[Pkg-sssd-devel] sssd: Changes to 'ubuntu-precise'

Tue Oct 30 23:23:32 UTC 2012

New branch 'ubuntu-precise' available with the following commits:
commit e6571487df6a93bc15db050fd50c09e175b6a82a
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date:   Thu May 24 13:41:24 2012 +0300

    sssd.upstart.in: Delete an invisible control character from the pre-start script. (LP: #1003845)
    
    Conflicts:
    
    	debian/changelog
    	debian/sssd.upstart.in

commit 597fcc39870e193c1fd99902427c0a2ea4c1d85c
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date:   Wed Apr 25 10:30:24 2012 +0300

    drop use_authtok from the password stack

commit 942a733d40aff159260c276c33d5114233049e9b
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date:   Wed Oct 31 01:02:24 2012 +0200

    close a few bugs

commit e62b336d2d07301cfd228b2da0d2d80cd5d28496
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date:   Wed Oct 31 00:54:26 2012 +0200

    update the changelog

commit aa9857330a1c3142f71d7b6e2009f44e66b9a24f
Merge: 8f03434 052684f
Author: Timo Aaltonen <tjaalton at ubuntu.com>
Date:   Tue Oct 30 18:45:11 2012 +0200

    Merge branch 'upstream-precise' into ubuntu-precise

commit 052684f1ab1c8a4fcfb2c9057c33273acbaf660e
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Wed Sep 12 19:23:48 2012 +0200

    FO: Check server validity before setting status
    
    The list of resolved servers is allocated on the back end context and
    kept in the fo_service structure. However, a single request often
    resolves a server and keeps a pointer until the end of a request and
    only then gives feedback about the server based on the request result.
    
    This presents a big race condition in case the SRV resolution is used.
    When there are requests coming in in parallel, it is possible that an
    incoming request will invalidate a server until another request that
    holds a pointer to the original server is able to give a feedback.
    
    This patch simply checks if a server is in the list of servers
    maintained by a service before reading its status.
    
    https://fedorahosted.org/sssd/ticket/1364

commit b196e1e91ec04ca5af93bfd2dcfc5225f4858a54
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Sun Sep 9 08:56:13 2012 -0400

    KRB5: Return PAM_AUTH_ERR on incorrect password
    
    https://fedorahosted.org/sssd/ticket/1515

commit 24989e604037d780b6f523f1880596ee917c1468
Author: Timo Aaltonen <timo.aaltonen at canonical.com>
Date:   Tue Aug 28 16:14:22 2012 +0300

    Move SELinux processing from session to account PAM stack
    
    Stops the session stack from returning an error when SELinux is not
    used.
    
    Partial backport from commit 7016947229edcaa268a82bf69fde37e521b13233

commit d6721b3d75135cc5444b0a415a1710501630ea2a
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Mon Aug 13 15:30:39 2012 +0200

    Use PTHREAD_MUTEX_ROBUST to avoid deadlock in the client
    
    https://fedorahosted.org/sssd/ticket/1460

commit b09c19e3769f27f12dcfc41fb5713bc0d6f492d6
Author: Jan Zeleny <jzeleny at redhat.com>
Date:   Mon Jul 16 08:42:27 2012 -0400

    Fixed wrong number in shadowLastChange
    
    The attribute is supposed to contain number of days since the epoch, not
    the number of seconds.

commit d49f68fb5313a3f4db111bbf698ac437823e782c
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Tue Aug 14 14:12:18 2012 +0200

    KRB5: Only return PAM error for unreachable kpasswd when performing chpass
    
    https://fedorahosted.org/sssd/ticket/1452

commit e6709b54aae7cde6a3d6c73c756cb220a8129e2a
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Tue Aug 21 12:33:15 2012 +0200

    SYSDB: Make sysdb_attrs_get_el_int() public
    
    Also rename it to sysdb_attrs_get_el_ext()

commit 2e63c5b42935951f39c74bce5531597f83b02e3f
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Fri Aug 17 00:09:48 2012 +0200

    Process all groups from a single nesting level
    
    https://bugzilla.redhat.com/show_bug.cgi?id=846664
    
    If the first group was cached when processing the nested group membership,
    we would call tevent_req_done, effectivelly marking the whole nesting
    level as done.

commit c041c677dcc194ec0280365c9621c46f92e56f7a
Author: Stephen Gallagher <sgallagh at redhat.com>
Date:   Mon Jun 18 11:23:04 2012 -0400

    Make the client idle timeout configurable

commit ce1ce193f2d2e07cdb66d26c4912f54de4bb1d92
Author: Shantanu Goel <sgoel at trade4.test-jc.tower-research.com>
Date:   Mon Jun 18 10:54:44 2012 -0400

    Add support for terminating idle connections

commit de4ad021866964100e5d77b27b4058223e1e000f
Author: Shantanu Goel <sgoel at trade4.test-jc.tower-research.com>
Date:   Mon Jun 18 09:26:45 2012 -0400

    Do not send SIGPIPE on disconnection
    
    Note we set MSG_NOSIGNAL to avoid
    having to fiddle with signal masks
    but also do not want to die in case
    SIGPIPE gets raised and the application
    does not handle it.

commit 2494f364607af83b9599b36d5b8766e80e856ad9
Author: Shantanu Goel <sgoel at trade4.test-jc.tower-research.com>
Date:   Mon Jun 18 08:49:10 2012 -0400

    Log message if close() fails in destructor.

commit f11c6cec5ed2a651446345dc05efabe54dfb652b
Author: Shantanu Goel <sgoel at trade4.test-jc.tower-research.com>
Date:   Mon Jun 18 08:45:32 2012 -0400

    Set return errno to the value prior to calling close().

commit 9ab38674be776d96286af79f9ff3c1c99bea8ae4
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Thu May 10 13:09:05 2012 +0200

    Send the correct enumeration request
    
    https://fedorahosted.org/sssd/ticket/1329

commit d2963e8b9c48800afe965e310dba8b5652b7b15b
Author: Jan Zeleny <jzeleny at redhat.com>
Date:   Thu May 31 18:08:30 2012 -0400

    Provide "service filter" for SELinux context
    
    At this moment we will support only asterisk, designating "all
    services".
    
    https://fedorahosted.org/sssd/ticket/1360

commit 3cf3c12dd440ea3b9b7994131d713ae69e10d4a6
Author: Jakub Hrozek <jhrozek at redhat.com>
Date:   Mon Apr 2 00:17:15 2012 +0200

    Use HTML_TIMESTAMP instead of HTML_FOOTER_DESCRIPTION
    
    https://fedorahosted.org/sssd/ticket/1271

commit 9fc7c094d873bc790ba0d06a76e6abe57a38db35
Author: Jan Cholasta <jcholast at redhat.com>
Date:   Mon May 28 08:56:42 2012 -0400

    SSH: Don't abort connection in sss_ssh_knownhostsproxy when DNS records are missing
    
    https://fedorahosted.org/sssd/ticket/1356

commit 27e76dab778746f9309b1e177d44e34ae8c34f1c
Author: Jan Cholasta <jcholast at redhat.com>
Date:   Mon May 28 06:58:16 2012 -0400

    SSH: Supress error message output in sss_ssh_knownhostsproxy

commit ab57c5a6356ae38d65a6ac6bdb1cadd08fb54813
Author: Jan Cholasta <jcholast at redhat.com>
Date:   Wed May 30 09:40:13 2012 -0400

    SSH: Update sss_ssh_knownhostsproxy manual page
    
    Don't use GlobalKnownHostsFile2 in ssh_config, as it has been deprecated in
    OpenSSH 5.9.

commit e6a734341676aedf64262e2931913c7379760828
Author: Stephen Gallagher <sgallagh at redhat.com>
Date:   Wed May 30 15:04:56 2012 -0400

    Bumping version to 1.8.5