<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style='--code-editor-font: var(--default-mono-font, "GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;'>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: .875rem;
}
body {
-webkit-text-shadow: rgba(255,255,255,.01) 0 0 1px;
}
body {
font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style='font-size: inherit; -webkit-text-shadow: rgba(255,255,255,.01) 0 0 1px; font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";'>
<div class="content">
<h3 style="margin-top: 20px; margin-bottom: 10px;">
Timo Aaltonen pushed to branch upstream at <a href="https://salsa.debian.org/sssd-team/sssd">Debian SSSD packaging / sssd</a>
</h3>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/76bce06f1f68724aaa4c0a31ab6537c7e0c228c5">76bce06f</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-06-05T11:50:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update version in version.m4 to track the next release
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2d0291da7dbf3dda274e3921c61511b9293b13f3">2d0291da</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-06-05T12:14:32+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>adding pytest markers to help keep track of transformation status
Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6f9aed5a3ea6534ebe279806e0ef6da795c38354">6f9aed5a</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-06-05T12:14:32+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: skipping simple access control tests that have been rewritten.
* found a missing test scenario that has been planned
Reviewed-by: Andre Boscatto <aboscatt@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e98a777ee22c425ed2b38f88fa4229d8c7f810e9">e98a777e</a></strong>
<div>
<span> by Arda Gurcan </span> <i> at 2025-06-05T12:16:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>NSS: Reject empty name lookups in client library
Don't send a request to SSSD for lookups like getent passwd "", reject them locally in libnss_sss.so
Resolves: #7970
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dab5ca5ca7f3a010632723717917ff973f7135c2">dab5ca5c</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-06-11T08:41:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Introduce cli_creds_set_{u,g}id() macros and use them to fix the build on FreeBSD
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ead2e0e0477241a295cba80db339e9f58ff3ea93">ead2e0e0</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-06-11T08:41:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make use of ucred helpers in tests
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fbeba7ac257ae9c04f932e58e6fff6e30a41fb78">fbeba7ac</a></strong>
<div>
<span> by fossdd </span> <i> at 2025-06-13T11:12:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_prctl: avoid redefinition of prctl_mm_map
prctl_mm_map is provided by linux's prctl.h and libc's prctl.h.
libc's headers should be preferred.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/713da134126b84a6da11dcb2ac043efc6915e61b">713da134</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-06-19T10:35:30+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Move test_ldap_referrals from gating (tier1)
The test is failing due to DS ldap bug RHEL-87352.
Moving it out from gating.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/93b041c9e66aebdf788588254a3f4670bc39077e">93b041c9</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-06-19T12:31:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Provide the struct spwd definition if shadow.h isn't available
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2d308e2e9a9ae19f8e8a9d5efb9e43b13872337b">2d308e2e</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-06-19T14:57:48+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add missing markers for ticket plugin
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/34d01e748e056bbc9525baa5e04dfd0594d63b28">34d01e74</a></strong>
<div>
<span> by Américo Monteiro </span> <i> at 2025-06-19T15:39:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Portuguese) currently translated at 13.0% (98 of 749 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63d82d9ce0d7126d59865f6a62cdfb72ceb23aa0">63d82d9c</a></strong>
<div>
<span> by Américo Monteiro </span> <i> at 2025-06-19T15:39:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Portuguese) currently translated at 7.4% (208 of 2799 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cd325f645256d1f5fd0c6821edad666029575b2e">cd325f64</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-06-21T08:54:55+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM: keep 'LISTEN_PID' and 'LISTEN_FDS'
env variables as those are used by `sd_listen_fds()`.
Resolves: https://github.com/SSSD/sssd/issues/8005
Reviewed-by: Anuj Borah <aborah@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7acb8ef776dfedf17bde77f82432a2bfb769f055">7acb8ef7</a></strong>
<div>
<span> by Yuri Chornoivan </span> <i> at 2025-06-24T12:14:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typo in sssd-ldap.5.xml
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/791618a940da36d3971449bb6df6630e22a1bf22">791618a9</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-06-24T12:16:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fall back to ftruncate in case of CoW file system
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ac9fd622bbcc1034b771eda4607e5bd8917812f6">ac9fd622</a></strong>
<div>
<span> by Yuri Chornoivan </span> <i> at 2025-06-24T12:24:24+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typo in sssd-idp.5.xml
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/417d32d0192df6c1bbe9911c8bc5884a664ea4fa">417d32d0</a></strong>
<div>
<span> by Yuri Chornoivan </span> <i> at 2025-06-27T16:56:47+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix typos in sss-certmap.5.xml
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7b829bcd14aa2fc3c674699ef0be5486f5b7db2b">7b829bcd</a></strong>
<div>
<span> by Yuri Chornoivan </span> <i> at 2025-06-27T16:56:47+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Update sss-certmap.5.xml
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6760771a9f261dc989c1046c06cb7fc6ae57e5e0">6760771a</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-06-30T10:15:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>oidc_child: Use the sss_prctl wrapper
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63976d8271529f461cada3d8db187d8786d95bef">63976d82</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-02T11:03:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>'gemini-code-assist' config
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/44b6324e0b310c5cbcd6af73f658e231ad562253">44b6324e</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove old Obsoletes
These obsoletes have been set for multiple Fedora versions already (some even
for years), we can safely remove them now.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ab6d62423d532f42496a1be9f5bc5ad1362d371a">ab6d6242</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove old Provides
libsss_sudo-devel package was removed 12 years ago and the files
are not even packaged in the rpm anymore.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9bdc2172931de953e7547045394080d2f655a8de">9bdc2172</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: always build with sssd user
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cca790052c38c2c786da48c25766c48ea904670c">cca79005</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: always use sysusers to create the sssd user
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/eefdd01a2e92523d5797fa0aeaf792d6c6bcd6de">eefdd01a</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:56+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove build_subid condition as it is always enabled
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9d83e67f2b5bf43ef6dd2c4f7f4fe3f5d45b9a4d">9d83e67f</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: always build kcm renewals
This has been enabled for a long time. This also removes the
krb5_version variable as all current distribution ships compatible
version.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/538d745d355028fc1f3ad8d173ab1157cc8d2612">538d745d</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove build_passkey as it is always enabled
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f9f1a809783c7b6cb0671019b26b9c58758b7f3a">f9f1a809</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: build idp only on f43+ and rhel10+
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/88ad51932027a8832fb7a950d3aec045ac8d97e7">88ad5193</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove _hardened_build
This is enabled by default since Fedora 23.
See: https://fedoraproject.org/wiki/Changes/Harden_All_Packages
See: https://docs.fedoraproject.org/en-US/packaging-guidelines/#_pie
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0e3ceca17196c4a4379b41f13976c2d82132312e">0e3ceca1</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove ldb_version
All supported distributions have compatible version already.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6562eb881a75fedcd7501ef51bd44bd0a5feeca2">6562eb88</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: add comment to samba_package_version
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5b9b9ae4b39044020a6b88352c61a7ec249f3d3d">5b9b9ae4</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: move packages required for p11_child tests together
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/85f41f91e76b292922b42ea8e87be184fe24ac25">85f41f91</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: remove systemtap-sdt-dtrace version condition
The package is available on all supported distributions.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/dde42a2c7cfa20aae93532b7685f7714e99a0eeb">dde42a2c</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: use upstream_version variable when producing downstream_version
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e6f6a988bb6c418cba43ae5f2219c981734b00f">9e6f6a98</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: use autochangelog
We don't really care about change log in development RPMs, but we
will switch to rpmautospec in Fedora so let's do this change here
as well to keep the spec files in sync.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3a59decab5771f6d7bb96de7efe3b41801cddec0">3a59deca</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: target f41+ and rhel10+
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5b342ca2eee285b0446c4c02e259aae8248c04d0">5b342ca2</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-03T12:36:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: use version_no_tilde
Upstream version is using pre-release version with dash as a separator
since git does not support tilde in tag name. On the other side, Fedora and
RHEL requires tilde as a separator to correctly order builds.
For example: 2.10.0-beta1 vs 2.10.0~beta1.
The conversion can now be done by version_no_tilde macro. This is a
preparation for enabling packit, without this change we would need to
postprocess the spec file.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/16d61ee1acdeb73d22a756a1c68c3dfc08d9b94d">16d61ee1</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-07-04T14:33:55+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb: add sysdb_get_direct_parents_ex()
sysdb_get_direct_parents_ex() is similar to sysdb_get_direct_parents()
but allows to request a different attribute than SYSDB_NAME be returned
for the found groups.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a19873c84948a6451da80e6c8d3f689c8228c04">2a19873c</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-07-04T14:33:55+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: improve handling of external group memberships
Currently add_ad_user_to_cached_groups() expects that all IPA
group-memberships of users from a trusted domain are removed when the
group-memberships from the trusted domain are updated. This is currently
only true for the code path where the tokenGroups request is used. The
code path without tokenGroups does not remove the IPA group-memberships.
Removing the IPA group-memberships is also not very efficient especially
if there are no changes to those at all. With this patch in
add_ad_user_to_cached_groups() it is checked which group-memberships
have to be added or removed. In this function the SYSDB_ORIG_MEMBEROF
attribute of the user is handled as well for the IPA group-memberships.
Since this attribute is removed in all code paths all IPA
group-memberships are added here again. But instead of doing it one by
one as in the previous version, the attribute is added for all groups in
a single operation which should help to improved the performance as
well.
Resolves: https://github.com/SSSD/sssd/issues/7921
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/297ecc467efb6035e370f62e62ffa668bb1d0050">297ecc46</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-07-07T17:16:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>authtok: add IS_PW_OR_ST_AUTHTOK()
This patch adds a helper macro to determine if an authtok struct is of
type SSS_AUTHTOK_TYPE_PASSWORD or SSS_AUTHTOK_TYPE_PAM_STACKED. This is
useful if a password is expected but an authentication token forwarded
by an different PAM module, which is most probably a password, can be
used as well.
Resolves: https://github.com/SSSD/sssd/issues/7968
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3b106f1888b6430b8bab75e1c0fe0f054eafce48">3b106f18</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-07-07T17:16:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: offline with SSS_AUTHTOK_TYPE_PAM_STACKED
Recently a new authtok type SSS_AUTHTOK_TYPE_PAM_STACKED was added to
handle credentials forwarded by other PAM modules. Before it was
unconditionally assumed that it is a password and hence
SSS_AUTHTOK_TYPE_PASSWORD was used.
When SSS_AUTHTOK_TYPE_PAM_STACKED was introduce the main use-cases were
already handled but currently offline use-cases fail because here only
SSS_AUTHTOK_TYPE_PASSWORD is expected. With this patch
SSS_AUTHTOK_TYPE_PAM_STACKED can be used to store or validate offline
credentials as well.
Resolves: https://github.com/SSSD/sssd/issues/7968
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c7bf90643aee429de40a5ed795ba3483b40ae0d2">c7bf9064</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-08T12:34:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: use correct url for the tarball
The "archive" tarball is created by github by tarring the repository
content, it is not the same what we release.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/caeeaf7c120f36914415dbe1a9030c477033490e">caeeaf7c</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-08T12:34:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: support gpg verification
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1b884f056ba460c1e3990cd3c31829b70ddf6182">1b884f05</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-08T12:34:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add packit configuration
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8daa3e11a6e09938780ea5ee864dd50e62b490ac">8daa3e11</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-07-08T12:34:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove custom copr builds
COPR builds are now built by packit.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/94151af9e3465262137c3a877953335c92c27c8c">94151af9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:09:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SPEC: add missing '\'
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6f448e1cc5cf7d642bc3b822d85587fbb9aac86c">6f448e1c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: removed stray declaration
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/78c140081631af2668f59a1361f4e9741c02eae5">78c14008</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: moved code used only by 'monitor'
out of shared 'utils'
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f9b226b015e8e262c591f11c5befc65a7a9a05d3">f9b226b0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Moved define used by ldap_child only out
of shared 'utils'.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/03da01d74376438ffb15c55869e1178ff7f6b97f">03da01d7</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>libkrb5 passkey plugin doesn't use 'libsss_util.so'
No need to use the same read buffer size. Especially taking
into account buffers are used differently.
Also clean up includes a bit.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0fb034b7d247e704ab7bb3dd959ddc06cf603f2d">0fb034b7</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>'libsss_cert' doesn't use 'libsss_child'
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c00c6e214e96ee8f9b4a714f579b8c91b3e47a89">c00c6e21</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD_COMMON: unify structs 'response' and 'io_buffer'
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/03f526333fe5bbe7dbf8db8ab335a60dc3a500bd">03f52633</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: split child helpers code
into process handling and IPC
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/24e9f9b15bcfbb8d8cf87a9fd256258fed3e4d2a">24e9f9b1</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTILS: don't use shared 'IN_BUF_SIZE'
Size of a read buffer depends on child process semantic.
Some processes already had a local definition.
Make it consistent.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/91c528ac6e280010747a220d7022eac4fd0292e2">91c528ac</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:14+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Helpers defined in 'child_utils.h' aren't really used in child processes.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/10ad5a0ca9f1ff91cb89bb5008fd1755a1885885">10ad5a0c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Rename 'sss_child_ctx_old' -> 'sss_child_ctx'
Maybe there were some plans to unify this struct with another one,
used by monitor, but it wasn't implemented.
Now there is no conflict and 'sss_child_ctx_old' looks weird.
Plus some cosmetic changes.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/81b2f20417e1103c6e6bd2901ad305ad71a5460c">81b2f204</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>New `sss_child_start()` helper
to be used instead of copy&pasted 'fork+exec' functions.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/47b544a37457943c012c970d7b5fb1547f5972c9">47b544a3</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/511b44b8e7d0f75119f169bcb8a4cf9831f1c38d">511b44b8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LDAP: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3b435ce3cedddffa811f41563f61be1e12110be2">3b435ce3</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Delete 'exec_child()'
It's not used in production code anymore.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/92f977a46764960abf2644473563674b9dffbc57">92f977a4</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IDP: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/afffec389abf835859cb996ff21ac7b41ee3c1c8">afffec38</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: make activate_child_timeout_handler() internal
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9324feb8a7f6eb27830f4047ec46cf7436460592">9324feb8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AD pw renewal: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ce528fd55986ccc877a4c3dcee968f4ac8677c39">ce528fd5</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AD GPO: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5b72f114380f3cd34c61c4647d2048ec5d8171fa">5b72f114</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>responder/ifp: use sss_child_start() for p11_child certificate validation
NOTE: this patch is generated with the help of Cursor/claude-4-sonnet
under strict supervision.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f2ac0886a1c8c258a5624564b7c88e5aa55701a">9f2ac088</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_child_start(): allow NULL output _io arg
for those users of this function that don't communicate with
child process via pipe.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e5f4348fb889dc932179d8cf46257aac9adc94c8">e5f4348f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSH: refactor ssh_cert_to_ssh_key.c to use sss_child_start()
Refactor the certificate to SSH key conversion code to use the new sss_child_start()
helper function instead of manual fork/pipe handling. This follows the same pattern
as other recent refactorings in the codebase.
The refactoring:
- Replaces manual pipe creation, fork handling, and child setup with sss_child_start()
- Keeps the p11_child_timeout() function name and location unchanged
- Removes unnecessary fields and variables
- Maintains the same functionality for SSH certificate handling
This patch was generated using Claude Sonnet 4 AI model to follow the established
refactoring patterns from recent commits like:
- <hash removed>: introduces new helper function sss_child_start()
- <hash removed>: KRB5: make use of sss_child_start()
- <hash removed>: LDAP: make use of sss_child_start()
~~~~~
Notes:
- patch is a result of multiple iterations, pointing at specific
issues with the patch at every iteration
- `p11_child_timeout()` has lost `child_handler_destroy()` and thus
doesn't terminate child process anymore; to be addressed later
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/839a73099e13ede49293733db9f6587037be51b4">839a7309</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: extend `sss_child_start()`
to handle auto termination.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/96a7fc75d748a19430b3d2c4000b3a1eb48c55df">96a7fc75</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AD GPO: handle stuck 'gpo_child'
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bd6dfc2ccb5a5f079c97ff176f1457e697e8dd09">bd6dfc2c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: handle '--chain-id' as a basic arg
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/452f205e689e2744852d89160511dba36a96de66">452f205e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA_SELINUX: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9be8b15b24e7dcc947688600b523ab096c464231">9be8b15b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM:CERT: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0e8f8876efbb0dd8f140e7cebc65a4c8cc782633">0e8f8876</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:15+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM:PASSKEY: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5e2586bb3ee144832b1f2fec3499dbc1666ec1d2">5e2586bb</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DYNDNS: make use of `sss_child_start()`
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/db8a601d08e320332ae661132f89211bb894eb41">db8a601d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Cosmetics around close-fd helpers
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a831c000377c77c0a9ebee8eaba93260ed0af69a">a831c000</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: make `child_io_destructor()` private
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4cd3aac5a08c50d7a2b6a6efe2bf81c34e948e8d">4cd3aac5</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: make `child_handler_setup()` and `child_handler_destroy()` kind of "private".
'ipa_subdomains_server.c' still uses those, but ideally
should be reworked to use `sss_child_start()` instead.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e4adf7e4a906f1b2a61e2a177596cca78114262b">e4adf7e4</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: make `exec_child_ex()` private
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f2e11ca58cccd84b8183baa26c20b0286200822">9f2e11ca</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: cosmetics around namings
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/301dc67a1d1e906954831255a7299f7fb19fbb6d">301dc67a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: check return code of `sss_fd_nonblocking()`
Issue spotted by 'o3' LLM:
```
sss_child_start builds a pipe pair,
marks non-blocking using sss_fd_nonblocking
but no error check of that helper.
```
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fd92f450c2a10937c16934c647b308236d5a0c92">fd92f450</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5 PASSKEY PLUGIN: ensure space for NULL termination
Issue spotted by 'o3' LLM:
```
buf is allocated exactly PASSKEY_CHILD_MSG_CHUNK bytes; if the child writes
a full 1024-byte, the string may miss a terminating NUL (read does not append one).
Previously had the same flaw, but still worth fixing (allocate +1 or ensure NUL).
```
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/18cba6e7d19aae8d13f59495c330953543459d75">18cba6e7</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Cosmetics: indentation fix
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8bddb6a510c3c1a88e31d43c6b1c66709be53193">8bddb6a5</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Renamed 'child_common.c' to 'child_handlers.c'
as it suits better.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b871b0cc2e0189d9af08a16605763a5ce2d0f6f2">b871b0cc</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-10T13:13:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: make sure 'child_out_fd' isn't used
accidentally if 'io' isn't required.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2121f9b8d53ae35959e589561ce7e70a7efe7f81">2121f9b8</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-07-11T15:06:42+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>removing deprecated pam_ldap pam_krb proxy provider multihost tests
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2d6ef923e1309ca3bef2b6093b91f736c81d608b">2d6ef923</a></strong>
<div>
<span> by Mark Johnston </span> <i> at 2025-07-14T11:49:35+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>find_uid.c: Add FreeBSD implementation
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0ceb448745473917cd9cdff3a0f6334684e2a77c">0ceb4487</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-07-24T07:08:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Move test_sssctl__analyze_without_root_privileges from gating
Run the sssctl analyze under user1 using su instead of ssh.
Remove the test from gating as this is not a "core" functionality.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e35516214944cb0b4f3928bef20a27cfd3f3be44">e3551621</a></strong>
<div>
<span> by André Boscatto </span> <i> at 2025-07-24T07:10:08+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Adding nested group test case for simple access control
While going through the multihost test we identified that this test case
was not covered, thus adding it now.
Relates to https://github.com/SSSD/sssd/pull/7984
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/30d6e9f1dd8a5c771d1c0f43b4447b6cbf3c438a">30d6e9f1</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-07-24T16:34:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sbus_generate.sh: Use portable shebang
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/06bdffe0245d1cc570d46f9cc889b34c98c61919">06bdffe0</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-07-29T17:25:52+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>inotify.m4: Fix usage of $sss_extra_libdir
According to src/build_macros.m4 this variable is intended to be prepended
with -L. The same usage can be observed in, say, src/external/libpopt.mk
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c44491e76c79c0f8edd77433e92c69bcced1d468">c44491e7</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-07-29T17:25:52+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Link sss_util to INOTIFY_LIBS, this module calls into inotify API
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b6455e0f4386bc22386ebb62d2b54eff6f6c9c8c">b6455e0f</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-07-29T17:25:52+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Link test_inotify to INOTIFY_LIBS
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e8b62e0a98b7dba1b11798da73992bb5478da35">7e8b62e0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-29T17:26:30+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Make sure previously rotated logs are chown-ed as well.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d8ac442973e3304c951d42126eea6248b7dc8d2a">d8ac4429</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-07-29T17:26:30+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: don't dereference links while chown-ing in %post
Make it consistent with systemd service file.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8c32d7fae0b00c3802ff861040e69bcfc7639a11">8c32d7fa</a></strong>
<div>
<span> by krishnavema </span> <i> at 2025-07-29T17:31:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: adding user su smartcard login test
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fb00f47026782ec40fe519079586204e0cd4ffc9">fb00f470</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-07-30T16:45:24+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Exclude specific IP addresses from dynamic DNS updates
:config: A new option, `dyndns_address`, has been introduced to specify
network addresses that are allowed or excluded from dynamic DNS updates.
The `dyndns_iface` option has been extended to support the exclusion of
network interfaces.
Resolves: https://github.com/SSSD/sssd/issues/6439
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6c29c14a2b3f31a51a6996a93cbfac03a21f8f61">6c29c14a</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-07-30T16:48:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>UTIL: Add string_ends_with utility function
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e7a3cace283f617fbce0a99b84ada1310c1b6275">e7a3cace</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-07-30T16:48:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONFDB: Store domain ID override templates
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f1768ba709dff5026e2c1761622f3acc6f52f37a">f1768ba7</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-07-30T16:48:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: Support ID override templates
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/753c76f075606dec14d765b83d95e3f0aadb57bf">753c76f0</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-07-30T16:48:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: Support ID override templates
Retrieve ID override templates on subdomain
initialization. When overrides are checked
during IPA lookups, check for fallback template
values.
:relnote: SSSD now checks for existence of ID override templates
in an IPA provider configuration. ID override templates
supports overriding loginShell and homeDirectory values
for trusted AD, or upcoming IPA-IPA trusted users. This
behavior is enabled by default.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9856b6dda23ca565475cceb7897f7117a3880ab1">9856b6dd</a></strong>
<div>
<span> by shridhargadekar </span> <i> at 2025-07-31T11:06:45+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: cache_credentials = true not working
Tests for cache_credentials = true not working in sssd, with specified PAM
configuration in /etc/pam.d/system-auth and /etc/pam.d/password-auth
verifies #7968
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/878e5d62719483c435a4ad415a4bf10e0a93dc58">878e5d62</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-08-01T10:14:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT:MC: simplify logic and
fix potential race condition in `sss_nss_mc_get_ctx()`
Resolves: https://github.com/SSSD/sssd/issues/7967
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b33327ac38501c02b06e292c5dd73dbb55c4c526">b33327ac</a></strong>
<div>
<span> by shridhargadekar </span> <i> at 2025-08-06T09:05:09+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Adjusting priority of a test case
Setting a prority of a
test_authentication__user_login_with_modified_PAM_stack_provider_is_offline
to medium from critical
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6d124aecc4097f78cc382d687d6dbcf3a049cbc4">6d124aec</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-08-06T09:05:50+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Include sys/wait.h where needed
All this code uses WIFEXITED() macro, which is defined in sys/wait.h according
to POSIX
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/87dae847da7b6308f626407830cf208fde9be619">87dae847</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-06T16:36:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>packit: get version from version.m4 for upstream builds
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ca0db6d5ecc7394afdf713677048d7523a8c0661">ca0db6d5</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-08-07T12:18:29+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Make multihost custom-log more resilient.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0e66577e34350ff133be41d41f17d0d584a366f9">0e66577e</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-08-11T10:19:19+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Introduce FreeBSD CI
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3533bd5af1c227b2228509ca1adb6e21770e41c1">3533bd5a</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-08-11T10:19:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Stabilize analyze child logs
Use `with` block to close ssh connection
after initial successful login and remove `sleep`
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a38790fcf39d122b302a46f07f102892f4a4680f">a38790fc</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-08-11T10:21:16+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: remove IPA dyndns legacy options
:config: ipa_dyndns_update, ipa_dyndns_ttl, and ipa_dyndns_iface
legacy options are now removed.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b17c6c5e640e252331069009531bdb8cfdac5edf">b17c6c5e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-08-13T17:41:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add missing intgcheck artifacts
If the integration tests fail during one of the initial steps 'install-deps'
or 'autoreconf.log' there are no logs to debug the issue. This patch
adds the related logs to the artifacts.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/576b8675c7a1e3dab79f0dc954de1b56adaa8464">576b8675</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2025-08-13T17:42:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add additional Infopipe tests for untested interfaces
- Added tests for:
- Ping interface (`Ping` method)
- ListComponents and component property checks
- FindMonitor and monitor validation
- Users interface `FindByID` method
- Groups interface `FindByID` method
- UpdateGroupsList for refreshing user group memberships
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f7ad10cf856edcb03568560974b1ab50fa989780">f7ad10cf</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-15T10:46:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSDConfig: allow last section to be empty
Previously, if the last section in the configuration file did not
contain any value and the configuration file did not contain last empty
line, the section was ignored.
This worked:
```
[pam]\n
\n
```
This was ignored:
```
[pam]\n
```
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c92580bdcc55c2ccb2298b7a638ab5c52d003d65">c92580bd</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-15T10:46:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add pre-commit configuration
pre-commit is a tool that can easily install configured git hooks
locally. It can be also used to run checks as part of PR CI on
GitHub.
You can install the git hooks locally by running `pre-commit install`
to automatically fix code on commit.
The current configuration takes care of white spaces.
See https://pre-commit.com and https://pre-commit.ci for more details.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/afd88cf053fe2711bc2a6fcff34b97a1a34cb7b5">afd88cf0</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-15T10:46:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add python-system-tests as requirement to the result job
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c6d1d69952b3f639ce58a05c73eb4858dfbba892">c6d1d699</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-15T10:46:53+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>whitespace: fix issues found by pre-commit
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6924d678206cc790dda1a163b6ea74b824007a82">6924d678</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-08-20T18:54:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add automation for creating new release
This automation can be manually triggered in "Actions" tab.
- update translations
- bump version number
- create signed commits and tag
- push the content to upstream repository
- create new github release with autogenerated release notes
Since release notes generated from out commit messages are not yet
supported, the release is created as a draft. When created, we need
to updated release notes manually and then publish the release.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f84bc3336ddbef6a93cba018d55d0d535f3a27cf">f84bc333</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-08-21T13:25:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: test_sssctl__analyze_child_logs handle timing issue
in IDM-CI a different request to SSSD can happen before the
failed login attempt provided in the test, making this other
request show as CID #1 in the logs causing this test to fail.
Concatenate the first three CID requests to address this. This
timing issue is unrelated to the functionality this test needs
to exercise (checking child logs of analyzer output).
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/17b9188f802e2e2d505553e45938063de8123e7f">17b9188f</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-08-26T15:49:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: Workaround pylibssh Failed to open session
Add constraints.txt file to specify version requirements separate
from installed packages
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5e16b0de6728a40af0ced83f5ca2f8bbb83b68e1">5e16b0de</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-08-26T15:49:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: Install libssh-dev
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/38a6a4a79226a784eb2233203f74cf2040e67856">38a6a4a7</a></strong>
<div>
<span> by Patrick Bruenn </span> <i> at 2025-09-05T11:04:42+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>BUILD: Accept krb5 1.22 for building the PAC plugin
At least on FreeBSD 14.2 this fixes the build with krb5 1.22.
Signed-off-by: Patrick Bruenn <p.bruenn@beckhoff.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9cbb08da87df1d5c9deb14aeed90c6fd7f2a8705">9cbb08da</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-09-05T17:47:21+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb: Execute override code even if no templates exist
Fixes an issue where ID overrides were not applied properly
for the Default Trust View.
Resolves: https://github.com/SSSD/sssd/issues/8059
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5aa8c23a6b2c7e1c4087a88b33ac8088f57cefd3">5aa8c23a</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-09-12T08:55:03+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: update test_sudo network utilities
These were moved in
https://github.com/SSSD/sssd-test-framework/commit/bad71037feef3108578f32e9c4c25b5556eebffd
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a73ea6ebdf225e6ab52fcf67e9b0a2a35a52ce7d">a73ea6eb</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2025-09-15T13:52:01+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Refactor sssctl tests: consolidate and fix config-check
- Parameterized similar config-check and analyze tests
- Fixed domain section handling in config validation
- Improved error messages and assertions
- Maintained all original test coverage
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9c0ca193c09179e5f850ea809dcbe713e02e97ae">9c0ca193</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-09-17T10:31:55+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: additional IPA hosts/hostgroups debugging
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/74d3adb084eb0082a506141e339564f7b647231a">74d3adb0</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-09-18T18:43:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSDConfig.py: Support running on FreeBSD
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6be934a493ab600779b6e750f6501bb0c9538db9">6be934a4</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-09-18T18:43:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>FreeBSD CI: Put the job's output under logging groups
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/445d374b18346f1da71537a1436480a960ec964b">445d374b</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-09-18T18:43:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>FreeBSD CI: Install the softhsm2 dependency
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/caab178df6c766dd45a4d950ad7819f42a80d5fe">caab178d</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-09-18T18:43:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Fix building of test_pam_srv.c on FreeBSD
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/55c13ed99ffdefef4555e81e34a86e35696a1e7d">55c13ed9</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-09-18T18:43:54+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>When running on FreeBSD skip tests that are using fget{pw,gr}ent
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a6030b79cae9db2ccd4a8836b912b980e65345e3">a6030b79</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-09-19T14:36:28+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Drop support of 'ad_allow_remote_domain_local_groups'
:config: Support of previously deprecated 'ad_allow_remote_domain_local_groups'
config option was removed completely.
:packaging: '--with-allow-remote-domain-local-groups' ./configure option was
removed.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4fca9179163fad91f4fff6f548153e6fafd19d08">4fca9179</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-09-22T10:02:19+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>conf: support only bool value for 'enumerate' option
This is the only documented type for a long time.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e60fcddbb6ee334b30925b5cec1946067d12b1f7">e60fcddb</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-09-22T10:02:19+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ENUMERATION: drop support of enumeration for IPA/AD
:relnote: Previously deprecated '--with-extended-enumeration-support'
./configure option was removed.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9f72fcd7f04598879d6c478316328c25370db9b3">9f72fcd7</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-09-23T16:00:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: improve handling of external group memberships
Recently add_ad_user_to_cached_groups() was modified to better handle
adding and removing group memberships of users from trusted domains in
groups of the local IPA domain. Before the change group members were
only added and with the change a removal was possible as well. This
caused an issues with an in-out parameter which contains the full list
of IPA group memberships at input and the list of group missing in the
cache as output. Since add_ad_user_to_cached_groups() is called twice,
the second time after the missing groups were read from the IPA server,
this caused and unexpected removal of group memberships since the second
call to add_ad_user_to_cached_groups() was done with the list of
missing groups and not with the full list.
With this patch a dedicated list is used for the missing groups to avoid
the described issues.
Resolves: https://github.com/SSSD/sssd/issues/7921
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a388e751be8d4588f587e7aa536d2208ca96a3e">2a388e75</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-09-23T16:00:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: test removal of external group membership
Resolves: https://github.com/SSSD/sssd/issues/7921
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/80ccb593c8738a0c942595bea58a6df445c9169d">80ccb593</a></strong>
<div>
<span> by shridhargadekar </span> <i> at 2025-09-23T16:00:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: HBAC affecting AD-users ipa-group membership
In a IPA-AD trust environment, AD-user has membership of a
external-ipa group. This external-ipa-group is member of IPA-posix
group. When a HBAC rule is added and is the ipa-posix member is
added as member for that rule, AD-user misses that IPA-group-membership
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/901a623203d6b5253da9841c4528f41dfd0d9465">901a6232</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-09-24T13:03:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: move build to standalone workflow
Jobs inside this workflow are skipped if pull request touches only
system tests and no other files, so it is not run when not needed
(system tests can not break make).
It is however run for all changes when pushed to the target branch to
always have the latest status available.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bab82018e8005d5fd2f5d278e7bdc4da39adc913">bab82018</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-09-24T13:03:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: only run changed tests for test only changes
Pull request that only modify test do not need to run the whole test
suite, only the test that were actually touched.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6958eecde6cd4f7c5b614677c218ea12e2fac53a">6958eecd</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-09-24T13:03:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: use parallel build
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/481700d49414756a2380b8a036578834909aee5c">481700d4</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-09-30T08:19:39+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Update polarion team name
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cf562deb022a7d4d469b7d43c83b86d9bb7e4362">cf562deb</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-01T13:33:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: constraints - pin to branch for pylibssh workaround
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bab9aa34e5afbb9f1d42cacf77cbb9b2d9e16b91">bab9aa34</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-10-02T19:48:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: corrected debug messages
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/07b720ee47f8ff1b9fa81b160c9a3df9e3e2a07f">07b720ee</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-10-02T19:48:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: verbosity
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b8b92dfeacbaa39990d673c675da6caef565a4fa">b8b92dfe</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-10-02T19:48:44+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: don't trigger backtrace if 'uuid_by_name' fails
It's up to users of this helper to decide on error severity.
In particular, for `SET_DEFAULT_CACHE` error code `ERR_NO_CREDS`
is pretty much normal.
The same with 'name_by_uuid' helper.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e6738a219727815ffbaa24b1990636420a1e4c86">e6738a21</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-10-06T10:16:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util-tests.c: Properly bring back the value of TZ
In its previous form the code was ending up with setting TZ even if it wasn't
set before the test.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2c2fd60df1a2852fabbc294574122d41db2eaff8">2c2fd60d</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-06T10:17:23+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: Handle auto private group lookup with login override
When a 'name' ID user override exists for IPA AD trusted users,
user resolution would fail as the auto private group could not
be resolved. Fix resolving the auto private group of
overwritten_name@ad.domain. In the IPA provider add a retry to
search and fetch the user object if no group override was
found.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1c64f1c5069f711d95ec0a35d728b6fc2c64b83b">1c64f1c5</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-06T10:17:23+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: auto private group lookup with login override
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b301b1f5700e7da845d9cc00fe0706f47188e3bf">b301b1f5</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-10-07T07:03:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Update keytab rotation tests.
Drop tests_samba_data as it mostly duplicates test from
test_hostkeytabrotation.
Drop test_hostkeytabrotation: test_003_delentry, test_005_deletespn
as it will not work due to samba not increasing kvnos according
to kerberos specification. Simplify test_001_rotation.
Update test_002_updatedkeytab and test_004_multiplespn.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/baeb2daadf35f4e58111eda1d7c654301e00f824">baeb2daa</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-10-07T07:03:04+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Drop failing ported test_idmap
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be6359b8b825aad40ad9e7df799bf4e0b2274f14">be6359b8</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-08T18:44:33+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: Remove intgcheck on debian-latest
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/520f9279dbe7e9ebfd8543ca9ca76d1a97bf2158">520f9279</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-08T18:46:17+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: Update python version to latest minor version
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/08a7195b0a34e72c1a2a87a3146ba144b202a0c7">08a7195b</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-08T19:03:03+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: get changed script handle run for master push (non-PR)
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c5e643185c3dcaa61c0c1003cc6b1b795d0d5bdb">c5e64318</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-10-13T06:53:20+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Skip tests unstable on other architectures.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f3af8c89af656767333410b0e94da9288dd8ade8">f3af8c89</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-10-13T10:06:40+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CLIENT: fix thread unsafe access to autofs struct.
In case SSSD is built with lock-free client support, `sss_nss_lock()`
is a no-op, thus resulting in thread unsafe access.
This is a fix similar to 69fd828c1d5e92bc3b2e327a45dfed116f49d50a
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5e7f368037308f214c12e1a0106af26083950528">5e7f3680</a></strong>
<div>
<span> by aborah-sudo </span> <i> at 2025-10-13T10:51:38+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add comprehensive sssctl functionality tests
- Implement tests for sssctl domain-status verification
- Add tests for user-checks authentication validation
- Implement log management tests (logs-remove, logs-fetch)
- Add debug-level modification tests
- Include user/group/netgroup show command tests
- Add invalid domain handling test for debug-level
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9939c39d1949fad48af2f0b43c788bad0809e310">9939c39d</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-10-16T20:05:25+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: disable Kerberos localauth an2ln plugin for AD/IPA
If a client is joined to AD or IPA SSSD's localauth plugin can handle
the mapping of Kerberos principals to local accounts. In case it cannot
map the Kerberos principals libkrb5 is currently configured to fall back
to the default localauth plugins 'default', 'rule', 'names',
'auth_to_local', 'k5login' and 'an2ln' (see man krb5.conf for details).
All plugins except 'an2ln' require some explicit configuration by either
the administrator or the local user. To avoid some unexpected mapping is
done by the 'an2ln' plugin this patch disables it in the configuration
snippets for SSSD's localauth plugin.
Resolves: https://github.com/SSSD/sssd/issues/8021
:relnote: After startup SSSD already creates a Kerberos configuration
snippet typically in /var/lib/sss/pubconf/krb5.include.d/localauth_plugin
if the AD or IPA providers are used. This enables SSSD's localauth plugin.
Starting with this release the an2ln plugin is disabled in the
configuration snippet as well. If this file or its content are included in
the Kerberos configuration it will fix CVE-2025-11561.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/16db74ca2836ef19483fd5067a19ce5d66bcba48">16db74ca</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-10-17T10:06:00+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util-tests.c: Use TMPDIR (or fall back to /tmp) to store test's temporary files
Otherwise it uses CWD, which might be readonly.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1c8958d1ed9f81168d919bce6cf7f3083f18fa30">1c8958d1</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-10-17T10:06:22+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>resolv-tests: Do not perform leak checking when running on FreeBSD
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63639ecb1e746ead7b086b06c787eb6a4ac3572a">63639ecb</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-10-17T11:05:57+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: Override shell builtin bash options for get-changed script
When only system test files are touched in a PR, the get-changed.sh
script fails due to -o pipefail option being added by
GH action shell built-in.
https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax#defaultsrunshell
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e92df278f523da2d8ba08b31e283fbd7cca9b34a">e92df278</a></strong>
<div>
<span> by Scott Poore </span> <i> at 2025-10-17T11:08:51+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test: Add Passwordless GDM tests for External IdP
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4e7ac3bb1e5b666e8fdd0f6942691b4a01b5a6ca">4e7ac3bb</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-10-17T13:10:34+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: Remove ldap_local_override_test.py
Review the test cases, most of them are already
automated, one needs to automate others are
partially covered.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c3f3672a1c11cbc65120984d175c8696b3476948">c3f3672a</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-10-21T11:30:02+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: improving sss_override to adhere to new guidelines
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a0383378ec7595ceb0b690178a538f44d97ebab6">a0383378</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2025-10-21T11:31:47+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0d31ab57a142724c0415dba06986382d9c49b70d">0d31ab57</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2025-10-21T11:32:06+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump actions/setup-python from 5 to 6
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/488e540dd7a92ee0525236936b48a0f15b214533">488e540d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-10-24T12:05:05+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>gpo_child: don't include 'util/signal.c'
It's not really needed.
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/14b285e527a12be0a044873d4f0e49ad756492d6">14b285e5</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-10-24T12:06:18+02:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test_iobuf.c: Only run the test_sss_iobuf_secure subtest on Linux
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e329032687db0dc781e8f8a45556cf07d4dd129b">e3290326</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-10-31T16:41:42+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>removing intg resolver test.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3f708bda48fe8d968ce8c69cef304c1231bad0cb">3f708bda</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-10-31T16:41:42+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>adding ldap resolver provider tests
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bf23a6e9477ceef789507f9b603ed6fdb63206b9">bf23a6e9</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2025-11-03T10:34:40+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add umockdev and virtsmarcard as test dependencies
We want to skip these tests automatically if they do not have
the required environment available instead of manually
blacklisting them from test suites.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Vema Kudumala <vkudumal@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5a800d9c70092b1fa6153f304f7f4ddb4388109d">5a800d9c</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-11-04T11:15:00+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove pylibssh workaround
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/56b247db5481546bf6922e8b4a5e975259671c78">56b247db</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-11-04T11:15:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>strtonum.c: Clear errno if it was set to EINVAL to make behavior consistent
This fixes strtonum-tests.c test on FreeBSD.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/684e5683d115b67fb9ad53d7138108a7154f5d95">684e5683</a></strong>
<div>
<span> by Ondrej Valousek </span> <i> at 2025-11-04T12:32:33+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>allow use machine credentials from trusted domain :relnote: SSSD now allows using machine credentials from a trusted AD domain or Kerberos realm if no suitable domain-local credentials are available
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2e5ad5b9edb3d99c990792f23c2d73d655a64e31">2e5ad5b9</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-04T15:27:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: automatically add Reviewed-by trailer when Accepted label is set
This introduce new workflow that is run when Accepted label is set.
It appends Reviewed-by trailers to all commits in the pull request for
all reviewers that ack-ed it.
* It is skipped if Accepted label is missing/removed
* It is no-op success if PR was synchronized after label was set (this
is required to make it green as it is automatically re-run when the
job finishes as a side effect to pushing to this repository)
* It adds the trailers when Accepted label is added
It uses secrets.BOT_TOKEN and SSSD_AUTHORS variable that contains
mapping from github account to name and email.
Since PR CI is restarted when commits with Reviewed-by are pushed, the
job also submits comment with current PR CI status, so it is not lost
and we do not have to necessarily wait for new PR CI run to finish.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b854636868587d266c5603330c65f32d19c80d78">b8546368</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-04T15:27:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: add autobackport workflow
This adds an autobackport workflow that will automatically backport
pull request with backport-to-$branch label. Backport pull request
is created upon mergin the original pull request for each requested
branch. It is also possible to create additional backport by labeling
the already merged pull request.
If there are any conflicts during cherry-picks, they are commited and
pull request is still opened. The author of the original pull request
can then fix them and push to the backport pull request (guide is
presented in the PR description).
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/424ae7c6235b8f0c1e10150895faac863ac5015b">424ae7c6</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-11-04T15:28:56+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: fix dependabot.yml schema validation
As specified in the documentation move prefix under commit-message
section.
Link: <https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference>
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7a903e83efd5c87a0101e35fee4f2e81f28c0ac7">7a903e83</a></strong>
<div>
<span> by liberodark </span> <i> at 2025-11-05T10:24:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>confdb: Add --with-ldb-modules-path configure option
Add configure option to specify LDB modules path at build time.
This allows distributions to set the correct path when LDB modules
are installed in non-standard locations.
The path is set once during confdb initialization if configured,
respecting any pre-existing LDB_MODULES_PATH environment variable.
:packaging: Add --with-ldb-modules-path=PATH configure option to specify LDB modules path at build time.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/925c9d32c34aaba1476640f5c71692df88035c93">925c9d32</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2025-11-06T14:42:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump github/codeql-action from 3 to 4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2f3b3db883e10db21d08f572795686285eaafa58">2f3b3db8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-06T16:24:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: fix compilation warning
This fixes
```
../src/oidc_child/oidc_child.c: In function ‘main’:
../src/oidc_child/oidc_child.c:682:17: warning: ‘client_secret_tmp’ may be used uninitialized [-Wmaybe-uninitialized]
682 | explicit_bzero(client_secret_tmp, strlen(client_secret_tmp));
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
../src/oidc_child/oidc_child.c:578:11: note: ‘client_secret_tmp’ was declared here
578 | char *client_secret_tmp;
| ^~~~~~~~~~~~~~~~~
```
Warning is a false positive but cheap to "fix".
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9c139765e09ebe8bf84da464bd045f4fac509ebb">9c139765</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-06T16:24:47+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: use `sss_erase_mem_securely()` wrapper
instead of `explicit_bzero()` as the latter might be unavaialble.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0fb839ad18001134db982f9ecd5f2b749f5b0f28">0fb839ad</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2025-11-12T13:30:01+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>build(deps): bump actions/upload-artifact from 4 to 5
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/40ee0a5c19d8eec4265bdf2a6ad4b8df11f5b8cd">40ee0a5c</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-11-12T17:24:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: Add sysdb_add_bool()
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/85b632d130d126861bda7472f7a7ae301e70c098">85b632d1</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-11-12T17:24:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SYSDB: Dont store gid 0 for non-posix groups
Remove logic to store 'gidNumber: 0' in the cache for
non-posix groups. Instead do not add a gidNumber at all,
this avoids performance hit due to huge GID=0 index
when a large number of non-posix groups are stored.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bedc2161a857362aa6196f507c977f5f4f6c09fc">bedc2161</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-11-12T17:24:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SDAP: Remove sdap_store_group_with_gid()
It is no longer needed as we no longer want to store
'gid: 0' for non-POSIX groups.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0d2b75f4366995a3bdb3d875b3d5fc33bba1b716">0d2b75f4</a></strong>
<div>
<span> by krishnavema </span> <i> at 2025-11-13T10:58:40+05:30 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests:Added IPA Certificate Authority Tests
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fbf8ae7135bc01108a6167cf0d705a4dea61e483">fbf8ae71</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-13T14:05:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add pysss_nss_idmap system test
The new system test is mostly a 1:1 replacement of the exisintg
integration test.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/399f7a27316d982cdd126ae8dc5b3327cea3c605">399f7a27</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-13T14:05:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: remove test_pysss_nss_idmap.py
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e557ac751c5d6d2e99d50204f9651cfb63b1561f">e557ac75</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-14T08:33:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove final result job
The intention behind this job was to use it in a branch protection rule
to require it to be green. However, the intg tests still fails quite
often and even rawhide is red every now end then so this is unusable.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/af225a0ef379887ebb6b7ddd0757abb1abbda3ff">af225a0e</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-14T08:33:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove result job from analyze-target
There is only one job now so it does not make sense.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f100cb6d2e8f949937c1272bcbec16ea08e45fa6">f100cb6d</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-14T08:33:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: remove result job from static-code-analysis
We do no not use it in the branch protection rules, so it is not needed.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6f4e1f9a410c37ecabece6153a2e12f0ace34579">6f4e1f9a</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-11-14T08:33:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: run long jobs only if Accepted label is not set
To avoid wasting resources on our new merge workflow.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/984d794a908cd7a7177003a7fe6adc2202e60a96">984d794a</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-11-15T17:13:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: Clarify the user_attributes option
Resolves: #8134
Reviewed-by:
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e95d3fe01e110fcd983635e5a0185cbfad6c8b14">e95d3fe0</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-18T10:53:16+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test: check is an2ln plugin is disabled or not
The Kerberos 'an2ln' localauth plugin should be disabled in AD and IPA
environments where SSSD's localauth plugin can handle the mapping. In a
plain Kerberos environment libkrb5 defaults should be used.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c78855c198879ba7d769eeacefee1403a228e110">c78855c1</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-18T10:54:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add test_pac_responder.py
This new system test is a replacment of the integration test with the
same name. It depends on a test binary which was added to the SSSD CI
containers in https://github.com/SSSD/sssd-ci-containers/pull/150.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be020a3c44a50e46174e2b345bc013663ffb3204">be020a3c</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-18T10:54:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: remove test_pac_responder.py
This test was replaced by a system test with the same name.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e661b5390845357136271cc89bf5fe1e510beffa">e661b539</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-18T16:49:51+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: filter DNs for ipa_add_trusted_memberships_send()
The ipa_add_trusted_memberships_send() request will use
groups_get_send() to lookup missing groups. groups_get_send() can
currently only lookup "proper" groups which besides other items means
that the group name must be stored under the LDAP attribute given by the
'ldap_group_name' option. So currently it does not make sense to try to
lookup other objects where the RDN attribute name is different than this
value because those will always be treated as missing in the cache and
always trigger an LDAP search which will fail. This will typically
happen for iPAAssociation objects which are used to connect users and
hosts with HBAC and sudo rules. If in future a more generic search is
used this filter can be removed.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/997ffd1ae888a611f0001548977586e5747a37f9">997ffd1a</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-11-18T18:20:37+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Migrate missing tests to new framework
This PR implements tests from integ/test_ldap.py to new system tests
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0cae6821bd70ae5d4d73b424549c7e236cd312cf">0cae6821</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-11-21T10:03:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test_infopipe, standardizing the provider amongst all tests
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f2ccc6e5fb7f5f734a1654d38e178bf680a1c991">f2ccc6e5</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-11-21T10:03:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>updating some test logic and adding test cases
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a276441fe48d665baf80a0b742186870f4c2c4eb">a276441f</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-11-21T10:03:11+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>removing intg ifp tests
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/acc75d16b8394ea37b7946b323205d97090e9e88">acc75d16</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Get rid of useless `SSSD_MAIN_OPTS` define.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/21edc74dcd4476877c37f539d6fdd7fd34aafa9f">21edc74d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Makefile: tools do not need to link against 'sss_client' code
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2628fb9263f141fd3a6440d2cb9f97a72bc53e20">2628fb92</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Makefile: get rid of useless 'SSSD_LCL_TOOLS_OBJ'
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/74b640627bb63fc52e26688b34d51fc39e010010">74b64062</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Move 'DEBUG_CHAIN_ID_FMT_*' from 'util.h'
to 'sss_chain_id.h' where it makes a better sense.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bfa052d2d2cde1c44e3c7bf70f2baf932e711efc">bfa052d2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Include <libintl.h> in 'debug.h'
Since this header uses `gettext()`
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c186e201919c7a8cae8ffc83d83d68a349186532">c186e201</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: use DEBUG_CHAIN_ID_FMT_RID
instead of DEBUG_CHAIN_ID_FMT_CID since this process is invoked
by a provider.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e97a22815374df97925c2ad4c0bc001c1174cb49">e97a2281</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Helpers to do a basic setup of a child process.
Plus an application in 'ldap_child'.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9e9c420026313aa4ad3fce4e8b63f9e303fb28c1">9e9c4200</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1f9c144489acfc16ec3cef49bfb0a2d80b953f30">1f9c1444</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5ae5837feca088afb8b7a0877021c40bc5bdb3d8">5ae5837f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>AD_GPO_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ac5d345eaa26d59cc5acbbf02e49fa83f238e7bd">ac5d345e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>P11_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/03a5279e2f6a7e6a81f28b08d31d2f38fc34f71f">03a5279e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PASSKEY_CHILD: use new helper to setup a process
This also makes 'passkey_child' to use '--chain-id' if supplied.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/300a9621d790e0cc16393eb4df1230ea2269aee0">300a9621</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SELINUX_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7ad2aa8f26aab26939bc9788a03f757723bf5b48">7ad2aa8f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SELINUX_CHILD: fix includes
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/167301955e8af4e994e04876fc4c686b7ca485fd">16730195</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DUMMY_CHILD TEST: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cbfba4ed1287c522a59885702d0e047b8e01e82c">cbfba4ed</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DEBUG: use 'debug_prg_name' if 'debug_log_file' isn't set
This avoids using 'sssd' potentially by multiple binaries.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6aa7c9a04627c6f2459ed6712543042b1af3fb76">6aa7c9a0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-21T14:38:22+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PROXY_CHILD: use new helper to setup a process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a9f9c5c4e3f63430e54b3591b9064d443e7b956f">a9f9c5c4</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-11-21T19:08:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Replacing provider conditionals with set_server method
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7ddb51fdff85d8a6b52c53421d0fac71df7b1ba4">7ddb51fd</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-24T10:06:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>utils: add new error code ERR_CHECK_NEXT_AUTH_TYPE
This error code should be used if another authentication type should be
checked.
Resolves: https://github.com/SSSD/sssd/issues/8108
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0adc2e77833d2a6d90a18c14aea48ab0a912f252">0adc2e77</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-24T10:06:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: use ERR_CHECK_NEXT_AUTH_TYPE instead of EAGAIN
This patch used the new error code ERR_CHECK_NEXT_AUTH_TYPE while
processing different authentication types instead of EAGAIN because
EAGAIN might have side effects when returned to the callers.
Resolves: https://github.com/SSSD/sssd/issues/8108
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/da82d1d5bd9345505aab331a05bdc92ba95650b4">da82d1d5</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-11-24T10:06:48+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: clarify EAGAIN returned by krb5_get_init_creds_password()
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fc159ed2358c7a035d0313d419d4ce033e87d534">fc159ed2</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-11-24T21:00:13+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>fixing and making automatic kcm renewal test more foriving
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Scott Poore <spoore@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b01df9a4e501d03ba8e2e6dd021a8fd2012ac9c2">b01df9a4</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-11-25T10:50:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Remove obsolete sssctl tests
Those tests are now covered in new testing framework.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cf974c66a8befb832bcd0696f3a171ff4bcd33f6">cf974c66</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-11-25T10:50:44+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: migrate sssctl tests to new framework
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a881e10daa7b78d44de0e99ff08a295b56655d29">a881e10d</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-11-25T13:56:12+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>file_watch.c: Do not pass IN_IGNORED to inotify_add_watch
This is an output flag and it doesn't make sense to pass it as input.
FreeBSD implementation is more finicky, so passing this flag makes the call
fail.
Fixes the file-watch-tests test on FreeBSD.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0511cc2751619ee0df3fe74a3d8c96e68a23e893">0511cc27</a></strong>
<div>
<span> by Scott Poore </span> <i> at 2025-11-26T13:05:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>system tests: add bare topologies to mhc.yaml
The new "bare" topologies are missing from the system tests' mhc.yaml
file in provisioned_topologies. These need to be there for upstream CI
tests to work with tests using those topologies.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/05fa421b1a6ad3f1e5efc3a595c00264e67943c5">05fa421b</a></strong>
<div>
<span> by Scott Poore </span> <i> at 2025-11-26T13:05:07+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Adding GDM Passkey tests
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bbbd1504d2ebba1eb1deea58f3d96eb97a91009e">bbbd1504</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-11-26T14:08:37+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SPEC: require reasonably up to date 'libldb' version
Since 'libldb' is built from Samba sources, it uses the same version.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ec81ea23b0c5192618d7c813ffa6cf44794d5d79">ec81ea23</a></strong>
<div>
<span> by shridhargadekar </span> <i> at 2025-11-27T13:03:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: ADuser external group cache update
AD user in external group is not cleared when expiring the cache
In IPA-AD trust, a ADuser is member of large number of IPA groups.
When ADuser is removed from one external-group, and cache of ADuser
is expired, subsequent look up should update the cache correctly.
verifies #7938
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b1d425a5e53935ee344eb8b9e148e11ec3cb88c7">b1d425a5</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-11-27T15:21:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Filter IPv6 addresses not suitable for DNS updates
IPv6 brings a concept of address states defined in several
RFCs (RFC 2462, RFC 3041, RFC 4862). Adresses that are marked
as temporary, deprecated or tentative should not be used in
DNS updates.
This PR reads those flags via netlink interface and it
excludes addresses with those flags.
Resolves: https://github.com/SSSD/sssd/issues/8089
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/637b7bcb7c92f80035495969c15c675b56a4ccf8">637b7bcb</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-11-27T15:21:05+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>test: check temporary address exclusion
IPv6 address can be marked as temporary, deprecated or
tentative. We should exclude them from DNS updates.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1d488d53cb186d816ec61f4843ccdcced7a25d4e">1d488d53</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONTRIB:fedconfig: enable '--with-subid'
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fcbf23d46b27ab2fd596cd0ef4ffec1d750c04d5">fcbf23d4</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>MAN: fix missing `with_subid` condition
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6fcf7c3a824e67efb4b4604ffcb4f34933dafff6">6fcf7c3a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID:IPA: correct OC
Proper STRUCTURAL objectClass is 'ipaSubordinateIdEntry'.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9901ed36c964f15a5535dc145d40d8ac487a480f">9901ed36</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID: deprecate `ipa_subid_ranges_search_base`
in favor of `ldap_subid_ranges_search_base`.
:config:Option `ipa_subid_ranges_search_base` was deprecated in favor
of `ldap_subid_ranges_search_base`.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ae98d8e38b7a168022f3c78b68582bb3037d8682">ae98d8e3</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>LDAP: add subid ranges support
Resolves: https://github.com/SSSD/sssd/issues/8030
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7a516505d9249e453652a0a1f3112b451494e6f4">7a516505</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID: don't require search bases to be set in advance
It can be read from rootDSE upon first connection.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9014ced63c45ee34f4b35b2267e9dc647c6d0dd0">9014ced6</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: document subid LDAP attributes
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0edeb89c3ac79627f6272a46b0f808a222955e02">0edeb89c</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DEBUG: lower debug level of several messages
related to attributes presence/manipulation.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/79028efffaad067585d0c683cdee49878b6390f2">79028eff</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID: resolve owner DN instead of guessing
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f255e37fac43fb87b3cd098251c5ac28e9d4b918">f255e37f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID: sanitize range owner dn
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/95994dd911c643026a714a74a9b5987ffaebf323">95994dd9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-02T11:17:32+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SUBID: trusted subdomains aren't currently supported
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b0af250cf0bb8499c22243d7f7b57aadc58f2a02">b0af250c</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-12-02T15:07:18+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>config/cfg_rules.ini: Make regexp's more POSIX compliant
According to section 9.3.2 BRE Ordinary Characters [1], the '\+' sequence may
work as a plain character or like ERE special character. It is the latter for
Linux, but it is the former for FreeBSD.
Instead, use '{1,}' as a portable way of expressing "one or many".
This fixes most of config validation tests on FreeBSD.
[1] https://pubs.opengroup.org/onlinepubs/9799919799.2024edition/basedefs/V1_chap09.html#tag_09_03_02
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d865ac345cf56ca70608163458f241abf53174b9">d865ac34</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-12-02T16:02:02+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: check for empty trusts in ipa_get_trust_type()
Similar as ipa_get_ad_id_ctx() or ipa_get_ipa_id_ctx()
ipa_get_trust_type() should be aware that the 'trusts' member of
'server_mode' might be NULL.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/407eda3e9389afb7c4c27e10491ecc5035f91f10">407eda3e</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IFP: use correct error code for timeout
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4f3b98a8f2b429b799923045082a2a7d6f8cb49d">4f3b98a8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HANDLERS: add standard timeout handler
and make use of it in gpo/ifp/ssh code.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b384d1f15801c74a2bedc6667168e1f17f165bc0">b384d1f1</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad_machine_pw_renewal: remove unused variables
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/86367372979e8c3b1ada4988549c5cc422d4b898">86367372</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ad_machine_pw_renewal: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d57290a084b2df8d629f5c179defd3ae09a26ae0">d57290a0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM/P11: get rid of unused 'pam_check_cert_state::child_status'
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1019f9a8c76ae8a58f844eabbf05d14a630ffa59">1019f9a8</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM/P11: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d97d14f272e0a30657c776f54b86a8c0a186b9f1">d97d14f2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM/PASSKEY: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7f3e0dccc350a8dfaab2adb1d4b9274e5912f4ad">7f3e0dcc</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CHILD HELPERS: let generic timeout handler set 'io->in_use'
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bee133590d1f1627343ddeaf911377d3a8719662">bee13359</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a326df4949bd9a41e9c5217a0c3819a504554060">a326df49</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/87b8e5066de3eb65ecac98db669df3590dc5cbb3">87b8e506</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DYNDNS: use a proper 'timeout_handler'
'nsupdate_child_state::timeout_handler' wasn't really used.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/55c63c3d3995a09203b40ad986a97bf33635313e">55c63c3d</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DYNDNS: use sss_child_handle_timeout()
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/10f9eb290e9b2b885d6edca6b4d6932422fb328b">10f9eb29</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PROXY: provide 'dumpable' and 'backtrace' args to child process
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ed230fc93f35d6cad8f4e1ea84419862c42950ca">ed230fc9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PROXY: delete unused define
Unused since c7e2d7a56d8969f26921811e5122f78b257fb51e
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2ad8cbf97a4ef3bcc33cc5f414944c9ec56ab165">2ad8cbf9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PROXY: use `sss_child_handle_timeout()`
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/ec3e97470efba58ea4df45345f1ca191eb4659a2">ec3e9747</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:11:21+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>PAM/P11: debug message fixed
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a1048b593729627414d25e440d18caac66ca15d">2a1048b5</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-03T11:49:01+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>CONFIG: disable 'session_provider' by default
:config: Default value of 'session_provider' option was changed to 'none'
(i.e. disabled) doesn't matter what 'id_provider' used. Previously
'session_provider' was enabled by default for 'id_provider = ipa' case.
But this didn't make sense because 'Fleet Commander', that is being
integrated in this case, is long time obsolete.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/47b38f17839e84c9a7057b37ea11ae1dffa53d7c">47b38f17</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-12-03T17:56:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_unique_file: Ensure correct group ownership on the created file
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9a776480a05fad413ef9ef04ac5d6353aed7d1c0">9a776480</a></strong>
<div>
<span> by Gleb Popov </span> <i> at 2025-12-03T17:56:46+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>check_file-tests: Ensure correct group ownership on the created file
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d6ea55552ec1eeda4a58336bba4a2873b0568b65">d6ea5555</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-12-04T11:16:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sbus: defer notification callbacks
Otherwise, it is possible to incorrectly chain nested requests since the
chain id is still present in the hash table.
Resolves: https://github.com/SSSD/sssd/issues/8194
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/816eb1e202b774ebec5463ad1dcb85d41ea11c8a">816eb1e2</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-12-04T11:16:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>cache_req: allow cache_first mode only if there is more than one domain
Otherwise we will perform unnecessary data provider lookups.
Resolves: https://github.com/SSSD/sssd/issues/8194
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/00547f67a2852bfe41dead37c544b6798458e462">00547f67</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-12-04T11:16:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: filter_groups by name and lookup by id with expired cache
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fb4d5ad23d201d8d36a4f288eeaba285c34c097c">fb4d5ad2</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: implement pam_get_response_data()
This API gets the selected response type data from the response_data
linked list. Includes unit tests.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Signed-off-by: Ray Strode <halfline@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bc4bfcd9ebce54b68fe47cfbcd45bb8a2a57f591">bc4bfcd9</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_client: add EIdP to prompt_config structure
Integration with GDM requests two prompts for EIdP so adding them to
prompt_config structure. In addition, implement all the functions needed
to manipulate the structure for these new prompts. Finally, add
unit-tests for the new functions.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/af9459e10642c00fc47761453a034f2c1cfedeb3">af9459e1</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: tune prompts in the GUI
Return `prompt_config` structure in `pam_eval_prompting_config` to tune
the prompts from the SSSD config in the GUI.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/316579af7b81c6a1e26fe5fe5fb2ce4756a979ea">316579af</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: generate JSON message for GUI
Implement a set of functions to check the available authentication
mechanisms and their associated data, and generate a JSON message with
it. This JSON formatted message will be consumed by apps that provide
GUI login (i.e. GDM). Currently, the implementation only takes into
account password and OAUTH2 mechanisms.
Include unit tests to check the implemented functions.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b04803459391ee47f9e281d61508d6def46f701d">b0480345</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: unpack JSON reply from GUI
Implement a set of functions to unpack the JSON reply from the GUI.
Include unit tests to check the implemented functions.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2fda8e081016cbb29fe50e4a48dbb03781d15f6b">2fda8e08</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: check PAM service file for JSON protocol
Implement a function to check whether the PAM service file in use is
enabled for the JSON procotol. This helps us filter which applications
are compatible with this protocol.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b3dc37aafcce172fdcaf4ccb61fe31b36763c1b3">b3dc37aa</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: new option `pam_json_services`
This new option is used to enable the JSON protocol in the PAM responder
based on the PAM service file in use.
:config: A new option `pam_json_services` is now available to enable
JSON protocol to communicate the available authentication
mechanisms.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c5af066c01d567945fc85301aa24cc723daaf10a">c5af066c</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: call JSON message generation
Call JSON message generation function and fill the data structure
containing the response_data linked list.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1232521836bb4c30d85540636ea9f34334f7fc47">12325218</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSS_CLIENT: forward available auth JSON message
Forward the available authentication mechanisms and their associated
data message to the GUI login using a PAM conversation. Then, obtain the
reply and forward it to the responder, so that it can parse it.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Signed-off-by: Ray Strode <halfline@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/48381a3f03529aa2425eac6d94b1ec2b96651fc3">48381a3f</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: parse GUI reply
Parse GUI reply and set the appropriate data in `sss_auth_token`
structure.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e327f0d74b2a23519859980477a01dcc1d4b39ae">e327f0d7</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Test: adapt test_pam_srv to JSON message
Include JSON message where applies.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8d24366e590135cbad454237b6cfa582a5c47900">8d24366e</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: check return value for json_string()
It returns NULL on error, but this wasn't checked.
Fixes: ceeffa9e1 ("Responder: generate JSON message for GUI")
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7c70f1dc1e5d0230b627f85828de86323a3c1e34">7c70f1dc</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: update JSON message format
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6c38800b68f976bcdc51dc162866b9fb8e16d2b9">6c38800b</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_client: modify smartcard in prompt_config structure
Integration with GDM requests two prompts for smartcard so modifying the
prompt_config structure. In addition, implement all the functions needed
to manipulate the structure for these new prompts. Finally, add
unit-tests for the new functions.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5f2fc24c1bf8e3e2d4b9408a67cd98a7b56946a1">5f2fc24c</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: implement pam_get_response_data_all_same_type()
This API gets all the elements with the selected response type data from
the response_data linked list. Includes unit tests.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b4699ddbefec01a003ba65444dfaf891e67715df">b4699ddb</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: generate JSON message for smartcard
Implement a set of functions to retrieve the smartcard data and generate
the JSON message with it.
Implement new unit test and adapt the existing ones to take into account
the new data.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/0640200f014155ad26a9d522b74479b99067101e">0640200f</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: parse reply for smartcard
Parse GUI reply for smartcard and set the appropriate data in
`sss_auth_token` structure.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6011466b0c3871a7209db4bc9448552f7f63b963">6011466b</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: refactor JSON functions to reduce args
Several of the functions in `pamsrv_json` had lots of arguments and I'm
about to add more for the passkey authentication mechanism. Reduce these
arguments by creating a structure that will contain all these data.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/18dd52646566bf0522953f044e84f3127965c892">18dd5264</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: extend smartcard JSON request message
Include the certificate data in the JSON messages to set it in the
authtok structure more easily.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/78ec10f28159ccce6be0119de57cebdaf3cb4fdd">78ec10f2</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: extend smartcard JSON reply message
Include the certificate data in the JSON message to set it in the
authtok structure more easily.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be9164f28ed85e5bce9d03ac119982405dada5dc">be9164f2</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: make `decode_pam_passkey_msg()` public
This is needed by `pamsrv_json.c`, so let's make it public.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/7e9e18e9f390cbb0e22864eebe4a6dc0ccc6bb77">7e9e18e9</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: generate JSON message for passkey
Implement a set of functions to retrieve the passkey data and generate
the JSON message with it.
Implement new unit test and adapt the existing ones to take into account
the new data.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/efaa9c1decd138c97cf4c6260067dce6e62fcf24">efaa9c1d</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: implement function to set passkey PIN
`sss_authtok_set_local_passkey_pin` provides a way to set the passkey
PIN in the authtok structure for local passkey authentication.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/3cbf1aaa8998fe494f90110a10d0c920448524ad">3cbf1aaa</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: parse reply for passkey
Parse GUI reply for passkey and set the appropriate data in
`sss_auth_token` structure.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4cb99a2480cd89b9679028a8afc1648532f685f3">4cb99a24</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: advertise authentication methods
During the `preauthentication` phase krb5_child checks for the available
authentication methods for the given user, advertises them and the
process is kept alive. Once the state is change to `authentication` the
same krb5_child process processes the credentials and proceeds with the
authentication itself.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/bc1460c3d1f90463e900bcc2673d0d2122428a99">bc1460c3</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: fix passkey auth when user-verification is off
When authenticating with a passkey, different PAM code paths within SSSD
can result in the `authtok` containing data even when the user did not
enter a PIN. Depending on the flow (e.g., triggered by `gdm` vs. `su`),
this data might be an empty string or non-printable characters like `^L`
(form feed).
The previous code had two issues:
1. It only checked if the `authtok` was non-empty
(`sss_authtok_get_type(...) != SSS_AUTHTOK_TYPE_EMPTY`). If user
verification was disabled, this check would incorrectly pass for
these 'junk' `authtok` values. This caused SSSD to prepare and send
an erroneous PIN to the passkey helper.
2. In the case where the `authtok` *was* correctly empty, the check
would fail, `write_buf_len` would remain 0, and the `if
(write_buf_len != 0)` block containing the `write_pipe_send` call
would be skipped. This stalled the authentication flow, as the
callback to continue the process was never set.
This patch fixes both issues:
1. The `user_verification` setting is now stored in the state struct.
The logic is updated to only prepare the PIN buffer if the `authtok`
is non-empty *and* user verification is required
(`state->user_verification != PAM_PASSKEY_VERIFICATION_OFF`).
2. The `write_pipe_send` call is moved outside the conditional block so
it always runs. This ensures that the asynchronous child
communication (via `passkey_child_write_done`) is always triggered,
even if the write buffer is empty (0-length).
This resolves both failure modes: junk PINs are no longer sent when
verification is off, and the auth flow no longer stalls when no PIN is
present.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6b40318a83f7788a50d6854f00cfe1e1dcf824a7">6b40318a</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: add `gdm-switchable-auth` to `pam_p11_allowed_services`
defaults
The `pam_p11_allowed_services` option now includes `gdm-switchable-auth`
as one of the default allowed PAM services for smartcard authentication.
The service was added alongside the other GDM-related services
(gdm-smartcard and gdm-password) for logical grouping.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/784982265f781064e1066eede06a98dd7d4b4106">78498226</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sss_client: prevent JSON auth during password change preauth
When a user's password expires after successful JSON authentication, the
fallback to traditional password change fails. Add
PAM_CLI_FLAGS_CHAUTHTOK_PREAUTH flag to distinguish password change
preauth from normal authentication preauth. When this flag is set, the
PAM responder skips JSON message generation and returns traditional
preauth data instead.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/aa2ac83f92cc91ab8d29c1eaec5c373d267c607c">aa2ac83f</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Responder: change authentication mechanism detection
Use `pam_get_auth_types()` to detect the available mechanisms for a
user.
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/811ecc1f946e3dfe384289e5c9e49502137dae6f">811ecc1f</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>man: clarify and fix `pam_json_services` compilation
Add a note to clarify that 2FA isn't supported in JSON protocol and fix
man page compilation for `pam_json_services` option.
:feature: Unified passwordless login in the GUI. SSSD now supports a
rich authentication selection interface. Users can login with
smartcards, passkey, External IdPs and passwords directly
within the graphical user interface.
:packaging: SSSD now supports authentication mechanism selection through
PAM using a JSON-based protocol. This feature enables
passwordless authentication mechanisms in GUI login
environments that support the protocol.
Feature will be supported by GNOME Display Manager (GDM)
starting with GNOME 50. While currently optimized for GNOME,
the JSON protocol design allows for future support in other
display managers.
authselect is the recommended approach and will handle the
necessary PAM stack modifications automatically starting
with version 1.7 through the new option `with-switch-auth`
which provides a new PAM service called `switchable-auth`.
Manual PAM configuration is also possible.
For more technical details and implementation specifications,
see the design documentation:
https://github.com/SSSD/sssd.io/pull/79
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/cc1b9e02910ffd044709044caafb79e3684d1ca0">cc1b9e02</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-04T15:16:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: port pre-authentication retry logic
Port the pre-authentication retry logic from the IPA provider to the
krb5 provider, making it available to all krb5-based authentication
flows.
Relates: 6c1272edf1 ("krb5: Add fallback password change support")
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/50239165812b78d77dd4530f35468b4d927bba25">50239165</a></strong>
<div>
<span> by Scott Poore </span> <i> at 2025-12-04T10:37:46-06:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: remove test_session_recording.py
Removing intg session recording test file and removing from Makefile.
Reviewed-by: Dan Lavu <dlavu@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/a0574f78d3807423e6534f8eded213f0692a0c80">a0574f78</a></strong>
<div>
<span> by shridhargadekar </span> <i> at 2025-12-05T10:25:13+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Rectify the docstring n testcode
Modifying the doc-string to reflect correct group number.
Added verification of number of groups the user is part of initially.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4071041276c0e43c2a7e61db11ba4e4c7ee03c9d">40710412</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-05T16:41:19+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: remove 'ipa_enable_dns_sites' option
It never worked as intended due to missing server side implementation.
:config: An option `ipa_enable_dns_sites`, that never worked due to missing
server side implementation, was removed.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/f2e8e51a4a12cf365542703f09162a53797bca35">f2e8e51a</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T17:23:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: Fix typo in trust type conditional
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/50527dc96e374c85982df283290234dd9b410029">50527dc9</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T17:23:38+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa: improve unknown trust type error return
If trust type is unknown for an IPA subdomain request, return
EINVAL instead of ENOMEM, and improve the logged error message.
Trust type should always be IPA_TRUST_IPA, or IPA_TRUST_AD, if
trust discovery and initialization fails early on we can reach this
codepath however.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e9216fc1e90514db698259b93d1a6a47d0036b4c">e9216fc1</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T11:34:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pam: Remove PAM_PASSKEY_VERIFICATION_OMIT mode
Remove support of ambiguous "unset" state of passkey user verification.
pam_sss prompting is binary, either on or off. The use of 'unset' passkey
user verification state allows for ambiguous behavior in SSSD. For
example, passkey_child may perform undefined behavior when '--user-verification'
argument is not set, now SSSD will always send '--user-verification=false/true'
to passkey_child.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/304f298c978138cc9efa7c9beced30aceb47a7fd">304f298c</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T11:34:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pam: Skip passkey_local() in Kerberos auth flow
Local auth functions should only be reached in AD/LDAP auth flows.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/879d073155cd73d9a0507fc59f8ab16d2f0b37bd">879d0731</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T11:34:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>passkey: Remove SYSDB_PASSKEY_USER_VERIFICATION
Remove SYSDB_PASSKEY_USER_VERIFICATION and related functions. In
phase 1 of passkey implementation we read passkey user verification
from IPA LDAP tree, however now user verification is sent to the
SSSD krb5 plugin from ipa-otpd.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be5df34126b3755cd63f829a885b68cb93fb6fa6">be5df341</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-05T11:34:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>authtok: Set Kerberos passkey PIN to NULL when UV is false
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1e3464a0fa896041e6cf097eeb72de1bf2a531a1">1e3464a0</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-12-08T20:22:36+05:30 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Add IPA HBAC Test Cases for Validating Access Control Rules and Group Membership Refresh
A comprehensive set of IPA HBAC (Host-Based Access Control)
test cases to validate HBAC rule creation, modification,
conflict resolution, and access permission enforcement.
The tests cover scenarios including user and group-based
access, nested groups, service and host-specific rules,
category-based access, and authorization priority resolution.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Dan Lavu <dlavu@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/790228c87eef6991fa359ca75dce51332e23efa7">790228c8</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-12-08T22:26:43+05:30 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: standardize HBAC test name format
Rename test_ipa_hbac_user_host_service_category_equals_all
to test_ipa__hbac_user_host_service_category_equals_all to
match the double-underscore naming convention used for
IPA HBAC tests and improve test discoverability.
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/90fd80240e0bb6fe357cc15327b001ebd05bd10c">90fd8024</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-12-09T11:06:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Remove hardcoded domain and fix type errors in netgroup tests
Replace hardcoded "ldap.test" domain strings with dynamic `provider.domain`
and fix type checking errors in netgroup tests.
Changes:
- Remove `raise ValueError` and `pytest.skip` isinstance checks since
topology markers already restrict tests to LDAP, AD, and Samba providers
- Change function signatures from `GenericProvider` to `AD | LDAP | Samba`
to match the topology decorators
- Replace all hardcoded "ldap.test" with `provider.domain` for dynamic
domain resolution across different provider topologies
- Rework parametrized test to use boolean flag and format string with
`{domain}` placeholder for runtime substitution
- Fix type errors by passing netgroup names as strings instead of objects
to `add_member(ng=...)` calls
- Fix type conflict by using separate variable names (`passwd_result`,
`group_result`) for different entry types
Affected tests:
- test_netgroup__user_attribute_membernisnetgroup_uses_group_dn
- test_netgroup__lookup_nested_groups
- test_netgroup__lookup_nested_groups_with_host_and_domain_values_present
- test_netgroup__uid_gt_2147483647
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/63771a1a3be91b49b4e4d604854321981630d17e">63771a1a</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-12-09T11:06:04+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Add netgroup tests for incomplete triples and complex hierarchy
Add new test cases to verify netgroup functionality with incomplete
triples and complex nested hierarchies.
New tests:
- test_netgroup__incomplete_triples: Verify netgroups with various
incomplete triple combinations (empty, only host, only user, only
domain, missing host, missing user, missing domain)
- test_netgroups__complex_hierarchy: Verify netgroups with multiple
levels of nesting (base -> mid -> top) work correctly and return
the expected combination of direct triples and inherited members
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/97fa9e77508e63889514a8e218c7c3f31500a299">97fa9e77</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2025-12-09T18:08:08+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>intg: remove ent_test.py
These tests randomly fails, making CI red. They do not test SSSD, just
internal intg tests tooling and since the intg tests are going away,
it does not make sense to spend time on it or even mark it as flaky.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/b0146aefc7318a87f140635c1be956a86a82174a">b0146aef</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-10T10:25:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>util: Add string_begins_with() helper
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/358a708fb55d65623c415c066c043e673a97ef4c">358a708f</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-10T10:25:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>simple: Resolve group names in SID format
After changes from 'Dont store GID for non-posix groups', the simple
access provider was not identifying group with names in SID format as
group that needs to be resolved because they are no longer stored
temporarily as non-POSIX.
Add code to check for, and resolve any group names which are SIDs
returned from initgroups (AD provider).
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4482fac2ec04f598ff7967f22e13af2b946c2e21">4482fac2</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-10T10:25:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Remove preferred topology from simple access test
The changes from Dont store GID for non-posix groups commit 85b632d have
resulted in the test test_access_control_simple__permits_user_login_based_on_group
to fail, specifically when run against samba (ipa and ldap succeed).
Drop the preferred LDAP topology, to ensure this test runs against
all providers to catch potential issues like this.
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/449913a8aff668e59f3558598dbebfe7811476bb">449913a8</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2025-12-10T12:10:29-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>adding subid test
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/60ba493e9664caecd9496901e8b9639c874b04ee">60ba493e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-12-11T12:24:23-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5: fix OTP authentication
Resolves: https://github.com/SSSD/sssd/issues/8292
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/df15165db43eeb380c2c2af0eb4492c647c266d5">df15165d</a></strong>
<div>
<span> by Iker Pedrosa </span> <i> at 2025-12-11T12:24:23-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>krb5_child: fix OTP authentication for PAM stacked tokens
The `tokeninfo_matches()` function already handles PAM stacked tokens
correctly by processing them through the 2FA single path, so the
`answer_otp()` function should allow this token type to proceed.
Add SSS_AUTHTOK_TYPE_PAM_STACKED to the allowed authentication token
types in `answer_otp()` to restore previous functionality.
Fixes: 4cb99a248 ("krb5_child: advertise authentication methods").
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1b7110438c13fd317769bb505779cf52b8a4911a">1b711043</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-12-15T14:16:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: Fail with short names
SSSD in server mode on IPA server is not allowed to use
short names.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/481609659dac3fda347a8a7a6bce0995763c0999">48160965</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-12-15T14:16:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: remove re-declaration of `ipa_trusted_subdom_init`
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/09f574f009a89d380d55cf12f0824807e12cab4c">09f574f0</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-12-15T14:16:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IPA: remove CONFDB_DEFAULT_FULL_NAME_FORMAT_INTERNAL
This format is not used anywhere except in unnecessary check.
This update removes it.
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/836042459f480a178191544b834df7f4ebc1e23f">83604245</a></strong>
<div>
<span> by Tomas Halman </span> <i> at 2025-12-15T14:16:53+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: SSSD must refuse to start on IPA with short names
Reviewed-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2b43681d47ae0762c15b24f92fb79f3d95e0a63a">2b43681d</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2025-12-15T14:31:03+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Add netgroup offline and nested hierarchy
Add new system tests for netgroup functionality:
- test_netgroup__offline: Verify netgroups remain
accessible from cache when backend goes offline
- test_netgroups__step_by_step_removal: Test removing
netgroups from hierarchy and deleting them with proper cache invalidation
- test_netgroups__nested_modification: Test that adding/removing
members in nested netgroups (3-level deep) propagates correctly through the hierarchy
Related: https://fedorahosted.org/sssd/ticket/2841
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/698f992029642c5e3382b0b3ba23bf871d49306c">698f9920</a></strong>
<div>
<span> by Samuel Cabrero </span> <i> at 2025-12-17T13:53:01-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>SSSCTL: config-check: do not return an error if snippets directory does not exists
There is a discrepancy between sssd and sssctl config-check regarding
the absence of the snippets directory.
The sssctl config-check command exits with code 1, but sssd does not
consider it a hard error, it just logs a warning and then runs fine.
Signed-off-by: Samuel Cabrero <scabrero@suse.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/be84217071df32c847ea028c5c8f4ca000af5a8c">be842170</a></strong>
<div>
<span> by Justin Stephenson </span> <i> at 2025-12-17T13:53:01-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: Update sssctl config-check tests
Tests using non-default config specified a full path, which
--config argument does not handle. The --snippet argument needs
to be provided because it defaults to conf.d if not specified.
Reviewed-by: Alejandro López <allopez@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/87e72fd01387b67e2b9b2aecdae32abe3cfe781f">87e72fd0</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2025-12-19T09:38:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KCM: root can't access arbitrary KCM cache
so remove confusing traces suggesting otherwise
See: https://github.com/SSSD/sssd/issues/7274#issuecomment-2063499790
Resolves: https://github.com/SSSD/sssd/issues/7274
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9579e08ccdb67f2e97c62edb88c509589cf86ca7">9579e08c</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2025-12-23T08:55:15+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>spec: clarify description of sssd-idp package
Make clean the the sssd-idp package now contains SSSD's IdP provider as
well.
Resolves: https://github.com/SSSD/sssd/issues/8022
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/794e80f4f155cd5d97e70ee015909cd9f3b918b3">794e80f4</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-02T11:46:53+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb: add sysdb_search_user_by_upn_with_view_res()
The new call will apply overrides to a user object which was searched by
UPN or email address before returning it.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/43f22b968a48c4e1f1e7cb885e68428baa7cc7be">43f22b96</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-02T11:46:53+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>cache_req: use sysdb_search_user_by_upn_with_view_res()
To make sure any overrides are applied to the user even when searched by
UPN or email address sysdb_search_user_by_upn_with_view_res() is now
used in the cache request code.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/fe61b85b440380bd88d5859819a1111878ca36ea">fe61b85b</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-02T11:46:53+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb:: remove sysdb_getpwupn()
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6d8f9d7e9c8858fc108bf0e5e4fc40fcdec7ed71">6d8f9d7e</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-02T11:46:53+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: lookup user with overrides with email
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6413f60b1bbac4f0ac329401567446bb8d33ae12">6413f60b</a></strong>
<div>
<span> by Madhuri Upadhye </span> <i> at 2026-01-02T11:46:53+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: add IPA ID view test for user lookup by email
Add a system test to verify that IPA ID view overrides are correctly
applied when looking up a user by email address.
The test creates a user with an email, applies ID view overrides
(login, uid, gid, home), and verifies that the overridden values are
returned when looking up the user by:
- original name
- overridden name
- email address
Signed-off-by: Madhuri Upadhye <mupadhye@redhat.com>
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/d9ab8a8a016ebc43dac6725c1e547ea260041af5">d9ab8a8a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-05T14:42:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5: let 'krb5_child' tolerate missing cap-set-id
If CAP_SETUID and/or CAP_SETGID are missing, 'krb5_child' will
skip operation that require those capabilities, namely any manipulations
with user ccache.
:packaging:This update makes it possible to not grant CAP_SETUID and CAP_SETGID
to 'krb5_child' binary in a situation where it is not required to store acquired
TGT after user authentication. Taking into account that it is already possible
to avoid using CAP_DAC_READ_SEARCH if keytab is readable by SSSD service user,
and usage of 'selinux_child' isn't always required, this allows to build a setup
with completely privilege-less SSSD to serve certain use cases. In particular,
this might be used to build a container running SSSD on OCP with a restricted
profile.
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c12320108b69632799690fbd457b1fc6d4a722d2">c1232010</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-05T16:30:09+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pac: fix issue with pac_check=no_check
So far SSSD expected that the PAC contains the logon_info buffer even if
PAC checks are disabled with the 'no_check' option. This causes issues
with PACs issues by MIT Kerberos KDCs which do not contain this buffer.
This patches makes sure that the logon_info is not expected if
'no_check' is set and adds some clarifications to the man page.
Resolves: https://github.com/SSSD/sssd/issues/8300
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/72a42d5cbb969f61698f7403fe6e7cf6a8abf957">72a42d5c</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-06T08:18:11+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>sysdb: do not treat missing id-override as an error
In sysdb_search_user_by_upn_with_view_res()
sysdb_add_overrides_to_object() can return ENOENT if there is no
id-override for the given user. This is expected and should not be
treated as an error.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/8942d3000c2e6448963190490a9b11a1384050d7">8942d300</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2026-01-08T09:22:20-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: bump cross-platform-actions/action from 0.29.0 to 0.32.0
Bumps [cross-platform-actions/action](https://github.com/cross-platform-actions/action) from 0.29.0 to 0.32.0.
- [Release notes](https://github.com/cross-platform-actions/action/releases)
- [Changelog](https://github.com/cross-platform-actions/action/blob/master/changelog.md)
- [Commits](https://github.com/cross-platform-actions/action/compare/v0.29.0...v0.32.0)
---
updated-dependencies:
- dependency-name: cross-platform-actions/action
dependency-version: 0.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com></pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4d68ca714334768f9881babf431793c814794547">4d68ca71</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2026-01-08T09:28:33-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1280ffe066a3323c2b7fb4ed453d5680a7256f49">1280ffe0</a></strong>
<div>
<span> by dependabot[bot] </span> <i> at 2026-01-08T10:03:18-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ci: bump actions/upload-artifact from 5 to 6
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/160bbb3f2db0b3968f9739011ed97bf88efec1b6">160bbb3f</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2026-01-09T14:52:15-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>adding parametrized enumeration enabled tests
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/5b5dce2fa645041493aa371af59f6bf93dc75fdf">5b5dce2f</a></strong>
<div>
<span> by Dan Lavu </span> <i> at 2026-01-09T14:52:15-05:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>removing intg enumeration tests.
Reviewed-by: Jakub Vávra <jvavra@redhat.com>
Reviewed-by: Tomáš Halman <thalman@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1a8c30250a4ea8fe0c2cbef92ff7994dd73d0251">1a8c3025</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-10T16:59:38+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>ipa s2n: do not try to update user-private-group
When an IPA client requests the details about a trusted user from the
IPA server including its memberships the server will return the name of
all groups including the user-private-group. Since this group is not a
cached object on its own it is not needed to try to update it as a group
but it will be updated when the user object is updated.
This has to be taken into account especially after a client is assigned
to a new id-view because now the SYSDB_OVERRIDE_DN attribute is required
and all cached objects which are missing it must be updated. If the
user-private-group was found for update it should be skipped because the
calls to update group objects in the cache cannot handle
user-private-groups. This is expected behavior as user-private-groups
are not objects on their own.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/08c2ccf50a466a879922829a57473a0819fd42fa">08c2ccf5</a></strong>
<div>
<span> by Sumit Bose </span> <i> at 2026-01-10T16:59:38+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>tests: check user lookup after view change
After a new view is applied to a client SSSD should make sure that the
cache entries are updated properly and all cached users can still be
resolved properly.
Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/116f10e99e6c94444867b1f1a7b162c01687985e">116f10e9</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T11:27:29+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>DP: use 'SSSDBG_CONF_SETTINGS' to log options
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/16099f243ffeba67cf5f4dc1864967df1e5aad3a">16099f24</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T11:27:29+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>IDP: avoid logging value of 'idp_client_secret'
Note that 'ldap_default_authtok' doesn't require special handling
because it is of DP_OPT_BLOB type and isn't logged.
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/44b938a2fb6d1b09b52439defd57ddef8421d293">44b938a2</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T11:27:29+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>OIDC_CHILD: don't log 'post_data' content
as it might contain 'secret'
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/9ed926242bea7304fc8a7a674c2b5c5a9b227237">9ed92624</a></strong>
<div>
<span> by Jakub Vávra </span> <i> at 2026-01-13T16:29:02+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Tests: Update test_0003_ad_parameters_junk_domain_invalid_keytab
Change 684e5683d115b67fb9ad53d7138108a7154f5d95 added a code path
that sets the realm to the AD domain name if the keytab is invalid.
This changes the expected log message "Selected realm:" on sssd 2.12+.
Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/c3dc228b88b9a1586845e19f37230fca79640172">c3dc228b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T19:01:08+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: comment fixed
'krb5_child' doesn't precreate path to FILE:/DIR: ccache since
5e17bc22f6c0ad74ba3ddb198db94acc96cc90a4
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6378238bedb2ca9d147d06d973d2ce1076514908">6378238b</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T19:01:08+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: only setup/check ccache if can later use it
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/2a991f2f45b3e6200266500634d5b76bc9b029d2">2a991f2f</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T19:01:08+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: use ruid/rgid instead of CAP_DAC_READ_SEARCH
to check FILE:/DIR: ccache path.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e2273e09a8e539fdb156bd1aba56c2d4210a7ad3">e2273e09</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T19:01:08+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: allow `k5c_ccache_check()` during SSS_PAM_PREAUTH
This should cover a case when a single execution of 'krb5_child'
handles both PREAUTH and AUTH
Resolves: https://github.com/SSSD/sssd/issues/8331
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/735fe23a25c1e0a47bcd4978e65d737636b2243e">735fe23a</a></strong>
<div>
<span> by Alexey Tikhonov </span> <i> at 2026-01-13T19:01:08+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>KRB5_CHILD: don't check if FILE:/DIR: path accessible in advance
Inaccessible FILE:/DIR: path is a system configuration error that
needs to be fixed anyway. It doesn't make much difference to fail
before or after credentials check in this case.
Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/4617eb2abcc54b6eae181e52ccbc43189eab73c7">4617eb2a</a></strong>
<div>
<span> by Hosted Weblate </span> <i> at 2026-01-14T14:10:57+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>po: update translations
(Georgian) currently translated at 0.5% (15 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ka/
Added translation using Weblate (Georgian)
po: update translations
(Swedish) currently translated at 97.2% (2747 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Spanish) currently translated at 100.0% (2824 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 100.0% (2824 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 89.1% (2519 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 88.5% (2500 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 87.3% (2467 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Swedish) currently translated at 96.3% (2721 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Swedish) currently translated at 96.3% (2720 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Swedish) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/sv/
po: update translations
(Portuguese (Brazil)) currently translated at 0.3% (10 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt_BR/
po: update translations
(Portuguese (Brazil)) currently translated at 1.0% (8 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt_BR/
po: update translations
(Spanish) currently translated at 85.9% (2428 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 85.9% (2428 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 84.2% (2378 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 83.9% (2371 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 83.9% (2371 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Finnish) currently translated at 10.2% (76 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
po: update translations
(Spanish) currently translated at 82.7% (2337 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 82.6% (2335 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Turkish) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/tr/
po: update translations
(Spanish) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Spanish) currently translated at 77.8% (2198 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 77.8% (2198 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 77.8% (2198 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 69.3% (1959 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 97.4% (723 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Spanish) currently translated at 67.0% (1893 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 97.4% (723 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Korean) currently translated at 67.5% (1680 of 2486 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Spanish) currently translated at 64.3% (1817 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 97.4% (723 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Korean) currently translated at 67.2% (1671 of 2486 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ko/
po: update translations
(Spanish) currently translated at 62.6% (1768 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Spanish) currently translated at 97.4% (723 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Spanish) currently translated at 97.4% (723 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Spanish) currently translated at 62.5% (1767 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/es/
po: update translations
(Swedish) currently translated at 95.9% (2709 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/sv/
po: update translations
(Korean) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Korean) currently translated at 99.3% (737 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Korean) currently translated at 95.1% (706 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Portuguese) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 89.3% (663 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 85.4% (634 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 83.0% (616 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 79.3% (589 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 77.7% (577 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 73.3% (544 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 69.0% (512 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 63.3% (470 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 62.2% (462 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 60.6% (450 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 59.8% (444 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 56.4% (419 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 54.9% (408 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 52.1% (387 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 46.4% (345 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 44.8% (333 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 41.9% (311 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 40.0% (297 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 33.2% (247 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 27.8% (207 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 27.3% (203 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 25.4% (189 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 23.7% (176 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 22.5% (167 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 21.1% (157 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 18.0% (134 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 18.0% (134 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 16.0% (119 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 15.7% (117 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 15.6% (116 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 100.0% (2824 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 99.8% (2819 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 99.7% (2818 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(French) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fr/
po: update translations
(Portuguese) currently translated at 99.4% (2808 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 99.3% (2807 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 99.2% (2803 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 99.2% (2802 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 98.9% (2795 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 98.9% (2794 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 98.8% (2792 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 98.6% (2786 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 98.3% (2776 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Korean) currently translated at 94.3% (700 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Russian) currently translated at 100.0% (2824 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Russian) currently translated at 98.9% (2795 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Russian) currently translated at 98.1% (2771 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Portuguese) currently translated at 98.2% (2774 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Russian) currently translated at 97.8% (2763 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Portuguese) currently translated at 98.0% (2769 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 95.6% (2702 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 93.6% (2646 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 93.6% (2645 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 93.3% (2635 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Russian) currently translated at 97.2% (2747 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
po: update translations
(Portuguese) currently translated at 93.0% (2629 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Russian) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ru/
po: update translations
(Portuguese) currently translated at 92.9% (2625 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 92.2% (2604 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 92.0% (2599 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 91.9% (2598 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 91.9% (2597 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 91.9% (2596 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 89.4% (2525 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 15.4% (115 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 84.8% (2397 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 84.4% (2385 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 83.6% (2363 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 83.2% (2351 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Korean) currently translated at 93.8% (696 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ko/
po: update translations
(Portuguese) currently translated at 82.6% (2335 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 82.4% (2327 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 82.1% (2319 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 81.6% (2305 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 14.8% (110 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 77.8% (2199 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 77.7% (2195 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Ukrainian) currently translated at 100.0% (2824 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Portuguese) currently translated at 77.2% (2182 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Spanish) currently translated at 97.3% (722 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/es/
po: update translations
(Ukrainian) currently translated at 99.3% (2806 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Portuguese) currently translated at 77.2% (2181 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 70.6% (1996 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 68.7% (1942 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 68.2% (1926 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 67.8% (1916 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 67.3% (1902 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 66.0% (1864 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 59.4% (1679 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 58.6% (1655 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 53.5% (1513 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 53.2% (1505 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 53.0% (1499 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 52.7% (1490 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 51.8% (1464 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 50.8% (1436 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 50.7% (1432 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 14.6% (109 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 48.1% (1359 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 47.6% (1346 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 47.4% (1340 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 47.4% (1340 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 47.4% (1340 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 43.1% (1219 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 40.5% (1144 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 40.1% (1133 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 39.5% (1116 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 39.4% (1115 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 38.7% (1094 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Ukrainian) currently translated at 98.9% (2795 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Portuguese) currently translated at 35.9% (1016 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Ukrainian) currently translated at 98.9% (2794 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Portuguese) currently translated at 33.6% (950 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 14.5% (108 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 31.0% (878 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 30.7% (869 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 30.0% (848 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 27.4% (776 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 25.5% (722 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 14.4% (107 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Polish) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/
po: update translations
(Portuguese) currently translated at 24.3% (688 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Ukrainian) currently translated at 100.0% (742 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
po: update translations
(Ukrainian) currently translated at 96.0% (2713 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/uk/
po: update translations
(Portuguese) currently translated at 23.4% (661 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 14.2% (106 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 10.1% (287 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 13.4% (100 of 742 strings)
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pt/
po: update translations
(Portuguese) currently translated at 8.3% (237 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 8.1% (231 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 8.1% (231 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
po: update translations
(Portuguese) currently translated at 8.1% (231 of 2824 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/pt/
Update translation files
Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.
Translation: SSSD/sssd
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/47575276871e5ae9b258d2556db996dbc75ddd50">47575276</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2026-01-14T15:40:41+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>scripts: authenticate git push for release
actions/checkout@v6 changed behavior and the credentials can be reused
only if it is run from the same directory. But we copy the repository to
a temporary location to prepare the release, so we need to
re-authenticate in the tmp folder.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/e6927eb943e5a50d194f3cce67c6542e6b97c41e">e6927eb9</a></strong>
<div>
<span> by Pavel Březina </span> <i> at 2026-01-14T15:57:52+01:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>scripts: use sssd-bot token for release script
In order to bypass branch protection rules.
Reviewed-by: Justin Stephenson <jstephen@redhat.com>
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/6749ec8b17e47f1d0a59e1f6b351d344cfeacffa">6749ec8b</a></strong>
<div>
<span> by sssd-bot </span> <i> at 2026-01-14T15:01:41+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>pot: update pot files
</pre>
</li>
<li>
<strong style="font-weight: 600;"><a href="https://salsa.debian.org/sssd-team/sssd/-/commit/1a1cf163b78ff4768cc8bfc1e631171bc021e2fe">1a1cf163</a></strong>
<div>
<span> by sssd-bot </span> <i> at 2026-01-14T15:01:42+00:00 </i>
</div>
<pre class="commit-message" style='white-space: pre-wrap; display: block; font-size: 14px; color: #3a383f; position: relative; font-family: "GitLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation Mono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida console", monospace; font-variant-ligatures: none; word-break: break-all; word-wrap: break-word; background-color: #fbfafd; border-radius: 2px; margin: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Release sssd-2.12.0
</pre>
</li>
</ul>
<h4 style="margin-top: 10px; margin-bottom: 10px;">
378 changed files:
</h4>
<ul>
<li class="file-stats">
<a href="#27d2490604fdeba08edc0d0e4254feb970c63dd0">
<span class="new-file">
+
.gemini/config.yaml
</span>
</a>
</li>
<li class="file-stats">
<a href="#980c81f9132f0c2e81b221a9ba855c7ab9b8a0b2">
.github/actions/install-dependencies/action.yml
</a>
</li>
<li class="file-stats">
<a href="#091aff741808a09242f252264b14f4a9adaa5305">
.github/dependabot.yml
</a>
</li>
<li class="file-stats">
<a href="#cb28d052166500e7addb3415bdfb433e662a068e">
<span class="new-file">
+
.github/workflows/accepted.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#71da4bef7d009bfa59d0f7ca85bf6a18169fb48d">
.github/workflows/analyze-target.yml
</a>
</li>
<li class="file-stats">
<a href="#29c5060591f41a25ae4fdef0d163a0f63056f20a">
<span class="new-file">
+
.github/workflows/backport.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#fe77d5d1439f26e353a42bbd38dece2467ff6558">
<span class="new-file">
+
.github/workflows/build.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#899ce9c202bf7bb5480e72836c3edc773c9c4244">
.github/workflows/ci.yml
</a>
</li>
<li class="file-stats">
<a href="#205e49e7f8cbf1a4f02d387dd32850fa09a5ef81">
<span class="deleted-file">
−
.github/workflows/copr_build.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#5439b3be16e91e7a13b1977539a10e7b3639a891">
<span class="deleted-file">
−
.github/workflows/copr_cleanup.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#f34eaf19b34e4ae5135212c79909cfd8d3c70b6b">
.github/workflows/coverity.yml
</a>
</li>
<li class="file-stats">
<a href="#16911b9809e0d05b7b124ba8453fa5303d74924c">
<span class="new-file">
+
.github/workflows/release.yml
</span>
</a>
</li>
<li class="file-stats">
<a href="#4d938f6c1c694e539e55e88076490273a04798ba">
.github/workflows/static-code-analysis.yml
</a>
</li>
<li class="file-stats">
<a href="#8eef649c6f3efda90b9e4f57ec6593b23880057e">
<span class="new-file">
+
.packit.yaml
</span>
</a>
</li>
<li class="file-stats">
<a href="#e7d14d429f898757a423156de0e8c49d75240694">
<span class="new-file">
+
.pre-commit-config.yaml
</span>
</a>
</li>
<li class="file-stats">
<a href="#d5b4de16d947214ec306bd57bed1bd23a939b5f9">
Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#87db583be5c13c1f7b3c958b10e03d67b6a2ca06">
configure.ac
</a>
</li>
<li class="file-stats">
<a href="#0aeb6d52776b667900291cb1c14a7dadddc5c3b2">
contrib/ci/get-matrix.py
</a>
</li>
<li class="file-stats">
<a href="#c3b4e77ecae6f5d5b141acb78d1a7d2302ac7764">
contrib/fedora/bashrc_sssd
</a>
</li>
<li class="file-stats">
<a href="#b8d57aa4a09effcbac8deeffe8aea9131499424f">
contrib/sssd.spec.in
</a>
</li>
<li class="file-stats">
<a href="#3d2f764ef24a4af4d2f718f6385375e433c0eeb7">
contrib/test-suite/README.md
</a>
</li>
<li class="file-stats">
<a href="#4e573a66c66b45b45a1e180cad791738ed22cdd2">
po/bg.po
</a>
</li>
<li class="file-stats">
<a href="#b91599a7e7dcdfc93152518865a9d894acfe41c9">
po/ca.po
</a>
</li>
<li class="file-stats">
<a href="#fccf081b8d2f9631b6347df4a24d22fac5a73474">
po/cs.po
</a>
</li>
<li class="file-stats">
<a href="#8133f48bcd872819f4d7310d09b4ef30a26831b0">
po/de.po
</a>
</li>
<li class="file-stats">
<a href="#bf0ecd6fd82096852700283e68fd723ccfe57871">
po/es.po
</a>
</li>
<li class="file-stats">
<a href="#804f8c75d12ae05ad9351001530d8575e03a169d">
po/eu.po
</a>
</li>
<li class="file-stats">
<a href="#4a909f28ec13a23ac75c362bf9a9e15669d47d6d">
po/fi.po
</a>
</li>
<li class="file-stats">
<a href="#09aa9a4cf22de79302d7cefe7d280b7235f787c7">
po/fr.po
</a>
</li>
<li class="file-stats">
<a href="#1ea4eac30921a4a13fc7be0b323144e189daec70">
po/hu.po
</a>
</li>
<li class="file-stats">
<a href="#cbd0a16c6ab85833ae5892982bc57d68cc315864">
po/id.po
</a>
</li>
<li class="file-stats">
<a href="#327aa0bc550fa884acca79a3295e722b622f7559">
po/it.po
</a>
</li>
<li class="file-stats">
<a href="#5c873de36a1b57f9c8b16c7fb9cd64292a431fb2">
po/ja.po
</a>
</li>
<li class="file-stats">
<a href="#b4483a69a17ce84171905a68001440348a030887">
po/ka.po
</a>
</li>
<li class="file-stats">
<a href="#462de2f88a6167ce90705f7096ce3afdcfa1d264">
po/ko.po
</a>
</li>
<li class="file-stats">
<a href="#088da71e4e8eddb438a4704013c74671ac837fe3">
po/nb.po
</a>
</li>
<li class="file-stats">
<a href="#c54e8255699d35fd83cf0c4800a6cf1fe45533d9">
po/nl.po
</a>
</li>
<li class="file-stats">
<a href="#74adca948cd9fddf7f9644856d4988126ffe9601">
po/pl.po
</a>
</li>
<li class="file-stats">
<a href="#7a488413e07158a724225892439d611e4ba28ba0">
po/pt.po
</a>
</li>
<li class="file-stats">
<a href="#160f60c3dd59b978e505eccda1925dc3923a1d71">
po/pt_BR.po
</a>
</li>
<li class="file-stats">
<a href="#2316433971b53f8a58c69a9c3ce650787e35b3c0">
po/ru.po
</a>
</li>
<li class="file-stats">
<a href="#0d4e896bfdd3ddb2a1208357455cc9d994cf5a94">
po/sssd.pot
</a>
</li>
<li class="file-stats">
<a href="#4a5c1cf4e30bce97baf810ad306a537239e2c52e">
po/sv.po
</a>
</li>
<li class="file-stats">
<a href="#172b5ede9463bce50719ca3fba867887ecdaa56c">
po/tg.po
</a>
</li>
<li class="file-stats">
<a href="#cf4f0b0dadc52f5cd0dfbc7af6bc3ca27ba42355">
po/tr.po
</a>
</li>
<li class="file-stats">
<a href="#b51f8cbe35a8772efe6f023fc1673b635dca1f80">
po/uk.po
</a>
</li>
<li class="file-stats">
<a href="#649f57c2c27e08866163cb3bc5d7709242509a33">
po/zh_CN.po
</a>
</li>
<li class="file-stats">
<a href="#9073c7a6a45185a5d8109b9db2583c3a6ebb6fc0">
po/zh_TW.po
</a>
</li>
<li class="file-stats">
<a href="#eb1f64b8703868ced3cfc2649dc5595d2c6e0b57">
sbus_generate.sh.in
</a>
</li>
<li class="file-stats">
<a href="#683862a8af0d029716fb19dda489378cc3eab5cc">
scripts/release.sh
</a>
</li>
<li class="file-stats">
<a href="#e126e29c556fb5b57b454ff0fe568ab8d23ec4ff">
src/conf_macros.m4
</a>
</li>
<li class="file-stats">
<a href="#8130d92ab2dbb731fb207301f85bd6212a4925e1">
src/confdb/confdb.c
</a>
</li>
<li class="file-stats">
<a href="#87f797812a6c8103120c84edd047870e3d4238fc">
src/confdb/confdb.h
</a>
</li>
<li class="file-stats">
<a href="#210dad58d7e209f3d6af950c346f0424f404fa49">
src/config/SSSDConfig/__init__.py.in
</a>
</li>
<li class="file-stats">
<a href="#1498d4d2f787823f79492cf4f0bac6ca11eb0bf8">
src/config/SSSDConfig/ipachangeconf.py
</a>
</li>
<li class="file-stats">
<a href="#3a143ef9ccd76ba9850988da39e18c709ba194f2">
src/config/SSSDConfig/sssdoptions.py
</a>
</li>
<li class="file-stats">
<a href="#1d29c13360f2093ae9138bc2560306b5f889780e">
src/config/SSSDConfigTest.py
</a>
</li>
<li class="file-stats">
<a href="#e88f08bc547274216ac6b8b404de90b01e62a715">
src/config/cfg_rules.ini
</a>
</li>
<li class="file-stats">
<a href="#0bb5ac26196a4eea2483a67a54e2901eb1654636">
src/config/etc/sssd.api.conf
</a>
</li>
<li class="file-stats">
<a href="#df2521da5616b124c0d7f0e68ba8b2e38c4a99d6">
src/config/etc/sssd.api.d/sssd-ad.conf
</a>
</li>
<li class="file-stats">
<a href="#ecb750c1ec6bc993f2389df3abbf13c7e14a0b8c">
src/config/etc/sssd.api.d/sssd-ipa.conf
</a>
</li>
<li class="file-stats">
<a href="#b888237679fd09b0bd6c19ec620a6a755d6f0f61">
src/config/etc/sssd.api.d/sssd-krb5.conf
</a>
</li>
<li class="file-stats">
<a href="#a413b4108ff94e60b66aa3c25008892b5535ffe1">
src/config/etc/sssd.api.d/sssd-ldap.conf
</a>
</li>
<li class="file-stats">
<a href="#a3060e84d23524e6c25906ad9fd0979a1ca33339">
src/config/etc/sssd.api.d/sssd-proxy.conf
</a>
</li>
<li class="file-stats">
<a href="#8e179f996fc4122cc1cc066ee06ce43983b7c018">
src/config/testconfigs/noparse.api.conf
</a>
</li>
<li class="file-stats">
<a href="#d1e24da1b829ae3dd43e57e7e0b6ea98fc45a96a">
src/config/testconfigs/sssd-invalid-badbool.conf
</a>
</li>
<li class="file-stats">
<a href="#ff251ddf4dbd227b9cee5b6fb6863231c81902d1">
src/db/sysdb.c
</a>
</li>
<li class="file-stats">
<a href="#62474e063be5780c2c61f9b6aa3613919abb17ea">
src/db/sysdb.h
</a>
</li>
<li class="file-stats">
<a href="#abeebb898a84e42faa346439dce7acf5863620e3">
src/db/sysdb_ops.c
</a>
</li>
<li class="file-stats">
<a href="#64700b3a3f294997916186f4f4302557d7a1c020">
<span class="deleted-file">
−
src/db/sysdb_passkey_user_verification.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#c79fcc740289c2eaa0dfdd5f18063ee11e5da829">
<span class="deleted-file">
−
src/db/sysdb_passkey_user_verification.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#1dd9cebb46e3c30e605ff57276e9dbb391477ba4">
src/db/sysdb_private.h
</a>
</li>
<li class="file-stats">
<a href="#0d23baa45350ac5307eec6b21a8fc0554cd5ad5e">
src/db/sysdb_search.c
</a>
</li>
<li class="file-stats">
<a href="#998d01971485ff67a9eea5fe070099f5aad50284">
src/db/sysdb_selinux.c
</a>
</li>
<li class="file-stats">
<a href="#43f78164d84c68f68eaa0a02400af17f255c19a0">
src/db/sysdb_subdomains.c
</a>
</li>
<li class="file-stats">
<a href="#36b6e461fd3643c0547766f376de511cd75ef187">
src/db/sysdb_views.c
</a>
</li>
<li class="file-stats">
<a href="#51cb2f19dc1e585b1fe912240a60896d3637110b">
src/examples/sssdproxytest
</a>
</li>
<li class="file-stats">
<a href="#60f9bd61d4b39ed5b81e8ea39a0944f7af56cab7">
src/external/docbook.m4
</a>
</li>
<li class="file-stats">
<a href="#288abccd01025c5a59850fc35d44c8f7594b7da9">
src/external/inotify.m4
</a>
</li>
<li class="file-stats">
<a href="#5d6824de909c2de2eda994778093b13430bc3da2">
src/external/libdhash.m4
</a>
</li>
<li class="file-stats">
<a href="#d5b3cc6da4b01cde6d07622452ad788d941b0c9b">
src/external/pac_responder.m4
</a>
</li>
<li class="file-stats">
<a href="#289e62b9d3f4795d688df0d87650a66b933a4903">
src/external/pam.m4
</a>
</li>
<li class="file-stats">
<a href="#a63bcdd2bcfb64a3a4b28a0a3f2a475595fef211">
src/krb5_plugin/passkey/passkey_clpreauth.c
</a>
</li>
<li class="file-stats">
<a href="#484cbfcb3f63e206a74d3b1efda9137f7a1e5e70">
src/krb5_plugin/sssd_krb5_localauth_plugin.c
</a>
</li>
<li class="file-stats">
<a href="#e18f93a0c17ea91445d7fed901e611619d18af9c">
src/man/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#57f6acb472af7084a87335932ea41992bb30a35d">
src/man/po/br.po
</a>
</li>
<li class="file-stats">
<a href="#dbfa196c52236ac697f5c119cf3f3802197e5a49">
src/man/po/ca.po
</a>
</li>
<li class="file-stats">
<a href="#8226d5e4ce16f6cd0b6ae2c43243684f17d6e40e">
src/man/po/cs.po
</a>
</li>
<li class="file-stats">
<a href="#587621c0831f8ec13ffe600166e06205a199f554">
src/man/po/de.po
</a>
</li>
<li class="file-stats">
<a href="#a7861c52f3b1006d4e23c46d7663efe04f921c7d">
src/man/po/es.po
</a>
</li>
<li class="file-stats">
<a href="#35f0f810b0e5ae3cbc43a48543d79019213497d2">
src/man/po/eu.po
</a>
</li>
<li class="file-stats">
<a href="#34df2355e4ceaf43b259198016c3a20490cfee60">
src/man/po/fi.po
</a>
</li>
<li class="file-stats">
<a href="#6d4ef8b31fd19b2c25cd7921c670444f27b16f9b">
src/man/po/fr.po
</a>
</li>
<li class="file-stats">
<a href="#04d8b4e374b1f0212c6bc04201c100c75b25bd4e">
src/man/po/ja.po
</a>
</li>
<li class="file-stats">
<a href="#6dea440302af1eb58841b3389201ac89183a114c">
<span class="new-file">
+
src/man/po/ka.po
</span>
</a>
</li>
<li class="file-stats">
<a href="#731dbb5f2b43f5d596f388421d95b493a3f8221c">
src/man/po/ko.po
</a>
</li>
<li class="file-stats">
<a href="#2ffeb6e778f4398348d9172f8a863195d3fa45ad">
src/man/po/lv.po
</a>
</li>
<li class="file-stats">
<a href="#0e7fc554b6d1752b42d6a4bcc3cdfc3c0b624c8c">
src/man/po/nl.po
</a>
</li>
<li class="file-stats">
<a href="#34f36500467b30b0fa1f54d1029b8e4578a5decb">
src/man/po/pt.po
</a>
</li>
<li class="file-stats">
<a href="#25665ba0820f06ec80ccb9fc2d793095221dbc66">
src/man/po/pt_BR.po
</a>
</li>
<li class="file-stats">
<a href="#1574269bb5b331ca21ad843da9cc0eefdde27d80">
src/man/po/ru.po
</a>
</li>
<li class="file-stats">
<a href="#4b723b8389be78693507a4fd8565d5ea64ad01ae">
src/man/po/sssd-docs.pot
</a>
</li>
<li class="file-stats">
<a href="#bbac6a79a3c8139e03a39fdada355f01d3f9dfec">
src/man/po/sv.po
</a>
</li>
<li class="file-stats">
<a href="#b5bb1b007d2520b49ccd10acef65bde92d63114e">
src/man/po/tg.po
</a>
</li>
<li class="file-stats">
<a href="#ea51d4c8341a5c277996b86eaf6ec79414e067a6">
src/man/po/uk.po
</a>
</li>
<li class="file-stats">
<a href="#f071078a9da76bc6ab756e2c2ce9c65575a26f1a">
src/man/po/zh_CN.po
</a>
</li>
<li class="file-stats">
<a href="#f7921cd40b2dcadf94ef0c2ba0dca860eed350ba">
src/man/sss-certmap.5.xml
</a>
</li>
<li class="file-stats">
<a href="#b254640277cb6fb002bebc29ef8542b13b30d17d">
src/man/sssd-ad.5.xml
</a>
</li>
<li class="file-stats">
<a href="#2adc864b4dd4752d81a247135f57a9071deb4046">
src/man/sssd-idp.5.xml
</a>
</li>
<li class="file-stats">
<a href="#bc340167227cf42864a2a111dd9f3db1e0ec3785">
src/man/sssd-ifp.5.xml
</a>
</li>
<li class="file-stats">
<a href="#ef2a003034640c1d50b1ae05d14ade71c2d94346">
src/man/sssd-ipa.5.xml
</a>
</li>
<li class="file-stats">
<a href="#0873c1d45b1613a743d5cb03497e7faee450a25d">
src/man/sssd-kcm.8.xml
</a>
</li>
<li class="file-stats">
<a href="#547f48072c7e800d43bd89a048d949902efa8f17">
src/man/sssd-ldap-attributes.5.xml
</a>
</li>
<li class="file-stats">
<a href="#c6af0382d2350424d0d4e2498cb1c639342392e2">
src/man/sssd-ldap.5.xml
</a>
</li>
<li class="file-stats">
<a href="#626322c16d5b424d9999f3fa7a267744cb65d4a5">
src/man/sssd.conf.5.xml
</a>
</li>
<li class="file-stats">
<a href="#1397c97561904cbc9e5bcca697e9ce3cef1ed2bf">
src/monitor/monitor.c
</a>
</li>
<li class="file-stats">
<a href="#f50d70cc4929c96845e87fa110faef615071ef48">
<span class="new-file">
+
src/monitor/monitor_services.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#4edb565d96444ef52df06ca63d25bbb4de1e6571">
<span class="new-file">
+
src/monitor/monitor_services.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#6ab20b02df813e328ed7b95629460efc5d4dbe0b">
src/oidc_child/oidc_child.c
</a>
</li>
<li class="file-stats">
<a href="#4991418753e1ee50e03dfe7f8d5f52bcdef2e4aa">
src/oidc_child/oidc_child_curl.c
</a>
</li>
<li class="file-stats">
<a href="#528db958897fe0a80822662fde8df19331c57d26">
src/p11_child/p11_child_common.c
</a>
</li>
<li class="file-stats">
<a href="#dd3bd903b743c7cf118465a4b7373b06f652690c">
src/p11_child/p11_child_openssl.c
</a>
</li>
<li class="file-stats">
<a href="#5eb81c88743789d04b87e6665e387f7e487e185a">
src/passkey_child/passkey_child.c
</a>
</li>
<li class="file-stats">
<a href="#1974b4ecfa7278a6a48be266d1da9cf3664628b9">
src/passkey_child/passkey_child_common.c
</a>
</li>
<li class="file-stats">
<a href="#9e4f7254f8fad9d2bbc5760e33a3a5ee6b76f9fa">
src/passkey_child/passkey_child_credentials.c
</a>
</li>
<li class="file-stats">
<a href="#c77e1b74ff214c15682f3a3c79525c5c708e29b5">
src/providers/ad/ad_common.c
</a>
</li>
<li class="file-stats">
<a href="#0443b792d6a313cef630a4edef240cfe2f86a091">
src/providers/ad/ad_common.h
</a>
</li>
<li class="file-stats">
<a href="#62ae04088cf072361057020015f69366276aced1">
src/providers/ad/ad_dyndns.c
</a>
</li>
<li class="file-stats">
<a href="#44bb941c322c62d06544f7896cd9dd62481039aa">
src/providers/ad/ad_gpo.c
</a>
</li>
<li class="file-stats">
<a href="#731b1b746b539fdd171ef2b8a8820210fe522d2b">
src/providers/ad/ad_gpo_child.c
</a>
</li>
<li class="file-stats">
<a href="#355133f160040a075ceb42e271a56fc20d7a87dd">
src/providers/ad/ad_id.c
</a>
</li>
<li class="file-stats">
<a href="#3458a7ca98209bc7898ccd2cfc7601f8407d8760">
src/providers/ad/ad_id.h
</a>
</li>
<li class="file-stats">
<a href="#eb2138dad7b7bd32bd459f80437e8d5037e2501d">
src/providers/ad/ad_init.c
</a>
</li>
<li class="file-stats">
<a href="#09738da4c56b67cab256ed8fb1ff8dac0fe1a4d5">
src/providers/ad/ad_machine_pw_renewal.c
</a>
</li>
<li class="file-stats">
<a href="#980671763f2ac5f9c3efa481530e86082a2d995b">
src/providers/ad/ad_opts.c
</a>
</li>
<li class="file-stats">
<a href="#06ed918fb6fb127f81b5a23167130adad18d7e58">
src/providers/ad/ad_pac_common.c
</a>
</li>
<li class="file-stats">
<a href="#b776212f5dad9690254fbd6710fc976e2f97fe3a">
src/providers/ad/ad_subdomains.c
</a>
</li>
<li class="file-stats">
<a href="#c413c5cbb722aa711df3a7e912db6c6076e8d79a">
src/providers/backend.h
</a>
</li>
<li class="file-stats">
<a href="#447b78c5d3803eb98437f4c550d733c71195eaa6">
src/providers/be_dyndns.c
</a>
</li>
<li class="file-stats">
<a href="#ad5dc90ff96c6e21b1c07c463989526261305bfc">
src/providers/be_dyndns.h
</a>
</li>
<li class="file-stats">
<a href="#0c5cfeb3e0cd301834eb2043d9b1169a5d5dc419">
src/providers/data_provider/dp_targets.c
</a>
</li>
<li class="file-stats">
<a href="#0c8340b7266c85f01dc29db116715e7189956f21">
src/providers/data_provider_be.c
</a>
</li>
<li class="file-stats">
<a href="#81a8fb910a779a0737df3d877999aacb7de12202">
src/providers/data_provider_opts.c
</a>
</li>
<li class="file-stats">
<a href="#1df4422a5dc3cbe8e4e210688b710a84d92b5cfa">
src/providers/idp/idp_auth.c
</a>
</li>
<li class="file-stats">
<a href="#80325d68e8f2a9f71e33f2bb6edc335b4a940e0e">
src/providers/idp/idp_id.c
</a>
</li>
<li class="file-stats">
<a href="#5b5fe501bb22867c14acb0c56e60112abef3ad9d">
src/providers/idp/idp_init.c
</a>
</li>
<li class="file-stats">
<a href="#e48af9954838df68fcc4c92f52874c9b30824fcc">
src/providers/idp/idp_opts.c
</a>
</li>
<li class="file-stats">
<a href="#a5ddecdf17cd6adeffe7c2135ee59f51f585fcac">
src/providers/idp/oidc_child_handler.c
</a>
</li>
<li class="file-stats">
<a href="#fe3d6a71079d8987765b46cb3aef272c7c842941">
src/providers/ipa/ipa_autofs.c
</a>
</li>
<li class="file-stats">
<a href="#b0bd846f4f6cdf5cd4e8291c307a6d23a1232f56">
src/providers/ipa/ipa_common.c
</a>
</li>
<li class="file-stats">
<a href="#cb53adb49292e4c28625d48682b7dec6f1679b90">
src/providers/ipa/ipa_common.h
</a>
</li>
<li class="file-stats">
<a href="#723966f8ea3e573952dd491201842a178d52cebf">
src/providers/ipa/ipa_dyndns.c
</a>
</li>
<li class="file-stats">
<a href="#f2557d5ba84228427a7ef635cb2aecea1a16d6f6">
src/providers/ipa/ipa_hosts.c
</a>
</li>
<li class="file-stats">
<a href="#bf1e9708ed6620d6545c51f85170b70ef672d967">
src/providers/ipa/ipa_id.c
</a>
</li>
<li class="file-stats">
<a href="#3df14dea467e2d73553329242c3e91678e620836">
src/providers/ipa/ipa_init.c
</a>
</li>
<li class="file-stats">
<a href="#8b131ba0d1451cd1a5e3c7511c96f777092226e6">
src/providers/ipa/ipa_opts.c
</a>
</li>
<li class="file-stats">
<a href="#877462785ba3a1495e5913e085e1d37e703c42ab">
src/providers/ipa/ipa_s2n_exop.c
</a>
</li>
<li class="file-stats">
<a href="#e4d60520e1a7f75084402f4abd5717f8949e23b6">
src/providers/ipa/ipa_selinux.c
</a>
</li>
<li class="file-stats">
<a href="#a705aad6d0ad9c8e44b311045095c0ac6be97347">
src/providers/ipa/ipa_session.c
</a>
</li>
<li class="file-stats">
<a href="#92ce5835f3e741a77d16076e28771994fd67c1b0">
src/providers/ipa/ipa_subdomains.c
</a>
</li>
<li class="file-stats">
<a href="#9756be57d97e167bc3ee0dd45d55471022f76dca">
src/providers/ipa/ipa_subdomains.h
</a>
</li>
<li class="file-stats">
<a href="#646ac89e75249d0ddc689e30943e276204e5ef22">
src/providers/ipa/ipa_subdomains_ext_groups.c
</a>
</li>
<li class="file-stats">
<a href="#c85ae2a4e061a15f171c9f5c8f1c86cd4e8ad5ab">
src/providers/ipa/ipa_subdomains_id.c
</a>
</li>
<li class="file-stats">
<a href="#0a7fbd261bca50ed20f2acf3d3a6de649fb6a1aa">
<span class="deleted-file">
−
src/providers/ipa/ipa_subdomains_passkey.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#44d4ff1595eb58a0a4e9a12f3b4dc1b171a505ae">
src/providers/ipa/ipa_subdomains_server.c
</a>
</li>
<li class="file-stats">
<a href="#847449dcf3a06f51111e53168dabaf3ff8507338">
src/providers/ipa/ipa_views.c
</a>
</li>
<li class="file-stats">
<a href="#110a3b8b26d5be372d6f0257270e701d0d95455f">
src/providers/ipa/selinux_child.c
</a>
</li>
<li class="file-stats">
<a href="#22b707ea44a5a6fceea501064f4f24ae956ec67b">
src/providers/krb5/krb5_auth.c
</a>
</li>
<li class="file-stats">
<a href="#33021559014d698091a80a167efb33cebffb3966">
src/providers/krb5/krb5_auth.h
</a>
</li>
<li class="file-stats">
<a href="#92d799bce681565d78d8c65e2fbdda72ea03cde4">
src/providers/krb5/krb5_ccache.c
</a>
</li>
<li class="file-stats">
<a href="#18715998237788bbf8742835901f87e35c32d072">
src/providers/krb5/krb5_ccache.h
</a>
</li>
<li class="file-stats">
<a href="#430c660511b41fd57eb9449306b57a6cdb16f7ec">
src/providers/krb5/krb5_child.c
</a>
</li>
<li class="file-stats">
<a href="#f61b0bf9f99c3c66b199277113839f6887724f82">
src/providers/krb5/krb5_child_handler.c
</a>
</li>
<li class="file-stats">
<a href="#ad2589cd23cc049d3daa7fcc13f39301d2df9907">
src/providers/krb5/krb5_delayed_online_authentication.c
</a>
</li>
<li class="file-stats">
<a href="#c831712cb27a9f0dd3ccb3124a5770ca5e2b10fe">
src/providers/krb5/krb5_init.c
</a>
</li>
<li class="file-stats">
<a href="#adf410ab7fa21f1dd9b5c5add7fc9dc3e8934a79">
src/providers/ldap/ldap_auth.c
</a>
</li>
<li class="file-stats">
<a href="#3265c0c77698fb3d80a0f91fb30cc76a2bb11d13">
src/providers/ldap/ldap_child.c
</a>
</li>
<li class="file-stats">
<a href="#2f06051c522af67daf91f38feadf69921c711690">
src/providers/ldap/ldap_common.h
</a>
</li>
<li class="file-stats">
<a href="#603bee0a7a8ec85662a6abd070e115cbaaa8f217">
src/providers/ldap/ldap_id.c
</a>
</li>
<li class="file-stats">
<a href="#6c794214dc259c2c8801efbfd3463365f8472880">
src/providers/ldap/ldap_id_subid.c
</a>
</li>
<li class="file-stats">
<a href="#a2dd5c43ec7a02d3ccc754edf19f107d54c37a26">
src/providers/ldap/ldap_init.c
</a>
</li>
<li class="file-stats">
<a href="#5b141dbd96d2b278ac600539fceb99b6a524a9ad">
src/providers/ldap/ldap_options.c
</a>
</li>
<li class="file-stats">
<a href="#029972393264ad914a89f7e246c61f86465f248f">
src/providers/ldap/ldap_opts.c
</a>
</li>
<li class="file-stats">
<a href="#c0ccc4b0c897dd256323d092e13e5f0d3468a284">
src/providers/ldap/ldap_opts.h
</a>
</li>
<li class="file-stats">
<a href="#a4eaa60a643bf66ea1508a712bc9bfba04575ebf">
src/providers/ldap/sdap.c
</a>
</li>
<li class="file-stats">
<a href="#a515b227fd0b9b56cb96257898c923760995c8d2">
src/providers/ldap/sdap.h
</a>
</li>
<li class="file-stats">
<a href="#eaab9805775b2e4c8908156a85e9fadd64953bb6">
src/providers/ldap/sdap_ad_groups.c
</a>
</li>
<li class="file-stats">
<a href="#3dca029957804f388b5586ecd15e2befa972dab0">
src/providers/ldap/sdap_async.c
</a>
</li>
<li class="file-stats">
<a href="#66848bc4e05a3a7c2cb4b96f4074287bda4044e9">
src/providers/ldap/sdap_async_groups.c
</a>
</li>
<li class="file-stats">
<a href="#9a6a2d1f5f892682b839a7a77e509962a5e6fe41">
src/providers/ldap/sdap_async_initgroups.c
</a>
</li>
<li class="file-stats">
<a href="#5b4703c8096057301ffeea59fd3cd1fa5f0c073e">
src/providers/ldap/sdap_async_initgroups_ad.c
</a>
</li>
<li class="file-stats">
<a href="#dc16f7e93d1f63a04fe54c6eab43aaec956cdcc6">
src/providers/ldap/sdap_async_nested_groups.c
</a>
</li>
<li class="file-stats">
<a href="#7424d935a0b9523a6bfcfb68f356cd52c52b9d4c">
src/providers/ldap/sdap_autofs.h
</a>
</li>
<li class="file-stats">
<a href="#39c6b60ae1541a5541f774044eda95e634aa13e7">
src/providers/ldap/sdap_child_helpers.c
</a>
</li>
<li class="file-stats">
<a href="#bd86ea849a52ccc81d8eb00bd30dbf9990da61ba">
src/providers/ldap/sdap_dyndns.c
</a>
</li>
<li class="file-stats">
<a href="#a66f3403a9ca68d7e1d30349f589496b7ef40eda">
src/providers/ldap/sdap_dyndns.h
</a>
</li>
<li class="file-stats">
<a href="#57d580e27b70c56082152954840d32b28a7acd7a">
src/providers/ldap/sdap_range.c
</a>
</li>
<li class="file-stats">
<a href="#60fb93274d68083c7ce2b47848889cfb7913822a">
src/providers/ldap/sdap_utils.c
</a>
</li>
<li class="file-stats">
<a href="#a19368d8ea1ac25a78e7f8f7b229225f3e24c45f">
src/providers/proxy/proxy.h
</a>
</li>
<li class="file-stats">
<a href="#a417bd183a48eae92f25cfae8c44c9761252053b">
src/providers/proxy/proxy_auth.c
</a>
</li>
<li class="file-stats">
<a href="#ec75351e1824dca75486a23cdccfb624b544942a">
src/providers/proxy/proxy_child.c
</a>
</li>
<li class="file-stats">
<a href="#c2a965adff39478c65d892af19347dba10f52d01">
src/providers/simple/simple_access_check.c
</a>
</li>
<li class="file-stats">
<a href="#9ad65432b669748b7fbf6be27fc92b066b128101">
src/python/pysss.c
</a>
</li>
<li class="file-stats">
<a href="#c4f0dc6ea524f4c92155c3038d6a6eab57a735ae">
src/responder/autofs/autofssrv.c
</a>
</li>
<li class="file-stats">
<a href="#71caf581941f69201c2a094427add2115b0cfcbe">
src/responder/common/cache_req/cache_req.c
</a>
</li>
<li class="file-stats">
<a href="#ff717e33dbc942d8f264a81f5870ba8c050b8ea0">
src/responder/common/cache_req/plugins/cache_req_user_by_upn.c
</a>
</li>
<li class="file-stats">
<a href="#eb39db0428638e6c22d38215031a1330a9433e24">
src/responder/ifp/ifp_users.c
</a>
</li>
<li class="file-stats">
<a href="#010616b0a956e8725703f7ea9ed2e79bec62598c">
src/responder/ifp/ifpsrv.c
</a>
</li>
<li class="file-stats">
<a href="#24678e38d0021cff89f55223814647bc0cea7f6d">
src/responder/kcm/kcm.c
</a>
</li>
<li class="file-stats">
<a href="#ce9fb8409c5cc83446dfade8054294c4d6567c50">
src/responder/kcm/kcmsrv_ccache.c
</a>
</li>
<li class="file-stats">
<a href="#45866d1c2967418821e395426c2b3ff029ff484f">
src/responder/kcm/kcmsrv_ccache.h
</a>
</li>
<li class="file-stats">
<a href="#5f9eb7d5b430986b1301f4c615341270fc4e7ff0">
src/responder/kcm/kcmsrv_ccache_secdb.c
</a>
</li>
<li class="file-stats">
<a href="#d1b7f350f45bd812153028102d033bcae40570ae">
src/responder/nss/nsssrv.c
</a>
</li>
<li class="file-stats">
<a href="#c86b2e53bdcabeba9401ef34a9dddfa62020bebf">
src/responder/nss/nsssrv_mmap_cache.c
</a>
</li>
<li class="file-stats">
<a href="#43555f4970d43993d3d0b7a8cba8c26166ce3b7a">
src/responder/pac/pacsrv.c
</a>
</li>
<li class="file-stats">
<a href="#853909d3582fbf8c17dc76831cae31eab19d606b">
src/responder/pam/pam_helpers.c
</a>
</li>
<li class="file-stats">
<a href="#5ccff53e0f74b403e2f1603a6f23bae124c67e44">
src/responder/pam/pam_prompting_config.c
</a>
</li>
<li class="file-stats">
<a href="#996adc41dcca06b96179e99ed69a43f05db26a20">
src/responder/pam/pamsrv.c
</a>
</li>
<li class="file-stats">
<a href="#eff5c8ffef23773d338cb9bd31da680e849f1179">
src/responder/pam/pamsrv.h
</a>
</li>
<li class="file-stats">
<a href="#518b9ae773ac3e405c9bfc68e949c33aff4d144d">
src/responder/pam/pamsrv_cmd.c
</a>
</li>
<li class="file-stats">
<a href="#60c2b528a40320dfcb9a774c8fff7cf9aa1a49fc">
<span class="new-file">
+
src/responder/pam/pamsrv_json.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#fe712befaa2715328359f83c849e6e3eeab984d3">
<span class="new-file">
+
src/responder/pam/pamsrv_json.h
</span>
</a>
</li>
<li class="file-stats">
<a href="#43f517ac5eb4791e2adba7a58eee9c13e79ab681">
src/responder/pam/pamsrv_p11.c
</a>
</li>
<li class="file-stats">
<a href="#a1110a0c741e2dde98cae14e3cc43c0833adda37">
src/responder/pam/pamsrv_passkey.c
</a>
</li>
<li class="file-stats">
<a href="#3fe7924e7e5e320e88bc2a37571f90b8001c8dff">
src/responder/pam/pamsrv_passkey.h
</a>
</li>
<li class="file-stats">
<a href="#912f1d68066c9351a6d0116248f507215b2ad954">
src/responder/ssh/ssh_cert_to_ssh_key.c
</a>
</li>
<li class="file-stats">
<a href="#c732371a7f537895e9d08657006ff03815af7bc0">
src/responder/ssh/sshsrv.c
</a>
</li>
<li class="file-stats">
<a href="#c78a2bfbe51a5e5b16ccc211e0aa9d0b5c8ec953">
src/responder/sudo/sudosrv.c
</a>
</li>
<li class="file-stats">
<a href="#1b397bc8b6e222a06a369ffef7b1ca05f07b3fa7">
src/sbus/request/sbus_request_hash.c
</a>
</li>
<li class="file-stats">
<a href="#d68767289a88b700b9ea6a30565f1d9735c9adec">
src/sbus/sbus_private.h
</a>
</li>
<li class="file-stats">
<a href="#febf2da3acb9f67c49c910a357cd41ef8b57d674">
src/shared/cred.h
</a>
</li>
<li class="file-stats">
<a href="#f6317fd95cb9fcba4b7b02b2934762046e1285f1">
src/shared/io.h
</a>
</li>
<li class="file-stats">
<a href="#ab5794642a9fc112c83653fcfb2dd59c497770c6">
src/sss_client/autofs/sss_autofs.c
</a>
</li>
<li class="file-stats">
<a href="#6e6329cd7510eb7e59420be75d6b9e9819359194">
src/sss_client/autofs/sss_autofs.exports
</a>
</li>
<li class="file-stats">
<a href="#cf922430f69ac3966e55aad1ba25bad482fafbc5">
src/sss_client/autofs/sss_autofs_private.h
</a>
</li>
<li class="file-stats">
<a href="#57dd19a221a91dfe66d3af5291bc7ba15ce32e15">
src/sss_client/nss_group.c
</a>
</li>
<li class="file-stats">
<a href="#f742466721cbab160e8576762d4b30999c241445">
src/sss_client/nss_hosts.c
</a>
</li>
<li class="file-stats">
<a href="#6c31f1e042fa4a552b4201acdd7fab2a4b01fa47">
src/sss_client/nss_ipnetworks.c
</a>
</li>
<li class="file-stats">
<a href="#4bb984c2558081b0ec8cfb55271d9bb4b0ded17d">
src/sss_client/nss_mc.h
</a>
</li>
<li class="file-stats">
<a href="#bd4ef91f47931826e48941580917cb9e22fd045f">
src/sss_client/nss_mc_common.c
</a>
</li>
<li class="file-stats">
<a href="#db8296179bbe4942a2370decec49e9e6cacf569f">
src/sss_client/nss_mc_group.c
</a>
</li>
<li class="file-stats">
<a href="#88e2773248a047f8375d89030d32ac8f6ddfa95b">
src/sss_client/nss_mc_passwd.c
</a>
</li>
<li class="file-stats">
<a href="#e373031cf42bd4df4a0a03391bad2cc1e80816db">
src/sss_client/nss_passwd.c
</a>
</li>
<li class="file-stats">
<a href="#fde31157c6a9fbecfeeffbb6e12592f0ed25d06e">
src/sss_client/nss_services.c
</a>
</li>
<li class="file-stats">
<a href="#521d105286561d9fe58d7343fbfeaf77c7806b62">
src/sss_client/pam_message.c
</a>
</li>
<li class="file-stats">
<a href="#88af649d5c23c6bb62c94008b17f0a5e18564ffa">
src/sss_client/pam_message.h
</a>
</li>
<li class="file-stats">
<a href="#ad720a2283eca311d50c26afe882737dccd4d255">
src/sss_client/pam_sss.c
</a>
</li>
<li class="file-stats">
<a href="#723e0bd732da14f51b8695a46d10c51b8aa465a2">
src/sss_client/pam_sss_prompt_config.c
</a>
</li>
<li class="file-stats">
<a href="#d1e6a840bac6311e68c734760827990eabeb8a33">
src/sss_client/sss_cli.h
</a>
</li>
<li class="file-stats">
<a href="#d8827975e56abc2b886416caab63ade98f1c10dd">
<span class="deleted-file">
−
src/sss_client/sss_pac_responder_client.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#de4a46012fe3130705bd7f3a63984e4da3e7f057">
src/sss_client/sss_sudo.exports
</a>
</li>
<li class="file-stats">
<a href="#a8e6e23b4d54f5fde095da3cb9980b1285537f4f">
src/sysv/systemd/sssd-kcm.service.in
</a>
</li>
<li class="file-stats">
<a href="#68f4c9f0a3af28dc801c360a4fcd49ea5b320f64">
src/sysv/systemd/sssd.service.in
</a>
</li>
<li class="file-stats">
<a href="#2037f192455949cdeeacf3899002ef7e57401daf">
src/tests/auth-tests.c
</a>
</li>
<li class="file-stats">
<a href="#201124c91e2e5cd0d34cb9c6f4ae82803b3e03c9">
src/tests/check_file-tests.c
</a>
</li>
<li class="file-stats">
<a href="#bf02861b8886d15cd856652cac6761a4457ec80a">
src/tests/cmocka/dummy_child.c
</a>
</li>
<li class="file-stats">
<a href="#cec4b45da498c28297adea940f962446c440e4ff">
src/tests/cmocka/test_authtok.c
</a>
</li>
<li class="file-stats">
<a href="#e5b159ee64b65933698d142acf544e8582c096b4">
src/tests/cmocka/test_child_common.c
</a>
</li>
<li class="file-stats">
<a href="#70733650e4ebeedf37a2b373aea4a4a42052477f">
src/tests/cmocka/test_dyndns.c
</a>
</li>
<li class="file-stats">
<a href="#88ccc905e3251876e0ce1c354ccb660e01d622cd">
src/tests/cmocka/test_fqnames.c
</a>
</li>
<li class="file-stats">
<a href="#2a6fd402711a696e80feeffd8b251d5c17843d58">
src/tests/cmocka/test_iobuf.c
</a>
</li>
<li class="file-stats">
<a href="#d17ddbd5db4e69ac237e1f79652a3a3e04975162">
src/tests/cmocka/test_ipa_subdomains_server.c
</a>
</li>
<li class="file-stats">
<a href="#26e950f32b76b6f1526b0b50c6faa1f8b042b2a8">
src/tests/cmocka/test_kcm_marshalling.c
</a>
</li>
<li class="file-stats">
<a href="#2f2e3e8114c3d8f15230a9d18431b3a0437ebaac">
src/tests/cmocka/test_kcm_queue.c
</a>
</li>
<li class="file-stats">
<a href="#d04e18b038e2cfefaedc6b7b4a94ac211766a1c3">
src/tests/cmocka/test_krb5_common.c
</a>
</li>
<li class="file-stats">
<a href="#10da9a4193e07154e3a12bacaea65591d9685199">
src/tests/cmocka/test_negcache.c
</a>
</li>
<li class="file-stats">
<a href="#26353418b6e121dc0bd3d198a7f343d60d4e3542">
src/tests/cmocka/test_negcache_2.c
</a>
</li>
<li class="file-stats">
<a href="#519233af081a2fd7d3b8b1a5882feea26a0bbd5a">
src/tests/cmocka/test_nss_srv.c
</a>
</li>
<li class="file-stats">
<a href="#a02873f4a40141f3cb8ce104d5275c115e6da6b3">
src/tests/cmocka/test_pam_srv.c
</a>
</li>
<li class="file-stats">
<a href="#bbb5c848d5d9b6cb08512582f0ae76b8bbf2bfac">
<span class="new-file">
+
src/tests/cmocka/test_pamsrv_json.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#5fbf858a55dba2b4c28c6038e71a363dc6bc2767">
src/tests/cmocka/test_prompt_config.c
</a>
</li>
<li class="file-stats">
<a href="#aee9525aec0d254979e18332b65cd4869f15944c">
src/tests/cmocka/test_responder_cache_req.c
</a>
</li>
<li class="file-stats">
<a href="#c5f18c12848f40f620b3c1dc8b0e29ba7584b1c5">
<span class="new-file">
+
src/tests/cmocka/test_sss_pam_data.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#9a7fa1b766f68d538345bc2c7ffb90591af7b956">
src/tests/cmocka/test_string_utils.c
</a>
</li>
<li class="file-stats">
<a href="#e90d95beced1889b2fd0e00ed66c9a0382f8522f">
src/tests/cmocka/test_sysdb_subdomains.c
</a>
</li>
<li class="file-stats">
<a href="#fa13a4ff7063dea78a41d3f2d323f6a11abca3be">
src/tests/cmocka/test_sysdb_ts_cache.c
</a>
</li>
<li class="file-stats">
<a href="#52b29c0098d38ea4b939f89ffea54b4ba4702097">
src/tests/cmocka/test_sysdb_views.c
</a>
</li>
<li class="file-stats">
<a href="#7453e3e22faa4a630ac1de1bd2a9e5ffd9749587">
src/tests/cmocka/test_utils.c
</a>
</li>
<li class="file-stats">
<a href="#0d05c7dd4d7f622a43d74600bc235f8f2c9d5650">
src/tests/cmocka/test_utils.h
</a>
</li>
<li class="file-stats">
<a href="#d00ed456e436fae07e900b21aaf6a013ac78464e">
src/tests/cwrap/test_server.c
</a>
</li>
<li class="file-stats">
<a href="#ee33107f8a45bb780f45133aeb450bfd701feb30">
src/tests/files-tests.c
</a>
</li>
<li class="file-stats">
<a href="#c86699bc4e1931938b7c3e8f79a746d166b77ed3">
src/tests/intg/Makefile.am
</a>
</li>
<li class="file-stats">
<a href="#7fbea074906048fa0b6181296f1a4f7b71b54a27">
<span class="deleted-file">
−
src/tests/intg/ent_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#71c55bfeb822e6a7177261702f28b491fb4285bb">
<span class="deleted-file">
−
src/tests/intg/ldap_local_override_test.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#780d6c55d60c74bbe065f2b55a93ce240917b97a">
<span class="deleted-file">
−
src/tests/intg/test_enumeration.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#82e7806826e9724411623e0e560b56ee116cac90">
<span class="deleted-file">
−
src/tests/intg/test_infopipe.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#626fe740f51f3fe33d742a7cc66449055f2f35b7">
<span class="deleted-file">
−
src/tests/intg/test_ldap.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#b910e1d61c6c792ab3509404329a89d666e5f62f">
<span class="deleted-file">
−
src/tests/intg/test_pac_responder.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#7a3e934ca62062e1aad56528fd730545d41dd315">
<span class="deleted-file">
−
src/tests/intg/test_pysss_nss_idmap.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#214af2bbb55792ee815669b154b056239baea1c8">
<span class="deleted-file">
−
src/tests/intg/test_resolver.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#f9cf41b832b322c14ed9f2740c399bb6f10825f2">
<span class="deleted-file">
−
src/tests/intg/test_session_recording.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#296f6363d35fda50025d4338a8809c9d35d96009">
<span class="deleted-file">
−
src/tests/intg/test_sssctl.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#5921ec28d991c7ba155b378624691cc9fa2ae5a6">
src/tests/krb5_utils-tests.c
</a>
</li>
<li class="file-stats">
<a href="#7fa7e8eda01285b365660dc1b293293fefa2b4d2">
src/tests/multihost/ad/conftest.py
</a>
</li>
<li class="file-stats">
<a href="#fa844b1390f923281226a20ef33dbbeb84c88372">
src/tests/multihost/ad/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#a819de48656320982f9c5def70317d171ccb9967">
src/tests/multihost/ad/readme.rst
</a>
</li>
<li class="file-stats">
<a href="#0edbd752742d05bfda34388f7b49063af3c847c9">
src/tests/multihost/ad/test_access_control.py
</a>
</li>
<li class="file-stats">
<a href="#9c601fb998236986a0665b121e2cbe50ad8199a0">
src/tests/multihost/ad/test_adparameters_ported.py
</a>
</li>
<li class="file-stats">
<a href="#af0de3ba70d9fe54a6eaf6d16a4e660f799b25d9">
src/tests/multihost/ad/test_hostkeytabrotation.py
</a>
</li>
<li class="file-stats">
<a href="#57802311f3f78dfbefc126cd4d5471411d0e87f4">
<span class="deleted-file">
−
src/tests/multihost/ad/test_idmap.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#1f7dfae25f74d22f26e163b4febefd0f61b5a333">
<span class="deleted-file">
−
src/tests/multihost/ad/test_samba_data.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#d2e58f5dd4c5bda49a64a13d34e6ebc580f77a09">
src/tests/multihost/admultidomain/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#5420b0561b0ffe300575f426fd93d598610b7487">
src/tests/multihost/adsites/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#21353363a4ffece9a936d0d87dbbe3d2a793aa66">
src/tests/multihost/alltests/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#37fe79cdda1aa4b159b618e127274c1013cdc221">
src/tests/multihost/alltests/test_all_misc.py
</a>
</li>
<li class="file-stats">
<a href="#8f2259748f327b46c0082ef020953e664d202b52">
src/tests/multihost/alltests/test_kcm.py
</a>
</li>
<li class="file-stats">
<a href="#9ce2ec065e08dc0d147b6007d6e4e36c399845d2">
<span class="deleted-file">
−
src/tests/multihost/alltests/test_misc_proxy.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#006316014faec5a3a6276568d45ab1802ac7f352">
src/tests/multihost/alltests/test_multidomain.py
</a>
</li>
<li class="file-stats">
<a href="#b8a251f41783024a892d489fd36c4d2c420cae26">
<span class="deleted-file">
−
src/tests/multihost/alltests/test_proxy_provider_krb_auth.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#3dc0d51f87d6bf70ec05693fbc9709d5466239a2">
<span class="deleted-file">
−
src/tests/multihost/alltests/test_proxy_rfc2307.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#fc7366c384d0822799ca7cea4e0494cac23354df">
<span class="deleted-file">
−
src/tests/multihost/alltests/test_proxy_rfc2307bis.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#e1d4ccd656a68b6d6386e3957c85f223434da9ba">
src/tests/multihost/docs/Install.rst
</a>
</li>
<li class="file-stats">
<a href="#be8ef9c2770c52b9ec1d8ef8ec388f95ed20dd53">
src/tests/multihost/docs/running.rst
</a>
</li>
<li class="file-stats">
<a href="#8dc7087931e2a0b69fcd49636ab9c02bf1aad8f1">
src/tests/multihost/ipa/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#62e26f549e830771bfbf4d79d3d66bde39077053">
src/tests/multihost/ipa/test_adtrust.py
</a>
</li>
<li class="file-stats">
<a href="#f5c1792041b6983236f48a9d8fc61bb8c7354b8e">
src/tests/multihost/ipa/test_misc.py
</a>
</li>
<li class="file-stats">
<a href="#a52ca8c623d5bc8e8f9ef70fd470be9b99510e21">
src/tests/multihost/sssd/testlib/common/custom_log.py
</a>
</li>
<li class="file-stats">
<a href="#28da2acc8c5e9f1ddab4f525a3eafc8bd2da749a">
src/tests/multihost/sssd/testlib/common/samba.py
</a>
</li>
<li class="file-stats">
<a href="#3a14a712e9b4d3dc6fdeee7e7dd6e06c48143081">
src/tests/multihost/sssd/testlib/common/utils.py
</a>
</li>
<li class="file-stats">
<a href="#127075727834aa6159eb62a70bfaa1dd20a55d49">
src/tests/polarion.yaml
</a>
</li>
<li class="file-stats">
<a href="#54c7bf19a5c9970445a8ba66be3848ef5da093ed">
src/tests/refcount-tests.c
</a>
</li>
<li class="file-stats">
<a href="#9af20869eaa91b22358573a1e3f20e6edcf8ceb1">
src/tests/resolv-tests.c
</a>
</li>
<li class="file-stats">
<a href="#d45f9b7a06629f554d88f814e26c098216ca8152">
src/tests/responder_socket_access-tests.c
</a>
</li>
<li class="file-stats">
<a href="#5a8820f7815312e04075afac05304247776eead1">
src/tests/strtonum-tests.c
</a>
</li>
<li class="file-stats">
<a href="#8bff5a4151cbdeb61119d4471d6b3f44e105e265">
src/tests/sysdb-tests.c
</a>
</li>
<li class="file-stats">
<a href="#b65b96d124c953812452bd35769ef2ed6f28bb14">
src/tests/sysdb_ssh-tests.c
</a>
</li>
<li class="file-stats">
<a href="#c602313d34dbb43faae0f9614f8db56b0bda8b30">
src/tests/system/mhc.yaml
</a>
</li>
<li class="file-stats">
<a href="#9cc19873e93c3894bead13366703c12aba98a942">
src/tests/system/pytest.ini
</a>
</li>
<li class="file-stats">
<a href="#e41660196d51ccbe2c8c3c65170181fc0d9e2b0f">
src/tests/system/tests/test_access_control_simple.py
</a>
</li>
<li class="file-stats">
<a href="#5f64bacfb08be99f4698ade425dab3755d0ac914">
src/tests/system/tests/test_authentication.py
</a>
</li>
<li class="file-stats">
<a href="#5e41c10984d4f396af5296c3e31f2a0d9d34e65b">
src/tests/system/tests/test_failover.py
</a>
</li>
<li class="file-stats">
<a href="#4754e114f9d4e26a734d3693b2576544c93b07b1">
<span class="new-file">
+
src/tests/system/tests/test_gdm.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#8618442f80ca1aa7571af007f4d4dd5d8b415c31">
<span class="new-file">
+
src/tests/system/tests/test_gdm_passkey.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#94a37238321a42ba9218173d11841c16c4124978">
src/tests/system/tests/test_identity.py
</a>
</li>
<li class="file-stats">
<a href="#6e5906a9641eab20a308bd1215c1fe4e7998f954">
src/tests/system/tests/test_infopipe.py
</a>
</li>
<li class="file-stats">
<a href="#12870276c1e39d1b07d1c70799d3455c98b542d0">
src/tests/system/tests/test_ipa.py
</a>
</li>
<li class="file-stats">
<a href="#69cca646a1881c721e241174be5c75debb38cb66">
src/tests/system/tests/test_ipa_trusts.py
</a>
</li>
<li class="file-stats">
<a href="#6c58d7f661f40f2017026b7c2bdaa8acf5027f5c">
src/tests/system/tests/test_kcm.py
</a>
</li>
<li class="file-stats">
<a href="#d9478fcb0d4456a87e4f30464315f5fc4c04677d">
src/tests/system/tests/test_ldap.py
</a>
</li>
<li class="file-stats">
<a href="#c25628ea1ca15461a3913ff462d9b70aee571c0a">
src/tests/system/tests/test_netgroups.py
</a>
</li>
<li class="file-stats">
<a href="#acf8de4fcf1790addd1a6e17636448fd4201a266">
<span class="new-file">
+
src/tests/system/tests/test_nss.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#3002b5c6725f64891dca7c5f2597e56b4e5fcb89">
<span class="new-file">
+
src/tests/system/tests/test_pac_responder.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#3caa70a23b545a5a578234d77f842fc48e72d546">
src/tests/system/tests/test_passkey.py
</a>
</li>
<li class="file-stats">
<a href="#e03a6c3e44fbd313ed813716f834c46fb8433a44">
<span class="new-file">
+
src/tests/system/tests/test_pysss_nss_idmap.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#aa04a56609bbb593015d4615b2f12847de64eb52">
<span class="new-file">
+
src/tests/system/tests/test_smartcard.py
</span>
</a>
</li>
<li class="file-stats">
<a href="#29be1ee579d84986667699a5f5d37113cb210838">
src/tests/system/tests/test_sss_override.py
</a>
</li>
<li class="file-stats">
<a href="#b9a400bd60a106942958dc0a02344e91e49d75fc">
src/tests/system/tests/test_sssctl.py
</a>
</li>
<li class="file-stats">
<a href="#4724e6ae97b236b6fa1176e1f05bcb9203474cb6">
src/tests/system/tests/test_sudo.py
</a>
</li>
<li class="file-stats">
<a href="#1eff6cd38117e40b4675eb4c843b85a4f24b3b3b">
src/tests/util-tests.c
</a>
</li>
<li class="file-stats">
<a href="#333b5f1526b3f973892fbe85c386947e2c059131">
src/tools/sssctl/sssctl_config.c
</a>
</li>
<li class="file-stats">
<a href="#040c638489cac85d4a82267e50963f6a889d6ca7">
src/util/authtok-utils.c
</a>
</li>
<li class="file-stats">
<a href="#da7d2ebfdd58c4f578f0da624ff3fc4a9083b2da">
src/util/authtok.c
</a>
</li>
<li class="file-stats">
<a href="#0fbd2dc1e505374ba766c44a82d4dfae24422000">
src/util/authtok.h
</a>
</li>
<li class="file-stats">
<a href="#3d2d572012aacb6b533850bf9b1c56f90a60066d">
<span class="new-file">
+
src/util/child_bootstrap.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#65e80e37f832d98c8b9ee40e9c9b681b791e14b5">
src/providers/ipa/ipa_subdomains_passkey.h
→
src/util/child_bootstrap.h
</a>
</li>
<li class="file-stats">
<a href="#3b46ae779b0a9bd9fc2420c7fbeca25a585fb9f3">
src/util/child_common.h
</a>
</li>
<li class="file-stats">
<a href="#1b56bfce72420d4d5f200464dd3cf4ac1584da4d">
src/util/child_common.c
→
src/util/child_handlers.c
</a>
</li>
<li class="file-stats">
<a href="#60f3492de0864cbebf6f2af76bd2b2135696e734">
<span class="new-file">
+
src/util/child_io.c
</span>
</a>
</li>
<li class="file-stats">
<a href="#a1d4581322959312e73d73183254dce3297e880f">
src/util/debug.c
</a>
</li>
<li class="file-stats">
<a href="#e47cafa0eba1d8e82561d1d6a8f80edf30c2a16e">
src/util/debug.h
</a>
</li>
<li class="file-stats">
<a href="#77699e941a3358005f766e38d029a7d5b9a4d7c4">
src/util/domain_info_utils.c
</a>
</li>
<li class="file-stats">
<a href="#4f4eb0936e750f361e168b18f10a40a64354a5e0">
src/util/file_watch.c
</a>
</li>
<li class="file-stats">
<a href="#c2f9ace2969d5030820c40b16af9da127c0ef113">
src/util/find_uid.c
</a>
</li>
<li class="file-stats">
<a href="#f55c377bacdbe9e0411e5ace137212b689f8562c">
src/util/inotify.c
</a>
</li>
<li class="file-stats">
<a href="#eaaf7d72fa592a6f0ab13bacdb9052bf6e65a118">
src/util/murmurhash3.c
</a>
</li>
<li class="file-stats">
<a href="#e587179d6547b93a7924f76232fbee039ae8b37e">
src/util/sss_chain_id.h
</a>
</li>
<li class="file-stats">
<a href="#06bdef19eeb344a033ba0d64a8f727fa7dfbefa2">
src/util/sss_pam_data.c
</a>
</li>
<li class="file-stats">
<a href="#b4a2ff902217e10a8cf9b9a40194bf75c26d3d9f">
src/util/sss_pam_data.h
</a>
</li>
<li class="file-stats">
<a href="#35044c41eeff1984e27a19dfb5a02671f1ae762b">
src/util/sss_prctl.c
</a>
</li>
<li class="file-stats">
<a href="#f683735bbaedea263f7d6d4096eab30376f110d9">
src/util/string_utils.c
</a>
</li>
<li class="file-stats">
<a href="#f671b554c4e262622421fdf7b94a785f4f3fdc87">
src/util/strtonum.c
</a>
</li>
<li class="file-stats">
<a href="#641a45ff5a6b25264c45c963f2ca9d7e9d5c5b55">
src/util/util.c
</a>
</li>
<li class="file-stats">
<a href="#dfaa328ba65cbcfe079945a9d0fcbf665047e568">
src/util/util.h
</a>
</li>
<li class="file-stats">
<a href="#2441a742b93419b93dc26cbb5b36271a5241bbe1">
src/util/util_creds.h
</a>
</li>
<li class="file-stats">
<a href="#457c4a3ba22f5b9e4bcc0cced82e90f6bec37b42">
src/util/util_errors.c
</a>
</li>
<li class="file-stats">
<a href="#fb14cf8ce632e04f35bcacb480a8a5659b41a27b">
src/util/util_errors.h
</a>
</li>
<li class="file-stats">
<a href="#1a0c4cc6c5ad14d808ac11f9c3e1ac60550f5f58">
src/util/util_watchdog.c
</a>
</li>
<li class="file-stats">
<a href="#836d4fe4ee2163d2f04919c9dd927c460d8d4ef6">
version.m4
</a>
</li>
</ul>
<h5 style="margin-top: 10px; margin-bottom: 10px; font-size: .875rem;">
The diff was not included because it is too large.
</h5>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #626168;">
—
<br>
<a href="https://salsa.debian.org/sssd-team/sssd/-/compare/ced937c9d3818567c59f624379e61be0004edf2f...1a1cf163b78ff4768cc8bfc1e631171bc021e2fe">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://salsa.debian.org">salsa.debian.org</a>. <a href="https://salsa.debian.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://salsa.debian.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
<span style="color: transparent; font-size: 0; display: none; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0;">
Notification message regarding https://salsa.debian.org/sssd-team/sssd/-/compare/ced937c9d3818567c59f624379e61be0004edf2f...1a1cf163b78ff4768cc8bfc1e631171bc021e2fe at 1770567461
</span>
</p>
</div>
</body>
</html>