Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sssd for openSUSE:Factory checked in at 2026-07-29 18:58:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sssd (Old) and /work/SRC/openSUSE:Factory/.sssd.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sssd" Wed Jul 29 18:58:10 2026 rev:153 rq:1367813 version:2.13.1 Changes: -------- --- /work/SRC/openSUSE:Factory/sssd/sssd.changes 2026-06-13 18:45:07.879931672 +0200 +++ /work/SRC/openSUSE:Factory/.sssd.new.2004/sssd.changes 2026-07-29 18:58:13.339520441 +0200 @@ -1,0 +2,6 @@ +Sun Jul 26 03:29:44 UTC 2026 - Perry Naseck <[email protected]> + +- Enable sssd-idp. This provides external Identity Provider + (OAuth2/OpenID Connect) support. Also enables the krb5 idp plugin. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sssd.spec ++++++ --- /var/tmp/diff_new_pack.KwnGBu/_old 2026-07-29 18:58:14.531561519 +0200 +++ /var/tmp/diff_new_pack.KwnGBu/_new 2026-07-29 18:58:14.535561657 +0200 @@ -82,6 +82,7 @@ BuildRequires: pkgconfig(libcrypto) >= 1.0.1 %if 0%{?suse_version} >= 1600 BuildRequires: pkgconfig(libcurl) +BuildRequires: pkgconfig(jose) %endif BuildRequires: pkgconfig(libnfsidmap) BuildRequires: pkgconfig(libnl-3.0) >= 3.0 @@ -219,6 +220,18 @@ Provides helper processes that the LDAP and Kerberos back ends can use for Kerberos user or host authentication. +%package idp +Summary: The external identity provider (IdP) backend plugin for sssd +License: GPL-3.0-or-later +Group: System/Daemons +Requires: %name-krb5-common = %version-%release + +%description idp +A back-end provider that the SSSD can utilize to authenticate against an +external OpenID Connect identity provider, such as Keycloak. Also provides +the Kerberos pre-authentication plugin and the oidc_child helper for the +OAuth 2.0 device authorization grant. + %package ldap Summary: The LDAP backend plugin for sssd License: GPL-3.0-or-later @@ -423,7 +436,8 @@ --with-ldb-lib-dir="%ldbdir" \ --disable-ldb-version-check \ --without-python2-bindings \ - --without-oidc-child \ + --with-oidc-child \ + --with-id-provider-idp \ --with-sssd-user="%sssd_user" \ %if "%{?_distconfdir}" != "" --with-vendordir="%_distconfdir/sssd" \ @@ -507,6 +521,8 @@ mkdir -pv "$b/%_sysconfdir/krb5.conf.d" ln -sv %_datadir/%name/krb5-snippets/enable_sssd_conf_dir \ "$b/%_sysconfdir/krb5.conf.d/enable_sssd_conf_dir" +ln -sv %_datadir/%name/krb5-snippets/sssd_enable_idp \ + "$b/%_sysconfdir/krb5.conf.d/sssd_enable_idp" %check %set_build_flags @@ -773,13 +789,18 @@ %_mandir/man8/pam_sss_gss.8* %_mandir/man8/sssd_krb5_localauth_plugin.8* %_mandir/man8/sssd_krb5_locator_plugin.8* -# -# %%files sssd-idp -# -%exclude %_libdir/sssd/libsss_idp.so -%exclude %_libdir/%name/modules/sssd_krb5_idp_plugin.so -%exclude %_mandir/man5/sssd-idp* -%exclude %_mandir/*/man5/sssd-idp* +%files idp +%dir %_libdir/%name/ +%_libdir/%name/libsss_idp.so +%dir %_libdir/%name/modules/ +%_libdir/%name/modules/sssd_krb5_idp_plugin.so +%dir %_libexecdir/%name/ +%_libexecdir/%name/oidc_child +%dir %{_datadir}/sssd/krb5-snippets +%_datadir/%name/krb5-snippets/sssd_enable_idp +%config(noreplace,missingok) %{_sysconfdir}/krb5.conf.d/sssd_enable_idp +%_mandir/man5/sssd-idp.5* +%_mandir/??/man5/sssd-idp.5* %files ad %dir %_libdir/%name/ @@ -847,7 +868,6 @@ %verify(not caps) %attr(750,root,%sssd_user) %_libexecdir/%name/ldap_child %dir %{_datadir}/sssd/krb5-snippets %_datadir/%name/krb5-snippets/enable_sssd_conf_dir -%_datadir/%name/krb5-snippets/sssd_enable_idp %files ldap %dir %_libdir/%name/ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.KwnGBu/_old 2026-07-29 18:58:14.599563863 +0200 +++ /var/tmp/diff_new_pack.KwnGBu/_new 2026-07-29 18:58:14.603564001 +0200 @@ -1,5 +1,5 @@ -mtime: 1781198849 -commit: 25027574627cd9b37f97f1ed182fd5af3eabc459ccd86759cbc74dac58ac2df0 +mtime: 1785036897 +commit: d001994c2d64eabf597353ca42018a437c9169e41e814dac081bc9646421cf70 url: https://src.opensuse.org/jengelh/sssd revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-07-26 05:34:57.000000000 +0200 @@ -0,0 +1 @@ +.osc
