Hello community, here is the log from the commit of package sssd for openSUSE:Factory checked in at 2016-04-30 23:28:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sssd (Old) and /work/SRC/openSUSE:Factory/.sssd.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sssd" Changes: -------- --- /work/SRC/openSUSE:Factory/sssd/sssd.changes 2016-02-17 12:25:06.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.sssd.new/sssd.changes 2016-04-30 23:28:08.000000000 +0200 @@ -1,0 +2,47 @@ +Mon Apr 18 12:24:29 UTC 2016 - [email protected] + +- Enable PAC responder. + PAC is an extension element returned by domain controller, to speed + up resolution of authorisation data such as group memberships. + +------------------------------------------------------------------- +Thu Apr 14 17:20:11 UTC 2016 - [email protected] + +- Update to new upstream release 1.13.4 + * The IPA sudo provider was reimplemented. The new version reads the + data from IPA's LDAP tree (as opposed to the compat tree populated by + the slapi-nis plugin that was used previously). The benefit is that + deployments which don't require the compat tree for other purposes, + such as support for non-SSSD clients can disable those autogenerated + LDAP trees to conserve resources that slapi-nis otherwise requires. There + should be no visible changes to the end user. + * SSSD now has the ability to renew the machine credentials (keytabs) + when the ad provider is used. Please note that a recent version of + the adcli (0.8 or newer) package is required for this feature to work. + * The automatic ID mapping feature was improved so that the administrator + is no longer required to manually set the range size in case a RID in + the AD domain is larger than the default range size + * A potential infinite loop in the NFS ID mapping plugin that was + resulting in an excessive memory usage was fixed + * Clients that are pinned to a particular AD site using the ad_site + option no longer communicate with DCs outside that site during service + discovery. + * The IPA identity provider is now able to resolve external + (typically coming from a trusted AD forest) group members during + get-group-information requests. Please note that resolving external + group memberships for AD users during the initgroup requests used to + work even prior to this update. This feature is mostly useful for cases + where an IPA client is using the compat tree to resolve AD trust users. + * The IPA ID views feature now works correctly even for deployments + without a trust relationship. Previously, the subdomains IPA provider + failed to read the views data if no master domain record was created + on the IPA server during trust establishment. + * A race condition in the client libraries between the SSSD closing + the socket as idle and the client application using the socket was + fixed. This bug manifested with a Broken Pipe error message on the + client. + * SSSD is now able to resolve users with the same usernames in different + OUs of an AD domain + * The smartcard authentication now works properly with gnome-screensaver + +------------------------------------------------------------------- Old: ---- sssd-1.13.3.tar.gz sssd-1.13.3.tar.gz.asc New: ---- sssd-1.13.4.tar.gz sssd-1.13.4.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sssd.spec ++++++ --- /var/tmp/diff_new_pack.9YIG5K/_old 2016-04-30 23:28:09.000000000 +0200 +++ /var/tmp/diff_new_pack.9YIG5K/_new 2016-04-30 23:28:09.000000000 +0200 @@ -17,7 +17,7 @@ Name: sssd -Version: 1.13.3 +Version: 1.13.4 Release: 0 Summary: System Security Services Daemon License: GPL-3.0+ and LGPL-3.0+ @@ -81,6 +81,7 @@ BuildRequires: pkgconfig(talloc) BuildRequires: pkgconfig(tdb) >= 1.1.3 BuildRequires: pkgconfig(tevent) +BuildRequires: pkgconfig(ndr_krb5pac) %{?systemd_requires} Requires: sssd-ldap = %version-%release Requires(postun): pam-config @@ -401,7 +402,6 @@ --with-os=suse \ --with-semanage=no \ --disable-ldb-version-check \ - --disable-pac-responder make %{?_smp_mflags} all @@ -540,6 +540,7 @@ %dir %_libdir/%name/ %_libdir/%name/libsss_ad.so %dir %_libexecdir/%name/ +%_libexecdir/%name/sssd_pac %_libexecdir/%name/gpo_child %dir %_datadir/%name/ %dir %_datadir/%name/sssd.api.d/ ++++++ sssd-1.13.3.tar.gz -> sssd-1.13.4.tar.gz ++++++ ++++ 138517 lines of diff (skipped)
