[ol7_latest] sssd-ad-1.16.2-13.el7.x86_64

Provides the Active Directory back end that the SSSD can utilize to fetch
identity data from and authenticate against an Active Directory server.

Changelog (Show File list) (Show related packages)

• Wed Sep 05 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13

  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing

• Thu Aug 09 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12

  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled

• Thu Aug 02 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-11

  - Resolves: rhbz#1602781 - Local users failed to login with same password

• Wed Aug 01 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10

  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped

• Thu Jul 26 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-9

  - Resolves: rhbz#1522928 - sssd doesn't allow user with expired password

• Thu Jul 26 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8

  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails

• Fri Jul 13 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7

  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found

• Wed Jul 11 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6

  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers

• Fri Jun 29 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5

  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd

• Mon Jun 25 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4

  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page