[ol9_baseos_latest] sssd-ldap-2.6.2-4.0.2.el9_0.1.x86_64

Provides the LDAP back end that the SSSD can utilize to fetch identity data
from and authenticate against an LDAP server.

Changelog (Show File list) (Show related packages)

• Tue Jun 28 2022 EL Errata <el-errata_ww@oracle.com> - 2.6.2-4.0.2.1

  - Restore default debug level for sss_cache [Orabug: 32810448]

• Thu Jun 02 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1

  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]

• Mon Apr 25 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4

  - Resolves: rhbz#2075539 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-9.0.0.z]

• Mon Jan 17 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2

  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.

• Mon Jan 03 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1

  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs

• Mon Dec 06 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1

  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected

• Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5

  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization

• Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-4

  - Resolves: rhbz#1973411 - CVE-2021-3621 sssd: shell command injection in sssctl [rhel-9]

• Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 2.5.2-3

  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688

• Mon Aug 02 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2

  - Resolves: rhbz#1803943 - [RFE] support subid ranges managed by FreeIPA