Package sssd-kcm

Binary package: sssd-kcm
Version: 2.6.1-alt2
Architecture: aarch64
Build time:  Nov 23, 2021, 11:14 AM
 in the task #288704
Source package: sssd
Category: System/Servers
Report package bug
License:  GPLv3+
Summary:  The SSSD Kerberos credentials manager
Description: 
An implementation of a Kerberos KCM server is a process that stores, tracks and
manages Kerberos credential caches. It originates in the Heimdal Kerberos
project, although the MIT Kerberos library also provides client side support for
the KCM credential cache.
Last changes:
Nov. 15, 2021 Evgeny Sinelnikov 2.6.1-alt2
- Revert reverted patch with change owner/permissions of user deskprofile path
  due it still needed.
Nov. 10, 2021 Evgeny Sinelnikov 2.6.1-alt1
- Update to 2.6.1 stable release.
- Revert "Don't change owner/permissions of user deskprofile path" patch
  due CAP_DAC_OVERRIDE was added to systemd configs in 2.4.2 release.
Nov. 7, 2021 Evgeny Sinelnikov 2.6.0-alt1
- Update to 2.6.0 (with upstream fixes from master - 7bfdd3db8e4c).
- Security issue in the sssctl command - shell command injection via the
  logs-fetch and cache-expire subcommands (fixes: CVE-2021-3621).
- pam_sss: Allow offline authentication against non-ipa-desktopprofiles aware DC
- Add filter for Active Directory trusted domains which are not trusted (one-way
  trust) or are from a different forest (direct trust). Both should be ignored
  because they are not trusted or can currently not be handled properly.

Back to Top