Hello community,
here is the log from the commit of package sssd for openSUSE:Factory checked in at 2013-12-02 15:09:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/sssd (Old)
and /work/SRC/openSUSE:Factory/.sssd.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sssd"
Changes:
--------
--- /work/SRC/openSUSE:Factory/sssd/sssd.changes 2013-06-17 10:24:01.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.sssd.new/sssd.changes 2013-12-02 15:09:07.000000000 +0100
@@ -1,0 +2,25 @@
+Fri Nov 1 22:12:03 UTC 2013 - jengelh@inai.de
+
+- Update to new upstream release 1.11.2
+* A new option ad_access_filter was added. This option allows the
+ administrator to easily configure LDAP search filter that the users
+ logging in must match in order to be granted access.
+* The Kerberos provider will no longer try to create public
+ directories when evaluating the krb5_ccachedir option.
+- Remove 0005-implicit-decl.diff (merged upstream)
+
+-------------------------------------------------------------------
+Tue Sep 3 21:12:37 UTC 2013 - jengelh@inai.de
+
+- Update to new upstream release 1.11.0
+* The sudo integration was made more robust. SSSD is now able to
+ gracefully handle situations where it is not able to resolve the
+ client host name or sudo rules have multiple name attributes.
+* Several nested group membership bugs were fixed
+* The PAC responder was made more robust and efficient, modifying
+ existing cache entries instead of always recreating them.
+* The Kerberos provider now supports the new KEYRING ccache type.
+- Remove sssd-no-ldb-check.diff, now implemented through a
+ configure argument --disable-ldb-version-check
+
+-------------------------------------------------------------------
Old:
----
0005-implicit-decl.diff
sssd-1.9.5.tar.gz
sssd-1.9.5.tar.gz.asc
sssd-no-ldb-check.diff
New:
----
sssd-1.11.2.tar.gz
sssd-1.11.2.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ sssd.spec ++++++
--- /var/tmp/diff_new_pack.BXWLmD/_old 2013-12-02 15:09:08.000000000 +0100
+++ /var/tmp/diff_new_pack.BXWLmD/_new 2013-12-02 15:09:08.000000000 +0100
@@ -17,7 +17,7 @@
Name: sssd
-Version: 1.9.5
+Version: 1.11.2
Release: 0
Summary: System Security Services Daemon
License: GPL-3.0+ and LGPL-3.0+
@@ -28,9 +28,7 @@
Source: https://fedorahosted.org/released/sssd/sssd-%version.tar.gz
Source2: https://fedorahosted.org/released/sssd/sssd-%version.tar.gz.asc
Source3: baselibs.conf
-Patch1: 0005-implicit-decl.diff
-Patch2: sssd-ldflags.diff
-Patch3: sssd-no-ldb-check.diff
+Patch1: sssd-ldflags.diff
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%define servicename sssd
@@ -39,8 +37,8 @@
%define pipepath %sssdstatedir/pipes
%define pubconfpath %sssdstatedir/pubconf
-# SLES11 doesn't know the python_* macros
%if %suse_version <= 1110
+# SLES11 doesn't know the python_* macros
%define python_sitelib %py_sitedir
%define python_sitearch %py_sitedir
%endif
@@ -63,6 +61,7 @@
BuildRequires: pkgconfig(libcares)
BuildRequires: pkgconfig(libnl-1) >= 1.1
BuildRequires: pkgconfig(libpcre) >= 7
+BuildRequires: pkgconfig(ndr_nbt)
BuildRequires: pkgconfig(openssl)
BuildRequires: pkgconfig(popt)
BuildRequires: pkgconfig(python)
@@ -85,7 +84,9 @@
BuildRequires: pcre-devel >= 7
BuildRequires: popt-devel
BuildRequires: python-devel
+BuildRequires: samba-devel >= 4
%endif
+BuildRequires: samba-libs >= 4
%if 0%{?suse_version} >= 1220
BuildRequires: libxml2-tools
BuildRequires: libxslt-tools
@@ -104,6 +105,7 @@
%if %suse_version >= 1230
BuildRequires: gpg-offline
%endif
+Requires: sssd-ldap = %version-%release
Requires(postun): pam-config
%description
@@ -113,15 +115,67 @@
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.
-%package ipa-provider
-Summary: FreeIPA provider plugin for sssd
-License: GPL-3.0+ and LGPL-3.0+
+%package ad
+Summary: The ActiveDirectory backend plugin for sssd
+License: GPL-3.0+
Group: System/Daemons
-Requires: sssd = %version
+Requires: %name-krb5-common = %version
-%description ipa-provider
-This package provide the FreeIPA provider plugin for the System Security
-Services Daemon (sssd).
+%description ad
+Provides the Active Directory back end that the SSSD can utilize to
+fetch identity data from and authenticate against an Active Directory
+server.
+
+%package ipa
+Summary: FreeIPA backend plugin for sssd
+License: GPL-3.0+
+Group: System/Daemons
+Requires: %name = %version
+Requires: %name-krb5-common = %version-%release
+Obsoletes: %name-ipa-provider < %version-%release
+Provides: %name-ipa-provider = %version-%release
+
+%description ipa
+Provides the IPA back end that the SSSD can utilize to fetch identity
+data from and authenticate against an IPA server.
+
+%package krb5
+Summary: The Kerberos authentication backend plugin for sssd
+License: GPL-3.0+
+Group: System/Daemons
+Requires: %name-krb5-common = %version-%release
+
+%description krb5
+Provides the Kerberos back end that the SSSD can utilize authenticate
+against a Kerberos server.
+
+%package krb5-common
+Summary: SSSD helpers needed for Kerberos and GSSAPI authentication
+License: GPL-3.0+
+Group: System/Daemons
+
+%description krb5-common
+Provides helper processes that the LDAP and Kerberos back ends can
+use for Kerberos user or host authentication.
+
+%package ldap
+Summary: The LDAP backend plugin for sssd
+License: GPL-3.0+
+Group: System/Daemons
+Requires: %name-krb5-common = %version-%release
+
+%description ldap
+Provides the LDAP back end that the SSSD can utilize to fetch
+identity data from and authenticate against an LDAP server.
+
+%package proxy
+Summary: The proxy backend plugin for sssd
+License: GPL-3.0+
+Group: System/Daemons
+
+%description proxy
+Provides the proxy back end which can be used to wrap an existing NSS
+and/or PAM modules to leverage SSSD caching.
%package tools
Summary: Commandline tools for sssd
@@ -169,6 +223,23 @@
%description -n libsss_idmap-devel
A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
+%package -n libsss_nss_idmap0
+Summary: FreeIPA ID mapping library
+License: LGPL-3.0+
+Group: System/Libraries
+
+%description -n libsss_nss_idmap0
+A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
+
+%package -n libsss_nss_idmap-devel
+Summary: Development files for the FreeIPA idmap library
+License: LGPL-3.0+
+Group: Development/Libraries/C and C++
+Requires: libsss_nss_idmap0 = %version
+
+%description -n libsss_nss_idmap-devel
+A utility library for FreeIPA to map Windows SIDs to Unix user/group IDs.
+
%package -n libsss_sudo
Summary: A library to allow communication between sudo and SSSD
License: LGPL-3.0+
@@ -183,7 +254,7 @@
%package -n python-ipa_hbac
Summary: Python bindings for the FreeIPA HBAC Evaluator library
-License: GPL-3.0+ and LGPL-3.0+
+License: LGPL-3.0+
Group: Development/Libraries/Python
%py_requires
@@ -191,6 +262,16 @@
The python-ipa_hbac package contains the bindings so that libipa_hbac
can be used by Python applications.
+%package -n python-sss_nss_idmap
+Summary: Python bindings for libsss_nss_idmap
+License: LGPL-3.0+
+Group: Development/Libraries/Python
+%py_requires
+
+%description -n python-sss_nss_idmap
+The libsss_nss_idmap-python contains the bindings so that
+libsss_nss_idmap can be used by Python applications.
+
%package -n python-sssd-config
Summary: Python API for configuring sssd
License: GPL-3.0+ and LGPL-3.0+
@@ -204,7 +285,7 @@
%prep
%{?gpg_verify: %gpg_verify %{S:2}}
%setup -q
-%patch -P 1 -P 2 -P 3 -p1
+%patch -P 1 -p1
%build
%if 0%{?suse_version} < 1210
@@ -231,7 +312,9 @@
--with-ldb-lib-dir="$LDB_DIR" \
--with-selinux=no \
--with-os=suse \
- --with-semanage=no
+ --with-semanage=no \
+ --disable-ldb-version-check \
+ --disable-pac-responder
make %{?_smp_mflags} all
@@ -244,12 +327,14 @@
"$b/%_mandir"/{uk/man5,uk/man8};
install -d "$b/%_sysconfdir/sssd";
install -m600 src/examples/sssd-example.conf "$b/%_sysconfdir/sssd/sssd.conf";
-install src/sysv/SUSE/sssd "$b/%_sysconfdir/init.d/sssd";
%if 0%{?_unitdir:1}
install -d "$b/%_unitdir";
install src/sysv/systemd/sssd.service "$b/%_unitdir/sssd.service";
+rm -Rf "$b/%_initddir"
+%else
+install src/sysv/SUSE/sssd "$b/%_sysconfdir/init.d/sssd";
+ln -sf ../../etc/init.d/sssd "$b/usr/sbin/rcsssd"
%endif
-ln -sf ../../etc/init.d/sssd $b/usr/sbin/rcsssd
find "$b" -type f -name "*.la" -delete;
@@ -293,65 +378,128 @@
%postun -n libipa_hbac0 -p /sbin/ldconfig
%post -n libsss_idmap0 -p /sbin/ldconfig
%postun -n libsss_idmap0 -p /sbin/ldconfig
+%post -n libsss_nss_idmap0 -p /sbin/ldconfig
+%postun -n libsss_nss_idmap0 -p /sbin/ldconfig
%files -f sssd.lang
%defattr(-,root,root)
%doc COPYING
-%_initrddir/%name
%if 0%{?_unitdir:1}
%_unitdir
+%else
+%_initrddir/%name
+%_sbindir/rcsssd
%endif
%_bindir/sss_ssh_*
%_sbindir/sssd
-%_sbindir/rcsssd
-%dir %_libdir/%name
-%dir %_libexecdir/%name
-%dir %_mandir/cs
-%dir %_mandir/cs/man8
-%dir %_mandir/nl
-%dir %_mandir/nl/man8
-%dir %_mandir/pt
-%dir %_mandir/pt/man8
-%dir %_mandir/uk
-%dir %_mandir/uk/man1
-%dir %_mandir/uk/man5
-%dir %_mandir/uk/man8
-%_mandir/??/man?/*
+%dir %_mandir/??/
+%dir %_mandir/??/man?/
+%_mandir/??/man1/sss_ssh_*
+%_mandir/??/man5/sssd-simple.5*
+%_mandir/??/man5/sssd-sudo.5*
+%_mandir/??/man5/sssd.conf.5*
+%_mandir/??/man8/sssd.8*
%_mandir/man1/sss_ssh_*
-%_mandir/man5/sssd-ad.5*
-%_mandir/man5/sssd-krb5.5*
-%_mandir/man5/sssd-ldap.5*
%_mandir/man5/sssd-simple.5*
%_mandir/man5/sssd-sudo.5*
+%_mandir/man5/sssd.conf.5*
%_mandir/man8/sssd.8*
-%_mandir/man5/sssd.conf.5.gz
-%_libexecdir/%name/sss*
-%_libexecdir/%name/*_child
-%_libdir/%name/libsss_ad.so
-%_libdir/%name/libsss_krb5*
-%_libdir/%name/libsss_ldap*
-%_libdir/%name/libsss_proxy*
+%dir %_libdir/%name/
+%_libdir/%name/libsss_child*
+%_libdir/%name/libsss_crypt*
+%_libdir/%name/libsss_debug*
%_libdir/%name/libsss_simple*
-%_libdir/%name/modules
+%_libdir/%name/libsss_util*
+%_libdir/%name/modules/
+%dir %_libdir/ldb/
%_libdir/ldb/memberof.so
+%dir %_libexecdir/%name/
+%_libexecdir/%name/sssd_*
%dir %sssdstatedir
-%attr(700,root,root) %dir %dbpath
-%attr(755,root,root) %dir %pipepath
-%attr(700,root,root) %dir %pipepath/private
-%attr(755,root,root) %dir %pubconfpath
-%attr(750,root,root) %dir %_localstatedir/log/%name
-%dir %_sysconfdir/sssd
+%attr(700,root,root) %dir %dbpath/
+%attr(755,root,root) %dir %pipepath/
+%attr(700,root,root) %dir %pipepath/private/
+%attr(755,root,root) %dir %pubconfpath/
+%attr(750,root,root) %dir %_localstatedir/log/%name/
+%dir %_sysconfdir/sssd/
%config(noreplace) %_sysconfdir/sssd/sssd.conf
-%_datadir/sssd
-%exclude %_datadir/sssd/sssd.api.d/sssd-ipa.conf
+%dir %_datadir/%name/
+%_datadir/%name/sssd.api.conf
+%dir %_datadir/%name/sssd.api.d/
+%_datadir/%name/sssd.api.d/sssd-local.conf
+%_datadir/%name/sssd.api.d/sssd-simple.conf
#
-# client side
+# sssd-client
#
/%_lib/libnss_sss.so.2
/%_lib/security/pam_sss.so
%_libdir/krb5/plugins/libkrb5/*
-%_mandir/man8/pam_sss.8.gz
-%_mandir/man8/sssd_krb5_locator_plugin.8.gz
+%_mandir/??/man8/pam_sss.8*
+%_mandir/??/man8/sssd_krb5_locator_plugin.8*
+%_mandir/man8/pam_sss.8*
+%_mandir/man8/sssd_krb5_locator_plugin.8*
+
+%files ad
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_ad.so
+%dir %_datadir/%name/
+%dir %_datadir/%name/sssd.api.d/
+%_datadir/%name/sssd.api.d/sssd-ad.conf
+%dir %_mandir/??/man5/
+%_mandir/man5/sssd-ad.5*
+%_mandir/??/man5/sssd-ad.5*
+
+%files ipa
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_ipa*
+%dir %_datadir/%name/
+%dir %_datadir/%name/sssd.api.d
+%_datadir/%name/sssd.api.d/sssd-ipa.conf
+%dir %_mandir/??/man5/
+%_mandir/man5/sssd-ipa.5*
+%_mandir/??/man5/sssd-ipa.5*
+
+%files krb5
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_krb5.so
+%dir %_datadir/%name/
+%dir %_datadir/%name/sssd.api.d/
+%_datadir/%name/sssd.api.d/sssd-krb5.conf
+%dir %_mandir/??/man5/
+%_mandir/man5/sssd-krb5.5*
+%_mandir/??/man5/sssd-krb5.5*
+
+%files krb5-common
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_krb5_common.so
+%dir %_libexecdir/%name/
+%_libexecdir/%name/krb5_child
+%_libexecdir/%name/ldap_child
+
+%files ldap
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_ldap*
+%dir %_datadir/%name/
+%dir %_datadir/%name/sssd.api.d/
+%_datadir/%name/sssd.api.d/sssd-ldap.conf
+%dir %_mandir/??/man5/
+%_mandir/??/man5/sssd-ldap.5*
+%_mandir/man5/sssd-ldap.5*
+
+%files proxy
+%defattr(-,root,root)
+%dir %_libdir/%name/
+%_libdir/%name/libsss_proxy.so
+%dir %_libexecdir/%name/
+%_libexecdir/%name/proxy_child
+%dir %_datadir/%name/
+%dir %_datadir/%name/sssd.api.d/
+%_datadir/%name/sssd.api.d/sssd-proxy.conf
%files tools
%defattr(-,root,root)
@@ -362,29 +510,13 @@
%_sbindir/sss_groupmod
%_sbindir/sss_groupshow
%_sbindir/sss_seed
+%_sbindir/sss_obfuscate
%_sbindir/sss_useradd
%_sbindir/sss_userdel
%_sbindir/sss_usermod
-%_mandir/man8/sss_groupadd.8*
-%_mandir/man8/sss_groupdel.8*
-%_mandir/man8/sss_groupmod.8*
-%_mandir/man8/sss_groupshow.8*
-%_mandir/man8/sss_seed.8*
-%_mandir/man8/sss_useradd.8*
-%_mandir/man8/sss_userdel.8*
-%_mandir/man8/sss_usermod.8*
-%_mandir/man8/sss_obfuscate.8*
-%_mandir/man8/sss_cache.8*
-%_mandir/man8/sss_debuglevel.8*
-%attr(0755,root,root) %_sbindir/sss_obfuscate
-
-%files ipa-provider
-%defattr(-,root,root)
-%dir %_datadir/sssd
-%dir %_datadir/sssd/sssd.api.d
-%_datadir/sssd/sssd.api.d/sssd-ipa.conf
-%_libdir/sssd/libsss_ipa*
-%_mandir/man5/sssd-ipa.*
+%dir %_mandir/??/man8/
+%_mandir/??/man8/sss_*.8*
+%_mandir/man8/sss_*.8*
%files -n libipa_hbac0
%defattr(-,root,root)
@@ -406,15 +538,30 @@
%_libdir/libsss_idmap.so
%_libdir/pkgconfig/sss_idmap.pc
+%files -n libsss_nss_idmap0
+%defattr(-,root,root)
+%_libdir/libsss_nss_idmap.so.0*
+
+%files -n libsss_nss_idmap-devel
+%defattr(-,root,root)
+%_includedir/sss_nss_idmap.h
+%_libdir/libsss_nss_idmap.so
+%_libdir/pkgconfig/sss_nss_idmap.pc
+
%files -n libsss_sudo
%defattr(-,root,root)
-%_includedir/sss_sudo.h
%_libdir/libsss_sudo.so
%files -n python-ipa_hbac
%defattr(-,root,root)
+%dir %python_sitearch
%python_sitearch/pyhbac.so
+%files -n python-sss_nss_idmap
+%defattr(-,root,root)
+%dir %python_sitearch
+%python_sitearch/pysss_nss_idmap.so
+
%files -n python-sssd-config
%defattr(-,root,root)
%python_sitearch/pysss.so
++++++ sssd-1.9.5.tar.gz -> sssd-1.11.2.tar.gz ++++++
++++ 257754 lines of diff (skipped)
++++++ sssd-ldflags.diff ++++++
--- /var/tmp/diff_new_pack.BXWLmD/_old 2013-12-02 15:09:09.000000000 +0100
+++ /var/tmp/diff_new_pack.BXWLmD/_new 2013-12-02 15:09:09.000000000 +0100
@@ -1,50 +1,107 @@
+From c9b13c7e032fde96cf07c7d298bb7fa65fad220b Mon Sep 17 00:00:00 2001
From: Jan Engelhardt