[Pkg-sssd-devel] [Git][sssd-team/sssd][master] 2 commits: pac-relax-default-for-pac_check-option.diff: Drop pac_present from default PAC...

[Timo Aaltonen (@tjaalton)]

Timo Aaltonen pushed to branch master at Debian SSSD packaging / sssd


Commits:
954ea61b by Timo Aaltonen at 2022-06-09T10:19:35+03:00
pac-relax-default-for-pac_check-option.diff: Drop pac_present from default PAC check. (Closes: #1012502)

- - - - -
6388f9ae by Timo Aaltonen at 2022-06-09T10:19:41+03:00
releasing package sssd version 2.7.1-2

- - - - -


3 changed files:

- debian/changelog
- + debian/patches/pac-relax-default-for-pac_check-option.diff
- debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,10 @@
+sssd (2.7.1-2) unstable; urgency=medium
+
+  * pac-relax-default-for-pac_check-option.diff: Drop pac_present from
+    default PAC check. (Closes: #1012502)
+
+ -- Timo Aaltonen <tjaalton at debian.org>  Thu, 09 Jun 2022 10:19:37 +0300
+
 sssd (2.7.1-1) unstable; urgency=medium
 
   * New upstream release.


=====================================
debian/patches/pac-relax-default-for-pac_check-option.diff
=====================================
@@ -0,0 +1,40 @@
+From 25d01dd50c100a0038b795f715eaef70b869ff54 Mon Sep 17 00:00:00 2001
+From: Sumit Bose <sbose at redhat.com>
+Date: Wed, 8 Jun 2022 10:11:15 +0200
+Subject: [PATCH] pac: relax default for pac_check option
+
+PAC might not be always present, especially in IPA environments. So the
+default of pac_check should not contain 'pac_present'.
+
+Resolves: https://github.com/SSSD/sssd/issues/5868
+---
+ src/confdb/confdb.h     | 2 +-
+ src/man/sssd.conf.5.xml | 2 +-
+ 2 files changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/confdb/confdb.h b/src/confdb/confdb.h
+index d9fe571ded..83f6be7f9a 100644
+--- a/src/confdb/confdb.h
++++ b/src/confdb/confdb.h
+@@ -181,7 +181,7 @@
+ #define CONFDB_PAC_LIFETIME "pac_lifetime"
+ #define CONFDB_PAC_CHECK "pac_check"
+ #define CONFDB_PAC_CHECK_DEFAULT "no_check"
+-#define CONFDB_PAC_CHECK_IPA_AD_DEFAULT "pac_present, check_upn, check_upn_dns_info_ex"
++#define CONFDB_PAC_CHECK_IPA_AD_DEFAULT "check_upn, check_upn_dns_info_ex"
+ 
+ /* InfoPipe */
+ #define CONFDB_IFP_CONF_ENTRY "config/ifp"
+diff --git a/src/man/sssd.conf.5.xml b/src/man/sssd.conf.5.xml
+index 7054474274..e921ba575c 100644
+--- a/src/man/sssd.conf.5.xml
++++ b/src/man/sssd.conf.5.xml
+@@ -2298,7 +2298,7 @@ pam_gssapi_indicators_map = sudo:pkinit, sudo-i:pkinit
+                         </para>
+                         <para>
+                             Default: no_check (AD and IPA provider
+-                            'pac_present, check_upn, check_upn_dns_info_ex')
++                            'check_upn, check_upn_dns_info_ex')
+                         </para>
+                     </listitem>
+                 </varlistentry>


=====================================
debian/patches/series
=====================================
@@ -1,2 +1,3 @@
 fix-whitespace-test.diff
 default-to-socket-activated-services.diff
+pac-relax-default-for-pac_check-option.diff



View it on GitLab: https://salsa.debian.org/sssd-team/sssd/-/compare/d1ab0d09109e166cbbf52e28f5627a1b2bc10a69...6388f9aeb17dbcc8f77d0b404b7e594f4110b226

-- 
View it on GitLab: https://salsa.debian.org/sssd-team/sssd/-/compare/d1ab0d09109e166cbbf52e28f5627a1b2bc10a69...6388f9aeb17dbcc8f77d0b404b7e594f4110b226
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-sssd-devel/attachments/20220609/e1758cc6/attachment-0001.htm>