Commit - rpms/sssd - 01409e3d4885ce2165ae899a7796174f7ce4c573

    Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout
    
    Resolves: upstream#3588 - sssd_nss consumes more memory until restarted
                              or machine swaps
    Resolves: failure in glibc tests
              https://sourceware.org/bugzilla/show_bug.cgi?id=22530
    Resolves: upstream#3451 - When sssd is configured with id_provider proxy and
                              auth_provider ldap, login fails if the LDAP server
                              is not allowing anonymous binds
    Resolves: upstream#3285 - SSSD needs restart after incorrect clock is
                              corrected with AD
    Resolves: upstream#3586 - Give a more detailed debug and system-log message
                              if krb5_init_context() failed
    Resolves: rhbz#1431153 - SSSD ships a drop-in configuration snippet
                             in /etc/systemd/system
    Backport few upstream features from 1.16.1
    
    (cherry picked from commit 1dedfbb33467bf12b72c935a7140fff52a5584d1)

0001-KCM-Fix-typo-in-comments.patch

file added

+38

0002-Fix-minor-spelling-mistakes.patch

file added

+556

0003-CONFIG-Add-a-new-option-auto_private_groups.patch

file added

+158

0004-CONFDB-Remove-the-obsolete-option-magic_private_grou.patch

file added

+32

0005-SDAP-Allow-the-mpg-flag-for-the-main-domain.patch

file added

+166

0006-LDAP-Turn-group-request-into-user-request-for-MPG-do.patch

file added

+221

0007-SYSDB-Prevent-users-and-groups-ID-collision-in-MPG-d.patch

file added

+96

0008-TESTS-Add-integration-tests-for-the-auto_private_gro.patch

file added

+345

0009-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch ~~0013-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch~~

file renamed

+3 -3

0010-sudo-document-background-activity.patch

file added

+41

0011-MAN-GPO-Security-Filtering-limitation.patch

file added

+40

0012-CI-Ignore-source-file-generated-by-systemtap.patch

file added

+55

0013-sudo-always-use-srv_opts-from-id-context.patch

file added

+63

0014-AD-Remember-last-site-discovered.patch

file added

+108

0015-sysdb-add-functions-to-get-set-client-site.patch

file added

+205

0016-AD-Remember-last-site-discovered-in-sysdb.patch

file added

+160

0017-UTIL-Add-wrapper-function-to-configure-logger.patch

file added

+132

0018-Add-parameter-logger-to-daemons.patch

file added

+829

0019-SYSTEMD-Replace-parameter-debug-to-files-with-DEBUG_.patch

file added

+258

0020-SYSTEMD-Add-environment-file-to-responder-service-fi.patch

file added

+106

0021-UTIL-Hide-and-deprecate-parameter-debug-to-files.patch

file added

+46

0023-LDAP-Bind-to-the-LDAP-server-also-in-the-auth.patch

file added

+212

0024-KCM-Fix-restart-during-after-upgrade.patch ~~0001-KCM-Fix-restart-during-after-upgrade.patch~~

file renamed

+3 -3

0025-sss_client-create-nss_common.h.patch ~~0002-sss_client-create-nss_common.h.patch~~

file renamed

+3 -3

0026-nss-idmap-add-nss-like-calls-with-timeout-and-flags.patch ~~0003-nss-idmap-add-nss-like-calls-with-timeout-and-flags.patch~~

file renamed

+3 -3

0027-NSS-add-_EX-version-of-some-requests.patch ~~0004-NSS-add-_EX-version-of-some-requests.patch~~

file renamed

+3 -3

0028-NSS-add-support-for-SSS_NSS_EX_FLAG_NO_CACHE.patch ~~0005-NSS-add-support-for-SSS_NSS_EX_FLAG_NO_CACHE.patch~~

file renamed

+3 -3

0029-CACHE_REQ-Add-cache_req_data_set_bypass_dp.patch ~~0006-CACHE_REQ-Add-cache_req_data_set_bypass_dp.patch~~

file renamed

+3 -3

0030-nss-make-memcache_delete_entry-public.patch ~~0007-nss-make-memcache_delete_entry-public.patch~~

file renamed

+3 -3

0031-NSS-add-support-for-SSS_NSS_EX_FLAG_INVALIDATE_CACHE.patch ~~0008-NSS-add-support-for-SSS_NSS_EX_FLAG_INVALIDATE_CACHE.patch~~

file renamed

+3 -3

0032-NSS-TESTS-add-unit-tests-for-_EX-requests.patch ~~0009-NSS-TESTS-add-unit-tests-for-_EX-requests.patch~~

file renamed

+3 -3

0033-nss-idmap-add-timeout-version-of-old-sss_nss_-calls.patch ~~0010-nss-idmap-add-timeout-version-of-old-sss_nss_-calls.patch~~

file renamed

+3 -3

0034-nss-idmap-allow-empty-buffer-with-SSS_NSS_EX_FLAG_IN.patch ~~0011-nss-idmap-allow-empty-buffer-with-SSS_NSS_EX_FLAG_IN.patch~~

file renamed

+3 -3

0035-RESP-Add-some-missing-NULL-checks.patch

file added

+79

0036-BUILD-Properly-expand-variables-in-sssd-ifp.service.patch

file added

+50

0037-SYSTEMD-Clean-pid-file-in-corner-cases.patch

file added

+38

0038-CHILD-Pass-information-about-logger-to-children.patch

file added

+197

0039-TOOLS-Double-quote-array-expansions-in-sss_debugleve.patch

file added

+33

0040-TOOLS-Call-exec-for-sss_debuglevel.patch

file added

+31

0041-LDAP-Improve-error-treatment-from-sdap_cli_connect-i.patch

file added

+57

0042-p11_child-return-multiple-certs.patch

file added

+597

0043-PAM-handled-multiple-certs-in-the-responder.patch

file added

+976

0044-pam_sss-refactoring-use-struct-cert_auth_info.patch

file added

+679

0045-p11_child-use-options-to-select-certificate-for-auth.patch

file added

+590

0046-pam-add-prompt-string-for-certificate-authentication.patch

file added

+336

0047-PAM-allow-missing-logon_name-during-certificate-auth.patch

file added

+255

0048-p11_child-add-descriptions-for-error-codes-to-debug-.patch

file added

+275

0049-pam-filter-certificates-in-the-responder-not-in-the-.patch

file added

+356

0050-PAM-add-certificate-s-label-to-the-selection-prompt.patch

file added

+273

0051-SYSDB-Remove-code-causing-a-covscan-warning.patch

file added

+127

0052-SYSDB-Better-debugging-for-email-conflicts.patch

file added

+93

0053-NSS-Use-enum_ctx-as-memory_context-in-_setnetgrent_s.patch

file added

+38

0054-cache_req-Correction-of-cache_req-debug-string-ID-fo.patch

file added

+67

0055-TESTS-Order-list-of-entries-in-some-lists.patch ~~0012-TESTS-Order-list-of-entries-in-some-lists.patch~~

file renamed

+3 -3

0056-TOOLS-Add-a-new-sssctl-command-access-report.patch

file added

+503

0057-dp-use-void-to-express-empty-output-argument-list.patch

file added

+49

0058-dp-add-method-to-refresh-access-control-rules.patch

file added

+191

0059-ipa-implement-method-to-refresh-HBAC-rules.patch

file added

+139

0060-ifp-add-method-to-refresh-access-control-rules-in-do.patch

file added

+157

0061-sssctl-call-dbus-instead-of-pam-to-refresh-HBAC-rule.patch

file added

+199

0062-SPEC-Reduce-build-time-dependencies.patch

file added

+36

0063-WATCHDOG-Restart-providers-with-SIGUSR2-after-time-d.patch

file added

+42

0064-mmap_cache-make-checks-independent-of-input-size.patch

file added

+168

0065-NSS-Fix-covscan-warning.patch

file added

+53

0066-krb5-show-error-message-for-krb5_init_context-failur.patch

file added

+187

0067-responder-Fix-talloc-hierarchy-in-sized_output_name.patch

file added

+58

0068-test_responder-Check-memory-leak-in-sized_output_nam.patch

file added

+57

0069-UTIL-add-find_domain_by_object_name_ex.patch

file added

+81

0070-ipa-handle-users-from-different-domains-in-ipa_resol.patch

file added

+75

0071-overrides-fixes-for-sysdb_invalidate_overrides.patch

file added

+202

0072-ipa-check-for-SYSDB_OVERRIDE_DN-in-process_members-a.patch

file added

+253

0073-IPA-use-cache-searches-in-get_groups_dns.patch

file added

+69

0074-ipa-compare-DNs-instead-of-group-names-in-ipa_s2n_sa.patch

file added

+85

0075-nss-Fix-invalid-enum-nss_status-return-values.patch

file added

+150

0076-confdb-Move-detection-files-to-separate-function.patch

file added

+110

0077-confdb-Fix-starting-of-implicit-files-domain.patch

file added

+96

0078-confdb-Do-not-start-implicit_files-with-proxy-domain.patch

file added

+59

0079-test_files_provider-Regression-test-for-implicit_fil.patch

file added

+73

0502-SYSTEMD-Use-capabilities.patch

file modified

+5 -5

sssd.spec

file modified

+100 -16

tstellar / rpms / sssd

Source Code

01409e3 Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout

Authored and Committed by lslebodn 6 years ago

`01409e3` Resolves: upstream#3523 - ABRT crash - /usr/libexec/sssd/sssd_nss in setnetgrent_result_timeout