- 
    Thu Dec 02 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-39
    
- Resolves: rhbz#659136 - SSSD shutdown sometimes hangs
   
  
  - 
    Wed Nov 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-38
    
- Resolves: rhbz#638241 - sssd stops on upgrade
   
  
  - 
    Fri Nov 05 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-37
    
- Resolves: rhbz#649037 - Unable to set SELinux user for the user“s login
   
  
  - 
    Wed Nov 03 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-36
    
- Resolves: rhbz#649285 - SSSD will sometimes lose groups from the cache
   
  
  - 
    Tue Nov 02 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-35
    
- Resolves: rhbz#645437 - NSS responder dies if DP dies during a request
   
  
  - 
    Tue Oct 26 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-34
    
- Resolves: rhbz#645515 - 'getent passwd <username>' returns nothing if its
-                         uidNumber gt 2147483647
   
  
  - 
    Fri Oct 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-33
    
- Resolves: rhbz#645515 - 'getent passwd <username>' returns nothing if its
-                         uidNumber gt 2147483647
   
  
  - 
    Fri Oct 08 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-32
    
- Resolves: rhbz#636055 - SSSD initgroups does not behave as expected
- Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
-                         libini_config-devel
   
  
  - 
    Fri Oct 08 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-31
    
- Resolves: rhbz#633863 - SSSD log fills up the disk
- Resolves: rhbz#634918 - multilib conflicts in libpath_utils-devel and
-                         libini_config-devel
- Resolves: rhbz#636823 - the krb5 locator plugin isn't packaged for multilib
- Resolves: rhbz#638241 - sssd stops on upgrade
   
  
  - 
    Tue Sep 28 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-30
    
- Resolves: rhbz#634861 - error: %post(sssd-1.2.1-28.1.el5.s390x) scriptlet
-                         failed, exit status 127
   
  
  - 
    Thu Sep 23 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-29
    
- Resolves: rhbz#636823 - the krb5 locator plugin isn't packaged for multilib
   
  
  - 
    Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-28.1
    
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
-                           against LDAP
- Patch was included but not applied in previous version
   
  
  - 
    Tue Aug 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-27.1
    
- Resolves: CVE-2010-2940 - sssd allows null password entry to authenticate
-                           against LDAP
   
  
  - 
    Wed Aug 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-26
    
- Resolves: rhbz#621307 - Password changes are broken on LDAP
   
  
  - 
    Wed Aug 04 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23.1
    
- Initial release for Red Hat Enterprise Linux 5
   
  
  - 
    Fri Jul 30 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-23
    
- Resolves: rhbz#617623 - SSSD suffers from serious performance issues on
-                         initgroups calls
   
  
  - 
    Fri Jul 23 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-21
    
- Resolves: rhbz#607233 - SSSD users cannot log in through GDM
-                       - Real issue was that long-running services
-                       - do not reconnect if sssd is restarted
   
  
  - 
    Fri Jul 09 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-20
    
- Resolves: rhbz#591715 - sssd should emit warnings if there are problems with
-                         /etc/krb5.keytab file
   
  
  - 
    Mon Jun 28 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-19
    
- Resolves: rhbz#606836 - libcollection needs an soname bump before RHEL 6
-                         final
- Resolves: rhbz#608661 - SASL with OpenLDAP server fails
- Resolves: rhbz#608688 - SSSD doesn't properly request RootDSE attributes
   
  
  - 
    Fri Jun 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.1-15
    
- New upstream bugfix release 1.2.1
- Resolves: rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
-                         bugs.
- Resolves: rhbz#603041 - Remove unnecessary option krb5_changepw_principal
- Resolves: rhbz#604704 - authconfig should provide error with no trace back
-                         if disabling sssd when sssd is not enabled
- Resolves: rhbz#591873 - Connecting to the network after an offline kerberos
-                         auth logs continuous error messages to sssd_ldap.log
- Resolves: rhbz#596295 - Authentication fails for user from the second domain
-                         when the same user name is filtered out from the
-                         first domain
- Related:  rhbz#598559 - Update translation files for SSSD before RHEL 6
-                         final
   
  
  - 
    Thu Jun 10 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-14
    
- Resolves: rhbz#593696 - Empty list of simple_allow_users causes sssd service
-                         to fail while restart
- Resolves: rhbz#600352 - Wrapping the value for "ldap_access_filter" in
-                         parentheses causes ldap_search_ext to fail
- Resolves: rhbz#600468 - Segfault in krb5_child
- Related:  rhbz#601770 - SSSD in RHEL 6.0 should ship with zero open Coverity
-                         bugs.
   
  
  - 
    Wed Jun 02 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-13
    
- Resolves: rhbz#598670 - Ccache file of a user is removed too early
- Resolves: rhbz#599057 - Incomplete comparison of a service name in
-                         IPA access provider
- Resolves: rhbz#598496 - Failure with IPA access provider
- Resolves: rhbz#599027 - Makefile typo causes SSSD not to use the
-                         kernel keyring
   
  
  - 
    Mon May 24 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.2.0-12
    
- New stable upstream version 1.2.0
- Support ServiceGroups for FreeIPA v2 HBAC rules
- Fix long-standing issue with auth_provider = proxy
- Better logging for TLS issues in LDAP
- Resolves: rhbz#584001 - Rebase sssd to 1.2
- Resolves: rhbz#584017 - Unconfiguring sssd leaves KDC locator file
- Resolves: rhbz#587384 - authconfig fails if krb5_kpasswd in sssd.conf
- Resolves: rhbz#587743 - Need to replicate pam_ldap's pam_filter in sssd.conf
- Resolves: rhbz#590134 - sssd: auth_provider = proxy regression
- Resolves: rhbz#591131 - Kerberos provider needs to rewrite kdcinfo file when
-                         going online
- Resolves: rhbz#591136 - Change SSSD ipa BE to handle new structure of the
-                         HBAC rule
   
  
  - 
    Wed May 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11.1
    
- Improve DEBUG logs for STARTTLS failures
   
  
  - 
    Tue May 18 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.92-11
    
- New LDAP access provider allows for filtering user access by LDAP attribute
- Reduced default timeout for detecting offline status with LDAP
- GSSAPI ticket lifetime made configurable
- Better offline->online transition support in Kerberos
   
  
  - 
    Fri May 07 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.91-10
    
- Release new upstream version 1.1.91
- Enhancements when using SSSD with FreeIPA v2
- Support for deferred kinit
- Support for DNS SRV records for failover
   
  
  - 
    Fri Apr 02 2010 Simo Sorce <ssorce@redhat.com> - 1.1.1-3
    
- Bump up release number to avoid library sub-packages version issues with
  previous releases.
   
  
  - 
    Thu Apr 01 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.1-1
    
- New upstream release 1.1.1
- Fixed the IPA provider (which was segfaulting at start)
- Fixed a bug in the SSSDConfig API causing some options to revert to
- their defaults
- This impacted the Authconfig UI
- Ensure that SASL binds to LDAP auto-retry when interrupted by a signal
   
  
  - 
    Mon Mar 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-2
    
- Release SSSD 1.1.0 final
- Fix two potential segfaults
- Fix memory leak in monitor
- Better error message for unusable confdb
   
  
  - 
    Wed Mar 17 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.1.0-1.pre20100317git0ea7f19
    
- Release candidate for SSSD 1.1
- Add simple access provider
- Create subpackages for libcollection, libini_config, libdhash and librefarray
- Support IPv6
- Support LDAP referrals
- Fix cache issues
- Better feedback from PAM when offline
   
  
  - 
    Wed Feb 24 2010 Stephen Gallagehr <sgallagh@redhat.com> - 1.0.5-2
    
- Rebuild against new libtevent
   
  
  - 
    Fri Feb 19 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.5-1
    
- Fix licenses in sources and on RPMs
   
  
  - 
    Mon Jan 25 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.4-1
    
- Fix regression on 64-bit platforms
   
  
  - 
    Fri Jan 22 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.3-1
    
- Fixes link error on platforms that do not do implicit linking
- Fixes double-free segfault in PAM
- Fixes double-free error in async resolver
- Fixes support for TCP-based DNS lookups in async resolver
- Fixes memory alignment issues on ARM processors
- Manpage fixes
   
  
  - 
    Thu Jan 14 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.2-1
    
- Fixes a bug in the failover code that prevented the SSSD from detecting when it went back online
- Fixes a bug causing long (sometimes multiple-minute) waits for NSS requests
- Several segfault bugfixes
   
  
  - 
    Mon Jan 11 2010 Stephen Gallagher <sgallagh@redhat.com> - 1.0.1-1
    
- Fix CVE-2010-0014
   
  
  - 
    Mon Dec 21 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-2
    
- Patch SSSDConfig API to address
- https://bugzilla.redhat.com/show_bug.cgi?id=549482
   
  
  - 
    Fri Dec 18 2009 Stephen Gallagher <sgallagh@redhat.com> - 1.0.0-1
    
- New upstream stable release 1.0.0
   
  
  - 
    Fri Dec 11 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.1-1
    
- New upstream bugfix release 0.99.1
   
  
  - 
    Mon Nov 30 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.99.0-1
    
- New upstream release 0.99.0
   
  
  - 
    Tue Oct 27 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.1-1
    
- Fix segfault in sssd_pam when cache_credentials was enabled
- Update the sample configuration
- Fix upgrade issues caused by data provider service removal
   
  
  - 
    Mon Oct 26 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-2
    
- Fix upgrade issues from old (pre-0.5.0) releases of SSSD
   
  
  - 
    Fri Oct 23 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.7.0-1
    
- New upstream release 0.7.0
   
  
  - 
    Thu Oct 15 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-2
    
- Fix missing file permissions for sssd-clients
   
  
  - 
    Tue Oct 13 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.1-1
    
- Add SSSDConfig API
- Update polish translation for 0.6.0
- Fix long timeout on ldap operation
- Make dp requests more robust
   
  
  - 
    Tue Sep 29 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.6.0-1
    
- Ensure that the configuration upgrade script always writes the config
  file with 0600 permissions
- Eliminate an infinite loop in group enumerations
   
  
  - 
    Mon Sep 28 2009 Sumit Bose <sbose@redhat.com> - 0.6.0-0
    
- New upstream release 0.6.0
   
  
  - 
    Mon Aug 24 2009 Simo Sorce <ssorce@redhat.com> - 0.5.0-0
    
- New upstream release 0.5.0
   
  
  - 
    Wed Jul 29 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.4.1-4
    
- Fix for CVE-2009-2410 - Native SSSD users with no password set could log in
  without a password. (Patch by Stephen Gallagher)
   
  
  - 
    Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.1-3
    
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
   
  
  - 
    Mon Jun 22 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-2
    
- Fix a couple of segfaults that may happen on reload
   
  
  - 
    Thu Jun 11 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-1
    
- add missing configure check that broke stopping the daemon
- also fix default config to add a missing required option
   
  
  - 
    Mon Jun 08 2009 Simo Sorce <ssorce@redhat.com> - 0.4.1-0
    
- latest upstream release.
- also add a patch that fixes debugging output (potential segfault)
   
  
  - 
    Mon Apr 20 2009 Simo Sorce <ssorce@redhat.com> - 0.3.2-2
    
- release out of the official 0.3.2 tarball
   
  
  - 
    Mon Apr 20 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.3.2-1
    
- bugfix release 0.3.2
- includes previous release patches
- change permissions of the /etc/sssd/sssd.conf to 0600
   
  
  - 
    Tue Apr 14 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-2
    
- Add last minute bug fixes, found in testing the package
   
  
  - 
    Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.1-1
    
- Version 0.3.1
- includes previous release patches
   
  
  - 
    Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-2
    
- Try to fix build adding automake as an explicit BuildRequire
- Add also a couple of last minute patches from upstream
   
  
  - 
    Mon Apr 13 2009 Simo Sorce <ssorce@redhat.com> - 0.3.0-1
    
- Version 0.3.0
- Provides file based configuration and lots of improvements
   
  
  - 
    Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.1-1
    
- Version 0.2.1
   
  
  - 
    Tue Mar 10 2009 Simo Sorce <ssorce@redhat.com> - 0.2.0-1
    
- Version 0.2.0
   
  
  - 
    Sun Mar 08 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-5.20090309git691c9b3
    
- package git snapshot
   
  
  - 
    Fri Mar 06 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-4
    
- fixed items found during review
- added initscript
   
  
  - 
    Thu Mar 05 2009 Sumit Bose <sbose@redhat.com> - 0.1.0-3
    
- added sss_client
   
  
  - 
    Mon Feb 23 2009 Jakub Hrozek <jhrozek@redhat.com> - 0.1.0-2
    
- Small cleanup and fixes in the spec file
   
  
  - 
    Thu Feb 12 2009 Stephen Gallagher <sgallagh@redhat.com> - 0.1.0-1
    
- Initial release (based on version 0.1.0 upstream code)