Log In
dpward
/
rpms
/
sssd
Forked from
rpms/sssd
3 years ago
Clone
Source Code
GIT
Source
Stats
Overview
Files
Commits
Branches
Forks
Releases
ced1f5
import sssd-1.16.0-19.el7
Authored and Committed by
centosrcm
6 years ago
raw
patch
tree
parent
306 files changed.
23493 lines added
.
50821 lines removed
.
.gitignore
file modified
+3
-1
.sssd.metadata
file modified
+3
-1
SOURCES/0001-MAN-Mention-sssd-secrets-in-SEE-ALSO-section.patch
file removed
-36
SOURCES/0001-NSS-Move-memcache-setup-to-separate-function.patch
file added
+143
SOURCES/0002-NSS-Specify-memcache_timeout-0-semantics.patch
file added
+118
SOURCES/0002-split_on_separator-move-to-a-separate-file.patch
file removed
-369
SOURCES/0003-MAN-Document-memcache_timeout-0-meaning.patch
file added
+51
SOURCES/0003-util-move-string_in_list-to-util_ext.patch
file removed
-91
SOURCES/0004-CONFIG-Add-a-new-option-auto_private_groups.patch
file added
+159
SOURCES/0004-certmap-add-new-library-libsss_certmap.patch
file removed
-5787
SOURCES/0005-CONFDB-Remove-the-obsolete-option-magic_private_grou.patch
file added
+33
SOURCES/0005-certmap-add-placeholder-for-OpenSSL-implementation.patch
file removed
-151
SOURCES/0006-SDAP-Allow-the-mpg-flag-for-the-main-domain.patch
file added
+167
SOURCES/0006-sysdb-add-sysdb_attrs_copy.patch
file removed
-173
SOURCES/0007-LDAP-Turn-group-request-into-user-request-for-MPG-do.patch
file added
+222
SOURCES/0007-sdap_get_users_send-new-argument-mapped_attrs.patch
file removed
-316
SOURCES/0008-LDAP-always-store-the-certificate-from-the-request.patch
file removed
-178
SOURCES/0008-SYSDB-Prevent-users-and-groups-ID-collision-in-MPG-d.patch
file added
+97
SOURCES/0009-TESTS-Add-integration-tests-for-the-auto_private_gro.patch
file added
+346
SOURCES/0009-sss_cert_derb64_to_ldap_filter-add-sss_certmap-suppo.patch
file removed
-235
SOURCES/0010-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch
SOURCES/0199-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch
file renamed
+8
-8
SOURCES/0010-sysdb-add-certmap-related-calls.patch
file removed
-846
SOURCES/0011-IPA-add-certmap-support.patch
file removed
-484
SOURCES/0011-MAN-GPO-Security-Filtering-limitation.patch
file added
+41
SOURCES/0012-nss-idmap-add-sss_nss_getlistbycert.patch
file removed
-736
SOURCES/0012-sudo-always-use-srv_opts-from-id-context.patch
SOURCES/0202-sudo-always-use-srv_opts-from-id-context.patch
file renamed
+3
-3
SOURCES/0013-AD-Remember-last-site-discovered.patch
file added
+109
SOURCES/0013-nss-allow-larger-buffer-for-certificate-based-reques.patch
file removed
-70
SOURCES/0014-IPA-Add-s2n-request-to-string-function.patch
file removed
-44
SOURCES/0014-sysdb-add-functions-to-get-set-client-site.patch
file added
+206
SOURCES/0015-AD-Remember-last-site-discovered-in-sysdb.patch
file added
+161
SOURCES/0015-IPA-Enhance-debug-logging-for-ipa-s2n-operations.patch
file removed
-82
SOURCES/0016-UTIL-Add-wrapper-function-to-configure-logger.patch
file added
+133
SOURCES/0016-UTIL-iobuf-Make-input-parameter-for-the-readonly-ope.patch
file removed
-45
SOURCES/0017-Add-parameter-logger-to-daemons.patch
file added
+830
SOURCES/0017-UTIL-Fix-a-typo-in-the-tcurl-test-tool.patch
file removed
-32
SOURCES/0018-SYSTEMD-Replace-parameter-debug-to-files-with-DEBUG_.patch
file added
+259
SOURCES/0018-UTIL-Add-SAFEALIGN_COPY_UINT8_CHECK.patch
file removed
-36
SOURCES/0019-SYSTEMD-Add-environment-file-to-responder-service-fi.patch
file added
+107
SOURCES/0019-UTIL-Add-utility-macro-cli_creds_get_gid.patch
file removed
-34
SOURCES/0020-UTIL-Add-type-specific-getsetters-to-sss_iobuf.patch
file removed
-194
SOURCES/0020-UTIL-Hide-and-deprecate-parameter-debug-to-files.patch
file added
+47
SOURCES/0021-LDAP-Bind-to-the-LDAP-server-also-in-the-auth.patch
file added
+213
SOURCES/0021-UTIL-krb5-principal-un-marshalling.patch
file removed
-262
SOURCES/0022-KCM-Initial-responder-build-and-packaging.patch
file removed
-1013
SOURCES/0022-sss_client-create-nss_common.h.patch
file added
+143
SOURCES/0023-KCM-request-parsing-and-sending-a-reply.patch
file removed
-578
SOURCES/0023-nss-idmap-add-nss-like-calls-with-timeout-and-flags.patch
file added
+901
SOURCES/0024-KCM-Implement-an-internal-ccache-storage-and-retriev.patch
file removed
-2153
SOURCES/0024-NSS-add-_EX-version-of-some-requests.patch
file added
+606
SOURCES/0025-KCM-Add-a-in-memory-credential-storage.patch
file removed
-907
SOURCES/0025-NSS-add-support-for-SSS_NSS_EX_FLAG_NO_CACHE.patch
file added
+149
SOURCES/0026-CACHE_REQ-Add-cache_req_data_set_bypass_dp.patch
file added
+112
SOURCES/0026-KCM-Implement-KCM-server-operations.patch
file removed
-2326
SOURCES/0027-MAN-Add-a-manual-page-for-sssd-kcm.patch
file removed
-278
SOURCES/0027-nss-make-memcache_delete_entry-public.patch
file added
+49
SOURCES/0028-NSS-add-support-for-SSS_NSS_EX_FLAG_INVALIDATE_CACHE.patch
file added
+365
SOURCES/0028-TESTS-Add-integration-tests-for-the-KCM-responder.patch
file removed
-799
SOURCES/0029-NSS-TESTS-add-unit-tests-for-_EX-requests.patch
file added
+590
SOURCES/0029-SECRETS-Create-DB-path-before-the-operation-itself.patch
file removed
-405
SOURCES/0030-SECRETS-Return-a-nicer-error-message-on-request-with.patch
file removed
-40
SOURCES/0030-nss-idmap-add-timeout-version-of-old-sss_nss_-calls.patch
file added
+494
SOURCES/0031-SECRETS-Store-ccaches-in-secrets-for-the-KCM-respond.patch
file removed
-206
SOURCES/0031-nss-idmap-allow-empty-buffer-with-SSS_NSS_EX_FLAG_IN.patch
file added
+184
SOURCES/0032-BUILD-Properly-expand-variables-in-sssd-ifp.service.patch
file added
+51
SOURCES/0032-TCURL-Support-HTTP-POST-for-creating-containers.patch
file removed
-129
SOURCES/0033-KCM-Store-ccaches-in-secrets.patch
file removed
-3787
SOURCES/0033-SYSTEMD-Clean-pid-file-in-corner-cases.patch
file added
+39
SOURCES/0034-CHILD-Pass-information-about-logger-to-children.patch
file added
+198
SOURCES/0034-KCM-Make-the-secrets-ccache-back-end-configurable-ma.patch
file removed
-219
SOURCES/0035-KCM-Queue-requests-by-the-same-UID.patch
file removed
-909
SOURCES/0035-LDAP-Improve-error-treatment-from-sdap_cli_connect-i.patch
file added
+58
SOURCES/0036-KCM-Idle-terminate-the-responder-if-the-secrets-back.patch
file removed
-55
SOURCES/0036-p11_child-return-multiple-certs.patch
file added
+598
SOURCES/0037-CONFIGURE-Fix-fallback-if-pkg-config-for-uuid-is-mis.patch
file removed
-30
SOURCES/0037-PAM-handled-multiple-certs-in-the-responder.patch
file added
+1074
SOURCES/0038-intg-fix-configure-failure-with-strict-cflags.patch
file removed
-52
SOURCES/0038-pam_sss-refactoring-use-struct-cert_auth_info.patch
file added
+680
SOURCES/0039-intg-Remove-bashism-from-intgcheck-prepare.patch
file removed
-54
SOURCES/0039-p11_child-use-options-to-select-certificate-for-auth.patch
file added
+609
SOURCES/0040-UTIL-Introduce-subdomain_create_conf_path.patch
file removed
-127
SOURCES/0040-pam-add-prompt-string-for-certificate-authentication.patch
file added
+337
SOURCES/0041-PAM-allow-missing-logon_name-during-certificate-auth.patch
file added
+256
SOURCES/0041-SUBDOMAINS-Allow-use_fully_qualified_names-for-subdo.patch
file removed
-531
SOURCES/0042-CACHE_REQ-Descend-into-subdomains-on-lookups.patch
file removed
-172
SOURCES/0042-p11_child-add-descriptions-for-error-codes-to-debug-.patch
file added
+276
SOURCES/0043-NSS-TESTS-Fix-subdomains-attribution.patch
file removed
-35
SOURCES/0043-pam-filter-certificates-in-the-responder-not-in-the-.patch
file added
+357
SOURCES/0044-NSS-TESTS-Improve-setup-teardown-for-subdomains-test.patch
file removed
-274
SOURCES/0044-PAM-add-certificate-s-label-to-the-selection-prompt.patch
file added
+274
SOURCES/0045-NSS-TESTS-Include-searches-for-non-fqnames-members-o.patch
file removed
-355
SOURCES/0045-SYSDB-Remove-code-causing-a-covscan-warning.patch
file added
+128
SOURCES/0046-SYSDB-Add-methods-to-deal-with-the-domain-s-resoluti.patch
file removed
-289
SOURCES/0046-SYSDB-Better-debugging-for-email-conflicts.patch
file added
+94
SOURCES/0047-NSS-Use-enum_ctx-as-memory_context-in-_setnetgrent_s.patch
file added
+39
SOURCES/0047-SYSDB-TESTS-Add-tests-for-the-domain-s-resolution-or.patch
file removed
-259
SOURCES/0048-IPA-Get-ipaDomainsResolutionOrder-from-ipaConfig.patch
file removed
-369
SOURCES/0048-TOOLS-Add-a-new-sssctl-command-access-report.patch
file added
+504
SOURCES/0049-IPA_SUBDOMAINS-Rename-_refresh_view-to-_refresh_view.patch
file removed
-54
SOURCES/0049-dp-use-void-to-express-empty-output-argument-list.patch
file added
+50
SOURCES/0050-IPA-Get-ipaDomainsResolutionOrder-from-IPA-ID-View.patch
file removed
-347
SOURCES/0050-dp-add-method-to-refresh-access-control-rules.patch
file added
+192
SOURCES/0051-DLINKLIST-Add-DLIST_FOR_EACH_SAFE-macro.patch
file removed
-37
SOURCES/0051-ipa-implement-method-to-refresh-HBAC-rules.patch
file added
+140
SOURCES/0052-CACHE_REQ-Make-use-of-domainResolutionOrder.patch
file removed
-795
SOURCES/0052-ifp-add-method-to-refresh-access-control-rules-in-do.patch
file added
+158
SOURCES/0053-UTIL-Expose-replace_char-as-sss_replace_char.patch
file removed
-81
SOURCES/0053-sssctl-call-dbus-instead-of-pam-to-refresh-HBAC-rule.patch
file added
+200
SOURCES/0054-Add-domain_resolution_order-config-option.patch
file removed
-205
SOURCES/0054-sysdb-be_refresh_get_values_ex-remove-unused-option.patch
file added
+66
SOURCES/0055-ssh-handle-binary-keys-correctly.patch
file removed
-48
SOURCES/0055-sysdb-do-not-use-objectClass-for-users-and-groups.patch
file added
+758
SOURCES/0056-ssh-add-support-for-certificates-from-non-default-vi.patch
file removed
-52
SOURCES/0056-sysdb-do-not-use-LDB_SCOPE_ONELEVEL.patch
file added
+83
SOURCES/0057-krb5-return-to-responder-that-pkinit-is-not-availabl.patch
file removed
-60
SOURCES/0057-sysdb-remove-IDXONE-and-objectClass-from-users-and-g.patch
file added
+384
SOURCES/0058-IPA-add-mapped-attributes-to-user-from-trusted-domai.patch
file removed
-153
SOURCES/0058-mmap_cache-make-checks-independent-of-input-size.patch
file added
+175
SOURCES/0059-IPA-lookup-AD-users-by-certificates-on-IPA-clients.patch
file removed
-209
SOURCES/0059-NSS-Fix-covscan-warning.patch
file added
+54
SOURCES/0060-IPA-enable-AD-user-lookup-by-certificate.patch
file removed
-30
SOURCES/0060-responder-Fix-talloc-hierarchy-in-sized_output_name.patch
file added
+59
SOURCES/0061-CONFDB-Introduce-SSSD-domain-type-to-distinguish-POS.patch
file removed
-242
SOURCES/0061-test_responder-Check-memory-leak-in-sized_output_nam.patch
file added
+58
SOURCES/0062-CONFDB-Allow-configuring-application-sections-as-non.patch
file removed
-531
SOURCES/0062-UTIL-add-find_domain_by_object_name_ex.patch
file added
+82
SOURCES/0063-CACHE_REQ-Domain-type-selection-in-cache_req.patch
file removed
-976
SOURCES/0063-ipa-handle-users-from-different-domains-in-ipa_resol.patch
file added
+76
SOURCES/0064-IFP-Search-both-POSIX-and-non-POSIX-domains.patch
file removed
-705
SOURCES/0064-overrides-fixes-for-sysdb_invalidate_overrides.patch
file added
+203
SOURCES/0065-IFP-ListByName-Don-t-crash-when-no-results-are-found.patch
file removed
-57
SOURCES/0065-ipa-check-for-SYSDB_OVERRIDE_DN-in-process_members-a.patch
file added
+254
SOURCES/0066-IPA-use-cache-searches-in-get_groups_dns.patch
file added
+70
SOURCES/0066-PAM-Remove-unneeded-memory-context.patch
file removed
-58
SOURCES/0067-PAM-Add-application-services.patch
file removed
-452
SOURCES/0067-ipa-compare-DNs-instead-of-group-names-in-ipa_s2n_sa.patch
file added
+86
SOURCES/0068-SDAP-Split-out-utility-function-sdap_get_object_doma.patch
file added
+92
SOURCES/0068-SYSDB-Allow-storing-non-POSIX-users.patch
file removed
-152
SOURCES/0069-LDAP-Extract-the-check-whether-to-run-a-POSIX-check-.patch
file added
+115
SOURCES/0069-SYSDB-Only-generate-new-UID-in-local-domain.patch
file removed
-36
SOURCES/0070-LDAP-Only-run-the-POSIX-check-with-a-GC-connection.patch
file added
+95
SOURCES/0070-LDAP-save-non-POSIX-users-in-application-domains.patch
file removed
-141
SOURCES/0071-LDAP-Relax-search-filters-in-application-domains.patch
file removed
-254
SOURCES/0071-SDAP-Search-with-a-NULL-search-base-when-looking-up-.patch
file added
+191
SOURCES/0072-KRB5-Authenticate-users-in-a-non-POSIX-domain-using-.patch
file removed
-353
SOURCES/0072-SDAP-Rename-sdap_posix_check-to-sdap_gc_posix_check.patch
file added
+251
SOURCES/0073-DP-Create-a-new-handler-function-getAccountDomain.patch
file added
+455
SOURCES/0073-KCM-Fix-off-by-one-error-in-secrets-key-parsing.patch
file removed
-211
SOURCES/0074-AD-Implement-a-real-getAccountDomain-handler-for-the.patch
file added
+553
SOURCES/0074-tcurl-add-support-for-ssl-and-raw-output.patch
file removed
-1478
SOURCES/0075-RESP-Expose-DP-method-getAccountDomain-to-responders.patch
file added
+239
SOURCES/0075-tcurl-test-refactor-so-new-options-can-be-added-more.patch
file removed
-438
SOURCES/0076-NEGCACHE-Add-API-for-setting-and-checking-locate-acc.patch
file added
+371
SOURCES/0076-tcurl-test-add-support-for-raw-output.patch
file removed
-49
SOURCES/0077-TESTS-Add-tests-for-the-object-by-id-cache_req-inter.patch
file added
+439
SOURCES/0077-tcurl-test-add-support-for-tls-settings.patch
file removed
-62
SOURCES/0078-CACHE_REQ-Export-cache_req_search_ncache_add-as-cach.patch
file added
+77
SOURCES/0078-tcurl-add-support-for-http-basic-auth.patch
file removed
-112
SOURCES/0079-CACHE_REQ-Add-plugin-methods-required-for-the-domain.patch
file added
+458
SOURCES/0079-tcurl-test-allow-to-set-custom-headers.patch
file removed
-63
SOURCES/0080-CACHE_REQ-Add-a-private-request-cache_req_locate_dom.patch
file added
+177
SOURCES/0080-tcurl-test-add-support-for-client-certificate.patch
file removed
-53
SOURCES/0081-CACHE_REQ-Implement-the-plugin-methods-that-utilize-.patch
file added
+413
SOURCES/0081-ci-do-not-build-secrets-on-rhel6.patch
file removed
-115
SOURCES/0082-CACHE_REQ-Use-the-domain-locator-request-to-only-sea.patch
file added
+2048
SOURCES/0082-build-make-curl-required-by-secrets.patch
file removed
-65
SOURCES/0083-MAN-Document-how-the-Global-Catalog-is-used-currentl.patch
file added
+48
SOURCES/0083-secrets-use-tcurl-in-proxy-provider.patch
file removed
-459
SOURCES/0084-p11_child-make-sure-OCSP-checks-are-done.patch
file added
+54
SOURCES/0084-secrets-remove-http-parser-code-in-proxy-provider.patch
file removed
-612
SOURCES/0085-IPA-Include-SYSDB_OBJECTCATEGORY-not-OBJECTCLASS-in-.patch
file added
+43
SOURCES/0085-secrets-allow-to-configure-certificate-check.patch
file removed
-254
SOURCES/0086-nss-idmap-allow-NULL-result-in-_timeout-calls.patch
file added
+113
SOURCES/0086-secrets-support-HTTP-basic-authentication-with-proxy.patch
file removed
-39
SOURCES/0087-cache-Check-for-max_id-min_id-in-cache_req.patch
SOURCES/0201-cache-Check-for-max_id-min_id-in-cache_req.patch
file renamed
+103
-68
SOURCES/0087-secrets-fix-debug-message.patch
file removed
-29
SOURCES/0088-Revert-p11_child-make-sure-OCSP-checks-are-done.patch
file added
+47
SOURCES/0088-secrets-always-add-Content-Length-header.patch
file removed
-112
SOURCES/0089-p11_child-properly-check-results-of-CERT_VerifyCerti.patch
file added
+64
SOURCES/0089-sss_iobuf-fix-read-shadows-a-global-declaration.patch
file removed
-40
SOURCES/0090-configure-fix-typo.patch
file removed
-29
SOURCES/0090-ifp-use-realloc-in-ifp_list_ctx_remaining_capacity.patch
file added
+92
SOURCES/0091-IPA-Delay-the-first-periodic-refresh-of-trusted-doma.patch
file added
+64
SOURCES/0091-pam_test_client-add-service-and-environment-to-PAM-t.patch
file removed
-105
SOURCES/0092-pam_test_client-add-SSSD-getpwnam-lookup.patch
file removed
-142
SOURCES/0092-sysdb-add-userMappedCertificate-to-the-index.patch
file added
+55
SOURCES/0093-AD-Inherit-the-MPG-setting-from-the-main-domain.patch
file added
+48
SOURCES/0093-sss_sifp-update-method-names.patch
file removed
-54
SOURCES/0094-SDAP-skip-builtin-AD-groups-in-sdap_save_grpmem.patch
file added
+53
SOURCES/0094-pam_test_client-add-InfoPipe-user-lookup.patch
file removed
-131
SOURCES/0095-SYSDB-Read-the-ldb_message-from-loop-s-index-counter.patch
file added
+39
SOURCES/0095-sssctl-integrate-pam_test_client-into-sssctl.patch
file removed
-359
SOURCES/0096-i18n-adding-sssctl-files.patch
file removed
-34
SOURCES/0096-nss-idmap-check-timed-muted-return-code.patch
file added
+73
SOURCES/0097-DESKPROFILE-Add-checks-for-user-and-host-category.patch
file added
+155
SOURCES/0097-responders-do-not-leak-selinux-context-on-clients-de.patch
file removed
-69
SOURCES/0098-SELINUX-Check-if-SELinux-is-managed-in-selinux_child.patch
SOURCES/0204-SELINUX-Check-if-SELinux-is-managed-in-selinux_child.patch
file renamed
+5
-5
SOURCES/0098-ipa_s2n_get_acct_info_send-provide-correct-req_input.patch
file removed
-89
SOURCES/0099-config-check-Message-when-sssd.conf-is-missing.patch
file removed
-39
SOURCES/0099-util-Add-sss_-prefix-to-some-functions.patch
SOURCES/0205-util-Add-sss_-prefix-to-some-functions.patch
file renamed
+5
-5
SOURCES/0100-MAN-Explain-how-does-auto_private_groups-affect-subd.patch
file added
+43
SOURCES/0100-sbus-check-connection-for-NULL-before-unregister-it.patch
file removed
-44
SOURCES/0101-AD-Use-the-right-sdap_domain-for-the-forest-root.patch
file added
+201
SOURCES/0101-selinux-Do-not-fail-if-SELinux-is-not-managed.patch
file removed
-211
SOURCES/0102-AD-sdap_get_ad_tokengroups_done-allocate-temporary-d.patch
file added
+47
SOURCES/0102-UTIL-Use-max-15-characters-for-AD-host-UPN.patch
file removed
-49
SOURCES/0103-AD-do-not-allocate-temporary-data-on-long-living-con.patch
file added
+89
SOURCES/0103-Move-sized_output_name-and-sized_domain_name-into-re.patch
file removed
-300
SOURCES/0104-IFP-Use-sized_domain_name-to-format-the-groups-the-u.patch
file removed
-95
SOURCES/0105-RESPONDER-Fallback-to-global-domain-resolution-order.patch
file removed
-313
SOURCES/0106-NSS-TESTS-Improve-non-fqnames-tests.patch
file removed
-164
SOURCES/0107-CACHE_REQ-Allow-configurationless-shortname-lookups.patch
file removed
-139
SOURCES/0108-CACHE_REQ_DOMAIN-Add-some-comments-to-cache_req_doma.patch
file removed
-42
SOURCES/0109-RESPONDER_COMMON-Improve-domaiN_resolution_order-deb.patch
file removed
-54
SOURCES/0110-CACHE_REQ_DOMAIN-debug-the-set-domain-resolution-ord.patch
file removed
-50
SOURCES/0111-SECRETS-remove-unused-variable.patch
file removed
-33
SOURCES/0112-IPA-Improve-DEBUG-message-if-a-group-has-no-ipaNTSec.patch
file removed
-42
SOURCES/0113-IPA-Improve-s2n-debug-message-for-missing-ipaNTSecur.patch
file removed
-45
SOURCES/0114-CONFDB-Fix-standalone-application-domains.patch
file removed
-128
SOURCES/0115-utils-add-sss_domain_is_forest_root.patch
file removed
-48
SOURCES/0116-ad-handle-forest-root-not-listed-in-ad_enabled_domai.patch
file removed
-104
SOURCES/0117-SDAP-Fix-handling-of-search-bases.patch
file removed
-168
SOURCES/0118-overrides-add-certificates-to-mapped-attribute.patch
file removed
-102
SOURCES/0119-AD-Make-ad_account_can_shortcut-reusable-by-SSSD-on-.patch
file removed
-243
SOURCES/0120-LDAP-AD-Do-not-fail-in-case-rfc2307bis_nested_groups.patch
file removed
-47
SOURCES/0121-PAM-check-matching-certificates-from-all-domains.patch
file removed
-116
SOURCES/0122-DP-Reduce-Data-Provider-log-level-noise.patch
file removed
-80
SOURCES/0123-NSS-Move-output-name-formatting-to-utils.patch
file removed
-249
SOURCES/0124-CACHE_REQ-Add-a-new-cache_req_ncache_filter_fn-plugi.patch
file removed
-322
SOURCES/0125-CACHE_REQ_RESULT-Introduce-cache_req_create_ldb_resu.patch
file removed
-92
SOURCES/0126-CACHE_REQ-Make-use-of-cache_req_ncache_filter_fn.patch
file removed
-392
SOURCES/0127-SERVER_MODE-Update-sdap-lists-for-each-ad_ctx.patch
file removed
-81
SOURCES/0128-sss_nss_getlistbycert-return-results-from-multiple-d.patch
file removed
-348
SOURCES/0129-CACHE_REQ-Avoid-using-of-uninitialized-value.patch
file removed
-68
SOURCES/0130-CACHE_REQ-Ensure-the-domains-are-updated-for-filter-.patch
file removed
-163
SOURCES/0131-AD-SUBDOMAINS-Fix-search-bases-for-child-domains.patch
file removed
-102
SOURCES/0132-KRB5-Advise-the-user-to-inspect-the-krb5_child.log-i.patch
file removed
-39
SOURCES/0133-cache_req-use-the-right-negative-cache-for-initgroup.patch
file removed
-40
SOURCES/0134-test-make-sure-p11_child-is-build-for-pam-srv-tests.patch
file removed
-31
SOURCES/0135-pam-properly-support-UPN-logon-names.patch
file removed
-163
SOURCES/0136-KCM-Fix-the-per-client-serialization-queue.patch
file removed
-334
SOURCES/0137-TESTS-Add-a-test-for-parallel-execution-of-klist.patch
file removed
-79
SOURCES/0138-ipa-filter-IPA-users-from-extdom-lookups-by-certific.patch
file removed
-115
SOURCES/0139-krb5-accept-changed-principal-if-krb5_canonicalize-T.patch
file removed
-50
SOURCES/0140-IPA-Avoid-using-uninitialized-ret-value-when-skippin.patch
file removed
-30
SOURCES/0141-IPA-Return-from-function-after-marking-a-request-as-.patch
file removed
-30
SOURCES/0142-HBAC-Do-not-rely-on-originalMemberOf-use-the-sysdb-m.patch
file removed
-175
SOURCES/0143-VALIDATORS-Add-subdomain-section.patch
file removed
-53
SOURCES/0144-VALIDATORS-Remove-application-section-domain.patch
file removed
-48
SOURCES/0145-VALIDATORS-Escape-special-regex-chars.patch
file removed
-35
SOURCES/0146-TESTS-Add-unit-tests-for-cfg-validation.patch
file removed
-328
SOURCES/0147-MAN-Fix-typo-in-trusted-domain-section.patch
file removed
-29
SOURCES/0148-VALIDATORS-Change-regex-for-app-domains.patch
file removed
-36
SOURCES/0149-VALIDATORS-Detect-inherit_from-in-normal-domain.patch
file removed
-154
SOURCES/0150-VALIDATOR-prevent-duplicite-report-from-subdomain-se.patch
file removed
-36
SOURCES/0151-test_config_check-Fix-few-issues.patch
file removed
-92
SOURCES/0152-KRB5-Fix-access_provider-krb5.patch
file removed
-81
SOURCES/0153-BUILD-Improve-error-messages-for-optional-dependenci.patch
file removed
-86
SOURCES/0154-RESPONDER_COMMON-update-certmaps-in-responders.patch
file removed
-77
SOURCES/0155-tests-fix-test_pam_preauth_cert_no_logon_name.patch
file removed
-43
SOURCES/0156-pam_sss-add-support-for-SSS_PAM_CERT_INFO_WITH_HINT.patch
file removed
-258
SOURCES/0157-add_pam_cert_response-add-support-for-SSS_PAM_CERT_I.patch
file removed
-104
SOURCES/0158-PAM-send-user-name-hint-response-when-needed.patch
file removed
-335
SOURCES/0159-sysdb-sysdb_get_certmap-allow-empty-certmap.patch
file removed
-105
SOURCES/0160-sssctl-show-user-name-used-for-authentication-in-use.patch
file removed
-53
SOURCES/0161-RESP-Provide-a-reusable-request-to-fully-resolve-inc.patch
file removed
-267
SOURCES/0162-IFP-Only-format-the-output-name-to-the-short-version.patch
file removed
-121
SOURCES/0163-IFP-Resolve-group-names-from-GIDs-if-required.patch
file removed
-204
SOURCES/0164-ldap-handle-certmap-errors-gracefully.patch
file removed
-56
SOURCES/0165-SECRETS-Fix-warning-Wpointer-bool-conversion.patch
file removed
-53
SOURCES/0166-IPA-Fix-the-PAM-error-code-that-auth-code-expects-to.patch
file removed
-50
SOURCES/0167-pam_sss-Fix-checking-of-empty-string-cert_user.patch
file removed
-52
SOURCES/0168-CACHE_REQ-Simplify-_search_ncache_filter.patch
file removed
-124
SOURCES/0169-CACHE_REQ_SEARCH-Check-for-filtered-users-groups-als.patch
file removed
-61
SOURCES/0170-cache_req-Do-not-use-default_domain_suffix-with-netg.patch
file removed
-34
SOURCES/0171-krb5-disable-enterprise-principals-during-password-c.patch
file removed
-47
SOURCES/0172-pam_sss-Fix-leaking-of-memory-in-case-of-failures.patch
file removed
-44
SOURCES/0173-IFP-Add-domain-and-domainname-attributes-to-the-user.patch
file removed
-372
SOURCES/0174-IFP-Fix-error-handling-in-ifp_user_get_attr_handle_r.patch
file removed
-39
SOURCES/0175-SYSDB-Return-ERR_NO_TS-when-there-s-no-timestamp-cac.patch
file removed
-76
SOURCES/0176-SYSDB-Internally-expose-sysdb_search_ts_matches.patch
file removed
-90
SOURCES/0177-SYSDB-Make-the-usage-of-the-filter-more-generic-for-.patch
file removed
-157
SOURCES/0178-SYSDB_OPS-Mark-an-entry-as-expired-also-in-the-times.patch
file removed
-55
SOURCES/0179-SYSDB_OPS-Invalidate-a-cache-entry-also-in-the-ts_ca.patch
file removed
-49
SOURCES/0180-SYSDB-Introduce-_search_-users-groups-_by_timestamp.patch
file removed
-278
SOURCES/0181-LDAP_ID_CLEANUP-Use-sysdb_search_-_by_timestamp.patch
file removed
-48
SOURCES/0182-krb5-use-plain-principal-if-password-is-expired.patch
file removed
-66
SOURCES/0183-RESPONDER-Use-fqnames-as-output-when-needed.patch
file removed
-279
SOURCES/0184-DOMAIN-Add-sss_domain_info_-get-set-_output_fqnames.patch
file removed
-128
SOURCES/0185-GPO-Fix-typo-in-DEBUG-message.patch
file removed
-27
SOURCES/0186-SDAP-Update-parent-sdap_list.patch
file removed
-97
SOURCES/0187-RESPONDERS-Fix-terminating-idle-connections.patch
file removed
-84
SOURCES/0188-TESTS-Integration-test-for-idle-timeout.patch
file removed
-135
SOURCES/0189-MAN-Document-that-client_idle_timeout-can-t-be-short.patch
file removed
-36
SOURCES/0190-ad_account_can_shortcut-shortcut-if-ID-is-unknown.patch
file removed
-38
SOURCES/0191-sudo-add-a-threshold-option-to-reduce-size-of-rules-.patch
file removed
-211
SOURCES/0192-libwbclient-Change-return-code-for-wbcAuthenticateUs.patch
file removed
-57
SOURCES/0193-IPA-fix-handling-of-certmap_ctx.patch
file removed
-666
SOURCES/0194-certmap-make-sure-eku_oid_list-is-always-allocated.patch
file removed
-95
SOURCES/0195-cache_req-Look-for-name-attribute-also-in-nss_cmd_ge.patch
file removed
-62
SOURCES/0196-sssd_client-add-mutex-protected-call-to-the-PAC-resp.patch
file removed
-461
SOURCES/0197-sysdb-sanitize-search-filter-input.patch
file removed
-140
SOURCES/0198-ipa-make-sure-view-name-is-initialized-at-startup.patch
file removed
-60
SOURCES/0200-cache_req-Correction-of-cache_req-debug-string-ID-fo.patch
file removed
-68
SOURCES/0203-SELINUX-Use-getseuserbyname-to-get-IPA-seuser.patch
file removed
-182
SPECS/sssd.spec
file modified
+306
-266
import sssd-1.16.0-19.el7
.gitignore
file modified
+3
-1
.sssd.metadata
file modified
+3
-1
SOURCES/0001-MAN-Mention-sssd-secrets-in-SEE-ALSO-section.patch
file removed
-36
SOURCES/0001-NSS-Move-memcache-setup-to-separate-function.patch
file added
+143
SOURCES/0002-NSS-Specify-memcache_timeout-0-semantics.patch
file added
+118
SOURCES/0002-split_on_separator-move-to-a-separate-file.patch
file removed
-369
SOURCES/0003-MAN-Document-memcache_timeout-0-meaning.patch
file added
+51
SOURCES/0003-util-move-string_in_list-to-util_ext.patch
file removed
-91
SOURCES/0004-CONFIG-Add-a-new-option-auto_private_groups.patch
file added
+159
SOURCES/0004-certmap-add-new-library-libsss_certmap.patch
file removed
-5787
SOURCES/0005-CONFDB-Remove-the-obsolete-option-magic_private_grou.patch
file added
+33
SOURCES/0005-certmap-add-placeholder-for-OpenSSL-implementation.patch
file removed
-151
SOURCES/0006-SDAP-Allow-the-mpg-flag-for-the-main-domain.patch
file added
+167
SOURCES/0006-sysdb-add-sysdb_attrs_copy.patch
file removed
-173
SOURCES/0007-LDAP-Turn-group-request-into-user-request-for-MPG-do.patch
file added
+222
SOURCES/0007-sdap_get_users_send-new-argument-mapped_attrs.patch
file removed
-316
SOURCES/0008-LDAP-always-store-the-certificate-from-the-request.patch
file removed
-178
SOURCES/0008-SYSDB-Prevent-users-and-groups-ID-collision-in-MPG-d.patch
file added
+97
SOURCES/0009-TESTS-Add-integration-tests-for-the-auto_private_gro.patch
file added
+346
SOURCES/0009-sss_cert_derb64_to_ldap_filter-add-sss_certmap-suppo.patch
file removed
-235
SOURCES/0010-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch
SOURCES/0199-CACHE_REQ-Copy-the-cr_domain-list-for-each-request.patch
file renamed
+8
-8
SOURCES/0010-sysdb-add-certmap-related-calls.patch
file removed
-846
SOURCES/0011-IPA-add-certmap-support.patch
file removed
-484
SOURCES/0011-MAN-GPO-Security-Filtering-limitation.patch
file added
+41
SOURCES/0012-nss-idmap-add-sss_nss_getlistbycert.patch
file removed
-736
SOURCES/0012-sudo-always-use-srv_opts-from-id-context.patch
SOURCES/0202-sudo-always-use-srv_opts-from-id-context.patch
file renamed
+3
-3
SOURCES/0013-AD-Remember-last-site-discovered.patch
file added
+109
SOURCES/0013-nss-allow-larger-buffer-for-certificate-based-reques.patch
file removed
-70
SOURCES/0014-IPA-Add-s2n-request-to-string-function.patch
file removed
-44
SOURCES/0014-sysdb-add-functions-to-get-set-client-site.patch
file added
+206
SOURCES/0015-AD-Remember-last-site-discovered-in-sysdb.patch
file added
+161
SOURCES/0015-IPA-Enhance-debug-logging-for-ipa-s2n-operations.patch
file removed
-82
SOURCES/0016-UTIL-Add-wrapper-function-to-configure-logger.patch
file added
+133
SOURCES/0016-UTIL-iobuf-Make-input-parameter-for-the-readonly-ope.patch
file removed
-45
SOURCES/0017-Add-parameter-logger-to-daemons.patch
file added
+830
SOURCES/0017-UTIL-Fix-a-typo-in-the-tcurl-test-tool.patch
file removed
-32
SOURCES/0018-SYSTEMD-Replace-parameter-debug-to-files-with-DEBUG_.patch
file added
+259
SOURCES/0018-UTIL-Add-SAFEALIGN_COPY_UINT8_CHECK.patch
file removed
-36
SOURCES/0019-SYSTEMD-Add-environment-file-to-responder-service-fi.patch
file added
+107
SOURCES/0019-UTIL-Add-utility-macro-cli_creds_get_gid.patch
file removed
-34
SOURCES/0020-UTIL-Add-type-specific-getsetters-to-sss_iobuf.patch
file removed
-194
SOURCES/0020-UTIL-Hide-and-deprecate-parameter-debug-to-files.patch
file added
+47
SOURCES/0021-LDAP-Bind-to-the-LDAP-server-also-in-the-auth.patch
file added
+213
SOURCES/0021-UTIL-krb5-principal-un-marshalling.patch
file removed
-262
SOURCES/0022-KCM-Initial-responder-build-and-packaging.patch
file removed
-1013
SOURCES/0022-sss_client-create-nss_common.h.patch
file added
+143
SOURCES/0023-KCM-request-parsing-and-sending-a-reply.patch
file removed
-578
SOURCES/0023-nss-idmap-add-nss-like-calls-with-timeout-and-flags.patch
file added
+901
SOURCES/0024-KCM-Implement-an-internal-ccache-storage-and-retriev.patch
file removed
-2153
SOURCES/0024-NSS-add-_EX-version-of-some-requests.patch
file added
+606
SOURCES/0025-KCM-Add-a-in-memory-credential-storage.patch
file removed
-907
SOURCES/0025-NSS-add-support-for-SSS_NSS_EX_FLAG_NO_CACHE.patch
file added
+149
SOURCES/0026-CACHE_REQ-Add-cache_req_data_set_bypass_dp.patch
file added
+112
SOURCES/0026-KCM-Implement-KCM-server-operations.patch
file removed
-2326
SOURCES/0027-MAN-Add-a-manual-page-for-sssd-kcm.patch
file removed
-278
SOURCES/0027-nss-make-memcache_delete_entry-public.patch
file added
+49
SOURCES/0028-NSS-add-support-for-SSS_NSS_EX_FLAG_INVALIDATE_CACHE.patch
file added
+365
SOURCES/0028-TESTS-Add-integration-tests-for-the-KCM-responder.patch
file removed
-799
SOURCES/0029-NSS-TESTS-add-unit-tests-for-_EX-requests.patch
file added
+590
SOURCES/0029-SECRETS-Create-DB-path-before-the-operation-itself.patch
file removed
-405
SOURCES/0030-SECRETS-Return-a-nicer-error-message-on-request-with.patch
file removed
-40
SOURCES/0030-nss-idmap-add-timeout-version-of-old-sss_nss_-calls.patch
file added
+494
SOURCES/0031-SECRETS-Store-ccaches-in-secrets-for-the-KCM-respond.patch
file removed
-206
SOURCES/0031-nss-idmap-allow-empty-buffer-with-SSS_NSS_EX_FLAG_IN.patch
file added
+184
SOURCES/0032-BUILD-Properly-expand-variables-in-sssd-ifp.service.patch
file added
+51
SOURCES/0032-TCURL-Support-HTTP-POST-for-creating-containers.patch
file removed
-129
SOURCES/0033-KCM-Store-ccaches-in-secrets.patch
file removed
-3787
SOURCES/0033-SYSTEMD-Clean-pid-file-in-corner-cases.patch
file added
+39
SOURCES/0034-CHILD-Pass-information-about-logger-to-children.patch
file added
+198
SOURCES/0034-KCM-Make-the-secrets-ccache-back-end-configurable-ma.patch
file removed
-219
SOURCES/0035-KCM-Queue-requests-by-the-same-UID.patch
file removed
-909
SOURCES/0035-LDAP-Improve-error-treatment-from-sdap_cli_connect-i.patch
file added
+58
SOURCES/0036-KCM-Idle-terminate-the-responder-if-the-secrets-back.patch
file removed
-55
SOURCES/0036-p11_child-return-multiple-certs.patch
file added
+598
SOURCES/0037-CONFIGURE-Fix-fallback-if-pkg-config-for-uuid-is-mis.patch
file removed
-30
SOURCES/0037-PAM-handled-multiple-certs-in-the-responder.patch
file added
+1074
SOURCES/0038-intg-fix-configure-failure-with-strict-cflags.patch
file removed
-52
SOURCES/0038-pam_sss-refactoring-use-struct-cert_auth_info.patch
file added
+680
SOURCES/0039-intg-Remove-bashism-from-intgcheck-prepare.patch
file removed
-54
SOURCES/0039-p11_child-use-options-to-select-certificate-for-auth.patch
file added
+609
SOURCES/0040-UTIL-Introduce-subdomain_create_conf_path.patch
file removed
-127
SOURCES/0040-pam-add-prompt-string-for-certificate-authentication.patch
file added
+337
SOURCES/0041-PAM-allow-missing-logon_name-during-certificate-auth.patch
file added
+256
SOURCES/0041-SUBDOMAINS-Allow-use_fully_qualified_names-for-subdo.patch
file removed
-531
SOURCES/0042-CACHE_REQ-Descend-into-subdomains-on-lookups.patch
file removed
-172
SOURCES/0042-p11_child-add-descriptions-for-error-codes-to-debug-.patch
file added
+276
SOURCES/0043-NSS-TESTS-Fix-subdomains-attribution.patch
file removed
-35
SOURCES/0043-pam-filter-certificates-in-the-responder-not-in-the-.patch
file added
+357
SOURCES/0044-NSS-TESTS-Improve-setup-teardown-for-subdomains-test.patch
file removed
-274
SOURCES/0044-PAM-add-certificate-s-label-to-the-selection-prompt.patch
file added
+274
SOURCES/0045-NSS-TESTS-Include-searches-for-non-fqnames-members-o.patch
file removed
-355
SOURCES/0045-SYSDB-Remove-code-causing-a-covscan-warning.patch
file added
+128
SOURCES/0046-SYSDB-Add-methods-to-deal-with-the-domain-s-resoluti.patch
file removed
-289
SOURCES/0046-SYSDB-Better-debugging-for-email-conflicts.patch
file added
+94
SOURCES/0047-NSS-Use-enum_ctx-as-memory_context-in-_setnetgrent_s.patch
file added
+39
SOURCES/0047-SYSDB-TESTS-Add-tests-for-the-domain-s-resolution-or.patch
file removed
-259
SOURCES/0048-IPA-Get-ipaDomainsResolutionOrder-from-ipaConfig.patch
file removed
-369
SOURCES/0048-TOOLS-Add-a-new-sssctl-command-access-report.patch
file added
+504
SOURCES/0049-IPA_SUBDOMAINS-Rename-_refresh_view-to-_refresh_view.patch
file removed
-54
SOURCES/0049-dp-use-void-to-express-empty-output-argument-list.patch
file added
+50
SOURCES/0050-IPA-Get-ipaDomainsResolutionOrder-from-IPA-ID-View.patch
file removed
-347
SOURCES/0050-dp-add-method-to-refresh-access-control-rules.patch
file added
+192
SOURCES/0051-DLINKLIST-Add-DLIST_FOR_EACH_SAFE-macro.patch
file removed
-37
SOURCES/0051-ipa-implement-method-to-refresh-HBAC-rules.patch
file added
+140
SOURCES/0052-CACHE_REQ-Make-use-of-domainResolutionOrder.patch
file removed
-795
SOURCES/0052-ifp-add-method-to-refresh-access-control-rules-in-do.patch
file added
+158
SOURCES/0053-UTIL-Expose-replace_char-as-sss_replace_char.patch
file removed
-81
SOURCES/0053-sssctl-call-dbus-instead-of-pam-to-refresh-HBAC-rule.patch
file added
+200
SOURCES/0054-Add-domain_resolution_order-config-option.patch
file removed
-205
SOURCES/0054-sysdb-be_refresh_get_values_ex-remove-unused-option.patch
file added
+66
SOURCES/0055-ssh-handle-binary-keys-correctly.patch
file removed
-48
SOURCES/0055-sysdb-do-not-use-objectClass-for-users-and-groups.patch
file added
+758
SOURCES/0056-ssh-add-support-for-certificates-from-non-default-vi.patch
file removed
-52
SOURCES/0056-sysdb-do-not-use-LDB_SCOPE_ONELEVEL.patch
file added
+83
SOURCES/0057-krb5-return-to-responder-that-pkinit-is-not-availabl.patch
file removed
-60
SOURCES/0057-sysdb-remove-IDXONE-and-objectClass-from-users-and-g.patch
file added
+384
SOURCES/0058-IPA-add-mapped-attributes-to-user-from-trusted-domai.patch
file removed
-153
SOURCES/0058-mmap_cache-make-checks-independent-of-input-size.patch
file added
+175
SOURCES/0059-IPA-lookup-AD-users-by-certificates-on-IPA-clients.patch
file removed
-209
SOURCES/0059-NSS-Fix-covscan-warning.patch
file added
+54
SOURCES/0060-IPA-enable-AD-user-lookup-by-certificate.patch
file removed
-30
SOURCES/0060-responder-Fix-talloc-hierarchy-in-sized_output_name.patch
file added
+59
SOURCES/0061-CONFDB-Introduce-SSSD-domain-type-to-distinguish-POS.patch
file removed
-242
SOURCES/0061-test_responder-Check-memory-leak-in-sized_output_nam.patch
file added
+58
SOURCES/0062-CONFDB-Allow-configuring-application-sections-as-non.patch
file removed
-531
SOURCES/0062-UTIL-add-find_domain_by_object_name_ex.patch
file added
+82
SOURCES/0063-CACHE_REQ-Domain-type-selection-in-cache_req.patch
file removed
-976
SOURCES/0063-ipa-handle-users-from-different-domains-in-ipa_resol.patch
file added
+76
SOURCES/0064-IFP-Search-both-POSIX-and-non-POSIX-domains.patch
file removed
-705
SOURCES/0064-overrides-fixes-for-sysdb_invalidate_overrides.patch
file added
+203
SOURCES/0065-IFP-ListByName-Don-t-crash-when-no-results-are-found.patch
file removed
-57
SOURCES/0065-ipa-check-for-SYSDB_OVERRIDE_DN-in-process_members-a.patch
file added
+254
SOURCES/0066-IPA-use-cache-searches-in-get_groups_dns.patch
file added
+70
SOURCES/0066-PAM-Remove-unneeded-memory-context.patch
file removed
-58
SOURCES/0067-PAM-Add-application-services.patch
file removed
-452
SOURCES/0067-ipa-compare-DNs-instead-of-group-names-in-ipa_s2n_sa.patch
file added
+86
SOURCES/0068-SDAP-Split-out-utility-function-sdap_get_object_doma.patch
file added
+92
SOURCES/0068-SYSDB-Allow-storing-non-POSIX-users.patch
file removed
-152
SOURCES/0069-LDAP-Extract-the-check-whether-to-run-a-POSIX-check-.patch
file added
+115
SOURCES/0069-SYSDB-Only-generate-new-UID-in-local-domain.patch
file removed
-36
SOURCES/0070-LDAP-Only-run-the-POSIX-check-with-a-GC-connection.patch
file added
+95
SOURCES/0070-LDAP-save-non-POSIX-users-in-application-domains.patch
file removed
-141
SOURCES/0071-LDAP-Relax-search-filters-in-application-domains.patch
file removed
-254
SOURCES/0071-SDAP-Search-with-a-NULL-search-base-when-looking-up-.patch
file added
+191
SOURCES/0072-KRB5-Authenticate-users-in-a-non-POSIX-domain-using-.patch
file removed
-353
SOURCES/0072-SDAP-Rename-sdap_posix_check-to-sdap_gc_posix_check.patch
file added
+251
SOURCES/0073-DP-Create-a-new-handler-function-getAccountDomain.patch
file added
+455
SOURCES/0073-KCM-Fix-off-by-one-error-in-secrets-key-parsing.patch
file removed
-211
SOURCES/0074-AD-Implement-a-real-getAccountDomain-handler-for-the.patch
file added
+553
SOURCES/0074-tcurl-add-support-for-ssl-and-raw-output.patch
file removed
-1478
SOURCES/0075-RESP-Expose-DP-method-getAccountDomain-to-responders.patch
file added
+239
SOURCES/0075-tcurl-test-refactor-so-new-options-can-be-added-more.patch
file removed
-438
SOURCES/0076-NEGCACHE-Add-API-for-setting-and-checking-locate-acc.patch
file added
+371
SOURCES/0076-tcurl-test-add-support-for-raw-output.patch
file removed
-49
SOURCES/0077-TESTS-Add-tests-for-the-object-by-id-cache_req-inter.patch
file added
+439
SOURCES/0077-tcurl-test-add-support-for-tls-settings.patch
file removed
-62
SOURCES/0078-CACHE_REQ-Export-cache_req_search_ncache_add-as-cach.patch
file added
+77
SOURCES/0078-tcurl-add-support-for-http-basic-auth.patch
file removed
-112
SOURCES/0079-CACHE_REQ-Add-plugin-methods-required-for-the-domain.patch
file added
+458
SOURCES/0079-tcurl-test-allow-to-set-custom-headers.patch
file removed
-63
SOURCES/0080-CACHE_REQ-Add-a-private-request-cache_req_locate_dom.patch
file added
+177
SOURCES/0080-tcurl-test-add-support-for-client-certificate.patch
file removed
-53
SOURCES/0081-CACHE_REQ-Implement-the-plugin-methods-that-utilize-.patch
file added
+413
SOURCES/0081-ci-do-not-build-secrets-on-rhel6.patch
file removed
-115
SOURCES/0082-CACHE_REQ-Use-the-domain-locator-request-to-only-sea.patch
file added
+2048
SOURCES/0082-build-make-curl-required-by-secrets.patch
file removed
-65
SOURCES/0083-MAN-Document-how-the-Global-Catalog-is-used-currentl.patch
file added
+48
SOURCES/0083-secrets-use-tcurl-in-proxy-provider.patch
file removed
-459
SOURCES/0084-p11_child-make-sure-OCSP-checks-are-done.patch
file added
+54
SOURCES/0084-secrets-remove-http-parser-code-in-proxy-provider.patch
file removed
-612
SOURCES/0085-IPA-Include-SYSDB_OBJECTCATEGORY-not-OBJECTCLASS-in-.patch
file added
+43
SOURCES/0085-secrets-allow-to-configure-certificate-check.patch
file removed
-254
SOURCES/0086-nss-idmap-allow-NULL-result-in-_timeout-calls.patch
file added
+113
SOURCES/0086-secrets-support-HTTP-basic-authentication-with-proxy.patch
file removed
-39
SOURCES/0087-cache-Check-for-max_id-min_id-in-cache_req.patch
SOURCES/0201-cache-Check-for-max_id-min_id-in-cache_req.patch
file renamed
+103
-68
SOURCES/0087-secrets-fix-debug-message.patch
file removed
-29
SOURCES/0088-Revert-p11_child-make-sure-OCSP-checks-are-done.patch
file added
+47
SOURCES/0088-secrets-always-add-Content-Length-header.patch
file removed
-112
SOURCES/0089-p11_child-properly-check-results-of-CERT_VerifyCerti.patch
file added
+64
SOURCES/0089-sss_iobuf-fix-read-shadows-a-global-declaration.patch
file removed
-40
SOURCES/0090-configure-fix-typo.patch
file removed
-29
SOURCES/0090-ifp-use-realloc-in-ifp_list_ctx_remaining_capacity.patch
file added
+92
SOURCES/0091-IPA-Delay-the-first-periodic-refresh-of-trusted-doma.patch
file added
+64
SOURCES/0091-pam_test_client-add-service-and-environment-to-PAM-t.patch
file removed
-105
SOURCES/0092-pam_test_client-add-SSSD-getpwnam-lookup.patch
file removed
-142
SOURCES/0092-sysdb-add-userMappedCertificate-to-the-index.patch
file added
+55
SOURCES/0093-AD-Inherit-the-MPG-setting-from-the-main-domain.patch
file added
+48
SOURCES/0093-sss_sifp-update-method-names.patch
file removed
-54
SOURCES/0094-SDAP-skip-builtin-AD-groups-in-sdap_save_grpmem.patch
file added
+53
SOURCES/0094-pam_test_client-add-InfoPipe-user-lookup.patch
file removed
-131
SOURCES/0095-SYSDB-Read-the-ldb_message-from-loop-s-index-counter.patch
file added
+39
SOURCES/0095-sssctl-integrate-pam_test_client-into-sssctl.patch
file removed
-359
SOURCES/0096-i18n-adding-sssctl-files.patch
file removed
-34
SOURCES/0096-nss-idmap-check-timed-muted-return-code.patch
file added
+73
SOURCES/0097-DESKPROFILE-Add-checks-for-user-and-host-category.patch
file added
+155
SOURCES/0097-responders-do-not-leak-selinux-context-on-clients-de.patch
file removed
-69
SOURCES/0098-SELINUX-Check-if-SELinux-is-managed-in-selinux_child.patch
SOURCES/0204-SELINUX-Check-if-SELinux-is-managed-in-selinux_child.patch
file renamed
+5
-5
SOURCES/0098-ipa_s2n_get_acct_info_send-provide-correct-req_input.patch
file removed
-89
SOURCES/0099-config-check-Message-when-sssd.conf-is-missing.patch
file removed
-39
SOURCES/0099-util-Add-sss_-prefix-to-some-functions.patch
SOURCES/0205-util-Add-sss_-prefix-to-some-functions.patch
file renamed
+5
-5
SOURCES/0100-MAN-Explain-how-does-auto_private_groups-affect-subd.patch
file added
+43
SOURCES/0100-sbus-check-connection-for-NULL-before-unregister-it.patch
file removed
-44
SOURCES/0101-AD-Use-the-right-sdap_domain-for-the-forest-root.patch
file added
+201
SOURCES/0101-selinux-Do-not-fail-if-SELinux-is-not-managed.patch
file removed
-211
SOURCES/0102-AD-sdap_get_ad_tokengroups_done-allocate-temporary-d.patch
file added
+47
SOURCES/0102-UTIL-Use-max-15-characters-for-AD-host-UPN.patch
file removed
-49
SOURCES/0103-AD-do-not-allocate-temporary-data-on-long-living-con.patch
file added
+89
SOURCES/0103-Move-sized_output_name-and-sized_domain_name-into-re.patch
file removed
-300
SOURCES/0104-IFP-Use-sized_domain_name-to-format-the-groups-the-u.patch
file removed
-95
SOURCES/0105-RESPONDER-Fallback-to-global-domain-resolution-order.patch
file removed
-313
SOURCES/0106-NSS-TESTS-Improve-non-fqnames-tests.patch
file removed
-164
SOURCES/0107-CACHE_REQ-Allow-configurationless-shortname-lookups.patch
file removed
-139
SOURCES/0108-CACHE_REQ_DOMAIN-Add-some-comments-to-cache_req_doma.patch
file removed
-42
SOURCES/0109-RESPONDER_COMMON-Improve-domaiN_resolution_order-deb.patch
file removed
-54
SOURCES/0110-CACHE_REQ_DOMAIN-debug-the-set-domain-resolution-ord.patch
file removed
-50
SOURCES/0111-SECRETS-remove-unused-variable.patch
file removed
-33
SOURCES/0112-IPA-Improve-DEBUG-message-if-a-group-has-no-ipaNTSec.patch
file removed
-42
SOURCES/0113-IPA-Improve-s2n-debug-message-for-missing-ipaNTSecur.patch
file removed
-45
SOURCES/0114-CONFDB-Fix-standalone-application-domains.patch
file removed
-128
SOURCES/0115-utils-add-sss_domain_is_forest_root.patch
file removed
-48
SOURCES/0116-ad-handle-forest-root-not-listed-in-ad_enabled_domai.patch
file removed
-104
SOURCES/0117-SDAP-Fix-handling-of-search-bases.patch
file removed
-168
SOURCES/0118-overrides-add-certificates-to-mapped-attribute.patch
file removed
-102
SOURCES/0119-AD-Make-ad_account_can_shortcut-reusable-by-SSSD-on-.patch
file removed
-243
SOURCES/0120-LDAP-AD-Do-not-fail-in-case-rfc2307bis_nested_groups.patch
file removed
-47
SOURCES/0121-PAM-check-matching-certificates-from-all-domains.patch
file removed
-116
SOURCES/0122-DP-Reduce-Data-Provider-log-level-noise.patch
file removed
-80
SOURCES/0123-NSS-Move-output-name-formatting-to-utils.patch
file removed
-249
SOURCES/0124-CACHE_REQ-Add-a-new-cache_req_ncache_filter_fn-plugi.patch
file removed
-322
SOURCES/0125-CACHE_REQ_RESULT-Introduce-cache_req_create_ldb_resu.patch
file removed
-92
SOURCES/0126-CACHE_REQ-Make-use-of-cache_req_ncache_filter_fn.patch
file removed
-392
SOURCES/0127-SERVER_MODE-Update-sdap-lists-for-each-ad_ctx.patch
file removed
-81
SOURCES/0128-sss_nss_getlistbycert-return-results-from-multiple-d.patch
file removed
-348
SOURCES/0129-CACHE_REQ-Avoid-using-of-uninitialized-value.patch
file removed
-68
SOURCES/0130-CACHE_REQ-Ensure-the-domains-are-updated-for-filter-.patch
file removed
-163
SOURCES/0131-AD-SUBDOMAINS-Fix-search-bases-for-child-domains.patch
file removed
-102
SOURCES/0132-KRB5-Advise-the-user-to-inspect-the-krb5_child.log-i.patch
file removed
-39
SOURCES/0133-cache_req-use-the-right-negative-cache-for-initgroup.patch
file removed
-40
SOURCES/0134-test-make-sure-p11_child-is-build-for-pam-srv-tests.patch
file removed
-31
SOURCES/0135-pam-properly-support-UPN-logon-names.patch
file removed
-163
SOURCES/0136-KCM-Fix-the-per-client-serialization-queue.patch
file removed
-334
SOURCES/0137-TESTS-Add-a-test-for-parallel-execution-of-klist.patch
file removed
-79
SOURCES/0138-ipa-filter-IPA-users-from-extdom-lookups-by-certific.patch
file removed
-115
SOURCES/0139-krb5-accept-changed-principal-if-krb5_canonicalize-T.patch
file removed
-50
SOURCES/0140-IPA-Avoid-using-uninitialized-ret-value-when-skippin.patch
file removed
-30
SOURCES/0141-IPA-Return-from-function-after-marking-a-request-as-.patch
file removed
-30
SOURCES/0142-HBAC-Do-not-rely-on-originalMemberOf-use-the-sysdb-m.patch
file removed
-175
SOURCES/0143-VALIDATORS-Add-subdomain-section.patch
file removed
-53
SOURCES/0144-VALIDATORS-Remove-application-section-domain.patch
file removed
-48
SOURCES/0145-VALIDATORS-Escape-special-regex-chars.patch
file removed
-35
SOURCES/0146-TESTS-Add-unit-tests-for-cfg-validation.patch
file removed
-328
SOURCES/0147-MAN-Fix-typo-in-trusted-domain-section.patch
file removed
-29
SOURCES/0148-VALIDATORS-Change-regex-for-app-domains.patch
file removed
-36
SOURCES/0149-VALIDATORS-Detect-inherit_from-in-normal-domain.patch
file removed
-154
SOURCES/0150-VALIDATOR-prevent-duplicite-report-from-subdomain-se.patch
file removed
-36
SOURCES/0151-test_config_check-Fix-few-issues.patch
file removed
-92
SOURCES/0152-KRB5-Fix-access_provider-krb5.patch
file removed
-81
SOURCES/0153-BUILD-Improve-error-messages-for-optional-dependenci.patch
file removed
-86
SOURCES/0154-RESPONDER_COMMON-update-certmaps-in-responders.patch
file removed
-77
SOURCES/0155-tests-fix-test_pam_preauth_cert_no_logon_name.patch
file removed
-43
SOURCES/0156-pam_sss-add-support-for-SSS_PAM_CERT_INFO_WITH_HINT.patch
file removed
-258
SOURCES/0157-add_pam_cert_response-add-support-for-SSS_PAM_CERT_I.patch
file removed
-104
SOURCES/0158-PAM-send-user-name-hint-response-when-needed.patch
file removed
-335
SOURCES/0159-sysdb-sysdb_get_certmap-allow-empty-certmap.patch
file removed
-105
SOURCES/0160-sssctl-show-user-name-used-for-authentication-in-use.patch
file removed
-53
SOURCES/0161-RESP-Provide-a-reusable-request-to-fully-resolve-inc.patch
file removed
-267
SOURCES/0162-IFP-Only-format-the-output-name-to-the-short-version.patch
file removed
-121
SOURCES/0163-IFP-Resolve-group-names-from-GIDs-if-required.patch
file removed
-204
SOURCES/0164-ldap-handle-certmap-errors-gracefully.patch
file removed
-56
SOURCES/0165-SECRETS-Fix-warning-Wpointer-bool-conversion.patch
file removed
-53
SOURCES/0166-IPA-Fix-the-PAM-error-code-that-auth-code-expects-to.patch
file removed
-50
SOURCES/0167-pam_sss-Fix-checking-of-empty-string-cert_user.patch
file removed
-52
SOURCES/0168-CACHE_REQ-Simplify-_search_ncache_filter.patch
file removed
-124
SOURCES/0169-CACHE_REQ_SEARCH-Check-for-filtered-users-groups-als.patch
file removed
-61
SOURCES/0170-cache_req-Do-not-use-default_domain_suffix-with-netg.patch
file removed
-34
SOURCES/0171-krb5-disable-enterprise-principals-during-password-c.patch
file removed
-47
SOURCES/0172-pam_sss-Fix-leaking-of-memory-in-case-of-failures.patch
file removed
-44
SOURCES/0173-IFP-Add-domain-and-domainname-attributes-to-the-user.patch
file removed
-372
SOURCES/0174-IFP-Fix-error-handling-in-ifp_user_get_attr_handle_r.patch
file removed
-39
SOURCES/0175-SYSDB-Return-ERR_NO_TS-when-there-s-no-timestamp-cac.patch
file removed
-76
SOURCES/0176-SYSDB-Internally-expose-sysdb_search_ts_matches.patch
file removed
-90
SOURCES/0177-SYSDB-Make-the-usage-of-the-filter-more-generic-for-.patch
file removed
-157
SOURCES/0178-SYSDB_OPS-Mark-an-entry-as-expired-also-in-the-times.patch
file removed
-55
SOURCES/0179-SYSDB_OPS-Invalidate-a-cache-entry-also-in-the-ts_ca.patch
file removed
-49
SOURCES/0180-SYSDB-Introduce-_search_-users-groups-_by_timestamp.patch
file removed
-278
SOURCES/0181-LDAP_ID_CLEANUP-Use-sysdb_search_-_by_timestamp.patch
file removed
-48
SOURCES/0182-krb5-use-plain-principal-if-password-is-expired.patch
file removed
-66
SOURCES/0183-RESPONDER-Use-fqnames-as-output-when-needed.patch
file removed
-279
SOURCES/0184-DOMAIN-Add-sss_domain_info_-get-set-_output_fqnames.patch
file removed
-128
SOURCES/0185-GPO-Fix-typo-in-DEBUG-message.patch
file removed
-27
SOURCES/0186-SDAP-Update-parent-sdap_list.patch
file removed
-97
SOURCES/0187-RESPONDERS-Fix-terminating-idle-connections.patch
file removed
-84
SOURCES/0188-TESTS-Integration-test-for-idle-timeout.patch
file removed
-135
SOURCES/0189-MAN-Document-that-client_idle_timeout-can-t-be-short.patch
file removed
-36
SOURCES/0190-ad_account_can_shortcut-shortcut-if-ID-is-unknown.patch
file removed
-38
SOURCES/0191-sudo-add-a-threshold-option-to-reduce-size-of-rules-.patch
file removed
-211
SOURCES/0192-libwbclient-Change-return-code-for-wbcAuthenticateUs.patch
file removed
-57
SOURCES/0193-IPA-fix-handling-of-certmap_ctx.patch
file removed
-666
SOURCES/0194-certmap-make-sure-eku_oid_list-is-always-allocated.patch
file removed
-95
SOURCES/0195-cache_req-Look-for-name-attribute-also-in-nss_cmd_ge.patch
file removed
-62
SOURCES/0196-sssd_client-add-mutex-protected-call-to-the-PAC-resp.patch
file removed
-461
SOURCES/0197-sysdb-sanitize-search-filter-input.patch
file removed
-140
SOURCES/0198-ipa-make-sure-view-name-is-initialized-at-startup.patch
file removed
-60
SOURCES/0200-cache_req-Correction-of-cache_req-debug-string-ID-fo.patch
file removed
-68
SOURCES/0203-SELINUX-Use-getseuserbyname-to-get-IPA-seuser.patch
file removed
-182
SPECS/sssd.spec
file modified
+306
-266