Package sssd

Source package: sssd
Version: 2.6.1-alt2
Build time:  Dec 3, 2021, 09:19 PM
 in the task #288706
Category: System/Servers
Report package bug
Gear: https://git.altlinux.org/gears/s/sssd.git?a=tree;hb=cc483c0b01dd…
Home page: https://pagure.io/SSSD/sssd
License:  GPLv3+
Summary:  System Security Services Daemon
Description: 
Provides a set of daemons to manage access to remote directories and
authentication mechanisms. It provides an NSS and PAM interface toward
the system and a pluggable backend system to connect to multiple different
account sources. It is also the basis to provide client auditing and policy
services for projects like FreeIPA.

The sssd subpackage is a meta-package that contains the deamon as well as all
the existing back ends.
List of rpms provided by this srpm: 
libipa_hbac (x86_64, ppc64le, i586, armh, aarch64)
libipa_hbac-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libipa_hbac-devel (x86_64, ppc64le, i586, armh, aarch64)
libsss_autofs (x86_64, ppc64le, i586, armh, aarch64)
libsss_autofs-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libsss_certmap (x86_64, ppc64le, i586, armh, aarch64)
libsss_certmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libsss_certmap-devel (x86_64, ppc64le, i586, armh, aarch64)
libsss_idmap (x86_64, ppc64le, i586, armh, aarch64)
libsss_idmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libsss_idmap-devel (x86_64, ppc64le, i586, armh, aarch64)
libsss_nss_idmap (x86_64, ppc64le, i586, armh, aarch64)
libsss_nss_idmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libsss_nss_idmap-devel (x86_64, ppc64le, i586, armh, aarch64)
libsss_simpleifp (x86_64, ppc64le, i586, armh, aarch64)
libsss_simpleifp-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
libsss_simpleifp-devel (x86_64, ppc64le, i586, armh, aarch64)
libsss_sudo (x86_64, ppc64le, i586, armh, aarch64)
libsss_sudo-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
python3-module-ipa_hbac (x86_64, ppc64le, i586, armh, aarch64)
python3-module-ipa_hbac-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss-murmur (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss-murmur-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss_nss_idmap (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sss_nss_idmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sssd (x86_64, ppc64le, i586, armh, aarch64)
python3-module-sssdconfig (noarch)
sssd (x86_64, ppc64le, i586, armh, aarch64)
sssd-ad (x86_64, ppc64le, i586, armh, aarch64)
sssd-ad-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-client (x86_64, ppc64le, i586, armh, aarch64)
sssd-client-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-dbus (x86_64, ppc64le, i586, armh, aarch64)
sssd-dbus-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-ipa (x86_64, ppc64le, i586, armh, aarch64)
sssd-ipa-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-kcm (x86_64, ppc64le, i586, armh, aarch64)
sssd-kcm-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-krb5 (x86_64, ppc64le, i586, armh, aarch64)
sssd-krb5-common (x86_64, ppc64le, i586, armh, aarch64)
sssd-krb5-common-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-krb5-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-ldap (x86_64, ppc64le, i586, armh, aarch64)
sssd-ldap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-nfs-idmap (x86_64, ppc64le, i586, armh, aarch64)
sssd-nfs-idmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-pac (x86_64, ppc64le, i586, armh, aarch64)
sssd-pac-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-proxy (x86_64, ppc64le, i586, armh, aarch64)
sssd-proxy-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-tools (x86_64, ppc64le, i586, armh, aarch64)
sssd-tools-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
sssd-winbind-idmap (x86_64, ppc64le, i586, armh, aarch64)
sssd-winbind-idmap-debuginfo (x86_64, ppc64le, i586, armh, aarch64)
Maintainer: Evgeny Sinelnikov
List of contributors: 
Evgeny Sinelnikov
Andrew A. Vasilyev
Stanislav Levin
Alexey Shabalin
Alexey Sheplyakov
Sergey Bolshakov
Andrey Cherepanov
    1. libsystemd-devel
    2. libtalloc-devel
    3. libtdb-devel >= 1.1.3
    4. libcares-devel
    5. /proc
    6. python3-devel
    7. libtevent-devel
    8. libcheck-devel
    9. bind-utils
    10. diffstat
    11. cifs-utils-devel
    12. libcmocka-devel >= 1.0.0
    13. rpm-build-python3
    14. libunistring-devel
    15. docbook-dtds
    16. docbook-style-xsl
    17. libcollection-devel >= 0.5.1
    18. samba-devel
    19. libuuid-devel
    20. samba-winbind
    21. libcurl-devel
    22. softhsm
    23. libdbus-devel
    24. libxml2-devel
    25. libxslt
    26. uid_wrapper
    27. findutils
    28. doxygen
    29. xml-utils
    30. xsltproc
    31. glib2-devel
    32. libsmbclient-devel
    33. nscd
    34. nss-utils
    35. nss_wrapper
    36. libhttp-parser-devel
    37. openssh
    38. openssl
    39. libsasl2-devel
    40. libssl-devel
    41. libldap-devel
    42. libldb-devel >= 1.3.3
    43. libini_config-devel >= 1.3.0
    44. pam_wrapper
    45. libgnutls-devel
    46. libselinux-devel
    47. libsemanage-devel
    48. po4a
    49. libnfsidmap-devel >= 1:2.2.1-alt1
    50. libp11-kit-devel
    51. libpam-devel
    52. libnl-devel
    53. libpopt-devel
    54. libpcre2-devel
    55. libnspr-devel
    56. libnss-devel
    57. libkeyutils-devel
    58. libdhash-devel >= 0.4.2
    59. libkrb5-devel
Last changes:
Nov. 15, 2021 Evgeny Sinelnikov 2.6.1-alt2
- Revert reverted patch with change owner/permissions of user deskprofile path
  due it still needed.
Nov. 10, 2021 Evgeny Sinelnikov 2.6.1-alt1
- Update to 2.6.1 stable release.
- Revert "Don't change owner/permissions of user deskprofile path" patch
  due CAP_DAC_OVERRIDE was added to systemd configs in 2.4.2 release.
Nov. 7, 2021 Evgeny Sinelnikov 2.6.0-alt1
- Update to 2.6.0 (with upstream fixes from master - 7bfdd3db8e4c).
- Security issue in the sssctl command - shell command injection via the
  logs-fetch and cache-expire subcommands (fixes: CVE-2021-3621).
- pam_sss: Allow offline authentication against non-ipa-desktopprofiles aware DC
- Add filter for Active Directory trusted domains which are not trusted (one-way
  trust) or are from a different forest (direct trust). Both should be ignored
  because they are not trusted or can currently not be handled properly.

Back to Top