related services this is
good as a test result as well. Additionally at least pam_chauthtok()
behaves differently when being called as root compared to an ordinary
user.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit 8ff7fdc127dafb8d4d98231e0f7d43af89f8595b)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e44ad324227ca884bb70850731f0fbb6d5149951">e44ad324</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-06T17:56:06+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a test for kcm log rotation SSSD-5687
Ticket: https://issues.redhat.com/browse/SSSD-5687
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Anuj Borah <aborah@redhat.com>
(cherry picked from commit 38db355aa1b0b8f370e8eba2001bbdf58a9d7d77)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2bc72a2b730eca1435c4e50e2fa36229dac179a7">2bc72a2b</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-12-06T17:56:37+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltests/test_autoprivategroup.py converted to system/test_auto_private_groups.py
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit a5f636bb4c90dc6077ebe0bbc50ae166d39ecf24)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/35bcb91b6641f6fdc1f1c39386b241c2f7559f7e">35bcb91b</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-12-06T18:50:25+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad: do not print backtrace if SSSD domain name is not the same as DNS name
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 76d3b5a45bff7a473613504414e8f913f2929800)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/eabeb3a73d854f0d5b4c0dfd4c3caf74ad519234">eabeb3a7</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-12-06T18:50:25+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad: do not print backtrace if SOM is missing in GPO
This is expected on empty GPOs and we just skip the element.
Therefore we should not print backtrace.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 3e976dc6a7a5785d5ea657dd050709eb04889748)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d02874beb452eb31bc1c813ffeeb848a562eda18">d02874be</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-12-07T16:15:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: adapt to new firewall API
The firewall API was redesigned in order to make it more flexible and
start supporting outbound rules as well. Blocking all communication
to given host using an outbound rules is less prone to errors since
it does not depend on specific ports.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 0f9611cdc6c0bef30d1762f9665a973c31b59fd3)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f4908728ff2ee18e980bea369581d35f061951d7">f4908728</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-12-07T16:22:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: Add krb5 preauthentication prompt support
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit 60fdacfd88247ca4cd7f69e77c51749285c3e89b)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6959dc6aadbe77edc3d0915ae006848309c20662">6959dc6a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-12-08T12:14:16+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DP: reduce log level in case a responder asks for unknown domain
Since 9358a74d3a56c738890353aaf6bc956bfe72df99 a domain might be
skipped by 'ad_enabled_domains' option
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 39cd0baa06742b349ed763aa40ea4de366e80f1a)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/66bd91d500142cad5f6a4294c478f204d71eeb9e">66bd91d5</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-12-08T13:22:39+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltests/test_ldap_extra_attrs.py converted to system/tests/test_schema.py
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
(cherry picked from commit c2360811d5a65e0438eb4a26e4f7e8148e631a8a)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f6faf123199ec241024677a8247f951d06c94a51">f6faf123</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-12-12T11:34:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LOGS: added missing new line
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 97c05c4e3cf5f6af6bf080ceb70bff772db556db)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4d01e11d44f1a0f899c2fc53765f36e1e2d5bd50">4d01e11d</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-12-12T11:36:13+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: Skip processing non-passkey mapping data
In the AD case, the user altSecurityIdentities attribute can
store passkey, smartcard, or ssh public key mapping data. Check
to ensure we are handling passkey data before continuing in
PAM passkey processing.
:relnote: Fixes a crash when PAM passkey processing incorrectly
handles non-passkey data.
Resolves: https://github.com/SSSD/sssd/issues/7061
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 6ed1eff44f8cad2e1c1d07cd4d3731b3d143dd9b)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1cffe5bca0948308e906556f6191faacf98936f6">1cffe5bc</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-12T15:37:13+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix tokengroups tests.
Reviewed-by: Anuj Borah <aborah@redhat.com>
(cherry picked from commit ff8f248b0a773d3d6ef1091543fa8c4342ddd410)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f406d427a81bd75bd50ec61132fa527f2abb453">9f406d42</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-15T07:49:45+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Retry realm join as it is flaky on multiarch setups
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit df1b74546f95ab4adb4c69a5d3e23daba1d961b3)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cbd479d76aafbfe48ba89b21866147107d8c7a19">cbd479d7</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-15T14:58:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Change path to keytabs to reflect whole domain in them
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit a5270f898c6d22141033b9d9e735c09d65a0a83f)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0ae9238340126b8e35675e9c0c15023fcf2231be">0ae92383</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-20T06:53:28+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add importance and ticket to multihost
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 5fb0a9ddcacd85525a1a96e0611198e239f8f895)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/854edfb002c149ce171636f2e6319cd7bc416e31">854edfb0</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2023-12-20T13:17:33+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Revert change of retun type of realm_join
I looks like realm join return value was parsed in one place so I
am reverting the mishap change of the return type.
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
(cherry picked from commit b66035f3d60eea4289206d0b30c3058d18149cb4)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/033f3db098c8e9ab99b1b249c716bd416dd20887">033f3db0</a></strong>
<div>
<span> by Andre Boscatto </span> <i> at 2023-12-20T16:50:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: fix wrong product name
Resolves: https://github.com/SSSD/sssd/issues/7094
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 9abcaf90580346ee15ea9f08ec40ce0f5a805cd4)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/02c18320458eaae5faec05cc27139ebf5b35ac7c">02c18320</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-12-20T16:52:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Fix coverity memory overrun error
Fix for:
CID 336599: Memory - corruptions (OVERRUN)
Overrunning dynamic array "result_creds" by passing it to a
function that accesses it at byte "creds_len".
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 1d33bde42aa747e18c4ab8f202ec1053fd9ab6a0)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f5e3bb391d1317104f1b32553c9b1065ee380b92">f5e3bb39</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-12-20T16:52:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Fix coverity RESOURCE_LEAK
Fix for:
CID 470374: Resource leaks (RESOURCE_LEAK)
Variable "prompt_reply" going out of scope leaks the storage
it points to.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit a134074c2ecea50d6ccee80e969b436887c5ef68)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/51f90318be5b9bbbabd1c34101c7b882c3c0aac3">51f90318</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2023-12-20T16:52:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Passkey: Fix valgrind error and missing free
==367086== Conditional jump or move depends on uninitialised value(s)
==367086== at 0x12BF1A31: string_get (load.c:894)
==367086== by 0x12BF291D: stream_get.part.0 (load.c:158)
==367086== by 0x12BF3182: UnknownInlinedFun (load.c:154)
==367086== by 0x12BF3182: UnknownInlinedFun (load.c:227)
==367086== by 0x12BF3182: lex_scan.isra.0 (load.c:573)
==367086== by 0x12BF7F6A: parse_json (load.c:868)
==367086== by 0x12BF80C8: json_loads (load.c:920)
==367086== by 0x12BDDFD9: sss_passkey_message_from_reply_json (passkey_utils.c:544)
==367086== by 0x12BDCA76: sss_passkeycl_process (passkey_clpreauth.c:321)
==367086== by 0x4906215: UnknownInlinedFun (preauth2.c:352)
==367086== by 0x4906215: UnknownInlinedFun (preauth2.c:679)
==367086== by 0x4906215: k5_preauth (preauth2.c:1018)
==367086== by 0x48F9489: UnknownInlinedFun (get_in_tkt.c:1351)
==367086== by 0x48F9489: UnknownInlinedFun (get_in_tkt.c:1912)
==367086== by 0x48F9489: krb5_init_creds_step (get_in_tkt.c:1868)
==367086== by 0x48FA43A: k5_init_creds_get (get_in_tkt.c:564)
==367086== by 0x48FB3EB: k5_get_init_creds (get_in_tkt.c:1978)
==367086== by 0x48FB817: krb5_get_init_creds_password (gic_pwd.c:210)
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 22d35690b6379a59b1bdfc5c20812b792e76af02)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/160738ee8e4eaf59cf81eae13fa65a4b53700c0d">160738ee</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-12-21T13:51:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: MC: in case mem-cache file validation fails,
don't return anything but EINVAL, because `_nss_sss_*()` functions
can have a special handling for other error codes (for ERANGE in
particular).
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 958a5e25c447dc502e8f8fbecf3253e62f92b0b2)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a186224d6e1ce0c91507df58fec424209a307fe3">a186224d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-12-21T13:51:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: check if mem-cache fd was hijacked
Real life example would be:
https://github.com/TigerVNC/tigervnc/blob/effd854bfd19654fa67ff3d39514a91a246b8ae6/unix/xserver/hw/vnc/xvnc.c#L369
- TigerVNC unconditionally overwrites fd=3
Resolves: https://github.com/SSSD/sssd/issues/6986
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 0344c41aca0d6fcaa33e081ed77297607e48ced4)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/abb146e1487598c0e4fa2cdc826b7388db46f9bc">abb146e1</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2023-12-21T13:51:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: check if reponder socket was hijacked
Real life example would be:
https://github.com/TigerVNC/tigervnc/blob/effd854bfd19654fa67ff3d39514a91a246b8ae6/unix/xserver/hw/vnc/xvnc.c#L369
- TigerVNC unconditionally overwrites fd=3
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 2bcfb7f9238c27025e99e6445e9ba799e0bde7b8)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8bf25b6cd4483eebd1d77c6f0ec5ae28376b349e">8bf25b6c</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-12-21T13:51:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>scripts: sign tarball with sssd project key
... also switch to gpg2.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit 2e75d735e963dc1f5399648a804c9ccc89721261)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5c224730acdd1dbc99010435a03052c24da1f960">5c224730</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2023-12-21T13:51:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>scripts: create checksum file for release tarball
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit c7a6e62d1a8f0c3a9424ad01555b24c0f67b4251)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/46f4161e89074ad72a92d344c8157ed37fe93321">46f4161e</a></strong>
<div>
<span> by Alejandro López </span> <i> at 2023-12-27T10:29:24+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: Fix a memory "leak"
When an operation is processed, a buffer is allocated for the reply
and its parent is the client context (struct cli_ctx). This buffer
is not explicitly freed but it is released when the client context is
freed. With each operation a new buffer is allocated and the
previous one gets "lost."
This is not an actual leak because the lost buffers are released by
talloc once the client context is freed, when the connection is closed.
But on long-lived connections this can consume a large amount of memory
before the connection is closed.
To solve this, the request context (struct kcm_req_ctx) is the new
parent of the buffer. The request is freed as soon as the operation is
completed and no buffer gets lost.
Resolves: https://github.com/SSSD/sssd/issues/7072
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit cbae6855320b53f3f2bdc0e11c5a9c8eb84daf87)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8a78c75abf3c536292455d85891b2d2e6e0a92d5">8a78c75a</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2023-12-27T10:31:17+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: multihost/test_sssctl_analyzer.py converted to system/test_sssctl_analyze.py
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
(cherry picked from commit 543eda1953652494c594ce1f4bf1ed0ca6ac1b42)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5a2256cbab41a63fdfce4de2b3c73c8bc82af95d">5a2256cb</a></strong>
<div>
<span> by Jakub Vavra </span> <i> at 2024-01-05T14:27:30+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add a plugin for a per-test logging
Add a pytest plugin to remove / duplicate test log from console
and put it into a stand-alone per-test log files.
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 9d6caaed3a804978186338c896ce120aa258fffd)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/852b9e0c54d13fc48ecf186a378782a5b9046b36">852b9e0c</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2024-01-05T14:43:25+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltests/test_config_validation converted
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit d3a2bd0870e2267ebaaf32dab03ab5707be6483c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bd9cf6f4dbd8332f8067cba94d5626b247499a03">bd9cf6f4</a></strong>
<div>
<span> by Patrik Rosecky </span> <i> at 2024-01-05T14:47:43+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: alltests/test_offline.py converted
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
(cherry picked from commit ea7de588dcf1272dd7284925333b08829adae806)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/80d5a34fe96343999e2ce6f198b79bd7b1a4f483">80d5a34f</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2024-01-08T12:13:20+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add passkey test cases for following scenario
Test cases are as follows:
7. Check offline authentication of a user with LDAP, IPA, AD and Samba
8. Fetch user from cache for LDAP, IPA, AD and Samba server
9. Check authentication of user when multiple keys added for same user with
LDAP, IPA, AD and Samba server.
10. Check authentication of user when same key added for multiple user with
LDAP, IPA, AD and Samba server.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
(cherry picked from commit 173f31148c1d3d0493ad620521414ab076d0623c)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a33931562af5dcbf908d05d1b864b5bf2e547184">a3393156</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2024-01-08T14:20:27+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Handle child-domain group membership
In AD, a user from a domain can be a member of a group that is
from a child of the domain.
The old code did not account for this and created a cache object
with incorrect DNs when ldap_use_tokengoups is set to False.
This patch looks up the correct domain before saving
group and membership attributes.
Resolves: https://github.com/SSSD/sssd/issues/7084
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit 830a2e3d6abf337448f60541da66260d381fbe32)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/98d8bedd106ae42c94fcae6339e864e7c613b0d3">98d8bedd</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2024-01-09T17:10:24+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DEBUG: added missing new line
Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
(cherry picked from commit 4cdb41751c95cd88b8398fe4f86e025c4c507970)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/936b828161810bef53525d72291cf029ad3ce317">936b8281</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2024-01-09T17:13:50+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LDAP: make groups_by_user_send/recv public
Resolves: https://github.com/SSSD/sssd/issues/5708
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 9b73614c49aeb3cfc3208dba5f472354086180b5)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/09dcc73ed4d8db8f30df27bfc7df68bf0a48de11">09dcc73e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2024-01-09T17:13:50+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad: gpo evalute host groups
With this patch the group-memberships of the client running SSSD are
included in the evaluation of the security filtering. Similar as in AD
the host object is more or less handled as a user object which allows
to skip some code dedicated to computers only.
Resolves: https://github.com/SSSD/sssd/issues/5708
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit c02e09afe9610d872121708893db8a21fb201b12)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dda0f2e0b0288b5516409c3ee6548ecc5f4ff407">dda0f2e0</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2024-01-09T17:13:50+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb: remove sysdb_computer.[ch]
The related calls are not needed anymore.
Resolves: https://github.com/SSSD/sssd/issues/5708
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit ff23e7e2879f94a907d05b615dbdb547aaa2e542)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f5ce7c1dae2725df54a36e79ac06d1b48da54f5d">f5ce7c1d</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2024-01-09T17:13:50+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sdap: add set_non_posix parameter
This patch adds a new parameter set_non_posix to the user and group
lookup calls. Currently the domain type is used to determine if the
search should be restricted to POSIX objects or not. The new option
allows to drop this restriction explicitly to look up non-POSIX objects.
Resolves: https://github.com/SSSD/sssd/issues/5708
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit 5f63d9bfc71b271844db1ee122172630be1afed0)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/05de56d0cac65c12708d1b4a974109d2266b689c">05de56d0</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2024-01-10T09:38:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>GPO evaluation of primary group
When we are evaluating GPO the SID of user's primary
group is not returned in the list. This patch converts
the value of origPrimaryGroupGidNumber attribute back to
SID and that SID is added to the list of SIDs before
evaluating the GPO rules.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
(cherry picked from commit ecb0c6370dbab8fdcb3cdfa3495a38319c8e5266)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cb64d47b27b6e25b2b2c0ab04ac24d4c17673b0e">cb64d47b</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2024-01-12T07:07:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: updating poor assertion in dyndns
Reviewed-by: Dan Lavu <dlavu@redhat.com>
(cherry picked from commit 90eca38eca804b89bf76fec443f9a2f2ac420695)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2b86d580934833d2947aef7361e3d7fe42727028">2b86d580</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-12T11:00:20+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge branch 'upstream'
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8e21df9a063d441079f92373f8dafa7e9bfaa2dd">8e21df9a</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-12T11:01:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>version bump
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/087cd54f55fd70e60ea92fe8fe0d458f1016c3c0">087cd54f</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-12T11:07:51+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>control: Migrate to systemd-dev. (Closes: #1060512)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c054fc007bdcb65f77cd8ae9b44efa4ac367428f">c054fc00</a></strong>
<div>
<span> by aborah </span> <i> at 2024-01-12T12:07:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Fix ipa test for gating.
Error: remote username contains invalid characters
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
(cherry picked from commit 23087669ef9826fbba9e3e6b379f2b0bb86c9820)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1c5a11fc26a07291519e3a3169841dbfe04aea9d">1c5a11fc</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2024-01-12T12:08:23+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: adding background refresh tests to the new framework
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
(cherry picked from commit c6d216fb74108d798f9ef5b804c87b3654ab1c30)
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/eecd41831034c9b0289fd645f122dc0cd187bff7">eecd4183</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2024-01-12T13:05:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update pot files
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/02d3f214ba5e95e228427594bfef4366fb38a635">02d3f214</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2024-01-12T13:05:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Release sssd-2.9.4
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6eee99084d903b0e38e471bc1b537d35ac421336">6eee9908</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-18T11:56:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>rules, install: Use systemdsystemunitdir.
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a2a01dcce54894db42cb966c1ec4ce5bfbab23d8">a2a01dcc</a></strong>
<div>
<span> by Sergio Durigan Junior </span> <i> at 2024-01-18T12:00:58+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Improve certificate/smartcard dep8 tests.
- d/t/control: Don't depend on "needs-sudo" restriction, since the
tests don't really use "sudo" selectively but rather rely on a normal
user being setup as a side effect of "needs-sudo". Instead, we can
use "needs-root".
- d/t/sssd-smart-card-pam-auth-configs-tester.sh,
d/t/sssd-softhism2-certificates-tests.sh: Use
"${AUTOPKGTEST_NORMAL_USER}" instead of "$SUDO_USER".
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f4e271683dbe2026833a6ad24ba0088151d071da">f4e27168</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-18T12:01:27+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Merge branch 'upstream'
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4210c44bb4b1a1a8c596570334c9ca01230658f1">4210c44b</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-18T12:02:10+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>version bump
</pre>
</li>
<li>
<strong style="font-weight: bold;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0b232512607aecf92a53195ec66ac57ab5ea1a5e">0b232512</a></strong>
<div>
<span> by Timo Aaltonen </span> <i> at 2024-01-18T12:04:43+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #333238; position: relative; font-family: var(--default-mono-font, "GitLab Mono"),"JetBrains Mono","Menlo","DejaVu Sans Mono","Liberation Mono","Consolas","Ubuntu Mono","Courier New","andale mono","lucida console",monospace; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>releasing package sssd version 2.9.4-1
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
30 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#71da4bef7d009bfa59d0f7ca85bf6a18169fb48d">
.github/workflows/analyze-target.yml
</a>
</li>
<li class="file-stats">
<a href="#899ce9c202bf7bb5480e72836c3edc773c9c4244">
.github/workflows/ci.yml
</a>
</li>
<li class="file-stats">
<a href="#205e49e7f8cbf1a4f02d387dd32850fa09a5ef81">
.github/workflows/copr_build.yml
</a>
</li>
<li class="file-stats">
<a href="#f34eaf19b34e4ae5135212c79909cfd8d3c70b6b">
.github/workflows/coverity.yml
</a>
</li>
<li class="file-stats">
<a href="#4d938f6c1c694e539e55e88076490273a04798ba">
.github/workflows/static-code-analysis.yml
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#4fd746b72d7a3976d4c1ae84db34f6173b62a1e8">
contrib/ci/configure.sh
</a>
</li>
<li class="file-stats">
<a href="#49d80aa598751b3e8c23a3bbb4e7e9c03aa770b6">
contrib/ci/deps.sh
</a>
</li>
<li class="file-stats">
<a href="#031969761fa6f19a30b8c7f03d888fec88b92193">
contrib/ci/distro.sh
</a>
</li>
<li class="file-stats">
<a href="#0aeb6d52776b667900291cb1c14a7dadddc5c3b2">
contrib/ci/get-matrix.py
</a>
</li>
<li class="file-stats">
<a href="#d348d65f630a357f2aeaa78fc64043f57caa4cb0">
contrib/ci/sssd.supp
</a>
</li>
<li class="file-stats">
<a href="#b8d57aa4a09effcbac8deeffe8aea9131499424f">
contrib/sssd.spec.in
</a>
</li>
<li class="file-stats">
<a href="#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class="file-stats">
<a href="#58ef006ab62b83b4bec5d81fe5b32c3b4c2d1cc2">
debian/control
</a>
</li>
<li class="file-stats">
<a href="#8756c63497c8dc39f7773438edf53b220c773f67">
debian/rules
</a>
</li>
<li class="file-stats">
<a href="#59b3c244c6f38109b21a4eba229d7bd99c5bea88">
debian/sssd-ad-common.install
</a>
</li>
<li class="file-stats">
<a href="#888968d8696ab3370bf567424c1013cb2ad00c45">
debian/sssd-common.install
</a>
</li>
<li class="file-stats">
<a href="#710f11488b2d92c68cb52840c8c127a75b5f9991">
debian/sssd-dbus.install
</a>
</li>
<li class="file-stats">
<a href="#a24de65d7a5df069b135f8a00a7919ff04c7121a">
debian/sssd-kcm.install
</a>
</li>
<li class="file-stats">
<a href="#83223a554d33ba7e1888274ff8ac43adb8147ba0">
debian/tests/control
</a>
</li>
<li class="file-stats">
<a href="#04a55d53c5eb8fbf5aab7592c2d67c43157ed2e5">
debian/tests/sssd-smart-card-pam-auth-configs-tester.sh
</a>
</li>
<li class="file-stats">
<a href="#1db870b38e644e5f1e4eb2137bcadc04e1da23ce">
debian/tests/sssd-softhism2-certificates-tests.sh
</a>
</li>
<li class="file-stats">
<a href="#4e573a66c66b45b45a1e180cad791738ed22cdd2">
po/bg.po
</a>
</li>
<li class="file-stats">
<a href="#b91599a7e7dcdfc93152518865a9d894acfe41c9">
po/ca.po
</a>
</li>
<li class="file-stats">
<a href="#fccf081b8d2f9631b6347df4a24d22fac5a73474">
po/cs.po
</a>
</li>
<li class="file-stats">
<a href="#8133f48bcd872819f4d7310d09b4ef30a26831b0">
po/de.po
</a>
</li>
<li class="file-stats">
<a href="#bf0ecd6fd82096852700283e68fd723ccfe57871">
po/es.po
</a>
</li>
<li class="file-stats">
<a href="#804f8c75d12ae05ad9351001530d8575e03a169d">
po/eu.po
</a>
</li>
<li class="file-stats">
<a href="#4a909f28ec13a23ac75c362bf9a9e15669d47d6d">
po/fi.po
</a>
</li>
<li class="file-stats">
<a href="#09aa9a4cf22de79302d7cefe7d280b7235f787c7">
po/fr.po
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: 0.875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #737278;">
—
<br>
<a href="https://salsa.debian.org/sssd-team/sssd/-/compare/ceec671e20343961b31cabe39c861b091cfe04ee...0b232512607aecf92a53195ec66ac57ab5ea1a5e">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
</p>
</div>
</body>
</html>