[Pkg-sssd-devel] sssd: Changes to 'master'
Timo Aaltonen
tjaalton at moszumanska.debian.org
Wed Jan 25 21:03:48 UTC 2017
Makefile.am | 362
configure.ac | 21
contrib/ci/deps.sh | 1
contrib/sssd.spec.in | 43
contrib/systemtap/id_perf.stp | 6
debian/changelog | 20
debian/patches/accept-krb5-1.15.diff | 23
debian/patches/fix-prefix-substitution.diff | 38
debian/patches/import-daemon-opts.diff | 10
debian/patches/series | 2
debian/sssd-ad-common.install | 2
debian/sssd-common.install | 11
debian/sssd-common.sssd.default | 2
debian/sssd-dbus.install | 2
po/bg.po | 733 -
po/ca.po | 737 -
po/de.po | 737 -
po/es.po | 736 -
po/eu.po | 732 -
po/fr.po | 737 -
po/hu.po | 733 -
po/id.po | 733 -
po/it.po | 733 -
po/ja.po | 737 -
po/nb.po | 733 -
po/nl.po | 737 -
po/pl.po | 737 -
po/pt.po | 733 -
po/pt_BR.po | 732 -
po/ru.po | 734 -
po/sssd.pot | 730 -
po/sv.po | 737 -
po/tg.po | 732 -
po/tr.po | 732 -
po/uk.po | 738 -
po/zh_CN.po | 732 -
po/zh_TW.po | 732 -
src/confdb/confdb.c | 20
src/confdb/confdb.h | 4
src/config/SSSDConfig/__init__.py.in | 3
src/config/SSSDConfigTest.py | 1
src/config/cfg_rules.ini | 24
src/config/etc/sssd.api.conf | 3
src/db/sysdb.c | 24
src/db/sysdb.h | 37
src/db/sysdb_ops.c | 143
src/db/sysdb_search.c | 7
src/db/sysdb_subdomains.c | 373
src/db/sysdb_sudo.c | 69
src/db/sysdb_sudo.h | 5
src/external/configlib.m4 | 12
src/external/inotify.m4 | 4
src/external/krb5.m4 | 2
src/external/libaugeas.m4 | 10
src/external/pac_responder.m4 | 3
src/lib/idmap/sss_idmap.exports | 2
src/lib/sifp/sss_sifp_utils.c | 2
src/man/Makefile.am | 5
src/man/include/ad_modified_defaults.xml | 63
src/man/include/ipa_modified_defaults.xml | 128
src/man/po/br.po | 2061 ++-
src/man/po/ca.po | 2156 ++-
src/man/po/cs.po | 2059 ++-
src/man/po/de.po | 2273 ++--
src/man/po/es.po | 2210 ++-
src/man/po/eu.po | 2059 ++-
src/man/po/fr.po | 2290 ++--
src/man/po/ja.po | 2238 ++--
src/man/po/lv.po | 2063 ++-
src/man/po/nl.po | 2069 ++-
src/man/po/po4a.cfg | 2
src/man/po/pt.po | 2085 ++-
src/man/po/pt_BR.po | 2059 ++-
src/man/po/ru.po | 2063 ++-
src/man/po/sssd-docs.pot | 2014 ++-
src/man/po/tg.po | 2061 ++-
src/man/po/uk.po | 2294 ++--
src/man/po/zh_CN.po | 2061 ++-
src/man/sssctl.8.xml | 2
src/man/sssd-ad.5.xml | 58
src/man/sssd-ipa.5.xml | 90
src/man/sssd-secrets.5.xml | 12
src/man/sssd-sudo.5.xml | 6
src/man/sssd.conf.5.xml | 92
src/monitor/monitor.c | 295
src/monitor/monitor_iface.xml | 8
src/monitor/monitor_iface_generated.c | 14
src/monitor/monitor_iface_generated.h | 4
src/monitor/monitor_interfaces.h | 10
src/monitor/monitor_sbus.c | 18
src/providers/ad/ad_gpo.c | 31
src/providers/ad/ad_subdomains.c | 13
src/providers/data_provider.h | 4
src/providers/data_provider/dp.c | 2
src/providers/data_provider/dp_custom_data.h | 1
src/providers/data_provider/dp_iface.h | 1
src/providers/data_provider/dp_iface.xml | 1
src/providers/data_provider/dp_iface_generated.c | 22
src/providers/data_provider/dp_iface_generated.h | 2
src/providers/data_provider/dp_request_table.c | 2
src/providers/data_provider/dp_target_id.c | 28
src/providers/data_provider/dp_targets.c | 75
src/providers/data_provider_be.c | 5
src/providers/ipa/ipa_id.c | 1
src/providers/ipa/ipa_netgroups.c | 15
src/providers/ipa/ipa_subdomains.c | 20
src/providers/ipa/ipa_subdomains_ext_groups.c | 2
src/providers/ipa/ipa_subdomains_id.c | 1
src/providers/krb5/krb5_auth.c | 3
src/providers/krb5/krb5_auth.h | 9
src/providers/krb5/krb5_child.c | 129
src/providers/krb5/krb5_child_handler.c | 134
src/providers/krb5/krb5_common.c | 106
src/providers/krb5/krb5_common.h | 30
src/providers/krb5/krb5_init.c | 2
src/providers/krb5/krb5_init_shared.c | 6
src/providers/krb5/krb5_utils.c | 2
src/providers/ldap/ldap_common.h | 1
src/providers/ldap/ldap_id.c | 27
src/providers/ldap/sdap_async_enum.c | 2
src/providers/ldap/sdap_async_groups.c | 15
src/providers/ldap/sdap_async_initgroups.c | 191
src/providers/ldap/sdap_async_initgroups_ad.c | 409
src/providers/ldap/sdap_async_private.h | 26
src/providers/ldap/sdap_async_services.c | 1
src/providers/ldap/sdap_refresh.c | 1
src/providers/ldap/sdap_sudo_shared.c | 9
src/providers/proxy/proxy_child.c | 2
src/providers/proxy/proxy_id.c | 6
src/providers/proxy/proxy_init.c | 2
src/providers/simple/simple_access_check.c | 1
src/python/pyhbac.c | 2
src/python/pysss.c | 2
src/python/pysss_murmur.c | 4
src/python/pysss_nss_idmap.c | 4
src/resolv/async_resolv.c | 9
src/responder/autofs/autofssrv.c | 3
src/responder/autofs/autofssrv_cmd.c | 12
src/responder/common/cache_req/cache_req.c | 921 +
src/responder/common/cache_req/cache_req.h | 367
src/responder/common/cache_req/cache_req_data.c | 320
src/responder/common/cache_req/cache_req_plugin.h | 223
src/responder/common/cache_req/cache_req_private.h | 135
src/responder/common/cache_req/cache_req_search.c | 437
src/responder/common/cache_req/plugins/cache_req_common.c | 109
src/responder/common/cache_req/plugins/cache_req_enum_groups.c | 103
src/responder/common/cache_req/plugins/cache_req_enum_svc.c | 104
src/responder/common/cache_req/plugins/cache_req_enum_users.c | 103
src/responder/common/cache_req/plugins/cache_req_group_by_filter.c | 157
src/responder/common/cache_req/plugins/cache_req_group_by_id.c | 147
src/responder/common/cache_req/plugins/cache_req_group_by_name.c | 197
src/responder/common/cache_req/plugins/cache_req_initgroups_by_name.c | 212
src/responder/common/cache_req/plugins/cache_req_initgroups_by_upn.c | 128
src/responder/common/cache_req/plugins/cache_req_netgroup_by_name.c | 156
src/responder/common/cache_req/plugins/cache_req_object_by_id.c | 140
src/responder/common/cache_req/plugins/cache_req_object_by_name.c | 234
src/responder/common/cache_req/plugins/cache_req_object_by_sid.c | 150
src/responder/common/cache_req/plugins/cache_req_svc_by_name.c | 181
src/responder/common/cache_req/plugins/cache_req_svc_by_port.c | 155
src/responder/common/cache_req/plugins/cache_req_user_by_cert.c | 124
src/responder/common/cache_req/plugins/cache_req_user_by_filter.c | 157
src/responder/common/cache_req/plugins/cache_req_user_by_id.c | 147
src/responder/common/cache_req/plugins/cache_req_user_by_name.c | 197
src/responder/common/cache_req/plugins/cache_req_user_by_upn.c | 132
src/responder/common/data_provider/rdp_message.c | 2
src/responder/common/responder.h | 17
src/responder/common/responder_cache_req.c | 1700 ---
src/responder/common/responder_cache_req.h | 186
src/responder/common/responder_cmd.c | 7
src/responder/common/responder_common.c | 283
src/responder/common/responder_dp.c | 28
src/responder/ifp/ifp_components.c | 336
src/responder/ifp/ifp_components.h | 12
src/responder/ifp/ifp_groups.c | 32
src/responder/ifp/ifp_iface.c | 4
src/responder/ifp/ifp_iface.xml | 10
src/responder/ifp/ifp_iface_generated.c | 64
src/responder/ifp/ifp_iface_generated.h | 20
src/responder/ifp/ifp_users.c | 37
src/responder/ifp/ifpsrv.c | 5
src/responder/ifp/ifpsrv_cmd.c | 11
src/responder/ifp/org.freedesktop.sssd.infopipe.service.in | 3
src/responder/nss/nss_cmd.c | 993 +
src/responder/nss/nss_enum.c | 353
src/responder/nss/nss_get_object.c | 279
src/responder/nss/nss_iface.c | 142
src/responder/nss/nss_private.h | 154
src/responder/nss/nss_protocol.c | 353
src/responder/nss/nss_protocol.h | 177
src/responder/nss/nss_protocol_grent.c | 430
src/responder/nss/nss_protocol_netgr.c | 212
src/responder/nss/nss_protocol_pwent.c | 373
src/responder/nss/nss_protocol_sid.c | 485
src/responder/nss/nss_protocol_svcent.c | 270
src/responder/nss/nss_utils.c | 140
src/responder/nss/nsssrv.c | 63
src/responder/nss/nsssrv.h | 91
src/responder/nss/nsssrv_cmd.c | 5558 ----------
src/responder/nss/nsssrv_mmap_cache.c | 2
src/responder/nss/nsssrv_netgroup.c | 1181 --
src/responder/nss/nsssrv_netgroup.h | 39
src/responder/nss/nsssrv_private.h | 152
src/responder/nss/nsssrv_services.c | 1856 ---
src/responder/nss/nsssrv_services.h | 33
src/responder/pac/pacsrv.c | 3
src/responder/pac/pacsrv_cmd.c | 18
src/responder/pam/pamsrv.c | 41
src/responder/pam/pamsrv.h | 4
src/responder/pam/pamsrv_cmd.c | 134
src/responder/secrets/local.c | 31
src/responder/secrets/providers.c | 4
src/responder/secrets/secsrv.c | 15
src/responder/secrets/secsrv.h | 1
src/responder/secrets/secsrv_cmd.c | 2
src/responder/secrets/secsrv_private.h | 1
src/responder/ssh/sshsrv.c | 3
src/responder/ssh/sshsrv_cmd.c | 12
src/responder/sudo/sudosrv.c | 3
src/responder/sudo/sudosrv_get_sudorules.c | 12
src/sbus/sbus_client.c | 4
src/sbus/sbus_client.h | 1
src/sbus/sssd_dbus.h | 19
src/sbus/sssd_dbus_connection.c | 20
src/sbus/sssd_dbus_interface.c | 4
src/sbus/sssd_dbus_private.h | 6
src/sbus/sssd_dbus_server.c | 35
src/sss_client/common.c | 80
src/sss_client/libwbclient/wbc_sid_sssd.c | 38
src/sysv/sssd.in | 15
src/sysv/systemd/sssd-autofs.service.in | 16
src/sysv/systemd/sssd-autofs.socket.in | 12
src/sysv/systemd/sssd-ifp.service.in | 11
src/sysv/systemd/sssd-nss.service.in | 13
src/sysv/systemd/sssd-nss.socket.in | 12
src/sysv/systemd/sssd-pac.service.in | 16
src/sysv/systemd/sssd-pac.socket.in | 12
src/sysv/systemd/sssd-pam-priv.socket.in | 15
src/sysv/systemd/sssd-pam.service.in | 16
src/sysv/systemd/sssd-pam.socket.in | 13
src/sysv/systemd/sssd-ssh.service.in | 16
src/sysv/systemd/sssd-ssh.socket.in | 12
src/sysv/systemd/sssd-sudo.service.in | 16
src/sysv/systemd/sssd-sudo.socket.in | 12
src/sysv/systemd/sssd.service.in | 8
src/tests/cmocka/common_mock_resp.c | 1
src/tests/cmocka/test_krb5_common.c | 297
src/tests/cmocka/test_negcache.c | 3
src/tests/cmocka/test_nss_srv.c | 193
src/tests/cmocka/test_pam_srv.c | 187
src/tests/cmocka/test_responder_cache_req.c | 60
src/tests/cmocka/test_sysdb_subdomains.c | 43
src/tests/cmocka/test_sysdb_sudo.c | 168
src/tests/cmocka/test_wbc_calls.c | 122
src/tests/common_dbus.c | 3
src/tests/crypto-tests.c | 48
src/tests/cwrap/Makefile.am | 31
src/tests/cwrap/cwrap_test_setup.sh | 2
src/tests/dlopen-tests.c | 97
src/tests/intg/Makefile.am | 1
src/tests/intg/ds_openldap.py | 39
src/tests/intg/ent.py | 12
src/tests/intg/ldap_ent.py | 46
src/tests/intg/ldap_local_override_test.py | 9
src/tests/intg/sssd_id.py | 4
src/tests/intg/sssd_ldb.py | 1
src/tests/intg/sssd_netgroup.py | 9
src/tests/intg/test_enumeration.py | 8
src/tests/intg/test_ldap.py | 53
src/tests/intg/test_netgroup.py | 6
src/tests/intg/test_secrets.py | 23
src/tests/intg/test_sssctl.py | 388
src/tests/intg/test_ts_cache.py | 14
src/tests/sss_config-tests.c | 884 -
src/tests/sysdb-tests.c | 240
src/tests/whitespace_test | 13
src/tools/common/sss_tools.c | 91
src/tools/common/sss_tools.h | 14
src/tools/sssctl/sssctl.c | 3
src/tools/sssctl/sssctl_cache.c | 14
src/util/cert/libcrypto/cert.c | 24
src/util/cert/nss/cert.c | 1
src/util/crypto/libcrypto/crypto_hmac_sha1.c | 33
src/util/crypto/libcrypto/crypto_nite.c | 78
src/util/crypto/libcrypto/crypto_obfuscate.c | 32
src/util/crypto/libcrypto/crypto_sha512crypt.c | 77
src/util/crypto/libcrypto/sss_openssl.h | 39
src/util/crypto/sss_crypto.h | 3
src/util/server.c | 38
src/util/sss_config.c | 509
src/util/sss_config.h | 71
src/util/sss_krb5.c | 1
src/util/sss_ldap.c | 33
src/util/sss_ptr_hash.c | 375
src/util/sss_ptr_hash.h | 117
src/util/sss_python.c | 1
src/util/sss_python.h | 3
src/util/sss_utf8.c | 1
src/util/usertools.c | 10
src/util/util.c | 21
src/util/util.h | 20
src/util/util_errors.c | 1
src/util/util_errors.h | 1
src/util/util_safealign.h | 6
src/util/util_watchdog.c | 118
version.m4 | 2
305 files changed, 46155 insertions(+), 37298 deletions(-)
New commits:
commit ecafbcc83ebf1fd18518993eb27be3a948220c54
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:53:04 2017 +0200
releasing package sssd version 1.15.0-1
diff --git a/debian/changelog b/debian/changelog
index 7430dc4..d3abd47 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-sssd (1.15.0-1) UNRELEASED; urgency=medium
+sssd (1.15.0-1) unstable; urgency=medium
* New upstream release. (Closes: #852450) (LP: #1566508)
* Drop upstreamed patches.
@@ -8,7 +8,7 @@ sssd (1.15.0-1) UNRELEASED; urgency=medium
* sssd-{ad,common,dbus}.install: Add systemd service and socket files
for pac, sudo, ssh, autofs, pam, nss and ifp responders.
- -- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
+ -- Timo Aaltonen <tjaalton at debian.org> Wed, 25 Jan 2017 22:46:02 +0200
sssd (1.14.2-2.1) unstable; urgency=low
commit 7fcdfe3c20e0ceb218be3d2eba615e829c706f0c
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:45:56 2017 +0200
ack NMU
diff --git a/debian/changelog b/debian/changelog
index 529a741..7430dc4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -10,6 +10,14 @@ sssd (1.15.0-1) UNRELEASED; urgency=medium
-- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
+sssd (1.14.2-2.1) unstable; urgency=low
+
+ * Non-maintainer upload with maintainer approval.
+ * ldap-blocking.diff: Fix ldaps connections by removing NON_BLOCKING from
+ socket options (Closes: 849756). Patch from upstream pull request #67.
+
+ -- Petter Reinholdtsen <pere at debian.org> Tue, 24 Jan 2017 22:26:17 +0000
+
sssd (1.14.2-2) unstable; urgency=medium
* fix-prefix-substitution.diff: Fix IFP service file path substitution.
commit f79e0cb2b570ae77117a76056331842f8951e5f8
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:38:36 2017 +0200
sssd-{ad,common,dbus}.install: Add systemd service and socket files for pac, sudo, ssh, autofs, pam, nss and ifp responders.
diff --git a/debian/changelog b/debian/changelog
index c344d3c..529a741 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,8 @@ sssd (1.15.0-1) UNRELEASED; urgency=medium
* sssd-common.sssd.default, import-daemon-opts.diff: Change default
daemon options to match current upstream.
* sssd-dbus.install: Drop libsss_config, which was removed.
+ * sssd-{ad,common,dbus}.install: Add systemd service and socket files
+ for pac, sudo, ssh, autofs, pam, nss and ifp responders.
-- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
diff --git a/debian/sssd-ad-common.install b/debian/sssd-ad-common.install
index bc5c06b..6c34fc6 100644
--- a/debian/sssd-ad-common.install
+++ b/debian/sssd-ad-common.install
@@ -1 +1,3 @@
+lib/systemd/system/sssd-pac.service
+lib/systemd/system/sssd-pac.socket
usr/lib/*/sssd/sssd_pac
diff --git a/debian/sssd-common.install b/debian/sssd-common.install
index 81e789f..db46578 100644
--- a/debian/sssd-common.install
+++ b/debian/sssd-common.install
@@ -1,6 +1,17 @@
lib/systemd/system/sssd.service
lib/systemd/system/sssd-secrets.service
lib/systemd/system/sssd-secrets.socket
+lib/systemd/system/sssd-sudo.service
+lib/systemd/system/sssd-sudo.socket
+lib/systemd/system/sssd-ssh.service
+lib/systemd/system/sssd-ssh.socket
+lib/systemd/system/sssd-autofs.service
+lib/systemd/system/sssd-autofs.socket
+lib/systemd/system/sssd-pam.service
+lib/systemd/system/sssd-pam.socket
+lib/systemd/system/sssd-pam-priv.socket
+lib/systemd/system/sssd-nss.service
+lib/systemd/system/sssd-nss.socket
usr/bin/sss_ssh_authorizedkeys
usr/bin/sss_ssh_knownhostsproxy
usr/lib/*/cifs-utils/cifs_idmap_sss.so
diff --git a/debian/sssd-dbus.install b/debian/sssd-dbus.install
index ba3aaea..57b9066 100644
--- a/debian/sssd-dbus.install
+++ b/debian/sssd-dbus.install
@@ -1,4 +1,5 @@
etc/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
+lib/systemd/system/sssd-ifp.service
usr/lib/*/sssd/sssd_ifp
usr/share/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
usr/share/man/man5/sssd-ifp.5
commit c6aba7f5cab75ae37e1dd73b3f3c7d7793c9dbf3
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:26:39 2017 +0200
sssd-dbus.install: Drop libsss_config, which was removed.
diff --git a/debian/changelog b/debian/changelog
index e295435..c344d3c 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -4,6 +4,7 @@ sssd (1.15.0-1) UNRELEASED; urgency=medium
* Drop upstreamed patches.
* sssd-common.sssd.default, import-daemon-opts.diff: Change default
daemon options to match current upstream.
+ * sssd-dbus.install: Drop libsss_config, which was removed.
-- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
diff --git a/debian/sssd-dbus.install b/debian/sssd-dbus.install
index c6942b6..ba3aaea 100644
--- a/debian/sssd-dbus.install
+++ b/debian/sssd-dbus.install
@@ -1,5 +1,4 @@
etc/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf
-usr/lib/*/sssd/libsss_config.so
usr/lib/*/sssd/sssd_ifp
usr/share/dbus-1/system-services/org.freedesktop.sssd.infopipe.service
usr/share/man/man5/sssd-ifp.5
commit 2f674b98b56513e220e27264285a3d6fdb7ae7df
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:23:07 2017 +0200
sssd-common.sssd.default, import-daemon-opts.diff: Change default daemon options to match current upstream.
diff --git a/debian/changelog b/debian/changelog
index f98ece2..e295435 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,8 @@ sssd (1.15.0-1) UNRELEASED; urgency=medium
* New upstream release. (Closes: #852450) (LP: #1566508)
* Drop upstreamed patches.
+ * sssd-common.sssd.default, import-daemon-opts.diff: Change default
+ daemon options to match current upstream.
-- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
diff --git a/debian/patches/import-daemon-opts.diff b/debian/patches/import-daemon-opts.diff
index 25e86c9..4da0245 100644
--- a/debian/patches/import-daemon-opts.diff
+++ b/debian/patches/import-daemon-opts.diff
@@ -1,13 +1,11 @@
-diff --git a/src/sysv/systemd/sssd.service.in b/src/sysv/systemd/sssd.service.in
-index a4f9125..8a18af1 100644
--- a/src/sysv/systemd/sssd.service.in
+++ b/src/sysv/systemd/sssd.service.in
@@ -6,7 +6,7 @@ Wants=nss-user-lookup.target
[Service]
EnvironmentFile=- at environment_file@
--ExecStart=@sbindir@/sssd -D -f
+-ExecStart=@sbindir@/sssd -i -f
+ExecStart=@sbindir@/sssd $DAEMON_OPTS
- # These two should be used with traditional UNIX forking daemons
- # consult systemd.service(5) for more details
- Type=forking
+ Type=notify
+ NotifyAccess=main
+
diff --git a/debian/sssd-common.sssd.default b/debian/sssd-common.sssd.default
index 9e7f629..87d862e 100644
--- a/debian/sssd-common.sssd.default
+++ b/debian/sssd-common.sssd.default
@@ -1,4 +1,4 @@
# Defaults for sssd, installed at /etc/default/sssd by the maintainer scripts
# Additional options that are passed to the Daemon.
-DAEMON_OPTS="-D -f"
+DAEMON_OPTS="-i -f"
commit 6cfa750681ef1fe6f40156ed3e7c918f232f7bbf
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:03:59 2017 +0200
Drop upstreamed patches.
diff --git a/debian/changelog b/debian/changelog
index fad95e3..f98ece2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,7 @@
sssd (1.15.0-1) UNRELEASED; urgency=medium
* New upstream release. (Closes: #852450) (LP: #1566508)
+ * Drop upstreamed patches.
-- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
diff --git a/debian/patches/accept-krb5-1.15.diff b/debian/patches/accept-krb5-1.15.diff
deleted file mode 100644
index ab791e4..0000000
--- a/debian/patches/accept-krb5-1.15.diff
+++ /dev/null
@@ -1,23 +0,0 @@
-commit 6a96323fb511565908a5a7ce7b1d6e0d40aa647d
-Author: Lukas Slebodnik <lslebodn at redhat.com>
-Date: Mon Oct 24 10:03:32 2016 +0000
-
- BUILD: Accept krb5 1.15 for building the PAC plugin
-
- Reviewed-by: Sumit Bose <sbose at redhat.com>
- (cherry picked from commit 11d2a1183d7017f3d453d0a7046004b6968fefb5)
-
-diff --git a/src/external/pac_responder.m4 b/src/external/pac_responder.m4
-index 928b1d2..6b400d4 100644
---- a/src/external/pac_responder.m4
-+++ b/src/external/pac_responder.m4
-@@ -16,7 +16,8 @@ then
- Kerberos\ 5\ release\ 1.11* | \
- Kerberos\ 5\ release\ 1.12* | \
- Kerberos\ 5\ release\ 1.13* | \
-- Kerberos\ 5\ release\ 1.14*)
-+ Kerberos\ 5\ release\ 1.14* | \
-+ Kerberos\ 5\ release\ 1.15*)
- krb5_version_ok=yes
- AC_MSG_RESULT([yes])
- ;;
diff --git a/debian/patches/fix-prefix-substitution.diff b/debian/patches/fix-prefix-substitution.diff
deleted file mode 100644
index 6f13e75..0000000
--- a/debian/patches/fix-prefix-substitution.diff
+++ /dev/null
@@ -1,38 +0,0 @@
---- a/Makefile.am
-+++ b/Makefile.am
-@@ -3948,12 +3948,17 @@ replace_script = \
- mv $@.tmp $@
-
- EXTRA_DIST += \
-+ src/responder/ifp/org.freedesktop.sssd.infopipe.service.in \
- src/sysv/systemd/sssd.service.in \
- src/sysv/systemd/journal.conf.in \
- src/sysv/systemd/sssd-secrets.socket.in \
- src/sysv/systemd/sssd-secrets.service.in \
- $(NULL)
-
-+src/responder/ifp/org.freedesktop.sssd.infopipe.service: src/responder/ifp/org.freedesktop.sssd.infopipe.service.in Makefile
-+ @$(MKDIR_P) src/responder/ifp/
-+ $(replace_script)
-+
- src/sysv/systemd/sssd.service: src/sysv/systemd/sssd.service.in Makefile
- @$(MKDIR_P) src/sysv/systemd/
- $(replace_script)
-@@ -4184,6 +4189,7 @@ endif
- rm -Rf $$doc; \
- done;
- rm -Rf ldb_mod_test_dir
-+ rm -f $(builddir)/src/responder/ifp/org.freedesktop.sssd.infopipe.service
- rm -f $(builddir)/src/sysv/systemd/sssd.service
- rm -f $(builddir)/src/sysv/systemd/sssd-secrets.socket
- rm -f $(builddir)/src/sysv/systemd/sssd-secrets.service
---- a/configure.ac
-+++ b/configure.ac
-@@ -464,7 +464,6 @@ AC_CONFIG_FILES([Makefile contrib/sssd.s
- src/lib/sifp/sss_simpleifp.pc
- src/lib/sifp/sss_simpleifp.doxy
- src/config/setup.py
-- src/responder/ifp/org.freedesktop.sssd.infopipe.service
- src/systemtap/sssd.stp
- src/config/SSSDConfig/__init__.py])
- AC_OUTPUT
diff --git a/debian/patches/series b/debian/patches/series
index f7a2939..cc7844f 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1 @@
-fix-prefix-substitution.diff
import-daemon-opts.diff
-accept-krb5-1.15.diff
commit 4ce497af15e2a2d2c905b9f81d9c7cb53f5ed0f5
Author: Timo Aaltonen <tjaalton at debian.org>
Date: Wed Jan 25 22:01:35 2017 +0200
update the changelog
diff --git a/debian/changelog b/debian/changelog
index 5d9f33e..fad95e3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+sssd (1.15.0-1) UNRELEASED; urgency=medium
+
+ * New upstream release. (Closes: #852450) (LP: #1566508)
+
+ -- Timo Aaltonen <tjaalton at debian.org> Tue, 17 Jan 2017 16:48:41 +0200
+
sssd (1.14.2-2) unstable; urgency=medium
* fix-prefix-substitution.diff: Fix IFP service file path substitution.
commit 885a47df000e83b360434b139c1c3841aeeb8a85
Author: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed Jan 25 16:39:16 2017 +0100
Updating the version for the 1.15.0 release
diff --git a/version.m4 b/version.m4
index 37df62a..5ff77ba 100644
--- a/version.m4
+++ b/version.m4
@@ -1,5 +1,5 @@
# Primary version number
-m4_define([VERSION_NUMBER], [1.14.90])
+m4_define([VERSION_NUMBER], [1.15.0])
# If the PRERELEASE_VERSION_NUMBER is set, we'll append
# it to the release tag when creating an RPM or SRPM
commit 36b56482ca1e53d832accef0354124fd79711172
Author: Jakub Hrozek <jhrozek at redhat.com>
Date: Wed Jan 25 16:35:17 2017 +0100
Updating the translations for the 1.15.0 release
diff --git a/po/bg.po b/po/bg.po
index 8c1bf39..f8fb813 100644
--- a/po/bg.po
+++ b/po/bg.po
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"Report-Msgid-Bugs-To: sssd-devel at lists.fedorahosted.org\n"
-"POT-Creation-Date: 2016-10-19 20:58+0200\n"
+"POT-Creation-Date: 2017-01-25 16:28+0100\n"
"PO-Revision-Date: 2014-12-14 11:44-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata at zanata.org>\n"
"Language-Team: Bulgarian (http://www.transifex.com/projects/p/sssd/language/"
@@ -18,7 +18,7 @@ msgstr ""
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
-"X-Generator: Zanata 3.9.5\n"
+"X-Generator: Zanata 3.9.6\n"
#: src/config/SSSDConfig/__init__.py.in:43
#: src/config/SSSDConfig/__init__.py.in:44
@@ -58,137 +58,141 @@ msgstr ""
msgid "Idle time before automatic disconnection of a client"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:55
+#: src/config/SSSDConfig/__init__.py.in:53
+msgid "Idle time before automatic shutdown of the responder"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:56
msgid "SSSD Services to start"
msgstr "SSSD услуги за стартиране"
-#: src/config/SSSDConfig/__init__.py.in:56
+#: src/config/SSSDConfig/__init__.py.in:57
msgid "SSSD Domains to start"
msgstr "SSSD домейни за стартиране"
-#: src/config/SSSDConfig/__init__.py.in:57
+#: src/config/SSSDConfig/__init__.py.in:58
msgid "Timeout for messages sent over the SBUS"
msgstr "Изчакване за съобщения, изпратени през SBUS"
-#: src/config/SSSDConfig/__init__.py.in:58
-#: src/config/SSSDConfig/__init__.py.in:179
+#: src/config/SSSDConfig/__init__.py.in:59
+#: src/config/SSSDConfig/__init__.py.in:182
msgid "Regex to parse username and domain"
msgstr "Regex за намиране на потребителско име и домейн"
-#: src/config/SSSDConfig/__init__.py.in:59
-#: src/config/SSSDConfig/__init__.py.in:178
+#: src/config/SSSDConfig/__init__.py.in:60
+#: src/config/SSSDConfig/__init__.py.in:181
msgid "Printf-compatible format for displaying fully-qualified names"
msgstr "Printf-съвместим формат за изобразяване на пълно-квалифицирани имена"
-#: src/config/SSSDConfig/__init__.py.in:60
+#: src/config/SSSDConfig/__init__.py.in:61
msgid ""
"Directory on the filesystem where SSSD should store Kerberos replay cache "
"files."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:61
+#: src/config/SSSDConfig/__init__.py.in:62
msgid "Domain to add to names without a domain component."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:62
+#: src/config/SSSDConfig/__init__.py.in:63
msgid "The user to drop privileges to"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:63
+#: src/config/SSSDConfig/__init__.py.in:64
#, fuzzy
msgid "Tune certificate verification"
msgstr "Изисква TLS проверка на сертификат"
-#: src/config/SSSDConfig/__init__.py.in:64
+#: src/config/SSSDConfig/__init__.py.in:65
msgid "All spaces in group or user names will be replaced with this character"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:65
+#: src/config/SSSDConfig/__init__.py.in:66
msgid "Tune sssd to honor or ignore netlink state changes"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:68
+#: src/config/SSSDConfig/__init__.py.in:69
msgid "Enumeration cache timeout length (seconds)"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:69
+#: src/config/SSSDConfig/__init__.py.in:70
msgid "Entry cache background update timeout length (seconds)"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:70
-#: src/config/SSSDConfig/__init__.py.in:106
+#: src/config/SSSDConfig/__init__.py.in:71
+#: src/config/SSSDConfig/__init__.py.in:108
msgid "Negative cache timeout length (seconds)"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:71
+#: src/config/SSSDConfig/__init__.py.in:72
msgid "Files negative cache timeout length (seconds)"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:72
+#: src/config/SSSDConfig/__init__.py.in:73
msgid "Users that SSSD should explicitly ignore"
msgstr "Потребители, които SSSD изрично трябва да игнорира"
-#: src/config/SSSDConfig/__init__.py.in:73
+#: src/config/SSSDConfig/__init__.py.in:74
msgid "Groups that SSSD should explicitly ignore"
msgstr "Групи, които SSSD изрично трябва да игнорира"
-#: src/config/SSSDConfig/__init__.py.in:74
+#: src/config/SSSDConfig/__init__.py.in:75
msgid "Should filtered users appear in groups"
msgstr "Да се показват ли филтрираните потребители в групи"
-#: src/config/SSSDConfig/__init__.py.in:75
+#: src/config/SSSDConfig/__init__.py.in:76
msgid "The value of the password field the NSS provider should return"
msgstr "Стойността на полето парола, което NSS доставчикът трябва да върне"
-#: src/config/SSSDConfig/__init__.py.in:76
+#: src/config/SSSDConfig/__init__.py.in:77
msgid "Override homedir value from the identity provider with this value"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:77
+#: src/config/SSSDConfig/__init__.py.in:78
msgid ""
"Substitute empty homedir value from the identity provider with this value"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:78
+#: src/config/SSSDConfig/__init__.py.in:79
msgid "Override shell value from the identity provider with this value"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:79
+#: src/config/SSSDConfig/__init__.py.in:80
msgid "The list of shells users are allowed to log in with"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:80
+#: src/config/SSSDConfig/__init__.py.in:81
msgid ""
"The list of shells that will be vetoed, and replaced with the fallback shell"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:81
+#: src/config/SSSDConfig/__init__.py.in:82
msgid ""
"If a shell stored in central directory is allowed but not available, use "
"this fallback"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:82
+#: src/config/SSSDConfig/__init__.py.in:83
msgid "Shell to use if the provider does not list one"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:83
+#: src/config/SSSDConfig/__init__.py.in:84
msgid "How long will be in-memory cache records valid"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:84
+#: src/config/SSSDConfig/__init__.py.in:85
msgid "List of user attributes the NSS responder is allowed to publish"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:87
+#: src/config/SSSDConfig/__init__.py.in:88
msgid "How long to allow cached logins between online logins (days)"
msgstr "Колко дни да се позволява кеширано влизане между влизания онлайн"
-#: src/config/SSSDConfig/__init__.py.in:88
+#: src/config/SSSDConfig/__init__.py.in:89
msgid "How many failed logins attempts are allowed when offline"
msgstr "Колко неуспешни опита за влизане са разрешени, когато сме офлайн"
-#: src/config/SSSDConfig/__init__.py.in:89
+#: src/config/SSSDConfig/__init__.py.in:90
msgid ""
"How long (minutes) to deny login after offline_failed_login_attempts has "
"been reached"
@@ -196,1234 +200,1271 @@ msgstr ""
"Колко време (в минути) да е забранено влизането, след достигане броя "
"неуспешни опити за влизане, когато сме офлайн"
-#: src/config/SSSDConfig/__init__.py.in:90
+#: src/config/SSSDConfig/__init__.py.in:91
msgid "What kind of messages are displayed to the user during authentication"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:91
+#: src/config/SSSDConfig/__init__.py.in:92
+msgid "Filter PAM responses send the pam_sss"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:93
msgid "How many seconds to keep identity information cached for PAM requests"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:92
+#: src/config/SSSDConfig/__init__.py.in:94
msgid "How many days before password expiration a warning should be displayed"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:93
+#: src/config/SSSDConfig/__init__.py.in:95
msgid "List of trusted uids or user's name"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:94
+#: src/config/SSSDConfig/__init__.py.in:96
msgid "List of domains accessible even for untrusted users."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:95
+#: src/config/SSSDConfig/__init__.py.in:97
msgid "Message printed when user account is expired."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:96
+#: src/config/SSSDConfig/__init__.py.in:98
msgid "Message printed when user account is locked."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:97
+#: src/config/SSSDConfig/__init__.py.in:99
msgid "Allow certificate based/Smartcard authentication."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:98
+#: src/config/SSSDConfig/__init__.py.in:100
msgid "Path to certificate databse with PKCS#11 modules."
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:99
+#: src/config/SSSDConfig/__init__.py.in:101
msgid "How many seconds will pam_sss wait for p11_child to finish"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:102
+#: src/config/SSSDConfig/__init__.py.in:104
msgid "Whether to evaluate the time-based attributes in sudo rules"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:103
+#: src/config/SSSDConfig/__init__.py.in:105
msgid "If true, SSSD will switch back to lower-wins ordering logic"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:109
+#: src/config/SSSDConfig/__init__.py.in:111
msgid "Whether to hash host names and addresses in the known_hosts file"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:110
+#: src/config/SSSDConfig/__init__.py.in:112
msgid ""
"How many seconds to keep a host in the known_hosts file after its host keys "
"were requested"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:111
+#: src/config/SSSDConfig/__init__.py.in:113
#, fuzzy
msgid "Path to storage of trusted CA certificates"
msgstr "Файл, съдържащ CA сертификати"
-#: src/config/SSSDConfig/__init__.py.in:114
+#: src/config/SSSDConfig/__init__.py.in:116
msgid "List of UIDs or user names allowed to access the PAC responder"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:115
+#: src/config/SSSDConfig/__init__.py.in:117
msgid "How long the PAC data is considered valid"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:118
+#: src/config/SSSDConfig/__init__.py.in:120
msgid "List of UIDs or user names allowed to access the InfoPipe responder"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:119
+#: src/config/SSSDConfig/__init__.py.in:121
msgid "List of user attributes the InfoPipe is allowed to publish"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:122
+#: src/config/SSSDConfig/__init__.py.in:124
msgid "The provider where the secrets will be stored in"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:123
+#: src/config/SSSDConfig/__init__.py.in:125
msgid "The maximum allowed number of nested containers"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:124
+#: src/config/SSSDConfig/__init__.py.in:126
msgid "The maximum number of secrets that can be stored"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:126
+#: src/config/SSSDConfig/__init__.py.in:127
+msgid "The maximum payload size of a secret in kilobytes"
+msgstr ""
+
+#: src/config/SSSDConfig/__init__.py.in:129
msgid "The URL Custodia server is listening on"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:127
+#: src/config/SSSDConfig/__init__.py.in:130
msgid "The method to use when authenticating to a Custodia server"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:128
+#: src/config/SSSDConfig/__init__.py.in:131
msgid ""
"The name of the headers that will be added into a HTTP request with the "
"value defined in auth_header_value"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:129
+#: src/config/SSSDConfig/__init__.py.in:132
msgid "The value sssd-secrets would use for auth_header_name"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:130
+#: src/config/SSSDConfig/__init__.py.in:133
msgid ""
"The list of the headers to forward to the Custodia server together with the "
"request"
msgstr ""
-#: src/config/SSSDConfig/__init__.py.in:131
+#: src/config/SSSDConfig/__init__.py.in:134
More information about the Pkg-sssd-devel
mailing list