File _patchinfo of Package patchinfo.42540

<patchinfo incident="42540">
  <issue tracker="bnc" id="1257509">sssd %pretrans errors</issue>
  <issue tracker="jsc" id="PED-12449"/>
  <issue tracker="jsc" id="PED-13811"/>
  <issue tracker="bnc" id="1212476">patch shebang line match the python version required in the package</issue>
  <packager>scabrero</packager>
  <rating>moderate</rating>
  <category>recommended</category>
  <summary>Recommended update for sssd</summary>
  <description>This update for sssd fixes the following issues:

- Use %pre scriptlet instead of %pretrans to migrate from sssd-common (bsc#1257509).
- Update to release 2.10.2 (jsc#PED-12449):
    * If the ssh responder is not running, sss_ssh_knownhosts will not fail
    * SSSD is now capable of handling multiple services associated with the same port.
    * sssd_pam, being a privileged binary, now clears the environment and 
      does not allow configuration of the PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1:
    * SSSD does not create anymore missing path components of DIR:/FILE: ccache types 
      while acquiring user's TGT. The parent directory of requested ccache directory must exist and the user 
      trying to log in must have rwx access to this directory. This matches behavior of /usr/bin/kinit.
    * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0:
    * The ``sssctl cache-upgrade`` command was removed. 
      SSSD performs automatic upgrades at startup when needed.
    * Support of ``enumeration`` feature for AD/IPA providers is deprecated and 
      might be removed in further releases.
    * The new tool ``sss_ssh_knownhosts`` can be used with ssh's ``KnownHostsCommand`` 
      configuration option to retrieve the host's public keys from a remote server. 
      It replaces ```sss_ssh_knownhostsproxy``.
    * The default value for ``ldap_id_use_start_tls`` changed from false to true for improved security.
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Fix build parameter name omitted
- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro (bsc#1212476)
  </description>
</patchinfo>