[Pkg-sssd-devel] [Git][sssd-team/sssd][upstream] 91 commits: CI: update flake8 action reference
Timo Aaltonen (@tjaalton)
gitlab at salsa.debian.org
Thu Jun 2 17:40:24 BST 2022
Timo Aaltonen pushed to branch upstream at Debian SSSD packaging / sssd
Commits:
0751f1cf by Iker Pedrosa at 2022-04-28T13:02:53+02:00
CI: update flake8 action reference
flake8 action was pointing to my fork because there was an unresolved
problem in the main repository. Now that the fix has been merged we can
update the reference.
Signed-off-by: Iker Pedrosa <ipedrosa at redhat.com>
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit ecc8aa71429040e718b2155422ab0dbe0df58802)
- - - - -
84e3a8d6 by Iker Pedrosa at 2022-04-28T13:03:24+02:00
p11_child: enable more than one CRL PEM file
Enable support for more than one CRL PEM file. p11_child parses the
crl_file list passed as argument, loads all the files and makes the
validation.
Finally, add a new test case in test_utils to check that the p11_child
crl_file argument has been parsed correctly. Add another five test
cases in test_oam_srv to check the validation process.
:config: multiple crl_file arguments can be used in the
certificate_verification option.
Resolves: https://github.com/SSSD/sssd/issues/6086
Signed-off-by: Iker Pedrosa <ipedrosa at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit e83e10652be58e13bf9b2f307f16ff018fbbc9b8)
- - - - -
14044af0 by Pavel Březina at 2022-04-28T13:03:44+02:00
ci: switch to write-file-action
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit dff9ba783bd620a7826bf43db0d00029bbf62061)
- - - - -
e0c2c0e3 by Pavel Březina at 2022-05-05T15:28:17+02:00
ci: disable Jenkins jobs
All jobs were replaced by Github Actions.
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit 460d02d12d4443b0b44608114c8ba204d8d223cd)
- - - - -
6c0e6fc8 by Steeve Goveas at 2022-05-06T12:28:28+02:00
TEST: Fix docstrings for successful polarion import
A blank line after the first line in the doc is important for betelgeuse
The steps and expectedresults should have proper indents for importer to
adde the steps in the table format in the test case in polarion
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
(cherry picked from commit 3f177aa379b2db9abc22ed7407f9e2ab93782b82)
- - - - -
439b8c3c by Anuj Borah at 2022-05-06T12:28:49+02:00
Tests: Fix ns_account test with sleep time
Fix ns_account test with sleep time
Reviewed-by: Steeve Goveas <sgoveas at redhat.com>
(cherry picked from commit da1d8eb4e08bbe55075a8d9a36452f8007af0572)
- - - - -
181070c4 by Madhuri Upadhye at 2022-05-06T12:29:07+02:00
Tests: ipa: Add automation of BZ1859751
Add automation of Allow SSSD to use anonymous
pkinit for FAST
verify:
https://bugzilla.redhat.com/show_bug.cgi?id=1859751
https://github.com/SSSD/sssd/issues/5961
Signed-off-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 8edb287afed5b785f5485f21aaf5b53042c55e12)
- - - - -
21052b97 by Shridhar Gadekar at 2022-05-06T12:29:26+02:00
Tests:port rfc2307 username begin with a space
Minor string-formatter change (added f-string)
Reviewed-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 0c35ed53a43974cb104882f06dd91382ac294a69)
- - - - -
5187a2d5 by Madhuri Upadhye at 2022-05-06T12:29:44+02:00
Tests: Document: Document to run the tests using multihost config.
Signed-off-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Jakub Vávra <jvavra at redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
(cherry picked from commit ba5d4708be5d4fe6e260e2458e897cae93d0c6ec)
- - - - -
5945dac5 by Madhuri Upadhye at 2022-05-06T12:30:02+02:00
Tests: Document: Setup python virtual environment to run pytest.
Signed-off-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Jakub Vávra <jvavra at redhat.com>
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
(cherry picked from commit a6566e1c5d38ca2af3d98176fba7998cb6186ae3)
- - - - -
7d55af15 by Pavel Březina at 2022-05-06T12:31:03+02:00
ci: enable ci for sssd-2-7
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit 1eec0aae2d478d7eb02b0615dd106377822e101e)
- - - - -
2aeab506 by Pavel Březina at 2022-05-06T12:31:03+02:00
ci: fix syntax for flake8 job
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit 950a77d5bf7fc9106c273c49e79178c4b6e81f3c)
- - - - -
bca43389 by Sumit Bose at 2022-05-09T10:17:10+02:00
spec: mention oidc_child in description
Since oidc_child is part of the sssd-idp sub-package it should be
mentioned in the summary and the description.
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 2591f8d75e83175de7f4a0e1483ce3bc553a0fe8)
- - - - -
74dd0049 by Pavel Březina at 2022-05-09T10:17:32+02:00
ci: enable copr builds for CentOS Stream 8
Reviewed-by: Justin Stephenson <jstephen at redhat.com>
(cherry picked from commit 0a8d8f9e94f9118ddca8bce24c188b41dfb94c8d)
- - - - -
f4219061 by Tomas Halman at 2022-05-09T10:17:54+02:00
SPEC: python egg info format change
In the new python egg-info changed from a file to a folder with
several files.
This patch fixes the SPEC file to handle it correctly in both cases.
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 1859523d5946cc53e2a6ee73eaf93ab9aef262c2)
- - - - -
c90153de by Tomas Halman at 2022-05-09T10:17:54+02:00
make: clean python new files
New python produces more files during build. We have to
remove them during cleanup.
This patch fixes the `make distcheck` error in Fedora Rawhide.
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 9d2d6c079021e44eed1d91268b2d9a51fc956284)
- - - - -
af9f390c by Pavel Březina at 2022-05-09T19:36:30+02:00
configure: fix libkrad detection
`main` is obviously not a symbold defined in the library
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
(cherry picked from commit 4b8438593c0de7ca3d47b4fdcdb135dda9997922)
- - - - -
b92255ee by Pavel Březina at 2022-05-09T19:36:30+02:00
cert: fix assignment discards _const_ qualifier from pointer target type
```
/shared/workspace/sssd/src/util/cert/libcrypto/cert.c:307:17: error: assignment discards _const_ qualifier from pointer target type [-Werror=discarded-qualifiers]
307 | rsa_pub_key = EVP_PKEY_get0_RSA(cert_pub_key);
```
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
(cherry picked from commit e4d75912a6c243ab8192eca7588df67af2f695a7)
- - - - -
51600e45 by Pavel Březina at 2022-05-09T19:36:30+02:00
ci: allow deprecated functions during build
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
(cherry picked from commit ef014b8b293ca7859dc8c30db4cdcfa343c3c477)
- - - - -
0eb470f6 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Bulgarian) currently translated at 15.0% (94 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/bg/
- - - - -
1d4f8a86 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Catalan) currently translated at 55.2% (345 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ca/
- - - - -
0c617aac by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Czech) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/cs/
- - - - -
0429439e by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(German) currently translated at 51.0% (319 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/de/
- - - - -
7f137099 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Spanish) currently translated at 98.7% (617 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/es/
- - - - -
ce389491 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Basque) currently translated at 6.7% (42 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/eu/
- - - - -
4a6a8639 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Finnish) currently translated at 7.6% (48 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/fi/
- - - - -
c6028dc0 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(French) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/fr/
- - - - -
203f53f7 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Hungarian) currently translated at 7.0% (44 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/hu/
- - - - -
bd3af70f by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Indonesian) currently translated at 8.6% (54 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/id/
- - - - -
4fb521f8 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Italian) currently translated at 18.8% (118 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/it/
- - - - -
b7fc2cc7 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Japanese) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ja/
- - - - -
37eeb49c by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Korean) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ko/
- - - - -
db7330de by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Norwegian Bokmål) currently translated at 2.2% (14 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/nb_NO/
- - - - -
53285ebd by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Dutch) currently translated at 47.2% (295 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/nl/
- - - - -
374e46e1 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Polish) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/pl/
- - - - -
c2d6854a by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Portuguese) currently translated at 15.5% (97 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/pt/
- - - - -
7ac8d2e9 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Portuguese (Brazil)) currently translated at 0.8% (5 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/pt_BR/
- - - - -
36c4bea4 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Russian) currently translated at 98.0% (613 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ru/
- - - - -
8820b9bf by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Swedish) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/sv/
- - - - -
53dc281f by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Tajik) currently translated at 0.9% (6 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/tg/
- - - - -
b0d96840 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Turkish) currently translated at 15.0% (94 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/tr/
- - - - -
45e0519f by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Ukrainian) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/uk/
- - - - -
9c93f392 by Yuri Chornoivan at 2022-05-11T13:58:40+03:00
po: update translations
(Ukrainian) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/uk/
- - - - -
30a845f8 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Chinese (Simplified) (zh_CN)) currently translated at 99.0% (619 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/zh_CN/
- - - - -
80af4e57 by Anonymous at 2022-05-11T13:58:40+03:00
po: update translations
(Chinese (Traditional) (zh_TW)) currently translated at 7.8% (49 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/zh_TW/
- - - - -
e0e23dfb by Alexey Tikhonov at 2022-05-12T12:57:43+02:00
SPEC: drop sssd-ipa dependency on sssd-idp
:packaging: sssd-ipa doesn't require sssd-idp
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 386c6d3ea022afc37a16c87d2a07874b808d0dab)
- - - - -
ebda07b9 by Madhuri Upadhye at 2022-05-12T12:58:01+02:00
Test: ipa: remove useless fixture call
remove setup_ipa_client from list as its a session scope
fixture with autouse is true.
Signed-off-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Steeve Goveas <sgoveas at redhat.com>
(cherry picked from commit f7c50980110ce44bbf120351042ed608df34f16e)
- - - - -
53ca6638 by Anuj Borah at 2022-05-12T12:58:19+02:00
Tests: Fix sss_analyzer tests
Fix sss_analyzer tests
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
Reviewed-by: Steeve Goveas <sgoveas at redhat.com>
(cherry picked from commit 72a403e92bcda3969e28f4db2fac6a501d35220a)
- - - - -
7edcd1fa by Anuj Borah at 2022-05-12T12:58:37+02:00
Tests: Enabling ssctl_ldap test cases
copr build of nss-pam-ldapd package would be used
to execute these tests. We no longer need to skip it.
Reviewed-by: Steeve Goveas <sgoveas at redhat.com>
(cherry picked from commit e254ba8fcb2dd4bbccc8c28b33e678eda2749a0b)
- - - - -
deaca2f5 by Steeve Goveas at 2022-05-12T12:58:55+02:00
TEST: Update default debug levels expected in logs
new debug level "SSSDBG_PERF_STAT" is added to show statistical and performance
data and included in "SSSDBG_IMPORTANT_INFO" making it 0x3f7c0
https://github.com/SSSD/sssd/commit/775150b5800611191da85b01c5113b446f997d1b
Reviewed-by: Shridhar Gadekar <sgadekar at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit b9094ee681e4ad43a9c17f880b9bbaf8193a2eb0)
- - - - -
6e92bb2f by Steeve Goveas at 2022-05-12T12:59:25+02:00
TEST: Add missing markers in pytest.ini
Some markers from alltests were missing in pytest.ini causing warning
messages. Add those markers and sorted them alphabetically for
readability.
Reviewed-by: Madhuri Upadhye <mupadhye at redhat.com>
(cherry picked from commit 624ad523af3ad8ec0abe23073d630ae1fc75e3f4)
- - - - -
0ef863f1 by Alexey Tikhonov at 2022-05-12T12:59:43+02:00
sssctl: fixed log message
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 7b1033d10f4a592907f079d51dc80745be2acf56)
- - - - -
64b38715 by Alexey Tikhonov at 2022-05-12T12:59:43+02:00
SDAP: sdap_nested_group_deref_direct_process(): store 'state->members' in a hash table to reduce computational complexity during "new member" check.
Resolves: https://github.com/SSSD/sssd/issues/5134
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit a90ef949e51a4177afcb3128e11867ae7b70f439)
- - - - -
8547e699 by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: move some functions from sysdb to sdap
Some functions which are currently provided by sysdb are only used in
the LDAP provider to process data received from LDAP. In this case it is
about functions which try to determine a suitable name for the object in
the cache. The goal is to be able to use some calls form libldap without
adding a dependency to libldap to the sysdb code.
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit bd08543161d076c9c27f0827fc3746c052f20624)
- - - - -
75a70ac9 by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: rename functions copied from sysdb
The functions copied from sysdb to the sdap code are renamed to remove
the 'sysdb' prefix.
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 3af930e5bb9f46bf88ad579142fe01a422332224)
- - - - -
10f86ad3 by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: replace sysdb_attrs_primary_name() with sdap_get_primary_name()
sdap_get_primary_name() is basically a wrapper for
sysdb_attrs_primary_name(). To remove the sysdb dependency to allow a
different implementation of sdap_get_primary_name() all calls to
sysdb_attrs_primary_name() are replaced by calls to
sdap_get_primary_name().
To be compatible with the parameter list the talloc memory context is
remove from the parameter list of sdap_get_primary_name() and the
function will return a reference to existing memory which should not be
modified.
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit e88559fa88c1f5a4cea089bd3dc7e74d740324d1)
- - - - -
c1531822 by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: move sysdb_attrs_primary_name() into sdap_get_primary_name()
sysdb_attrs_primary_name() is not called directly anymore but only
through sdap_get_primary_name(). The implementation is removed from the
sysdb code and moved into sdap_get_primary_name().
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit e587572b4a3993a330cfe0dcbe57ed2790073713)
- - - - -
19b45201 by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: make sdap_get_primary_name() aware of multi-valued RDNs
The RDN related functions of libldb are not aware of multi-valued RDNs
like e.g. "cn=host.example.net+ipHostNumber=198.168.1.1" as defined in
section 2.3.1 of RFC-4512. To be able to reliable derive a name for the
object in the cache in case the object stored in LDAP has multiple
values for e.g. the 'cn' attribute assigned SSSD must be able to handle
the multi-valued RDNs properly. Since OpenLDAP's libldap allows this the
current implementation is replace by a new one which is using the
decomposed LDAPDN structure returned by ldap_str2dn().
:relnote: SSSD can now handle multi-valued RDNs if a unique name must be
determined with the help of the RDN.
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit bb4e93015c47ae76f6e4d240994f7af7c2525b2d)
- - - - -
676b5dce by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: removed unused dom parameter from sdap_get_primary_name()
For the new implementation the dom parameter is not needed anymore and
can be removed.
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit dd1f4902b8ba4e5a081a77c0faece9bfcdccb697)
- - - - -
26bbaf7f by Sumit Bose at 2022-05-12T13:00:11+02:00
sdap: add tests for sdap_get_primary_name
Resolves: https://github.com/SSSD/sssd/issues/6122
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 952b9bd71762ce9abeae3f506a5f65601e1769f9)
- - - - -
90617845 by Sumit Bose at 2022-05-12T13:00:33+02:00
proxy: lower child count even if there is an error
If the proxy_child_send() request returns an error the number of running
child processes is not updated although most probably SIGKILL was
already send to the child.
Resolves: https://github.com/SSSD/sssd/issues/6114
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 97eabb7ed7b67713fb6f2f27b9c5f26e99d27da8)
- - - - -
2e4786e7 by Sumit Bose at 2022-05-12T13:00:33+02:00
proxy: finish request if proxy_child is terminated
If proxy_child is terminated by a signal, e.g. by the child's watchdog,
the backend is handling the signal but any related tevent request is not
finished. It will eventually finish if the SBus/DBus timeout is
reached.
This patch makes the signal handler aware of the request so that is can
be finished with an error.
Resolves: https://github.com/SSSD/sssd/issues/6114
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 67270a0881cfad4870d1c3929ee4eb7b640291f4)
- - - - -
3cb0dda5 by Sumit Bose at 2022-05-12T13:00:33+02:00
data_provider: add dp_client_cancel_timeout()
Add a call to remove a timeout handler from a sbus_connection.
Resolves: https://github.com/SSSD/sssd/issues/6114
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 4af071af64593c83f3a95180b609c32c470070f6)
- - - - -
7ad0a6d5 by Sumit Bose at 2022-05-12T13:00:33+02:00
proxy: remove DP client timeout handler
Since the proxy_child is using a dedicated Register method for its SBus
connection to the backend it has to remove the generic timeout handler
added during the initial connection by dp_client_init() during its
registration.
Resolves: https://github.com/SSSD/sssd/issues/6114
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 4950bc00b6bb92a13e62da808b99ec9730aff53d)
- - - - -
0bad124d by Steeve Goveas at 2022-05-12T13:16:50+02:00
TEST: Implement time logging for the LDAP queries
Test time logging is enabled on setting debug level 9 or bitmask 0x20000
Test to trigger warning message for long query time
Verifies
Issue: https://github.com/SSSD/sssd/issues/5967
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1925559
Reviewed-by: Madhuri Upadhye <mupadhye at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 45411d8448a435e7d3411f6434895e120ad1ae48)
- - - - -
a86265f7 by Anuj Borah at 2022-05-16T12:39:23+02:00
Tests: Fix ns_account test with clear_sssd_cache
Fix ns_account test with clear_sssd_cache
Reviewed-by: Steeve Goveas <sgoveas at redhat.com>
(cherry picked from commit 91969611fe788c9296ac13305a93d765e8b3af06)
- - - - -
eeaa77a2 by Steeve Goveas at 2022-05-18T15:40:01+02:00
TEST: Add test for memcache SID
Verifies
Issue: #3768
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1245367
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Anuj Borah <aborah at redhat.com>
(cherry picked from commit a45d58c56171ee7aa14726dfed50548637f4489e)
- - - - -
bc14ede7 by Steeve Goveas at 2022-05-18T15:40:01+02:00
TEST: Update and sort ad pytest.ini
Some test markers were missing. Added them and sorted for readability.
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Anuj Borah <aborah at redhat.com>
(cherry picked from commit 686b1c8ce8d8e83ef21a78198d765c94990bbae8)
- - - - -
3dbcb812 by Steeve Goveas at 2022-05-25T12:17:28+02:00
TEST: Install iproute-tc for tc
For tc we need iproute-tc package installed if it is not already
installed. In RHEL9.1 it was installed by default but in 8.7 it is not
present.
Reviewed-by: Anuj Borah <aborah at redhat.com>
(cherry picked from commit abce8dbebcfa14f5e5656facaa2111b74694e1cf)
- - - - -
f20db24a by Pavel Březina at 2022-05-30T12:12:21+02:00
man: add idp indicator
Resolves: https://github.com/SSSD/sssd/issues/6181
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit d550b5f60ccf23f977efd36f30ef6973abdd905d)
- - - - -
0eae7db9 by Pavel Březina at 2022-05-30T12:12:42+02:00
pam_sss_gss: KRB5CCNAME may be NULL
Resolves: https://github.com/SSSD/sssd/issues/6180
:fixes: A regression in pam_sss_gss module causing a failure if
KRB5CCNAME environment variable was not set was fixed.
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Sumit Bose <sbose at redhat.com>
(cherry picked from commit 9aad30711a5928f0e8a3627305b6449291de507f)
- - - - -
80ffa314 by Sumit Bose at 2022-05-30T12:13:07+02:00
ad: add fallback in ad_domain_info_send()
Commit 51e92297157562511baf8902777f02a4aa2e70e6 allowed
ad_domain_info_send() to handle multiple domains by searching for the
matching sdap_domain data. Unfortunately it assumed that the configured
name and the DNS domain name are always matching. This is true for all
sub-domains discovered at runtime by DNS lookups but might not be true
for the domain configured in sssd.conf. Since the configured domain is
the first in the list of sdap_domain data it will be used as a fallback
in case no data could be found by name.
Resolves: https://github.com/SSSD/sssd/issues/6170
Reviewed-by: Iker Pedrosa <ipedrosa at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 71b14474bec82a0c57065ad45915ebfeb9e3d03e)
- - - - -
abac841d by Iker Pedrosa at 2022-06-01T14:55:52+02:00
CI: flake8 move target to pull_request_target
Move flake8 target from pull_request to pull_request_target to be able
to write comments in the PR.
Signed-off-by: Iker Pedrosa <ipedrosa at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 67814634868523c59dec98876bcf34fb97d3dee8)
- - - - -
e7cc73c2 by Iker Pedrosa at 2022-06-01T14:55:54+02:00
CI: update actions version
CodeQL Action v1 is being deprecated and v2 needs to be used instead.
Signed-off-by: Iker Pedrosa <ipedrosa at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
(cherry picked from commit 5c3d60907e773bf2c897a5f305d8eb4cc457727c)
- - - - -
a912c125 by Sumit Bose at 2022-06-02T12:42:31+02:00
ad: make new PAC buffers available
Recently new PAC buffers, PAC_UPN_DNS_INFO_EX, PAC_ATTRIBUTES_INFO,
PAC_REQUESTER_SID were added. With this patch ad_get_data_from_pac() can
return those new buffers as well.
Additionally the information from the PAC_LOGON_INFO and
PAC_UPN_DNS_INFO buffers are checked for consistency and compared with
the user principal name stored in the user object.
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 2d52fffdbda1558407fe51b0ad91c0b5bea7bae9)
- - - - -
d6354e0a by Sumit Bose at 2022-06-02T12:42:31+02:00
tests: add PAC upn_dns_info test
Add basic unit tests for the PAC_UPN_DNS_INFO PAC buffer.
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit e57ab1ea5cb0d10e7b689ef72f5862e125bcb17d)
- - - - -
1c90333b by Sumit Bose at 2022-06-02T12:42:31+02:00
krb5: add krb5_check_pac option
A new option krb5_check_pac for the krb5 provider is added to control
how the PAC is validated. Currently only the option 'present' which
makes the PAC mandatory, is available.
:config: New option krb5_check_pac to control the PAC validation
behavior.
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit a28f8a337b9df61615015c045695fd21e9aab13f)
- - - - -
8e265c76 by Sumit Bose at 2022-06-02T12:42:31+02:00
pac: apply new pac check options
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 6970cb1bfd2e50286956ea311167ac77f78c3ee5)
- - - - -
e7163273 by Sumit Bose at 2022-06-02T12:42:31+02:00
ad: enable the PAC responder implicitly for AD provider
To be able to run the extra consistency checks on the PAC the PAC
responder must be running.
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 30dbecaa9ef6957b74692bf86e34afcf3cafae70)
- - - - -
fcc1bd84 by Sumit Bose at 2022-06-02T12:42:31+02:00
monitor: add implicit_pac_responder option.
The PAC responder is started automatically if the IPA or AD providers
are configured. In case the PAC responder is causing issues the
implicit_pac_responder option is added to disable to automatic start.
:config: New option implicit_pac_responder to control if the PAC
responder is started for the IPA and AD providers, default is 'true'.
Resolves: https://github.com/SSSD/sssd/issues/5868
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 9c12e962e0fcd6e74c9cc844e2e98e0b0dce79fa)
- - - - -
0dc42cba by Sumit Bose at 2022-06-02T12:42:31+02:00
localauth: improve localauth add man page
A man page is added for the Kerberos localauth plugin and the plugin is
using the system's getpwnam_r() to find the user by name instead of
directly talking to SSSD to have the same view as other applications
running on the system.
Resolves: https://github.com/SSSD/sssd/issues/4677
Reviewed-by: Alexey Tikhonov <atikhono at redhat.com>
Reviewed-by: Pavel Březina <pbrezina at redhat.com>
Reviewed-by: Tomáš Halman <thalman at redhat.com>
(cherry picked from commit 4c7f730b858c09e092cdecec973bd20af32b46d4)
- - - - -
2d03e3b1 by 김인수 at 2022-06-02T12:43:26+02:00
po: update translations
(Korean) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ko/
- - - - -
5457584d by Piotr Drąg at 2022-06-02T12:43:26+02:00
po: update translations
(Polish) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/pl/
- - - - -
188d8148 by Elena Mishina at 2022-06-02T12:43:26+02:00
po: update translations
(Russian) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ru/
- - - - -
ccf55aff by 김인수 at 2022-06-02T12:43:26+02:00
po: update translations
(Korean) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/ko/
- - - - -
2a2c0574 by Luna Jernberg at 2022-06-02T12:43:26+02:00
po: update translations
(Swedish) currently translated at 99.5% (622 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/sv/
- - - - -
167f87e5 by Göran Uddeborg at 2022-06-02T12:43:26+02:00
po: update translations
(Swedish) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/sv/
- - - - -
0d7db9e8 by Pavel Borecki at 2022-06-02T12:43:26+02:00
po: update translations
(Czech) currently translated at 100.0% (625 of 625 strings)
Translation: SSSD/SSSD-2-7
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-2-7/cs/
- - - - -
bd5a48bf by Pavel Březina at 2022-06-02T12:53:14+02:00
po: translate sssd_krb5_localauth_plugin.8.xml
- - - - -
1a2754f8 by Pavel Březina at 2022-06-02T12:55:04+02:00
pot: update translations
- - - - -
4c02953f by Pavel Březina at 2022-06-02T13:12:26+02:00
Release sssd-2.7.1
- - - - -
9 changed files:
- .github/workflows/analyze-target.yml
- .github/workflows/ci.yml
- .github/workflows/copr_build.yml
- .github/workflows/copr_cleanup.yml
- .github/workflows/static-code-analysis.yml
- − Jenkinsfile
- Makefile.am
- contrib/sssd.spec.in
- po/bg.po
The diff was not included because it is too large.
View it on GitLab: https://salsa.debian.org/sssd-team/sssd/-/compare/f48eddc3b9224909bfb6be253260335eba80539d...4c02953f909d60efa46cca4dc83d0d202ea35e08
--
View it on GitLab: https://salsa.debian.org/sssd-team/sssd/-/compare/f48eddc3b9224909bfb6be253260335eba80539d...4c02953f909d60efa46cca4dc83d0d202ea35e08
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-sssd-devel/attachments/20220602/849f2ecb/attachment-0001.htm>
More information about the Pkg-sssd-devel
mailing list