Hello community, here is the log from the commit of package sssd for openSUSE:Factory checked in at 2014-08-15 09:58:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sssd (Old) and /work/SRC/openSUSE:Factory/.sssd.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sssd" Changes: -------- --- /work/SRC/openSUSE:Factory/sssd/sssd.changes 2014-06-25 06:58:14.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.sssd.new/sssd.changes 2014-08-15 09:58:23.000000000 +0200 @@ -1,0 +2,32 @@ +Sun Aug 10 12:20:50 UTC 2014 - [email protected] + +- Update to new upstream release 1.12.0 +* A new responder, called InfoPipe was added. This responder + provides a public D-Bus interface accessible over the system bus. + In this release, methods for retrieving user attributes and list + of groups were added as well as objects representing SSSD domains + and processes. (The next 1.12.x releases will publish objects + representing users and groups, too.) +* SSSD provides an ID-mapping plugin for cifs-utils so that Windows + SIDs can be mapped onto POSIX IDs and/or names without requiring + Winbind and using the same code as the SSSD uses for identity + information. +* First phase of Group Policy-based access control for the AD + provider was added. At the moment, the gpo-ldap component that + downloads the list of GPOs that apply for the specific client has + been implemented as well as the gpo-smb component that retrieves + the group policy files and determines the access control check + results based on those files. Future improvements will focus on + storing the GPO policies as local files and mapping the Windows + logon rights onto Linux PAM services. +* Added a new library called sss_sifp that provides a simple + synchronous API for communication with our new InfoPipe responder + over the system bus. +- Remove 0001-BUILD-Link-libsss_ldap_common.so-to-libsss_idmap.so.patch + (merged upstream) +- Provide "rcsssd" in systemd environments +- Ensure sssd is always startable by removing /var/lib/sss/db/*.ldb + on package installation so as to avoid potentially cache + format incompatibility which would cause sssd to exit + +------------------------------------------------------------------- Old: ---- 0001-BUILD-Link-libsss_ldap_common.so-to-libsss_idmap.so.patch sssd-1.11.5.1.tar.gz sssd-1.11.5.1.tar.gz.asc New: ---- sssd-1.12.0.tar.gz sssd-1.12.0.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sssd.spec ++++++ --- /var/tmp/diff_new_pack.5Xh1wI/_old 2014-08-15 09:58:25.000000000 +0200 +++ /var/tmp/diff_new_pack.5Xh1wI/_new 2014-08-15 09:58:25.000000000 +0200 @@ -17,7 +17,7 @@ Name: sssd -Version: 1.11.5.1 +Version: 1.12.0 Release: 0 Summary: System Security Services Daemon License: GPL-3.0+ and LGPL-3.0+ @@ -32,7 +32,6 @@ Source5: %name.keyring BuildRoot: %{_tmppath}/%{name}-%{version}-build Patch1: 0001-build-detect-endianness-at-configure-time.patch -Patch2: 0001-BUILD-Link-libsss_ldap_common.so-to-libsss_idmap.so.patch %define servicename sssd %define sssdstatedir %_localstatedir/lib/sss @@ -49,17 +48,20 @@ BuildRequires: autoconf >= 2.59 BuildRequires: automake BuildRequires: bind-utils +BuildRequires: cifs-utils-devel BuildRequires: cyrus-sasl-devel BuildRequires: docbook-xsl-stylesheets BuildRequires: krb5-devel +BuildRequires: libsmbclient-devel BuildRequires: libtool BuildRequires: pkgconfig >= 0.21 %if 0%{?suse_version} >= 1210 +BuildRequires: pkgconfig(augeas) >= 1.0.0 BuildRequires: pkgconfig(collection) >= 0.5.1 BuildRequires: pkgconfig(dbus-1) >= 1.0.0 BuildRequires: pkgconfig(dhash) >= 0.4.2 BuildRequires: pkgconfig(glib-2.0) -BuildRequires: pkgconfig(ini_config) >= 0.6.1 +BuildRequires: pkgconfig(ini_config) >= 1.1.0 BuildRequires: pkgconfig(ldb) >= 0.9.2 BuildRequires: pkgconfig(libcares) BuildRequires: pkgconfig(libnl-3.0) >= 3.0 @@ -73,12 +75,13 @@ BuildRequires: pkgconfig(tdb) >= 1.1.3 BuildRequires: pkgconfig(tevent) %else +BuildRequires: augeas-devel BuildRequires: dbus-1-devel >= 1.0.0 BuildRequires: glib2-devel BuildRequires: libcares-devel BuildRequires: libcollection-devel >= 0.5.1 BuildRequires: libdhash-devel >= 0.4.2 -BuildRequires: libini_config-devel >= 0.6.1 +BuildRequires: libini_config-devel >= 1.1.0 BuildRequires: libldb-devel >= 0.9.2 BuildRequires: libnl-devel >= 1.1 BuildRequires: libopenssl-devel @@ -103,12 +106,10 @@ BuildRequires: pam-devel BuildRequires: pkg-config %if %suse_version >= 1210 -BuildRequires: systemd +BuildRequires: systemd-rpm-macros +BuildRequires: pkgconfig(libsystemd-login) %{?systemd_requires} %endif -%if %suse_version >= 1230 -BuildRequires: gpg-offline -%endif Requires: sssd-ldap = %version-%release Requires(postun): pam-config @@ -130,6 +131,16 @@ fetch identity data from and authenticate against an Active Directory server. +%package dbus +Summary: The D-Bus responder of sssd +License: GPL-3.0+ +Group: System/Base +Requires: %name = %version + +%description dbus +Provides the D-Bus responder of sssd, called InfoPipe, which allows +information from sssd to be transmitted over the system bus. + %package ipa Summary: FreeIPA backend plugin for sssd License: GPL-3.0+ @@ -244,6 +255,26 @@ %description -n libsss_nss_idmap-devel A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs. +%package -n libsss_simpleifp0 +Summary: The SSSD D-Bus responder helper library +License: GPL-3.0+ +Group: System/Libraries + +%description -n libsss_simpleifp0 +This subpackage provides a library that simplifies the D-Bus API for +the SSSD InfoPipe responder. + +%package -n libsss_simpleifp-devel +Summary: Development files for the SSSD D-Bus responder helper library +License: GPL-3.0+ +Group: Development/Libraries/C and C++ +Requires: libsss_simpleifp0 = %version + +%description -n libsss_simpleifp-devel +This subpackage provides the development files for sssd's simpleifp, +a library that simplifies the D-Bus API for the SSSD InfoPipe +responder. + %package -n libsss_sudo Summary: A library to allow communication between sudo and SSSD License: LGPL-3.0+ @@ -287,9 +318,8 @@ Security Services Daemon (sssd). %prep -%{?gpg_verify: %gpg_verify %{S:2}} %setup -q -%patch -P 1 -P 2 -p1 +%patch -P 1 -p1 %build %if 0%{?suse_version} < 1210 @@ -337,6 +367,7 @@ #install src/sysv/systemd/sssd.service "$b/%_unitdir/sssd.service"; install -m644 %{S:4} "$b/%_unitdir/sssd.service"; rm -Rf "$b/%_initddir" +ln -s service "$b/%_sbindir/rcsssd" %else install src/sysv/SUSE/sssd "$b/%_sysconfdir/init.d/sssd"; ln -sf ../../etc/init.d/sssd "$b/usr/sbin/rcsssd" @@ -350,6 +381,8 @@ rm -Rf "$b/usr/share/locale"/{fa_IR,ja_JP,lt_LT,ta_IN,vi_VN} %endif +rm -Rf "$b/%_sysconfdir/dbus-1" "$b/%_datadir/dbus-1" + %find_lang %name --all-name %if 0%{?_unitdir:1} @@ -360,7 +393,6 @@ %post # migrate config variable krb5_kdcip to krb5_server (bnc#851048) /bin/sed -i -e 's,^krb5_kdcip =,krb5_server =,g' %_sysconfdir/sssd/sssd.conf - /sbin/ldconfig %if 0%{?_unitdir:1} %service_add_post sssd.service @@ -377,8 +409,15 @@ fi; /sbin/ldconfig %if 0%{?_unitdir:1} +# Clear caches, which may have an incompatible format afterwards +# (especially, downgrades) +rm -f /var/lib/sss/db/*.ldb +# del_postun includes a try-restart %service_del_postun sssd.service +%else +%restart_on_update sssd %endif +%insserv_cleanup %post -n libipa_hbac0 -p /sbin/ldconfig %postun -n libipa_hbac0 -p /sbin/ldconfig @@ -386,6 +425,8 @@ %postun -n libsss_idmap0 -p /sbin/ldconfig %post -n libsss_nss_idmap0 -p /sbin/ldconfig %postun -n libsss_nss_idmap0 -p /sbin/ldconfig +%post -n libsss_simpleifp0 -p /sbin/ldconfig +%postun -n libsss_simpleifp0 -p /sbin/ldconfig %files -f sssd.lang %defattr(-,root,root) @@ -394,10 +435,10 @@ %_unitdir %else %_initrddir/%name -%_sbindir/rcsssd %endif %_bindir/sss_ssh_* %_sbindir/sssd +%_sbindir/rcsssd %dir %_mandir/??/ %dir %_mandir/??/man?/ %_mandir/??/man1/sss_ssh_* @@ -420,7 +461,13 @@ %dir %_libdir/ldb/ %_libdir/ldb/memberof.so %dir %_libexecdir/%name/ -%_libexecdir/%name/sssd_* +%_libexecdir/%name/sssd_autofs +%_libexecdir/%name/sssd_be +%_libexecdir/%name/sssd_nss +%_libexecdir/%name/sssd_pam +%_libexecdir/%name/sssd_ssh +%_libexecdir/%name/sssd_sudo +%_libexecdir/%name/sss_signal %dir %sssdstatedir %attr(700,root,root) %dir %dbpath/ %attr(755,root,root) %dir %pipepath/ @@ -439,7 +486,8 @@ # /%_lib/libnss_sss.so.2 /%_lib/security/pam_sss.so -%_libdir/krb5/plugins/libkrb5/* +%_libdir/cifs-utils/ +%_libdir/krb5/ %_mandir/??/man8/pam_sss.8* %_mandir/??/man8/sssd_krb5_locator_plugin.8* %_mandir/man8/pam_sss.8* @@ -449,6 +497,9 @@ %defattr(-,root,root) %dir %_libdir/%name/ %_libdir/%name/libsss_ad.so +%_libdir/%name/libsss_ad_common.so +%dir %_libexecdir/%name/ +%_libexecdir/%name/gpo_child %dir %_datadir/%name/ %dir %_datadir/%name/sssd.api.d/ %_datadir/%name/sssd.api.d/sssd-ad.conf @@ -456,6 +507,17 @@ %_mandir/man5/sssd-ad.5* %_mandir/??/man5/sssd-ad.5* +%files dbus +%defattr(-,root,root) +%dir %_libexecdir/sssd/ +%_libexecdir/sssd/sssd_ifp +%dir %_libdir/sssd/ +%_libdir/sssd/libsss_config.so +%_mandir/man5/sssd-ifp.5* +%_mandir/??/man5/sssd-ifp.5* +#%_sysconfdir/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf +#%_datadir/dbus-1/system-services/org.freedesktop.sssd.infopipe.service + %files ipa %defattr(-,root,root) %dir %_libdir/%name/ @@ -554,6 +616,16 @@ %_libdir/libsss_nss_idmap.so %_libdir/pkgconfig/sss_nss_idmap.pc +%files -n libsss_simpleifp0 +%defattr(-,root,root) +%_libdir/libsss_simpleifp.so.0* + +%files -n libsss_simpleifp-devel +%defattr(-,root,root) +%_includedir/sss_sifp*.h +%_libdir/libsss_simpleifp.so +%_libdir/pkgconfig/sss_simpleifp.pc + %files -n libsss_sudo %defattr(-,root,root) %_libdir/libsss_sudo.so ++++++ sssd-1.11.5.1.tar.gz -> sssd-1.12.0.tar.gz ++++++ ++++ 304873 lines of diff (skipped) -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
