-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2012-2196 2012-02-22 17:43:35 --------------------------------------------------------------------------------
Name : sssd Product : Fedora 17 Version : 1.8.0 Release : 6.fc17 URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon Description : Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.
-------------------------------------------------------------------------------- Update Information:
Changes in 1.7.0
* Support for case-insensitive domains
* Support for multiple search bases in the LDAP provider
* Support for the native FreeIPA netgroup implementation
* Reliability improvements to the process monitor
* New DEBUG facility with more consistent log levels
* New tool to change debug log levels without restarting SSSD
* SSSD will now disconnect from LDAP server when idle
* FreeIPA HBAC rules can choose to ignore srchost options for significant performance gains
* Assorted performance improvements in the LDAP provider (reducing disk-writes to the cache)
* Fixed upgrade issue with search bases.
* Fixed memory corruption issue causing random LDAP failures
* Found and fixed one more issue related to the search base setup
Changes in 1.8.0beta3
* Support for the service map in NSS
* Support for setting default SELinux user context from FreeIPA
* Support for retrieving SSH user and host keys from LDAP (Experimental)
* Support for caching autofs LDAP requests (Experimental)
* Support for caching SUDO rules (Experimental)
* Fix two minor manpage bugs
* Include the IPA AutoFS provider
* Fixed a regression in group enumeration since 1.7.0
* Fixed several memory-corruption bugs
* Finalized the ABI for the autofs support
* Fixed a regression in the proxy provider
Changes in sssd-1.8.0-5.fc17.beta3.1:
* Remove changes to switch the default credential cache location. This has been deferred to Fedora 18
Changes in sssd-1.8.0-6.fc17
* Assorted stabilization fixes -------------------------------------------------------------------------------- References:
[ 1 ] Bug #743133 - Performance regression with Kerberos authentication against AD https://bugzilla.redhat.com/show_bug.cgi?id=743133 [ 2 ] Bug #773706 - SSSD fails during autodetection of search bases for new LDAP features https://bugzilla.redhat.com/show_bug.cgi?id=773706 [ 3 ] Bug #741981 - Separate Cache Timeouts for SSSD https://bugzilla.redhat.com/show_bug.cgi?id=741981 [ 4 ] Bug #797968 - sssd_be: The requested tar get is not configured is logged at each login https://bugzilla.redhat.com/show_bug.cgi?id=797968 [ 5 ] Bug #754114 - [abrt] sssd-1.6.3-1.fc16: ping_check: Process /usr/sbin/sssd was killed by signal 11 (SIGSEGV) https://bugzilla.redhat.com/show_bug.cgi?id=754114 --------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use su -c 'yum update sssd' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------