[ol7_latest] sssd-krb5-1.16.5-10.0.3.el7_9.16.x86_64

Provides the Kerberos back end that the SSSD can utilize authenticate
against a Kerberos server.

Changelog (Show File list) (Show related packages)

• Tue Jan 23 2024 EL Errata <el-errata_ww@oracle.com> - 1.16.5-10.0.3

  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]

• Thu Nov 16 2023 Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16

  - Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]

• Fri Jan 06 2023 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15

  - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
  - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]

• Tue Nov 15 2022 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14

  - Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
  - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
  - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]

• Fri Jun 10 2022 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13

  - Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
  - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]

• Mon Jan 31 2022 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12

  - Resolves: rhbz#2006382 - IPA Intermittence fetching groups
  - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
  - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update

• Tue Nov 02 2021 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11

  - Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
  - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)

• Wed Aug 11 2021 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.10

  - Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down

• Mon Aug 09 2021 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9

  - Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
  - Resolves: rhbz#1968330 - id lookup is failing intermittently
  - Resolves: rhbz#1964415 - Memory leak in the simple access provider
  - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]

• Mon Apr 26 2021 Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8

  - Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
  - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
  - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
  - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
  - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]