[ol9_baseos_latest] sssd-tools-2.9.4-2.0.1.el9.x86_64

Provides userspace tools for manipulating users, groups, and nested groups in
SSSD when using id_provider = local in /etc/sssd/sssd.conf.

Also provides several other administrative tools:
    * sss_debuglevel to change the debug level on the fly
    * sss_seed which pre-creates a user entry for use in kickstarts
    * sss_obfuscate for generating an obfuscated LDAP password
    * sssctl -- an sssd status and control utility

Changelog (Show File list) (Show related packages)

• Tue Apr 02 2024 Mark Will <mark.will@oracle.com> - 2.9.4-2.0.1

  - Restore default debug level for sss_cache [Orabug: 32810448]

• Mon Feb 12 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2

  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities

• Fri Jan 12 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1

  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]

• Mon Nov 13 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-2

  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4

• Mon Nov 13 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1

  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)

• Thu Oct 05 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-2

  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users

• Fri Sep 08 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1

  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code

• Mon Jul 10 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-2

  - Resolves: rhbz#2218858 - [sssd] SSSD enters failed state after heavy load in the system

• Fri Jun 23 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1

  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys

• Tue Jun 06 2023 Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-5

  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.