Announcing SSSD 1.6.4
by Stephen Gallagher
The SSSD team is proud to announce the version 1.6.4 bugfix release of
the System Security Services Daemon.
As always, it can be downloaded from https://fedorahosted.org/sssd/
== Highlights ==
* Fix for older openldap libraries that can fail setting the "no
canonicalization" option
* pam_sss will now return authinfo_unavail when the SSSD daemon is shut
down, instead of PAM_SYSTEM_ERR
* Fixes a regression in LDAP failover handling
* Adds support for using Glib to provide unicode support instead of
libunistring
* SSSD must be built with the configure flag --with-unicode-lib=glib2
* All user/group/netgroup names passed to NSS/PAM are now validated to
be valid UTF-8 strings
== Detailed Changelog ==
Jakub Hrozek (2):
* configAPI: Fix removing in old domain when saving a new domain
* LDAP provider: Error while setting the nocanon option should not be
fatal
Jan Zeleny (2):
* Fixed an error in macro for merging double linked lists
* Fixed incorrect return code in PAM client
Krzysztof Klimonda (1):
* Fix FTBFS related to -Werror=format-security
Stephen Gallagher (9):
* Bumping version to 1.6.4
* RESPONDER: Ensure that all input strings are valid UTF-8
* Add -fno-strict-aliasing
* LDAP: Try next failover server on any error
* Allow using Glib for UTF8 support
* Ignore NULL-terminator when checking UTF8-validity
* DEBUG: fix bad backport containing new DEBUG representation
* Ignore NULL-terminator when checking UTF8-validity for netgroups
* Updating translation files
12 years, 3 months
Announcing SSSD 1.5.16
by Stephen Gallagher
The SSSD team is proud to announce the version 1.5.16 bugfix release of
the System Security Services Daemon.
As always, it can be downloaded from https://fedorahosted.org/sssd/
== Highlights ==
* Fix for older openldap libraries that can fail setting the "no
canonicalization" option
* pam_sss will now return authinfo_unavail when the SSSD daemon is shut
down, instead of PAM_SYSTEM_ERR
* Fixes a regression in LDAP failover handling
* Adds support for using Glib to provide unicode support instead of
libunistring
* SSSD must be built with the configure flag --with-unicode-lib=glib2
* All user/group/netgroup names passed to NSS/PAM are now validated to
be valid UTF-8 strings
== Detailed Changelog ==
Jakub Hrozek (1):
* LDAP provider: Error while setting the nocanon option should not be
fatal
Jan Zeleny (2):
* Fixed an error in macro for merging double linked lists
* Fixed incorrect return code in PAM client
Krzysztof Klimonda (1):
* Fix FTBFS related to -Werror=format-security
Simo Sorce (1):
* Use neutral name for functions used by both pam and nss
Stephen Gallagher (10):
* Bumping version to 1.5.16
* RESPONDER: Ensure that all input strings are valid UTF-8
* Add -fno-strict-aliasing
* LDAP: Try next failover server on any error
* Allow using Glib for UTF8 support
* Ignore NULL-terminator when checking UTF8-validity
* DEBUG: fix bad backport containing new DEBUG representation
* Ignore NULL-terminator when checking UTF8-validity for netgroups
* Translation update
* Adding new translation files
12 years, 3 months
[PATCH] Fixed IPA netgroup processing
by Jan Zelený
In case IPA netgroup had indirect member hosts, they wouldn't be
detected.
This patch also modifies debug messages for easier debugging in the
future.
Thanks
Jan
12 years, 3 months
[PATCHES] Support native IPA netgroups
by Jan Zelený
I'm sending couple patches which add support for IPA netgroups:
#53
These routines were not static, so I renamed them in order to avoid confusion
and possible collision with equivalent routines in IPA provider
#54
Some new config options, please focus on this patch, I'm not entirely sure if
my approach was the correct one.
#55
This new context was necessary so I can pass ipa options to routine
determining host search base.
#56
This is netgroups support itself
#57
IPA id provider which is utilizing previously added support of netgroup
fetching
Thanks
Jan
12 years, 3 months
[PATCH] Ignore NULL-terminator when checking UTF8-validity
by Stephen Gallagher
Glib fails if the NULL-terminator is included when a length is
specified.
I recently pushed "Allow using Glib for UTF8 support" after doing
excessive negative testing. However, I forgot to do positive testing and
therefore failed to discover that Glib treats a NULL-terminator as an
error in validation.
This patch changes our consumers to drop the NULL-terminator before
passing it to validation. This works properly on both Glib and
libunistring.
12 years, 3 months
[PATCH] Add ldap_sasl_minssf option
by Jan Zelený
https://fedorahosted.org/sssd/ticket/1075
The only thing is that I'm not sure if 72 is the right default minssf value
for IPA provider, as default IPA installation works with 56 as the highest
possible value for me. In default SSSD installation, this means that
communication with IPA server will be rejected with no information about the
reason being min SSF. I think this will be very confusing to SSSD users.
Can anyone give me a hint how to proceed? Lower the default value in SSSD or
do the change in IPA?
Thanks
Jan
12 years, 3 months