[ol9_u0_baseos_base] sssd-2.6.2-2.0.1.el9.x86_64

Provides a set of daemons to manage access to remote directories and
authentication mechanisms. It provides an NSS and PAM interface toward
the system and a pluggable back end system to connect to multiple different
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.

The sssd subpackage is a meta-package that contains the daemon as well as all
the existing back ends.

Changelog (Show File list) (Show related packages)

• Wed May 04 2022 Alan Steinberg <alan.steinberg@oracle.com> - 2.6.2-2.0.1

  - Restore default debug level for sss_cache [Orabug: 32810448]

• Mon Jan 17 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2

  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.

• Mon Jan 03 2022 Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1

  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs

• Mon Dec 06 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1

  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected

• Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5

  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization

• Mon Aug 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-4

  - Resolves: rhbz#1973411 - CVE-2021-3621 sssd: shell command injection in sssctl [rhel-9]

• Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - 2.5.2-3

  - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
    Related: rhbz#1991688

• Mon Aug 02 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2

  - Resolves: rhbz#1803943 - [RFE] support subid ranges managed by FreeIPA

• Fri Jul 16 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1

  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()

• Wed Jun 16 2021 Mohan Boddu <mboddu@redhat.com> - 2.5.1-2

  - Rebuilt for RHEL 9 BETA for openssl 3.0
    Related: rhbz#1971065