[ol7_optional_latest] libsss_certmap-devel-1.16.2-13.el7.x86_64

Library to map certificates to users based on rules

Changelog (Show File list) (Show related packages)

• Wed Sep 05 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13

  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing

• Thu Aug 09 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12

  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled

• Thu Aug 02 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-11

  - Resolves: rhbz#1602781 - Local users failed to login with same password

• Wed Aug 01 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10

  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped

• Thu Jul 26 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-9

  - Resolves: rhbz#1522928 - sssd doesn't allow user with expired password

• Thu Jul 26 2018 Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8

  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails

• Fri Jul 13 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7

  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found

• Wed Jul 11 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6

  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers

• Fri Jun 29 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5

  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd

• Mon Jun 25 2018 Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4

  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page