[Pkg-sssd-devel] sssd: Changes to 'refs/tags/debian/1.13.4-1'
Timo Aaltonen
tjaalton at moszumanska.debian.org
Thu Apr 14 05:07:24 UTC 2016
Tag 'debian/1.13.4-1' created by Timo Aaltonen <tjaalton at debian.org> at 2016-04-14 05:06 +0000
tagging package sssd version debian/1.13.4-1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=ZxN5
-----END PGP SIGNATURE-----
Changes since debian/1.13.3-1:
Dan Lavu (1):
PAM: Fix man for pam_account_{expired,locked}_message
David Disseldorp (1):
build: detect endianness at configure time
Jakub Hrozek (17):
Upgrading the version for the 1.13.4 release
SDAP: Make it possible to silence errors from dereference
Add a new option ldap_group_external_member
IPA: Add interface to call into IPA provider from LDAP provider
LDAP: Use the IPA provider interface to resolve external group members
FO: Don't free rc-allocated structure
tests: Reduce failover code duplication
FO: Use refcount to keep track of servers returned to callers
FO: Use tevent_req_defer_callback() when notifying callers
memberof: Don't allocate on a NULL context
tests: Add a unit test for the external groups resolution
MAN: Remove duplicate description of the pam_account_locked_message option
AD: Recognize Windows Server 2016
memberof: Fix a memory leak when removing ghost users
memberof: Don't allocate on NULL when deleting memberUids
tests: Check NULL context in sysdb-tests when removing group members
Updating translations for the 1.13.4 release
Lukas Slebodnik (33):
SPEC: Change package ownership of %{pubconfpath}/krb5.include.d
CONFIGURE: Replace obsoleted macro AC_PROG_LIBTOOL
TESTS: Fix race condition in python test
PYTHON: sss_obfuscate should work with python3
PYTHON: Fix pep8 errors in sss_obfuscate
UTIL: Backport error code ERR_ACCOUNT_LOCKED
sss_idmap-tests: Fix segmentation fault
krb5_child: Warn if user cannot read krb5.conf
Fix typos reported by lintian
UTIL: Use prefix for debug function
UTIL: Provide varargs version of debug_fn
UTIL: Use sss_vdebug_fn for callbacks
Revert "DEBUG: Preventing chown_debug_file if journald on"
DEBUG: Ignore ENOENT for change owner of log files
TOOLS: Fix minor memory leak in sss_colondb_writeline
CI: Use yum-deprecated instead of dnf
FAIL_OVER: Fix warning value computed is not used
UTIL: Fix indentation in dlinklist.h
UTIL: Fix warning misleading-indentation
CLIENT: Reduce code duplication
CLIENT: Retry request after EPIPE
UTIL: Move debug part from util.h -> new debug.h
UTIL: Allow to append new line in sss_vdebug_fn
AUTOMAKE: Force usage of parallel test harness
CI: Use make check instead of make-check-wrap
test_ipa_subdom_server: Workaround for slow krb5 + SELinux
SPEC: Run extra unit tests with epel
GPO: Soften umask in gpo_child
GPO_CHILD: Create directories in gpo_cache with right permissions
GPO: Process GPOS in offline mode if ldap search failed
IPA: Check RDN in ipa_add_ad_memberships_get_next
dp_ptask: Fix memory leak in synchronous ptask
test_be_ptask: Check leaks in tests
Michal Židek (6):
NSS: do not skip cache check for netgoups
util: Continue if setlocale fails
server_setup: Log failed attempt to set locale
tests: Run intgcheck without libsemanage
tests: Regression test with wrong LC_ALL
GPO: log specific ini parse error messages
Pavel Březina (37):
AD SRV: prefer site-local DCs in LDAP ping
SDAP: do not fail if refs are found but not processed
SDAP: Add request that iterates over all search bases
SDAP: rename sdap_get_id_specific_filter
SDAP: support empty filters in sdap_combine_filters()
SUDO: use sdap_search_bases instead custom sb iterator
SUDO: make sudo sysdb interface more reusable
SUDO: move code shared between ldap and ipa to separate module
SUDO: allow to disable ptask
SUDO: fail on failed request that cannot be retry
IPA: add ipa_get_rdn and ipa_check_rdn
SDAP: use ipa_get_rdn() in nested groups
IPA SUDO: choose between IPA and LDAP schema
IPA SUDO: Add ipasudorule mapping
IPA SUDO: Add ipasudocmdgrp mapping
IPA SUDO: Add ipasudocmd mapping
IPA SUDO: Implement sudo handler
IPA SUDO: Implement full refresh
IPA SUDO: Implement rules refresh
IPA SUDO: Remember USN
SDAP: Add sdap_or_filters
IPA SUDO: Implement smart refresh
SUDO: sdap_sudo_set_usn() do not steal usn
SUDO: remove full_refresh_in_progress
SUDO: assume zero if usn is unknown
SUDO: allow disabling full refresh
SUDO: remember usn as number instead of string
SUDO: simplify usn filter
IPA SUDO: Add support for ipaSudoRunAsExt* attributes
sdap_connect_send: fail if uri or sockaddr is NULL
cache_req: simplify cache_req_cache_check()
cache_req: do not lookup views if possible
remove user certificate if not found on the server
IPA SUDO: download externalUser attribute
IPA SUDO: fix typo
IPA SUDO: support old ipasudocmd rdn
SUDO: be able to parse modifyTimestamp correctly
Pavel Reichl (11):
sudo: remove unused param name in sdap_sudo_get_usn()
sudo: remove unused param. in ldap_get_sudo_options
IDMAP: Fix computing max id for slice range
IDMAP: New structure for domain range params
IDMAP: Add support for automatic adding of ranges
IDMAP: Fix minor memory leak
IDMAP: Man change for ldap_idmap_range_size option
NSS: Fix memory leak netgroup
IDMAP: Add test to validate off by one bug
SDAP: Add return code ERR_ACCOUNT_LOCKED
PAM: Pass account lockout status and display message
Petr Cech (6):
KRB5: Adding DNS SRV lookup for krb5 provider
TOOLS: Fix memory leak after getline() failed
TOOLS: Add comments on functions in colondb
TEST_TOOLS_COLONDB: Add tests for sss_colondb_*
REFACTOR: umask(077) --> umask(SSS_DFL_X_UMASK)
REFACTOR: umask(0177) --> umask(SSS_DFL_UMASK)
Stephen Gallagher (2):
GPO: Add Cockpit to the Remote Interactive defaults
GPO: Add other display managers to interactive logon
Sumit Bose (20):
nfs idmap: fix infinite loop
Use right domain for user lookups
sdap_save_grpmem: determine domain by SID if possible
ipa_s2n_save_objects(): use configured user and group timeout
ldap: remove originalMeberOf if there is no memberOf
UTIL: allow to skip default options for child processes
DP_TASK: add be_ptask_get_timeout()
AD: add task to renew the machine account password if needed
FO: add fo_get_active_server()
FO: add be_fo_get_active_server_name()
AD: try to use current server in the renewal task
p11: add gnome-screensaver to list of allowed services
IPA: lookup idview name even if there is no master domain record
IPA: invalidate override data if original view is missing
sdap: improve filtering of multiple results in GC lookups
pam_sss: reorder pam_message array
sss_override: do not generate DN, search object
tools: read additional data of the master domain
sss_override: only add domain if name is not fully qualified
intg: local override for user with mixed case name
Timo Aaltonen (4):
apparmor-profile: Fixed and tidied.
Merge branch 'upstream'
bump the version
releasing package sssd version 1.13.4-1
---
Makefile.am | 60
configure.ac | 8
contrib/ci/README.md | 7
contrib/ci/distro.sh | 14
contrib/ci/make-check-wrap | 52
contrib/ci/run | 25
contrib/sssd.spec.in | 6
debian/apparmor-profile | 12
debian/changelog | 7
po/bg.po | 603 ++++-----
po/ca.po | 2
po/de.po | 611 ++++-----
po/es.po | 608 ++++-----
po/eu.po | 603 ++++-----
po/fr.po | 617 +++++----
po/hu.po | 603 ++++-----
po/id.po | 603 ++++-----
po/it.po | 606 ++++-----
po/ja.po | 607 ++++-----
po/nb.po | 603 ++++-----
po/nl.po | 607 ++++-----
po/pl.po | 611 +++++----
po/pt.po | 606 ++++-----
po/pt_BR.po | 603 ++++-----
po/ru.po | 647 +++++-----
po/sssd.pot | 601 ++++-----
po/sv.po | 607 ++++-----
po/tg.po | 603 ++++-----
po/tr.po | 603 ++++-----
po/uk.po | 610 +++++----
po/zh_CN.po | 603 ++++-----
po/zh_TW.po | 606 ++++-----
src/confdb/confdb.c | 2
src/confdb/confdb.h | 1
src/config/SSSDConfig/__init__.py.in | 5
src/config/etc/sssd.api.conf | 1
src/config/etc/sssd.api.d/sssd-ad.conf | 4
src/config/etc/sssd.api.d/sssd-ipa.conf | 35
src/config/etc/sssd.api.d/sssd-ldap.conf | 2
src/db/sysdb.c | 98 +
src/db/sysdb.h | 17
src/db/sysdb_ops.c | 45
src/db/sysdb_subdomains.c | 153 ++
src/db/sysdb_sudo.c | 286 +++-
src/db/sysdb_sudo.h | 46
src/ldb_modules/memberof.c | 19
src/lib/idmap/sss_idmap.c | 639 ++++++++--
src/lib/idmap/sss_idmap.exports | 10
src/lib/idmap/sss_idmap.h | 65 +
src/lib/idmap/sss_idmap_private.h | 4
src/man/include/ldap_id_mapping.xml | 24
src/man/po/br.po | 1515 +++++++++++++-----------
src/man/po/ca.po | 1527 +++++++++++++-----------
src/man/po/cs.po | 1513 +++++++++++++-----------
src/man/po/de.po | 1530 +++++++++++++-----------
src/man/po/es.po | 1523 +++++++++++++-----------
src/man/po/eu.po | 1513 +++++++++++++-----------
src/man/po/fr.po | 1634 ++++++++++++++------------
src/man/po/ja.po | 1523 +++++++++++++-----------
src/man/po/lv.po | 1517 +++++++++++++-----------
src/man/po/nl.po | 1515 +++++++++++++-----------
src/man/po/pt.po | 1521 +++++++++++++-----------
src/man/po/pt_BR.po | 1513 +++++++++++++-----------
src/man/po/ru.po | 1515 +++++++++++++-----------
src/man/po/sssd-docs.pot | 1464 ++++++++++++-----------
src/man/po/tg.po | 1515 +++++++++++++-----------
src/man/po/uk.po | 1558 +++++++++++++-----------
src/man/po/zh_CN.po | 1515 +++++++++++++-----------
src/man/sssd-ad.5.xml | 58
src/man/sssd-ldap.5.xml | 16
src/man/sssd.conf.5.xml | 35
src/p11_child/p11_child_nss.c | 2
src/providers/ad/ad_common.h | 5
src/providers/ad/ad_gpo.c | 54
src/providers/ad/ad_gpo_child.c | 39
src/providers/ad/ad_init.c | 7
src/providers/ad/ad_machine_pw_renewal.c | 392 ++++++
src/providers/ad/ad_opts.c | 4
src/providers/ad/ad_srv.c | 40
src/providers/data_provider.h | 2
src/providers/data_provider_fo.c | 24
src/providers/dp_auth_util.c | 19
src/providers/dp_backend.h | 7
src/providers/dp_ptask.c | 7
src/providers/dp_ptask.h | 1
src/providers/fail_over.c | 116 +
src/providers/fail_over.h | 12
src/providers/ipa/ipa_common.c | 38
src/providers/ipa/ipa_common.h | 48
src/providers/ipa/ipa_dn.c | 145 ++
src/providers/ipa/ipa_dn.h | 43
src/providers/ipa/ipa_hbac_rules.c | 5
src/providers/ipa/ipa_hbac_services.c | 10
src/providers/ipa/ipa_hosts.c | 8
src/providers/ipa/ipa_id.c | 5
src/providers/ipa/ipa_init.c | 28
src/providers/ipa/ipa_netgroups.c | 2
src/providers/ipa/ipa_opts.c | 47
src/providers/ipa/ipa_opts.h | 6
src/providers/ipa/ipa_s2n_exop.c | 22
src/providers/ipa/ipa_selinux_maps.c | 4
src/providers/ipa/ipa_subdomains.c | 104 +
src/providers/ipa/ipa_subdomains.h | 11
src/providers/ipa/ipa_subdomains_ext_groups.c | 283 ++++
src/providers/ipa/ipa_subdomains_id.c | 1
src/providers/ipa/ipa_sudo.c | 275 ++++
src/providers/ipa/ipa_sudo.h | 122 +
src/providers/ipa/ipa_sudo_async.c | 1135 ++++++++++++++++++
src/providers/ipa/ipa_sudo_conversion.c | 1251 +++++++++++++++++++
src/providers/ipa/ipa_sudo_refresh.c | 460 +++++++
src/providers/krb5/krb5_auth.c | 4
src/providers/krb5/krb5_child.c | 26
src/providers/krb5/krb5_child_handler.c | 2
src/providers/krb5/krb5_init.c | 7
src/providers/krb5/krb5_utils.c | 2
src/providers/ldap/ldap_auth.c | 6
src/providers/ldap/ldap_common.c | 8
src/providers/ldap/ldap_common.h | 13
src/providers/ldap/ldap_id.c | 10
src/providers/ldap/ldap_options.c | 3
src/providers/ldap/ldap_opts.c | 4
src/providers/ldap/sdap.c | 10
src/providers/ldap/sdap.h | 28
src/providers/ldap/sdap_async.c | 36
src/providers/ldap/sdap_async.h | 7
src/providers/ldap/sdap_async_autofs.c | 6
src/providers/ldap/sdap_async_connection.c | 16
src/providers/ldap/sdap_async_groups.c | 102 +
src/providers/ldap/sdap_async_groups_ad.c | 3
src/providers/ldap/sdap_async_initgroups.c | 70 -
src/providers/ldap/sdap_async_initgroups_ad.c | 3
src/providers/ldap/sdap_async_nested_groups.c | 703 +++++++++--
src/providers/ldap/sdap_async_netgroups.c | 3
src/providers/ldap/sdap_async_private.h | 18
src/providers/ldap/sdap_async_services.c | 3
src/providers/ldap/sdap_async_sudo.c | 274 ----
src/providers/ldap/sdap_async_users.c | 3
src/providers/ldap/sdap_idmap.c | 16
src/providers/ldap/sdap_ops.c | 232 +++
src/providers/ldap/sdap_ops.h | 44
src/providers/ldap/sdap_sudo.c | 7
src/providers/ldap/sdap_sudo.h | 1
src/providers/ldap/sdap_sudo_cache.c | 184 --
src/providers/ldap/sdap_sudo_cache.h | 37
src/providers/ldap/sdap_sudo_refresh.c | 121 -
src/providers/ldap/sdap_sudo_shared.c | 195 +++
src/providers/ldap/sdap_sudo_shared.h | 40
src/providers/ldap/sdap_utils.c | 35
src/python/pysss.c | 2
src/responder/common/negcache.c | 2
src/responder/common/responder_cache_req.c | 157 ++
src/responder/nss/nsssrv_cmd.c | 47
src/responder/nss/nsssrv_mmap_cache.c | 2
src/responder/nss/nsssrv_netgroup.c | 41
src/responder/pam/pamsrv_cmd.c | 31
src/responder/pam/pamsrv_p11.c | 6
src/sss_client/common.c | 106 +
src/sss_client/nfs/sss_nfs_client.c | 4
src/sss_client/pam_sss.c | 36
src/sss_client/ssh/sss_ssh_client.c | 4
src/tests/check_and_open-tests.c | 2
src/tests/cmocka/test_be_ptask.c | 24
src/tests/cmocka/test_child_common.c | 4
src/tests/cmocka/test_fo_srv.c | 159 +-
src/tests/cmocka/test_ipa_dn.c | 228 +++
src/tests/cmocka/test_ipa_subdomains_server.c | 20
src/tests/cmocka/test_nested_groups.c | 530 ++++++++
src/tests/cmocka/test_sss_idmap.c | 198 ++-
src/tests/cmocka/test_sysdb_subdomains.c | 73 +
src/tests/cmocka/test_tools_colondb.c | 419 ++++++
src/tests/debug-tests.c | 4
src/tests/fail_over-tests.c | 13
src/tests/intg/Makefile.am | 1
src/tests/intg/ldap_local_override_test.py | 66 +
src/tests/intg/test_local_domain.py | 112 +
src/tests/pyhbac-test.py | 33
src/tests/pysss_murmur-test.py | 33
src/tests/sss_idmap-tests.c | 332 +++++
src/tests/sysdb-tests.c | 25
src/tests/util-tests.c | 2
src/tools/common/sss_colondb.c | 11
src/tools/common/sss_colondb.h | 23
src/tools/common/sss_tools.c | 8
src/tools/sss_obfuscate | 37
src/tools/sss_override.c | 62
src/tools/tools_util.c | 6
src/util/child_common.c | 73 -
src/util/child_common.h | 2
src/util/debug.c | 87 -
src/util/debug.h | 143 ++
src/util/dlinklist.h | 142 +-
src/util/domain_info_utils.c | 4
src/util/nscd.c | 6
src/util/server.c | 13
src/util/sss_python.h | 5
src/util/sss_semanage.c | 14
src/util/util.h | 115 -
src/util/util_errors.c | 2
src/util/util_errors.h | 2
src/util/util_safealign.h | 6
version.m4 | 2
201 files changed, 31485 insertions(+), 20100 deletions(-)
---
More information about the Pkg-sssd-devel
mailing list