[ol8_baseos_latest] sssd-common-pac-2.7.3-4.0.1.el8_7.1.x86_64

Name:	sssd-common-pac
Version:	2.7.3
Release:	4.0.1.el8_7.1
Architecture:	x86_64
Group:	Applications/System
Size:	265179
License:	GPLv3+
RPM:	sssd-common-pac-2.7.3-4.0.1.el8_7.1.x86_64.rpm
Source RPM:	sssd-2.7.3-4.0.1.el8_7.1.src.rpm
Build Date:	Thu Nov 10 2022
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://github.com/SSSD/sssd
Summary:	Common files needed for supporting PAC processing
Description:	Provides common files needed by SSSD providers such as IPA and Active Directory for handling Kerberos PACs.

Changelog (Show File list) (Show related packages)

Thu Nov 10 2022 EL Errata <el-errata_ww@oracle.com> - 2.7.3-4.0.1
```
- Restore default debug level for sss_cache [Orabug: 32810448]
```

Thu Oct 13 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1

- Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]

Fri Aug 26 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4

- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8

Tue Aug 23 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3

- Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
- Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
- Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend

Wed Aug 10 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2

- Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
- Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
- Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL

Wed Jul 13 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1

- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization

Mon Jun 20 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1

- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
- Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
- Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
- Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
- Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
- Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
- Resolves: rhbz#2098617 - Harden kerberos ticket validation
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol

Wed May 18 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2

- Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
- Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
- Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
- Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
- Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
- Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
- Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
- Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
- Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
- Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
- Resolves: rhbz#2087745 - 2FA prompting setting ineffective
- Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language

Mon Jan 17 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3

- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization

Tue Jan 04 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2

- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)