# SSSD 2.6.3
The SSSD team is proud to announce the release of version 2.6.3 of the
System Security Services Daemon. The tarball can be downloaded from:
https://github.com/SSSD/sssd/releases/tag/2.6.3
See the full release notes at:
https://sssd.io/release-notes/sssd-2.6.3.html
RPM packages will be made available for Fedora shortly.
## Feedback
Please provide comments, bugs and other feedback via the sssd-devel
or sssd-users mailing lists:
https://lists.fedorahosted.org/mailman/listinfo/sssd-develhttps://lists.fedorahosted.org/mailman/listinfo/sssd-users
## Highlights
### Important fixes
* A regression introduced in sssd-2.6.2 in the IPA provider that
prevented users from login was fixed. Access control always denied
access because the selinux_child returned an unexpected reply.
* A critical regression that prevented authentication of users via AD
and IPA providers was fixed. LDAP port was reused for Kerberos
communication and this provider would send incomprehensible information
to this port.
* When authenticating AD users, backtrace was triggered even though
everything was working correctly. This was caused by a search in the
global catalog. Servers from the global catalog are filtered out of the
list before writing the KDC info file. With this fix, SSSD does not
attempt to write to the KDC info file when performing a GC lookup.
Hello,
aforementioned migration of the 'ding-libs' project to Github was completed:
now the only used location is https://github.com/SSSD/ding-libs
On Tue, Nov 9, 2021 at 8:56 PM Alexey Tikhonov <atikhono(a)redhat.com> wrote:
>
> Hello,
>
> as a follow up to the complete SSSD migration to github [1], we
> decided to continue with the consolidation effort and to make the same
> step with the 'ding-libs' project that currently uses both Pagure [2]
> and Github [3].
>
> This is only a heads up. Precise date isn't set yet.
>
> But as a first step: we will no longer accept new bug reports at
> Pagure and we will kindly ask you to use Github instead.
>
> Thank you,
> Alexey.
>
>
> [1]
https://lists.fedoraproject.org/archives/list/sssd-users@lists.fedorahosted…
> [2] https://pagure.io/SSSD/ding-libs
> [3] https://github.com/SSSD/ding-libs
URL: https://github.com/SSSD/sssd/pull/5951
Author: sidecontrol
Title: #5951: Adding pytes multiforest tests
Action: opened
PR body:
"""
- admultidomain requires a minimum of four servers but will be extended
to five.
- test_multiforest will test authentication from two different forests
Signed-off-by: Dan Lavu <dlavu(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5951/head:pr5951
git checkout pr5951
URL: https://github.com/SSSD/sssd/pull/5945
Author: justin-stephenson
Title: #5945: INTG: Restrict smartcard in sc auth tests
Action: opened
PR body:
"""
Smartcard auth related tests can fail when integration tests are run on a machine(F34) with a yubikey inserted. Add a `p11_uri` option to filter only the softhsm2-used integration test cards.
"""
To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5945/head:pr5945
git checkout pr5945