Announcing the release of SSSD 0.6.0
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The SSSD Development team is proud to announce the immediate release of
SSSD 0.6.0. It can be found at https://fedorahosted.org/sssd/
== Highlights ==
* New, more consistent config file format
* Improvements to SSL/TLS setup in the LDAP provider
* Support for configuring the location of the credential cache in
Kerberos
* Better handling of bad configuration files
* Support for asynchronous cache refreshes
* New, faster enumeration logic
* SSS tools made more reliable
* New Python API for managing native SSSD users
* Improvements for building on older platforms
* Many other bugfixes and stability improvements
== Detailed Changes Since 0.5.0 ==
Dmitri Pal (8):
* ELAPI sinks and providers
* ELAPI Adding file provider and CSV format
* ELAPI Laying foundation for the async processing
* COLLECTION Copy collection flat with concatenated names
* COLLECTION Improvements to copy functions
* COLLECTION Functions to deal with hash
* ELAPI Better separation from collection internals.
* INI Error handling and interface cleanup
Jakub Hrozek (17):
* Remove shadow-utils support from tools
* Small changes to the example config and manpage
* Add copyright notices
* ELAPI: Fix dispatcher structure initialization
* Add binaries and backup files to .gitignore
* Refactor tools code
* Decouple synchronous sysdb interface from tools
* Provide python bindings for sysdb
* Use syslog for logging error conditions in SSSD
* ELAPI: fix varargs call, update unit tests
* ELAPI: Ticket 161: Initialize structures with calloc instead of
enumerating members
* Allow entering parent groups as FQDN
* Remove provider=files
* Manpages update
* script to upgrade config to v2
* Send debug messages to logfile
* Convert the example config to v2 format, upgrade config on update
only
Jeff Schroeder (1):
* Add documentation for installing build dependencies
Piotr Dr?g (1):
* Add pl translation
Ralf Haferkamp (2):
* Fix initgroups search filter when using rfc2307bis
* Avoid crash when timestamp is NULL
Simo Sorce (30):
* Use the correct structure.
* Initial support for multiple schema types
* Always save using member/memberOf
* Fix group replies when using member/memberof
* Upgrade database to 0.2
* Remove redunant function and always pass attrs.
* Make enumeration an independent task
* Speed-up enumerations.
* Correctly handle !DbusWatch behavior.
* Turn enumeration into a boolean value
* Honor enumerate option in ldap_id
* Fix proxy enumeration
* Fix two possible uninitialized values
* Split database in multiple files
* Tools are allowed to touch only the 'local' domain
* Fix Ldap id backend offline code
* Fix memory mishandling.
* Fix ldap enumeration async task
* Fix getgrnam and getgrgid calls
* Complete the removal of "legacy" option.
* Update documentation and examples
* Make the offline status backend-global
* Turn ldap driver options into multitype
* Fix copy&paste error.
* Better handle groups w/o members
* Fix copy&paste of wrong structure
* Don't try to use initgroups_dyn if not available
* Handle suspend cases
* Split out an sssd-clients package
* Let backend respond while fetching large results
Stephen Gallagher (26):
* Move RPM specfiles into contrib/
* Consolidate cache lookups in the NSS
* Add support for the !EntryCacheNoWaitRefreshTimeout
* Check for valid min and max IDs in confdb_get_domains
* Update manpage to reflect new syntax for enumerate
* Add strtoint32 and strtouint32 convenience functions
* Properly detect negative/invalid values for the minId and maxId
* Remove unused event context argument from confdb_init
* Read the configuration parsing before daemonization
* Fix first-time confdb generation
* Add 'make tests' target
* Add strtoint32 and strtouint32 tests
* Print error message when connection to the config db fails
* Exit if the sssd is launched as a user other than root
* Include m4 directories in tarball
* Allow rerunning autoreconf from the tarball
* Add PRERELEASE_VERSION variable for use in sssd.spec.in
* Add missing updates to LINGUAS for pl translation
* Add missing reference to sssd-ldap(5) in sssd.conf(5) manpage
* Include groupSearchBase in sssd-ldap(5) manpage
* Several fixes and enhancements for config file processing
* Make configure script compatible with older python versions
* Revert "Use syslog for logging error conditions in SSSD"
* Temporarily disable automatic config file reread
* Upgrade confdb to version 2
* Update version to 0.6.0
Sumit Bose (31):
* removed unused header file
* do not show server messages to user
* fix internal order of ldap user mapping options
* add configure check for errno_t
* send SSSD_REALM and SSSD_KDCIP environment to the client
* check if gid attribute is empty
* stop processing a domain if no provider is given
* check if libpcre version is above or below 7
* remove the concept of a backend name
* configure cleanups
* fix libdbus configure check
* initialize sockaddr_in structure
* add change password target to krb5 backend
* use fork+exec for kerberos helper
* Let the PAM client send its PID
* remove unused client locale from PAM protocol
* make cli_pid mandatory and increase version number of pam protocol
* add krb5ccache_dir and krb5ccname_template option
* fix the wrong usage of an offset
* added child timeout handler
* Check if SSL/TLS handler is already in place
* use getaddrinfo to resolve IP address of KDC
* add a man page for pam_sss
* toggle debug output of sssd_krb5_locator_plugin with an environment
variable
* add new config options ldap_tls_cacert and ldap_tls_cacertdir
* fix possible short reads in kerberos provider
* remove krb5_try_simple_upn option and make it a default fallback
* add defines for large file support to standard CFLAGS
* more fixes for older libpcre versions
* Cleanups for library linking
* added support for older MIT kerberos versions
- --
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkq9JBMACgkQeiVVYja6o6MFjQCfaB5F7lH9Dr69RoqqTleOnURI
1CkAniWeh0NhaEhinX/D5amZdO5pJPXq
=nSiq
-----END PGP SIGNATURE-----
14 years, 7 months
[PATCH] extend sssd-krb5 man page
by Sumit Bose
Hi,
this patch to the sssd-krb5 man page should clarify how the krb5
provider will find the right UPN.
This hopefully fixes #204.
Please fell free to correct any grammar or spelling mistakes.
bye,
Sumit
14 years, 7 months
[PATCH] Convert the example config to v2 format, upgrade config on update only
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Convert the example config to v2 format, upgrade config on update only
Also, instead of having an LDAP proxy domain as an example, show a
native LDAP config.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkq82LYACgkQHsardTLnvCXphACgt+YznBMDLlBMi6qvO5OMzJ/M
JHQAn2hyhh1fkii+XgdfZ+cyQL1B48rz
=Yzim
-----END PGP SIGNATURE-----
14 years, 7 months
[PATCH] add defines for large file support to standard CFLAGS
by Sumit Bose
Hi,
this patch fixes a compiler warning about the redefinition of
SIZEOF_OFF_T on 32bit systems. It's not very elegant, but I don't know
of a portable way to check if python was compiles with large file
support. If anyone knows, please enlighten me.
It might be possible the this patch leads to problems on systems where
python was compiled without large file support, but I think most will
have it.
bye,
Sumit
14 years, 7 months
[PATCH] leave space to run fd events on long operations
by Simo Sorce
This is actually a workaround as we don't have a way to create a low
prio tevent queue that fires at a priority lower than file events.
I'll work with upstream to fix this later on, meanwhile this patch will
do.
FYI: I haven't used timed_timeval_add() because it is buggy wrt
microseconds in current release tevetn. (I have already committed a
patch to fix the problem upstream).
Simo.
14 years, 7 months
[PATCH] Send debug messages to logfile
by Jakub Hrozek
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Introduces a new option --debug-to-files which makes SSSD output its
debug information to a file instead of stderr, which is still the
default.
Also introduces a new confdb option debug_to_files which does the same,
but can be specified per-service in the config file.
The logfiles are stored in /var/log/sssd by default.
I also removed two lines in Makefile.am that still referenced
shadow-utils, don't think it warrants a separate patch.
Jakub
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkq6V/QACgkQHsardTLnvCXIjwCgh704J0zgpbyMKAKDEtGQHVIu
P5wAoLoRTvn7RnwQM12jSaSIU42JqnZD
=YltH
-----END PGP SIGNATURE-----
14 years, 7 months
