- Merge SLE changelog and adapt sssd.spec to be compatible with
  SLE-15-SP6 and Leap 15.6 (jsc#ped-6714):
- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
   update (bsc#1216865)

• Files Changed
• Browse Source

    update (bsc#1216865)

• Files Changed
• Browse Source

• Files Changed
• Browse Source

  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434);
  * Fix sdap_access_host No matching host rule found;
    (bsc#1202559);
  * Add 'ldap_ignore_unreadable_references' parameter to skip
    unreadable objects referenced by 'member' attributte;
    (bsc#1190775); (gh#SSSD/sssd#4893);
    which was fixed; (CVE-2021-3621); (bsc#1189492);

• Files Changed
• Browse Source

• Files Changed
• Browse Source

• Files Changed
• Browse Source

  (jsc#ped-6714)
  * Drop sssd-common package
  * Do not build subid, semanage and selinux
  * Build IFP and files provider
  * /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
    update
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child

• Files Changed
• Browse Source

- Merge SLE changelog
- Adapt sssd.spec to be compatible with SLE-15-SP6 and Leap 15.6
- Update to release 2.5.2; (jsc#SLE-17763);
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
  * Create timestamp attribute in cache objects if missing;
    (bsc#1182637);
  * Rotate child debug file descriptors on SIGHUP (bsc#1080156)
  * Update samba secrets after changing machine password; (jsc#SLE-11503);
  * Delete linked local user overrides when deleting a user
    (bsc#1133168)
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * Fix domain offline after first boot when resolv.conf is a symlink

• Files Changed
• Browse Source

- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)

• Files Changed
• Browse Source

- Add symvers.patch [boo#1206592] [bsc#1182058] [bsc#1196166]

• Files Changed
• Browse Source

• Browse Source