[ol7_latest] sssd-tools-1.16.5-10.0.1.el7.x86_64

Provides userspace tools for manipulating users, groups, and nested groups in
SSSD when using id_provider = local in /etc/sssd/sssd.conf.

Also provides several other administrative tools:
    * sss_debuglevel to change the debug level on the fly
    * sss_seed which pre-creates a user entry for use in kickstarts
    * sss_obfuscate for generating an obfuscated LDAP password
    * sssctl -- an sssd status and control utility

Changelog (Show File list) (Show related packages)

• Wed Sep 30 2020 Todd Vierling <todd.vierling@oracle.com> - 1.16.5-10.0.1

  - sssd_be crash when refresh_expired_interval is set [orabug 31220112]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]

• Fri Jun 05 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10

  - Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False

• Fri May 29 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9

  - Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization

• Wed May 27 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8

  - Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
  - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                             It is done in two steps (two different nsupdate messages).

• Thu May 21 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7

  - Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
  - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.

• Wed May 20 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6

  - Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
  - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen

• Tue May 19 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-5

  - Resolves: rhbz#1834266 - "off-by-one error" in watchdog implementation

• Mon May 11 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-4

  - Resolves: rhbz#1829806 - [Bug] Reduce logging about flat names
  - Resolves: rhbz#1800564 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package

• Thu May 07 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-3

  - Resolves: rhbz#1683946 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup

• Thu Apr 23 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-2

  - Resolves: rhbz#1513371 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_be[PROXY] killed by 6
  - Resolves: rhbz#1568083 - subdomain lookup fails when certmaprule contains DN
  - Resolves: rhbz#1781539 - PKINIT with KCM does not work
  - Resolves: rhbz#1786341 - SSSD doesn't honour the customized ID view created in IPA
  - Resolves: rhbz#1709818 - override_gid did not work for subdomain.
  - Resolves: rhbz#1719718 - Validator warning issue : Attribute 'dns_resolver_op_timeout' is not allowed in section 'domain/REMOVED'. Check for typos
  - Resolves: rhbz#1787067 - sssd (sssd_be) is consuming 100 CPU, partially due to failing mem-cache
  - Resolves: rhbz#1822461 - background refresh task does not refresh updated netgroup entries
  - Added missing 'Requires' to resolves some of rpmdiff tool warnings