026e8e0
%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)
026e8e0
%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}
026e8e0
%{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}
026e8e0
%endif
7a716e3
abb369a
Name: sssd
f151b06
Version: 1.5.1
0ad47aa
Release: 6%{?dist}
abb369a
Group: Applications/System
abb369a
Summary: System Security Services Daemon
94dadd2
License: GPLv3+
026e8e0
URL: http://fedorahosted.org/sssd/
d8a8ec9
Source0: https://fedorahosted.org/released/sssd/%{name}-%{version}.tar.gz
abb369a
BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
abb369a
abb369a
### Patches ###
d12cd5d
Patch0001: 0001-Sanitize-search-filters-for-nested-group-lookups.patch
e8ab291
Patch0002: 0002-Fix-module-registration-with-newer-LDB-libraries.patch
e8ab291
Patch0003: 0003-Make-make-check-look-nice-again.patch
4e1de07
abb369a
### Dependencies ###
abb369a
298ea67
Requires: libldb >= 0.9.3
8b935a1
Requires: libtdb >= 1.1.3
ad368b8
Requires: sssd-client = %{version}-%{release}
7e3a2cd
Requires: cyrus-sasl-gssapi
f151b06
Requires: krb5-libs >= 1.9
9b0ef1c
Requires(post): initscripts chkconfig /sbin/ldconfig
abb369a
Requires(preun):  initscripts chkconfig
2d631b3
Requires(postun): initscripts chkconfig /sbin/ldconfig
abb369a
d41b28e
%global servicename sssd
d41b28e
%global sssdstatedir %{_localstatedir}/lib/sss
d41b28e
%global dbpath %{sssdstatedir}/db
d41b28e
%global pipepath %{sssdstatedir}/pipes
d41b28e
%global pubconfpath %{sssdstatedir}/pubconf
abb369a
abb369a
### Build Dependencies ###
abb369a
abb369a
BuildRequires: autoconf
298ea67
BuildRequires: automake
298ea67
BuildRequires: libtool
298ea67
BuildRequires: m4
7a716e3
%{?fedora:BuildRequires: popt-devel}
336aac3
%if 0%{?rhel} <= 5
336aac3
BuildRequires: popt
336aac3
%endif
336aac3
%if 0%{?rhel} >= 6
336aac3
BuildRequires: popt-devel
336aac3
%endif
abb369a
BuildRequires: libtalloc-devel
026e8e0
BuildRequires: libtevent-devel
abb369a
BuildRequires: libtdb-devel
abb369a
BuildRequires: libldb-devel
9b0ef1c
BuildRequires: libdhash-devel >= 0.4.2
9b0ef1c
BuildRequires: libcollection-devel
9b0ef1c
BuildRequires: libini_config-devel
abb369a
BuildRequires: dbus-devel
abb369a
BuildRequires: dbus-libs
abb369a
BuildRequires: openldap-devel
abb369a
BuildRequires: pam-devel
abb369a
BuildRequires: nss-devel
abb369a
BuildRequires: nspr-devel
740369e
BuildRequires: pcre-devel
298ea67
BuildRequires: libxslt
298ea67
BuildRequires: libxml2
298ea67
BuildRequires: docbook-style-xsl
f151b06
BuildRequires: krb5-devel >= 1.9
8b935a1
BuildRequires: c-ares-devel
7a716e3
BuildRequires: python-devel
026e8e0
BuildRequires: check-devel
026e8e0
BuildRequires: doxygen
6a6c9eb
BuildRequires: libselinux-devel
6a6c9eb
BuildRequires: libsemanage-devel
6a6c9eb
BuildRequires: bind-utils
9b0ef1c
BuildRequires: keyutils-libs-devel
bd215c4
BuildRequires: libnl-devel
9b0ef1c
BuildRequires: nscd
d12cd5d
BuildRequires: gettext-devel
abb369a
abb369a
%description
abb369a
Provides a set of daemons to manage access to remote directories and
abb369a
authentication mechanisms. It provides an NSS and PAM interface toward
abb369a
the system and a pluggable backend system to connect to multiple different
abb369a
account sources. It is also the basis to provide client auditing and policy
abb369a
services for projects like FreeIPA.
abb369a
7a716e3
%package client
7a716e3
Summary: SSSD Client libraries for NSS and PAM
7a716e3
Group: Applications/System
94dadd2
License: LGPLv3+
7a716e3
7a716e3
%description client
7a716e3
Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD
7a716e3
service.
7a716e3
5225c32
%package tools
5225c32
Summary: Userspace tools for use with the SSSD
5225c32
Group: Applications/System
5225c32
License: GPLv3+
5225c32
Requires: sssd = %{version}-%{release}
5225c32
5225c32
%description tools
5225c32
Provides userspace tools for manipulating users, groups, and nested groups in
5225c32
SSSD when using id_provider = local in /etc/sssd/sssd.conf.
5225c32
5225c32
Also provides a userspace tool for generating an obfuscated LDAP password for
5225c32
use with ldap_default_authtok_type = obfuscated_password.
5225c32
abb369a
%prep
abb369a
%setup -q
abb369a
d12cd5d
%patch0001 -p1
e8ab291
%patch0002 -p1
e8ab291
%patch0003 -p1
d12cd5d
abb369a
%build
e8ab291
autoreconf -ivf
298ea67
%configure \
8b935a1
    --with-db-path=%{dbpath} \
8b935a1
    --with-pipe-path=%{pipepath} \
ad368b8
    --with-pubconf-path=%{pubconfpath} \
298ea67
    --with-init-dir=%{_initrddir} \
026e8e0
    --enable-nsslibdir=/%{_lib} \
cfa7be9
    --enable-pammoddir=/%{_lib}/security \
026e8e0
    --disable-static \
9b0ef1c
    --disable-rpath \
9b0ef1c
    --with-test-dir=/dev/shm
276bbb1
276bbb1
make %{?_smp_mflags}
abb369a
026e8e0
%check
9b0ef1c
export CK_TIMEOUT_MULTIPLIER=10
026e8e0
make %{?_smp_mflags} check
9b0ef1c
unset CK_TIMEOUT_MULTIPLIER
026e8e0
abb369a
%install
abb369a
rm -rf $RPM_BUILD_ROOT
abb369a
abb369a
make install DESTDIR=$RPM_BUILD_ROOT
abb369a
d6e2c70
# Prepare language files
9b0ef1c
/usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd
d6e2c70
ad368b8
# Copy default sssd.conf file
d6e2c70
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sssd
026e8e0
install -m600 src/examples/sssd.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.conf
026e8e0
install -m400 src/config/etc/sssd.api.conf $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.conf
026e8e0
install -m400 src/config/etc/sssd.api.d/* $RPM_BUILD_ROOT%{_sysconfdir}/sssd/sssd.api.d/
026e8e0
026e8e0
# Copy default logrotate file
026e8e0
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d
026e8e0
install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd
d6e2c70
6a6c9eb
# Make sure SSSD is able to run on read-only root
6a6c9eb
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
6a6c9eb
install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
6a6c9eb
298ea67
# Remove .la files created by libtool
298ea67
rm -f \
298ea67
    $RPM_BUILD_ROOT/%{_lib}/libnss_sss.la \
298ea67
    $RPM_BUILD_ROOT/%{_lib}/security/pam_sss.la \
298ea67
    $RPM_BUILD_ROOT/%{_libdir}/ldb/memberof.la \
298ea67
    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ldap.la \
8b935a1
    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_proxy.la \
8b935a1
    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_krb5.la \
ad368b8
    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_ipa.la \
026e8e0
    $RPM_BUILD_ROOT/%{_libdir}/sssd/libsss_simple.la \
7a716e3
    $RPM_BUILD_ROOT/%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.la \
7a716e3
    $RPM_BUILD_ROOT/%{python_sitearch}/pysss.la
abb369a
9b0ef1c
# Older versions of rpmbuild can only handle one -f option
9b0ef1c
# So we need to append to the sssd.lang file
336aac3
for file in `ls $RPM_BUILD_ROOT/%{python_sitelib}/*.egg-info 2> /dev/null`
336aac3
do
9b0ef1c
    echo %{python_sitelib}/`basename $file` >> sssd.lang
336aac3
done
7a716e3
d12cd5d
touch sssd_tools.lang
d12cd5d
for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`
d12cd5d
do
d12cd5d
    lang=`echo $man | cut -c 1-2`
d12cd5d
    case `basename $man` in
d12cd5d
        sss_*)
d12cd5d
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang
d12cd5d
        ;;
d12cd5d
        *)
d12cd5d
            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang
d12cd5d
            ;;
d12cd5d
    esac
d12cd5d
done
d12cd5d
abb369a
%clean
abb369a
rm -rf $RPM_BUILD_ROOT
abb369a
9b0ef1c
%files -f sssd.lang
abb369a
%defattr(-,root,root,-)
abb369a
%doc COPYING
ad368b8
%{_initrddir}/%{name}
abb369a
%{_sbindir}/sssd
abb369a
%{_libexecdir}/%{servicename}/
abb369a
%{_libdir}/%{name}/
0ad47aa
%{_libdir}/ldb/modules/ldb/memberof.so
8b935a1
%dir %{sssdstatedir}
8b935a1
%attr(700,root,root) %dir %{dbpath}
8b935a1
%attr(755,root,root) %dir %{pipepath}
ad368b8
%attr(755,root,root) %dir %{pubconfpath}
8b935a1
%attr(700,root,root) %dir %{pipepath}/private
7a716e3
%attr(750,root,root) %dir %{_var}/log/%{name}
a0cdb7e
%attr(700,root,root) %dir %{_sysconfdir}/sssd
276bbb1
%config(noreplace) %{_sysconfdir}/sssd/sssd.conf
026e8e0
%config(noreplace) %{_sysconfdir}/logrotate.d/sssd
6a6c9eb
%config(noreplace) %{_sysconfdir}/rwtab.d/sssd
a0cdb7e
%config %{_sysconfdir}/sssd/sssd.api.conf
a0cdb7e
%attr(700,root,root) %dir %{_sysconfdir}/sssd/sssd.api.d
a0cdb7e
%config %{_sysconfdir}/sssd/sssd.api.d/
7a716e3
%{_mandir}/man5/sssd.conf.5*
d6e2c70
%{_mandir}/man5/sssd-ipa.5*
7a716e3
%{_mandir}/man5/sssd-krb5.5*
7a716e3
%{_mandir}/man5/sssd-ldap.5*
026e8e0
%{_mandir}/man5/sssd-simple.5*
7a716e3
%{_mandir}/man8/sssd.8*
7a716e3
%{python_sitearch}/pysss.so
a0cdb7e
%{python_sitelib}/*.py*
7a716e3
d12cd5d
%files client -f sssd_tools.lang
fba27f0
%defattr(-,root,root,-)
026e8e0
%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER
7a716e3
/%{_lib}/libnss_sss.so.2
7a716e3
/%{_lib}/security/pam_sss.so
cfa7be9
%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
7a716e3
%{_mandir}/man8/pam_sss.8*
9b0ef1c
%{_mandir}/man8/sssd_krb5_locator_plugin.8*
026e8e0
5225c32
%files tools
5225c32
%defattr(-,root,root,-)
5225c32
%doc COPYING
5225c32
%{_sbindir}/sss_useradd
5225c32
%{_sbindir}/sss_userdel
5225c32
%{_sbindir}/sss_usermod
5225c32
%{_sbindir}/sss_groupadd
5225c32
%{_sbindir}/sss_groupdel
5225c32
%{_sbindir}/sss_groupmod
5225c32
%{_sbindir}/sss_groupshow
5225c32
%{_sbindir}/sss_obfuscate
5225c32
%{_mandir}/man8/sss_groupadd.8*
5225c32
%{_mandir}/man8/sss_groupdel.8*
5225c32
%{_mandir}/man8/sss_groupmod.8*
5225c32
%{_mandir}/man8/sss_groupshow.8*
5225c32
%{_mandir}/man8/sss_useradd.8*
5225c32
%{_mandir}/man8/sss_userdel.8*
5225c32
%{_mandir}/man8/sss_usermod.8*
5225c32
%{_mandir}/man8/sss_obfuscate.8*
5225c32
abb369a
%post
abb369a
/sbin/ldconfig
abb369a
/sbin/chkconfig --add %{servicename}
abb369a
bd215c4
if [ $1 -ge 1 ] ; then
bd215c4
    /sbin/service %{servicename} condrestart 2>&1 > /dev/null
bd215c4
fi
bd215c4
abb369a
%preun
abb369a
if [ $1 = 0 ]; then
abb369a
    /sbin/service %{servicename} stop 2>&1 > /dev/null
abb369a
    /sbin/chkconfig --del %{servicename}
abb369a
fi
abb369a
3f78644
%postun -p /sbin/ldconfig
abb369a
d6e2c70
%post client -p /sbin/ldconfig
d6e2c70
d6e2c70
%postun client -p /sbin/ldconfig
d6e2c70
abb369a
%changelog
0ad47aa
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-6
0ad47aa
- Fix memberOf install path
0ad47aa
e8ab291
* Fri Feb 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-5
e8ab291
- Add support for libldb 1.0.0
e8ab291
8923e26
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.5.1-4
8923e26
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
8923e26
d12cd5d
* Tue Feb 01 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-3
d12cd5d
- Fix nested group member filter sanitization for RFC2307bis
d12cd5d
- Put translated tool manpages into the sssd-tools subpackage
d12cd5d
7e3a2cd
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-2
7e3a2cd
- Restore Requires: cyrus-sasl-gssapi as it is not auto-detected during
7e3a2cd
- rpmbuild
7e3a2cd
f151b06
* Thu Jan 27 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.1-1
f151b06
- New upstream release 1.5.1
f151b06
- Addresses CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
f151b06
- Vast performance improvements when enumerate = true
f151b06
- All PAM actions will now perform a forced initgroups lookup instead of just
f151b06
- a user information lookup
f151b06
-   This guarantees that all group information is available to other
f151b06
-   providers, such as the simple provider.
f151b06
- For backwards-compatibility, DNS lookups will also fall back to trying the
f151b06
- SSSD domain name as a DNS discovery domain.
f151b06
- Support for more password expiration policies in LDAP
f151b06
-    389 Directory Server
f151b06
-    FreeIPA
f151b06
-    ActiveDirectory
f151b06
- Support for ldap_tls_{cert,key,cipher_suite} config options
f151b06
-Assorted bugfixes
f151b06
3a15e92
* Tue Jan 11 2011 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
3a15e92
- CVE-2010-4341 - DoS in sssd PAM responder can prevent logins
3a15e92
5225c32
* Wed Dec 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-1
5225c32
- New upstream release 1.5.0
5225c32
- Fixed issues with LDAP search filters that needed to be escaped
5225c32
- Add Kerberos FAST support on platforms that support it
5225c32
- Reduced verbosity of PAM_TEXT_INFO messages for cached credentials
5225c32
- Added a Kerberos access provider to honor .k5login
5225c32
- Addressed several thread-safety issues in the sss_client code
5225c32
- Improved support for delayed online Kerberos auth
5225c32
- Significantly reduced time between connecting to the network/VPN and
5225c32
- acquiring a TGT
5225c32
- Added feature for automatic Kerberos ticket renewal
5225c32
- Provides the kerberos ticket for long-lived processes or cron jobs
5225c32
- even when the user logs out
5225c32
- Added several new features to the LDAP access provider
5225c32
- Support for 'shadow' access control
5225c32
- Support for authorizedService access control
5225c32
- Ability to mix-and-match LDAP access control features
5225c32
- Added an option for a separate password-change LDAP server for those
5225c32
- platforms where LDAP referrals are not supported
5225c32
- Added support for manpage translations
5225c32
5225c32
069ad40
* Thu Nov 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-3
069ad40
- Solve a shutdown race-condition that sometimes left processes running
069ad40
- Resolves: rhbz#606887 - SSSD stops on upgrade
069ad40
4e1de07
* Tue Nov 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-2
4e1de07
- Log startup errors to the syslog
4e1de07
- Allow cache cleanup to be disabled in sssd.conf
4e1de07
9d5bcde
* Mon Nov 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.1-1
9d5bcde
- New upstream release 1.4.1
9d5bcde
- Add support for netgroups to the proxy provider
9d5bcde
- Fixes a minor bug with UIDs/GIDs >= 2^31
9d5bcde
- Fixes a segfault in the kerberos provider
9d5bcde
- Fixes a segfault in the NSS responder if a data provider crashes
9d5bcde
- Correctly use sdap_netgroup_search_base
9d5bcde
75efc48
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-2
75efc48
- Fix incorrect tarball URL
75efc48
9b0ef1c
* Mon Oct 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.4.0-1
9b0ef1c
- New upstream release 1.4.0
9b0ef1c
- Added support for netgroups to the LDAP provider
9b0ef1c
- Performance improvements made to group processing of RFC2307 LDAP servers
9b0ef1c
- Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin
9b0ef1c
- Build-system improvements to support Gentoo
9b0ef1c
- Split out several libraries into the ding-libs tarball
9b0ef1c
- Manpage reviewed and updated
9b0ef1c
2d631b3
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-35
2d631b3
- Fix pre and post script requirements
2d631b3
3f78644
* Mon Oct 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-34
3f78644
- Resolves: rhbz#606887 - sssd stops on upgrade
3f78644
8cdc9d4
* Fri Oct 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-33
8cdc9d4
- Resolves: rhbz#626205 - Unable to unlock screen
8cdc9d4
d19c240
* Tue Sep 28 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-32
c99e02a
- Resolves: rhbz#637955 - libini_config-devel needs libcollection-devel but
c99e02a
-                         doesn't require it
d19c240
cfa7be9
* Thu Sep 16 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-31
cfa7be9
- Resolves: rhbz#632615 - the krb5 locator plugin isn't packaged for multilib
cfa7be9
8c665d0
* Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.3.0-30
8c665d0
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
8c665d0
-                           against LDAP
8c665d0
eb2fc3c
* Thu Jul 22 2010 David Malcolm <dmalcolm@redhat.com> - 1.2.91-21
eb2fc3c
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
eb2fc3c
bd215c4
* Fri Jul 09 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.91-20
bd215c4
- New upstream version 1.2.91 (1.3.0rc1)
bd215c4
- Improved LDAP failover
bd215c4
- Synchronous sysdb API (provides performance enhancements)
bd215c4
- Better online reconnection detection
bd215c4
d41b28e
* Mon Jun 21 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
d41b28e
- New stable upstream version 1.2.1
d41b28e
- Resolves: rhbz#595529 - spec file should eschew %%define in favor of
d41b28e
-                         %%global
d41b28e
- Resolves: rhbz#593644 - Empty list of simple_allow_users causes sssd service
d41b28e
-                         to fail while restart.
d41b28e
- Resolves: rhbz#599026 - Makefile typo causes SSSD not to use the kernel
d41b28e
-                         keyring
d41b28e
- Resolves: rhbz#599724 - sssd is broken on Rawhide
d41b28e
d5f2e4a
* Mon May 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
d5f2e4a
- New stable upstream version 1.2.0
d5f2e4a
- Support ServiceGroups for FreeIPA v2 HBAC rules
d5f2e4a
- Fix long-standing issue with auth_provider = proxy
d5f2e4a
- Better logging for TLS issues in LDAP
d5f2e4a
439d34e
* Tue May 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
439d34e
- New LDAP access provider allows for filtering user access by LDAP attribute
439d34e
- Reduced default timeout for detecting offline status with LDAP
439d34e
- GSSAPI ticket lifetime made configurable
439d34e
- Better offline->online transition support in Kerberos
439d34e
6a6c9eb
* Fri May 07 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
6a6c9eb
- Release new upstream version 1.1.91
6a6c9eb
- Enhancements when using SSSD with FreeIPA v2
6a6c9eb
- Support for deferred kinit
6a6c9eb
- Support for DNS SRV records for failover
6a6c9eb
e5b19bf
* Fri Apr 02 2010 Simo Sorce <ssorce@redhat.com> - 1.1.1-3
e5b19bf
- Bump up release number to avoid library sub-packages version issues with
e5b19bf
  previous releases.
e5b19bf
db77daa
* Thu Apr 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
db77daa
- New upstream release 1.1.1
db77daa
- Fixed the IPA provider (which was segfaulting at start)
db77daa
- Fixed a bug in the SSSDConfig API causing some options to revert to
db77daa
- their defaults
db77daa
- This impacted the Authconfig UI
db77daa
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
db77daa
58c745d
* Tue Mar 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
58c745d
- Release SSSD 1.1.0 final
58c745d
- Fix two potential segfaults
58c745d
- Fix memory leak in monitor
58c745d
- Better error message for unusable confdb
58c745d
026e8e0
* Wed Mar 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
026e8e0
- Release candidate for SSSD 1.1
026e8e0
- Add simple access provider
026e8e0
- Create subpackages for libcollection, libini_config, libdhash and librefarray
026e8e0
- Support IPv6
026e8e0
- Support LDAP referrals
026e8e0
- Fix cache issues
026e8e0
- Better feedback from PAM when offline
026e8e0
7362f8c
* Wed Feb 24 2010 Stephen Gallagehr <sgallagh@redhat.com> - 1.0.5-2
7362f8c
- Rebuild against new libtevent
7362f8c
94dadd2
* Fri Feb 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.5-1
94dadd2
- Fix licenses in sources and on RPMs
94dadd2
48e4ae8
* Mon Jan 25 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.4-1
48e4ae8
- Fix regression on 64-bit platforms
48e4ae8
2600cc3
* Fri Jan 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
2600cc3
- Fixes link error on platforms that do not do implicit linking
2600cc3
- Fixes double-free segfault in PAM
2600cc3
- Fixes double-free error in async resolver
2600cc3
- Fixes support for TCP-based DNS lookups in async resolver
2600cc3
- Fixes memory alignment issues on ARM processors
2600cc3
- Manpage fixes
2600cc3
23f12b7
* Thu Jan 14 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
23f12b7
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
23f12b7
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
23f12b7
- Several segfault bugfixes
23f12b7
2de26e9
* Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
2de26e9
- Fix CVE-2010-0014
2de26e9
d9fd9ee
* Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
d9fd9ee
- Patch SSSDConfig API to address
d9fd9ee
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
d9fd9ee
f5d8b9b
* Fri Dec 18 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
f5d8b9b
- New upstream stable release 1.0.0
f5d8b9b
336aac3
* Fri Dec 11 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.1-1
336aac3
- New upstream bugfix release 0.99.1
336aac3
ad368b8
* Mon Nov 30 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.0-1
ad368b8
- New upstream release 0.99.0
ad368b8
9b52793
* Tue Oct 27 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
9b52793
- Fix segfault in sssd_pam when cache_credentials was enabled
9b52793
- Update the sample configuration
9b52793
- Fix upgrade issues caused by data provider service removal
9b52793
04c1b54
* Mon Oct 26 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-2
04c1b54
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD
04c1b54
d6e2c70
* Fri Oct 23 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-1
d6e2c70
- New upstream release 0.7.0
d6e2c70
fba27f0
* Thu Oct 15 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-2
fba27f0
- Fix missing file permissions for sssd-clients
fba27f0
a0cdb7e
* Tue Oct 13 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
a0cdb7e
- Add SSSDConfig API
a0cdb7e
- Update polish translation for 0.6.0
a0cdb7e
- Fix long timeout on ldap operation
a0cdb7e
- Make dp requests more robust
a0cdb7e
4067ebb
* Tue Sep 29 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
4067ebb
- Ensure that the configuration upgrade script always writes the config
4067ebb
  file with 0600 permissions
4067ebb
- Eliminate an infinite loop in group enumerations
4067ebb
7a716e3
* Mon Sep 28 2009 Sumit Bose <sbose@redhat.com> - 0.6.0-0
7a716e3
- New upstream release 0.6.0
7a716e3
8b935a1
* Mon Aug 24 2009 Simo Sorce <ssorce@redhat.com> - 0.5.0-0
8b935a1
- New upstream release 0.5.0
8b935a1
2cae3a8
* Wed Jul 29 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
2cae3a8
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
2cae3a8
  without a password. (Patch by Stephen Gallagher)
2cae3a8
56d52b4
* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.1-3
56d52b4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
56d52b4
7522c31
* Mon Jun 22 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-2
7522c31
- Fix a couple of segfaults that may happen on reload
7522c31
d0eb246
* Thu Jun 11 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-1
d0eb246
- add missing configure check that broke stopping the daemon
d0eb246
- also fix default config to add a missing required option
d0eb246
298ea67
* Mon Jun  8 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-0
298ea67
- latest upstream release.
298ea67
- also add a patch that fixes debugging output (potential segfault)
298ea67
e034caf
* Mon Apr 20 2009 Simo Sorce <ssorce@redhat.com> - 0.3.2-2
e034caf
- release out of the official 0.3.2 tarball
e034caf
6f3fcee
* Mon Apr 20 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
6f3fcee
- bugfix release 0.3.2
6f3fcee
- includes previous release patches
6f3fcee
- change permissions of the /etc/sssd/sssd.conf to 0600
6f3fcee
d4c7182
* Tue Apr 14 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-2
d4c7182
- Add last minute bug fixes, found in testing the package
d4c7182
9797cfd
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-1
9797cfd
- Version 0.3.1
9797cfd
- includes previous release patches
9797cfd
9afc8fc
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-2
9afc8fc
- Try to fix build adding automake as an explicit BuildRequire
abd724a
- Add also a couple of last minute patches from upstream
9afc8fc
276bbb1
* Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-1
276bbb1
- Version 0.3.0
276bbb1
- Provides file based configuration and lots of improvements
276bbb1
a85a961
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.1-1
a85a961
- Version 0.2.1
a85a961
4f14304
* Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.0-1
4f14304
- Version 0.2.0
4f14304
abb369a
* Sun Mar 08 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-5.20090309git691c9b3
abb369a
- package git snapshot
abb369a
abb369a
* Fri Mar 06 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-4
abb369a
- fixed items found during review
abb369a
- added initscript
abb369a
abb369a
* Thu Mar 05 2009 Sumit Bose <sbose@redhat.com> - 0.1.0-3
abb369a
- added sss_client
abb369a
abb369a
* Mon Feb 23 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-2
abb369a
- Small cleanup and fixes in the spec file
abb369a
abb369a
* Thu Feb 12 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.1.0-1
abb369a
- Initial release (based on version 0.1.0 upstream code)