[Pkg-sssd-devel] sssd: Changes to 'refs/tags/debian/1.15.2-1'
Timo Aaltonen
tjaalton at moszumanska.debian.org
Mon Mar 20 13:18:04 UTC 2017
Tag 'debian/1.15.2-1' created by Timo Aaltonen <tjaalton at debian.org> at 2017-03-20 13:17 +0000
tagging package sssd version debian/1.15.2-1
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=3CsS
-----END PGP SIGNATURE-----
Changes since debian/1.15.0-3:
Fabiano Fidêncio (18):
IFP: Update ifp_iface_generated.c
MONITOR: Wrap up sending sd_notify "ready" into a new function
MONITOR: Don't timeout if using local provider + socket-activated responders
MONITOR: Don't return an error in case we fail to register a service
SYSTEMD: Add "After=sssd.service" to the responders' sockets units
SYSTEMD: Avoid starting a responder socket in case SSSD is not started
SYSTEMD: Don't mix up responders' socket and monitor activation
SYSTEMD: Force responders to refuse manual start
CACHE_REQ: Add cache_req_data_set_bypass_cache()
PAM: Use cache_req to perform initgroups lookups
TESTS: Adapt pam-srv-tests to deal with cache_req related changes
RESPONDER: Wrap up the code to setup the idle timeout
SECRETS: Shutdown the responder in case it becomes idle
CACHE_REQ: Move cache_req_next_domain() into a new tevent request
CACHE_REQ: Check the caches first
NSS: Don't set SocketUser/SocketGroup as "sssd" in sssd-nss.socket
NSS: Ensure the NSS socket is started before any other services' sockets
NSS: Don't call chown on NSS service's ExecStartPre
Ignacio Reguero (1):
UTIL: first letter of user name template for override_homedir
Jakub Hrozek (51):
Updating the version to track the 1.15.1 release
AD: Use ad_domain to match forest root domain, not the configured domain from sssd.conf
SUDO: Only store lowercased attribute value once
NEGCACHE: Add API to reset all users and groups
NSS: Add sbus interface to clear memory cache
UTIL: Add a new domain state called DOM_INCONSISTENT
RESPONDER: Add a responder sbus interface to set domain state
RESPONDER: A sbus interface to reset negatively cached users and groups
DP: Add internal DP interface to set domain state
DP: Add internal interface to reset negative cache from DP
DP: Add internal interface to invalidate memory cache from DP
RESPONDER: Use the NEED_CHECK_DOMAIN macro
RESPONDER: Include the files provider in NEEDS_CHECK_PROVIDER
RESPONDER: Contact inconsistent domains
UTIL: Add a generic inotify module
CONFDB: Re-enable the files provider
FILES: Add the files provider
CONFDB: Make pwfield configurable per-domain
CONFDB: The files domain defaults to "x" as pwfield
MAN: Document the pwfield configuration option
TESTS: move helper fixtures to back up and restore a file to a utility module
TESTS: add a helper module with shared NSS constants
TESTS: Add a module to call nss_sss's getpw* from tests
TESTS: Add a module to call nss_sss's getgr* from tests
TESTS: Add files provider integration tests
MONITOR: Remove checks for sssd.conf changes
MONITOR: Use the common inotify code to watch resolv.conf
MAN: Add documentation for the files provider
EXAMPLES: Do not point to id_provider=local
SBUS: Document how to free the result of sbus_create_message
FILES: Fix reallocation logic
TESTS: Remove unused import
DOC: Deprecate README, add README.md
MONITOR: Enable an implicit files domain if one is not configured
TESTS: Enable the files domain for all integration tests
TESTS: Test the files domain autoconfiguration
CONFDB: Refactor reading the config file
CONFDB: If no configuration file is provided, create a fallback configuration
UTIL: Store UPN suffixes when creating a new subdomain
SYSDB: When searching for UPNs, search either the whole DB or only the given domain
CACHE_REQ: Only search the given domain when looking up entries by UPN
Updating translations for the 1.15.1 release
Updating the version for the 1.15.2 release
Allow manual start for sssd-ifp
NSS: Fix invalidating memory cache for subdomain users
UTIL: Add a new macro SAFEALIGN_MEMCPY_CHECK
UTIL: Add a generic iobuf module
BUILD: Detect libcurl during configure
UTIL: Add a libtevent libcurl wrapper
TESTS: test the curl wrapper with a command-line tool
Updating the translations for the 1.15.2 release
Justin Stephenson (6):
FAILOVER: Improve port status log messages
SUDO: Add skip_entry boolean to sudo conversions
TESTS: Add to IPA DN test
DYNDNS: Update PTR record after non-fatal error
DYNDNS: Correct debug log message of realm
MAN: Add dyndns_auth option
Lukas Slebodnik (16):
BUILD: Fix linking of test_wbc_calls
Suppres implicit-fallthrough from gcc 7
pam_sss: Suppress warning format-truncation
TOOLS: Fix warning format-truncation
sssctl: Fix warning may be used uninitialized
ldap_child: Fix use after free
SYSTEMD: Update journald drop-in file
Partially revert "CONFIG: Use default config when none provided"
BUILD: Fix linking of test_sdap_initgr
intg: Fix python3 issues
FILES: Remove unnecessary check
Update link to commit template
Use pagure links as a reference to upstream
test_secrets: Fail in child if sssd_secrets cannot start
test_utils: Add test coverage for %l in override_homedir
util-test: Extend unit test for sss_filter_sanitize_ex
Michal Židek (4):
data_provider: Fix typo in DEBUG message
SUBDOMAINS: Configurable search bases
SUBDOMAINS: Allow options ad(_backup)_server
MAN: Add trusted domain section man entry
Pavel Březina (21):
SBUS: remove unused symbols
SBUS: use sss_ptr_hash for opath table
SBUS: use sss_ptr_hash for nodes table
SBUS: use sss_ptr_hash for signals table
ssh: fix number of output certificates
ssh: do not create again fq name
sss_parse_inp_send: provide default_domain as parameter
cache_req: add ability to not use default domain suffix
cache_req: search user by name with attrs
cache_req: add api to create ldb_result from message
cache_req: move dp request to plugin
cache_req: add host by name search
ssh: rewrite ssh responder to use cache_req
ssh: fix typo
cache_req: always go to dp first when looking up host
NSS: Rename the interface to invalidate memory cache initgroup records for consistency
CONFDB: The files provider always enumerates
cache_req: use rctx as memory context during midpoint refresh
CACHE_REQ: Make cache_req_{create_and_,}add_result() more generic
CACHE_REQ: Move result manipulation into a separate module
CACHE_REQ: shortcut if object is found
Petr Čech (7):
LDAP: Better logging message
SYSDB: Removing of sysdb_try_to_find_expected_dn()
TEST: create_multidom_test_ctx() extending
TESTS: Tests for sdap_search_initgr_user_in_batch
IPA_SUDO: Unused value fix
sss_cache: User/groups invalidation in domain cache
PROXY: Remove duplicit users from group
Sumit Bose (24):
sdap_extend_map: make sure memory can be freed
check_duplicate: check name member before using it
pam_sss: check conversation callback
PAM: store user object in the preq context
PAM: fix memory leak in pam_sss
PAM: use sentinel error code in PAM tests
utils: new error codes
LDAP/proxy: tell frontend that Smartcard auth is not supported
authtok: enhance support for Smartcard auth blobs
PAM: forward Smartcard credentials to backends
p11: return name of PKCS#11 module and key id to pam_sss
pam: enhance Smartcard authentication token
KRB5: allow pkinit pre-authentication
authtok: fix tests on big-endian
pam: use authtok from PAM stack if available
cache_req: use own namespace for UPNs
PAM: Improve debugging on smartcard creds forward
sysdb: allow multiple results for searches by certificate
cache_req: allow multiple matches for searches by certificate
ifp: add ListByCertificate
ifp: add FindByNameAndCertificate
PAM: allow muliple users mapped to a certificate
nss: ensure that SSS_NSS_GETNAMEBYCERT only returns a unique match
IPA: get overrides for all users found by certificate
Thorsten Scherf (1):
Fixed typo in debug output
Timo Aaltonen (7):
control: Demote adcli to sssd-ad suggests.
rules, common.install: Fix sssd_krb5_locator_plugin install path. (LP: #1664566)
Merge branch 'upstream'
update the changelog
control, copyright, watch: Update upstream URLs.
common.install: Add libsss_files and socket activation helper.
releasing package sssd version 1.15.2-1
Victor Tapia (1):
UTIL: Sanitize newline and carriage return characters.
---
.git-commit-template | 2
Makefile.am | 172 +
README | 43
README.md | 28
configure.ac | 25
contrib/ci/deps.sh | 2
contrib/sssd.spec.in | 9
contrib/suse/sssd.spec.in | 2
debian/changelog | 11
debian/control | 4
debian/copyright | 2
debian/rules | 2
debian/sssd-common.install | 5
debian/watch | 4
po/bg.po | 798 ++---
po/ca.po | 798 ++---
po/de.po | 798 ++---
po/es.po | 798 ++---
po/eu.po | 798 ++---
po/fr.po | 798 ++---
po/hu.po | 798 ++---
po/id.po | 798 ++---
po/it.po | 798 ++---
po/ja.po | 798 ++---
po/nb.po | 798 ++---
po/nl.po | 798 ++---
po/pl.po | 798 ++---
po/pt.po | 798 ++---
po/pt_BR.po | 798 ++---
po/ru.po | 798 ++---
po/sssd.pot | 798 ++---
po/sv.po | 798 ++---
po/tg.po | 798 ++---
po/tr.po | 798 ++---
po/uk.po | 798 ++---
po/zh_CN.po | 798 ++---
po/zh_TW.po | 798 ++---
src/conf_macros.m4 | 13
src/confdb/confdb.c | 212 +
src/confdb/confdb.h | 11
src/confdb/confdb_setup.c | 208 -
src/config/SSSDConfig/__init__.py.in | 2
src/config/SSSDConfigTest.py | 4
src/config/cfg_rules.ini | 9
src/config/etc/sssd.api.conf | 2
src/config/setup.py.in | 2
src/db/sysdb.h | 18
src/db/sysdb_ops.c | 93
src/db/sysdb_private.h | 1
src/db/sysdb_search.c | 7
src/db/sysdb_subdomains.c | 343 --
src/db/sysdb_sudo.c | 17
src/examples/sssd.conf | 4
src/external/inotify.m4 | 2
src/external/libcurl.m4 | 38
src/lib/idmap/sss_idmap.pc.in | 2
src/lib/ipa_hbac/ipa_hbac.pc.in | 2
src/lib/sifp/sss_simpleifp.pc.in | 2
src/man/Makefile.am | 11
src/man/include/experimental.xml | 2
src/man/include/override_homedir.xml | 4
src/man/include/upstream.xml | 2
src/man/pam_sss.8.xml | 24
src/man/po/br.po | 1392 +++++----
src/man/po/ca.po | 1472 +++++----
src/man/po/cs.po | 1398 +++++----
src/man/po/de.po | 1475 +++++----
src/man/po/es.po | 1472 +++++----
src/man/po/eu.po | 1388 +++++----
src/man/po/fr.po | 1475 +++++----
src/man/po/ja.po | 1470 +++++----
src/man/po/lv.po | 1394 +++++----
src/man/po/nl.po | 1390 +++++----
src/man/po/po4a.cfg | 1
src/man/po/pt.po | 1410 +++++----
src/man/po/pt_BR.po | 1410 +++++----
src/man/po/ru.po | 1390 +++++----
src/man/po/sssd-docs.pot | 1346 +++++----
src/man/po/tg.po | 1390 +++++----
src/man/po/uk.po | 1478 +++++-----
src/man/po/zh_CN.po | 1390 +++++----
src/man/sssd-ad.5.xml | 15
src/man/sssd-files.5.xml | 88
src/man/sssd-ipa.5.xml | 15
src/man/sssd.conf.5.xml | 68
src/monitor/monitor.c | 540 +--
src/monitor/monitor.h | 3
src/p11_child/p11_child_nss.c | 55
src/providers/ad/ad_common.c | 274 +
src/providers/ad/ad_common.h | 22
src/providers/ad/ad_id.c | 1
src/providers/ad/ad_pac.c | 4
src/providers/ad/ad_subdomains.c | 33
src/providers/be_dyndns.c | 6
src/providers/data_provider.h | 6
src/providers/data_provider/dp.h | 14
src/providers/data_provider/dp_resp_client.c | 191 +
src/providers/data_provider_be.c | 4
src/providers/fail_over.c | 12
src/providers/files/files_id.c | 179 +
src/providers/files/files_init.c | 92
src/providers/files/files_ops.c | 806 +++++
src/providers/files/files_private.h | 74
src/providers/ipa/ipa_id.c | 160 -
src/providers/ipa/ipa_subdomains_id.c | 8
src/providers/ipa/ipa_subdomains_server.c | 46
src/providers/ipa/ipa_sudo_conversion.c | 54
src/providers/krb5/krb5_auth.c | 19
src/providers/krb5/krb5_child.c | 290 +
src/providers/krb5/krb5_child_handler.c | 8
src/providers/ldap/ldap_auth.c | 11
src/providers/ldap/ldap_child.c | 26
src/providers/ldap/ldap_id.c | 2
src/providers/ldap/sdap.c | 15
src/providers/ldap/sdap.h | 25
src/providers/ldap/sdap_async_initgroups.c | 28
src/providers/ldap/sdap_dyndns.c | 3
src/providers/ldap/sdap_idmap.c | 1
src/providers/proxy/proxy_auth.c | 8
src/providers/proxy/proxy_id.c | 154 +
src/python/pyhbac.c | 1
src/responder/common/cache_req/cache_req.c | 702 ++--
src/responder/common/cache_req/cache_req.h | 39
src/responder/common/cache_req/cache_req_data.c | 51
src/responder/common/cache_req/cache_req_plugin.h | 45
src/responder/common/cache_req/cache_req_private.h | 37
src/responder/common/cache_req/cache_req_result.c | 239 +
src/responder/common/cache_req/cache_req_search.c | 129
src/responder/common/cache_req/plugins/cache_req_common.c | 40
src/responder/common/cache_req/plugins/cache_req_enum_groups.c | 25
src/responder/common/cache_req/plugins/cache_req_enum_svc.c | 25
src/responder/common/cache_req/plugins/cache_req_enum_users.c | 25
src/responder/common/cache_req/plugins/cache_req_group_by_filter.c | 26
src/responder/common/cache_req/plugins/cache_req_group_by_id.c | 27
src/responder/common/cache_req/plugins/cache_req_group_by_name.c | 27
src/responder/common/cache_req/plugins/cache_req_host_by_name.c | 121
src/responder/common/cache_req/plugins/cache_req_initgroups_by_name.c | 27
src/responder/common/cache_req/plugins/cache_req_initgroups_by_upn.c | 26
src/responder/common/cache_req/plugins/cache_req_netgroup_by_name.c | 26
src/responder/common/cache_req/plugins/cache_req_object_by_id.c | 26
src/responder/common/cache_req/plugins/cache_req_object_by_name.c | 26
src/responder/common/cache_req/plugins/cache_req_object_by_sid.c | 25
src/responder/common/cache_req/plugins/cache_req_svc_by_name.c | 26
src/responder/common/cache_req/plugins/cache_req_svc_by_port.c | 26
src/responder/common/cache_req/plugins/cache_req_user_by_cert.c | 29
src/responder/common/cache_req/plugins/cache_req_user_by_filter.c | 26
src/responder/common/cache_req/plugins/cache_req_user_by_id.c | 27
src/responder/common/cache_req/plugins/cache_req_user_by_name.c | 58
src/responder/common/cache_req/plugins/cache_req_user_by_upn.c | 37
src/responder/common/iface/responder_domain.c | 73
src/responder/common/iface/responder_iface.c | 43
src/responder/common/iface/responder_iface.h | 42
src/responder/common/iface/responder_iface.xml | 19
src/responder/common/iface/responder_iface_generated.c | 118
src/responder/common/iface/responder_iface_generated.h | 84
src/responder/common/iface/responder_ncache.c | 41
src/responder/common/negcache.c | 92
src/responder/common/negcache.h | 6
src/responder/common/responder.h | 32
src/responder/common/responder_common.c | 111
src/responder/common/responder_dp.c | 81
src/responder/common/responder_dp_ssh.c | 155 +
src/responder/common/responder_get_domains.c | 30
src/responder/ifp/ifp_iface.c | 2
src/responder/ifp/ifp_iface.xml | 10
src/responder/ifp/ifp_iface_generated.c | 83
src/responder/ifp/ifp_iface_generated.h | 10
src/responder/ifp/ifp_users.c | 417 ++
src/responder/ifp/ifp_users.h | 10
src/responder/ifp/ifpsrv_cmd.c | 2
src/responder/nss/nss_cmd.c | 2
src/responder/nss/nss_iface.c | 44
src/responder/nss/nss_iface.xml | 6
src/responder/nss/nss_iface_generated.c | 39
src/responder/nss/nss_iface_generated.h | 15
src/responder/nss/nss_private.h | 4
src/responder/nss/nss_protocol.h | 6
src/responder/nss/nss_protocol_grent.c | 6
src/responder/nss/nss_protocol_pwent.c | 6
src/responder/nss/nss_protocol_sid.c | 15
src/responder/nss/nss_utils.c | 12
src/responder/pam/pamsrv.h | 13
src/responder/pam/pamsrv_cmd.c | 661 +---
src/responder/pam/pamsrv_p11.c | 86
src/responder/secrets/secsrv.c | 5
src/responder/ssh/ssh_cmd.c | 256 +
src/responder/ssh/ssh_known_hosts.c | 329 ++
src/responder/ssh/ssh_private.h | 71
src/responder/ssh/ssh_protocol.c | 217 +
src/responder/ssh/ssh_reply.c | 333 ++
src/responder/ssh/sshsrv.c | 2
src/responder/ssh/sshsrv_cmd.c | 1211 --------
src/responder/ssh/sshsrv_dp.c | 156 -
src/responder/ssh/sshsrv_private.h | 69
src/sbus/sssd_dbus.h | 2
src/sbus/sssd_dbus_connection.c | 21
src/sbus/sssd_dbus_interface.c | 166 -
src/sbus/sssd_dbus_private.h | 16
src/sbus/sssd_dbus_signals.c | 58
src/sbus/sssd_dbus_utils.h | 7
src/sss_client/idmap/sss_nss_idmap.pc.in | 2
src/sss_client/libwbclient/wbclient_sssd.pc.in | 2
src/sss_client/pam_message.h | 2
src/sss_client/pam_sss.c | 126
src/sss_client/sss_cli.h | 6
src/sysv/systemd/journal.conf.in | 2
src/sysv/systemd/sssd-autofs.service.in | 1
src/sysv/systemd/sssd-autofs.socket.in | 4
src/sysv/systemd/sssd-nss.service.in | 2
src/sysv/systemd/sssd-nss.socket.in | 7
src/sysv/systemd/sssd-pac.service.in | 1
src/sysv/systemd/sssd-pac.socket.in | 4
src/sysv/systemd/sssd-pam-priv.socket.in | 4
src/sysv/systemd/sssd-pam.service.in | 1
src/sysv/systemd/sssd-pam.socket.in | 4
src/sysv/systemd/sssd-ssh.service.in | 1
src/sysv/systemd/sssd-ssh.socket.in | 4
src/sysv/systemd/sssd-sudo.service.in | 1
src/sysv/systemd/sssd-sudo.socket.in | 4
src/tests/cmocka/common_mock_resp_dp.c | 68
src/tests/cmocka/test_ad_common.c | 57
src/tests/cmocka/test_authtok.c | 107
src/tests/cmocka/test_fqnames.c | 2
src/tests/cmocka/test_inotify.c | 582 +++
src/tests/cmocka/test_iobuf.c | 195 +
src/tests/cmocka/test_ipa_dn.c | 7
src/tests/cmocka/test_negcache.c | 70
src/tests/cmocka/test_nss_srv.c | 51
src/tests/cmocka/test_pam_srv.c | 213 +
src/tests/cmocka/test_responder_cache_req.c | 34
src/tests/cmocka/test_responder_common.c | 12
src/tests/cmocka/test_sdap_initgr.c | 540 +++
src/tests/cmocka/test_sysdb_subdomains.c | 109
src/tests/cmocka/test_sysdb_sudo.c | 5
src/tests/cmocka/test_sysdb_ts_cache.c | 11
src/tests/cmocka/test_utils.c | 11
src/tests/common.h | 2
src/tests/common_dom.c | 6
src/tests/cwrap/Makefile.am | 17
src/tests/dlopen-tests.c | 2
src/tests/intg/Makefile.am | 8
src/tests/intg/config.py.m4 | 1
src/tests/intg/ent_test.py | 14
src/tests/intg/files_ops.py | 159 +
src/tests/intg/sssd_group.py | 90
src/tests/intg/sssd_id.py | 14
src/tests/intg/sssd_ldb.py | 11
src/tests/intg/sssd_netgroup.py | 25
src/tests/intg/sssd_nss.py | 46
src/tests/intg/sssd_passwd.py | 168 +
src/tests/intg/test_enumeration.py | 10
src/tests/intg/test_files_ops.py | 84
src/tests/intg/test_files_provider.py | 850 +++++
src/tests/intg/test_secrets.py | 174 +
src/tests/intg/test_ts_cache.py | 71
src/tests/intg/util.py | 14
src/tests/ipa_ldap_opt-tests.c | 32
src/tests/sysdb-tests.c | 55
src/tests/tcurl_test_tool.c | 230 +
src/tests/util-tests.c | 18
src/tools/sss_cache.c | 26
src/tools/sss_groupshow.c | 4
src/tools/sssctl/sssctl_cache.c | 4
src/tools/sssd_check_socket_activated_responders.c | 197 +
src/util/authtok-utils.c | 91
src/util/authtok-utils.h | 56
src/util/authtok.c | 320 ++
src/util/authtok.h | 84
src/util/domain_info_utils.c | 19
src/util/inotify.c | 562 +++
src/util/inotify.h | 61
src/util/murmurhash3.c | 3
src/util/sss_iobuf.c | 205 +
src/util/sss_iobuf.h | 118
src/util/sss_nss.c | 17
src/util/tev_curl.c | 933 ++++++
src/util/tev_curl.h | 111
src/util/util.c | 10
src/util/util_errors.c | 2
src/util/util_errors.h | 2
src/util/util_safealign.h | 6
version.m4 | 2
282 files changed, 38223 insertions(+), 23403 deletions(-)
---
More information about the Pkg-sssd-devel
mailing list