-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The SSSD Development team is proud to announce the immediate release of
SSSD 0.6.0. It can be found at
https://fedorahosted.org/sssd/
== Highlights ==
* New, more consistent config file format
* Improvements to SSL/TLS setup in the LDAP provider
* Support for configuring the location of the credential cache in
Kerberos
* Better handling of bad configuration files
* Support for asynchronous cache refreshes
* New, faster enumeration logic
* SSS tools made more reliable
* New Python API for managing native SSSD users
* Improvements for building on older platforms
* Many other bugfixes and stability improvements
== Detailed Changes Since 0.5.0 ==
Dmitri Pal (8):
* ELAPI sinks and providers
* ELAPI Adding file provider and CSV format
* ELAPI Laying foundation for the async processing
* COLLECTION Copy collection flat with concatenated names
* COLLECTION Improvements to copy functions
* COLLECTION Functions to deal with hash
* ELAPI Better separation from collection internals.
* INI Error handling and interface cleanup
Jakub Hrozek (17):
* Remove shadow-utils support from tools
* Small changes to the example config and manpage
* Add copyright notices
* ELAPI: Fix dispatcher structure initialization
* Add binaries and backup files to .gitignore
* Refactor tools code
* Decouple synchronous sysdb interface from tools
* Provide python bindings for sysdb
* Use syslog for logging error conditions in SSSD
* ELAPI: fix varargs call, update unit tests
* ELAPI: Ticket 161: Initialize structures with calloc instead of
enumerating members
* Allow entering parent groups as FQDN
* Remove provider=files
* Manpages update
* script to upgrade config to v2
* Send debug messages to logfile
* Convert the example config to v2 format, upgrade config on update
only
Jeff Schroeder (1):
* Add documentation for installing build dependencies
Piotr Dr?g (1):
* Add pl translation
Ralf Haferkamp (2):
* Fix initgroups search filter when using rfc2307bis
* Avoid crash when timestamp is NULL
Simo Sorce (30):
* Use the correct structure.
* Initial support for multiple schema types
* Always save using member/memberOf
* Fix group replies when using member/memberof
* Upgrade database to 0.2
* Remove redunant function and always pass attrs.
* Make enumeration an independent task
* Speed-up enumerations.
* Correctly handle !DbusWatch behavior.
* Turn enumeration into a boolean value
* Honor enumerate option in ldap_id
* Fix proxy enumeration
* Fix two possible uninitialized values
* Split database in multiple files
* Tools are allowed to touch only the 'local' domain
* Fix Ldap id backend offline code
* Fix memory mishandling.
* Fix ldap enumeration async task
* Fix getgrnam and getgrgid calls
* Complete the removal of "legacy" option.
* Update documentation and examples
* Make the offline status backend-global
* Turn ldap driver options into multitype
* Fix copy&paste error.
* Better handle groups w/o members
* Fix copy&paste of wrong structure
* Don't try to use initgroups_dyn if not available
* Handle suspend cases
* Split out an sssd-clients package
* Let backend respond while fetching large results
Stephen Gallagher (26):
* Move RPM specfiles into contrib/
* Consolidate cache lookups in the NSS
* Add support for the !EntryCacheNoWaitRefreshTimeout
* Check for valid min and max IDs in confdb_get_domains
* Update manpage to reflect new syntax for enumerate
* Add strtoint32 and strtouint32 convenience functions
* Properly detect negative/invalid values for the minId and maxId
* Remove unused event context argument from confdb_init
* Read the configuration parsing before daemonization
* Fix first-time confdb generation
* Add 'make tests' target
* Add strtoint32 and strtouint32 tests
* Print error message when connection to the config db fails
* Exit if the sssd is launched as a user other than root
* Include m4 directories in tarball
* Allow rerunning autoreconf from the tarball
* Add PRERELEASE_VERSION variable for use in sssd.spec.in
* Add missing updates to LINGUAS for pl translation
* Add missing reference to sssd-ldap(5) in sssd.conf(5) manpage
* Include groupSearchBase in sssd-ldap(5) manpage
* Several fixes and enhancements for config file processing
* Make configure script compatible with older python versions
* Revert "Use syslog for logging error conditions in SSSD"
* Temporarily disable automatic config file reread
* Upgrade confdb to version 2
* Update version to 0.6.0
Sumit Bose (31):
* removed unused header file
* do not show server messages to user
* fix internal order of ldap user mapping options
* add configure check for errno_t
* send SSSD_REALM and SSSD_KDCIP environment to the client
* check if gid attribute is empty
* stop processing a domain if no provider is given
* check if libpcre version is above or below 7
* remove the concept of a backend name
* configure cleanups
* fix libdbus configure check
* initialize sockaddr_in structure
* add change password target to krb5 backend
* use fork+exec for kerberos helper
* Let the PAM client send its PID
* remove unused client locale from PAM protocol
* make cli_pid mandatory and increase version number of pam protocol
* add krb5ccache_dir and krb5ccname_template option
* fix the wrong usage of an offset
* added child timeout handler
* Check if SSL/TLS handler is already in place
* use getaddrinfo to resolve IP address of KDC
* add a man page for pam_sss
* toggle debug output of sssd_krb5_locator_plugin with an environment
variable
* add new config options ldap_tls_cacert and ldap_tls_cacertdir
* fix possible short reads in kerberos provider
* remove krb5_try_simple_upn option and make it a default fallback
* add defines for large file support to standard CFLAGS
* more fixes for older libpcre versions
* Cleanups for library linking
* added support for older MIT kerberos versions
- --
Stephen Gallagher
RHCE 804006346421761
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkq9JBMACgkQeiVVYja6o6MFjQCfaB5F7lH9Dr69RoqqTleOnURI
1CkAniWeh0NhaEhinX/D5amZdO5pJPXq
=nSiq
-----END PGP SIGNATURE-----