Package sssd: Information

    Source package: sssd
    Version: 2.9.8-alt2
    Latest version according to Repology
    Build time:  Feb 3, 2026, 10:14 PM in the task #407009
    Category: System/Servers
    Report package bug
    License: GPLv3+
    Summary: System Security Services Daemon
    Description: 
    Provides a set of daemons to manage access to remote directories and
    authentication mechanisms. It provides an NSS and PAM interface toward
    the system and a pluggable backend system to connect to multiple different
    account sources. It is also the basis to provide client auditing and policy
    services for projects like FreeIPA.
    
    The sssd subpackage is a meta-package that contains the deamon as well as all
    the existing back ends.

    List of RPM packages built from this SRPM:
    libipa_hbac (x86_64, i586, aarch64)
    libipa_hbac-debuginfo (x86_64, i586, aarch64)
    libipa_hbac-devel (x86_64, i586, aarch64)
    libsss_autofs (x86_64, i586, aarch64)
    libsss_autofs-debuginfo (x86_64, i586, aarch64)
    libsss_certmap (x86_64, i586, aarch64)
    libsss_certmap-debuginfo (x86_64, i586, aarch64)
    libsss_certmap-devel (x86_64, i586, aarch64)
    libsss_idmap (x86_64, i586, aarch64)
    libsss_idmap-debuginfo (x86_64, i586, aarch64)
    libsss_idmap-devel (x86_64, i586, aarch64)
    libsss_nss_idmap (x86_64, i586, aarch64)
    libsss_nss_idmap-debuginfo (x86_64, i586, aarch64)
    libsss_nss_idmap-devel (x86_64, i586, aarch64)
    libsss_sudo (x86_64, i586, aarch64)
    libsss_sudo-debuginfo (x86_64, i586, aarch64)
    python3-module-ipa_hbac (x86_64, i586, aarch64)
    python3-module-ipa_hbac-debuginfo (x86_64, i586, aarch64)
    python3-module-sss (x86_64, i586, aarch64)
    python3-module-sss-debuginfo (x86_64, i586, aarch64)
    python3-module-sss-murmur (x86_64, i586, aarch64)
    python3-module-sss-murmur-debuginfo (x86_64, i586, aarch64)
    python3-module-sss_nss_idmap (x86_64, i586, aarch64)
    python3-module-sss_nss_idmap-debuginfo (x86_64, i586, aarch64)
    python3-module-sssd (x86_64, i586, aarch64)
    python3-module-sssdconfig (noarch)
    sssd (x86_64, i586, aarch64)
    sssd-ad (x86_64, i586, aarch64)
    sssd-ad-debuginfo (x86_64, i586, aarch64)
    sssd-client (x86_64, i586, aarch64)
    sssd-client-debuginfo (x86_64, i586, aarch64)
    sssd-dbus (x86_64, i586, aarch64)
    sssd-dbus-debuginfo (x86_64, i586, aarch64)
    sssd-debuginfo (x86_64, i586, aarch64)
    sssd-idp (x86_64, i586, aarch64)
    sssd-idp-debuginfo (x86_64, i586, aarch64)
    sssd-ipa (x86_64, i586, aarch64)
    sssd-ipa-debuginfo (x86_64, i586, aarch64)
    sssd-kcm (x86_64, i586, aarch64)
    sssd-kcm-debuginfo (x86_64, i586, aarch64)
    sssd-krb5 (x86_64, i586, aarch64)
    sssd-krb5-common (x86_64, i586, aarch64)
    sssd-krb5-common-debuginfo (x86_64, i586, aarch64)
    sssd-krb5-debuginfo (x86_64, i586, aarch64)
    sssd-ldap (x86_64, i586, aarch64)
    sssd-ldap-debuginfo (x86_64, i586, aarch64)
    sssd-nfs-idmap (x86_64, i586, aarch64)
    sssd-nfs-idmap-debuginfo (x86_64, i586, aarch64)
    sssd-pac (x86_64, i586, aarch64)
    sssd-pac-debuginfo (x86_64, i586, aarch64)
    sssd-passkey (x86_64, i586, aarch64)
    sssd-passkey-debuginfo (x86_64, i586, aarch64)
    sssd-proxy (x86_64, i586, aarch64)
    sssd-proxy-debuginfo (x86_64, i586, aarch64)
    sssd-tools (x86_64, i586, aarch64)
    sssd-tools-debuginfo (x86_64, i586, aarch64)
    sssd-winbind-idmap (x86_64, i586, aarch64)
    sssd-winbind-idmap-debuginfo (x86_64, i586, aarch64)

    Maintainer: Evgeny Sinelnikov



      1. findutils
      2. libssl-devel
      3. glib2-devel
      4. gnutls-utils
      5. libcares-devel
      6. libcheck-devel
      7. libcmocka-devel >= 1.0.0
      8. libcollection-devel >= 0.5.1
      9. python3-devel
      10. rpm-build-python3
      11. python3-module-setuptools
      12. libsubid-devel
      13. libsystemd-devel
      14. libtalloc-devel
      15. libtdb-devel >= 1.1.3
      16. libtevent-devel
      17. /dev/pts
      18. libcurl-devel
      19. libdbus-devel
      20. libdhash-devel >= 0.4.2
      21. /proc
      22. rpm-macros-systemd
      23. libfaketime
      24. libfido2-devel
      25. libunistring-devel
      26. libuuid-devel
      27. adcli
      28. bind-utils
      29. libgnutls-devel
      30. samba-devel
      31. samba-winbind
      32. libhttp-parser-devel
      33. libini_config-devel >= 1.3.0
      34. libjansson-devel
      35. libjose-devel
      36. libkeyutils-devel
      37. softhsm
      38. libxml2-devel
      39. libxslt
      40. libkrb5-devel
      41. cifs-utils-devel
      42. libldap-devel
      43. libldb-devel >= 1.3.3
      44. uid_wrapper
      45. xml-utils
      46. xsltproc
      47. nscd
      48. nss-utils
      49. nss_wrapper
      50. openssh
      51. openssl
      52. libnfsidmap-devel >= 1:2.2.1-alt1
      53. libnl-devel
      54. libnspr-devel
      55. libnss-devel
      56. libp11-kit-devel
      57. libpam-devel
      58. libpcre2-devel
      59. pam_wrapper
      60. libpopt-devel
      61. libsasl2-devel
      62. libselinux-devel
      63. libsemanage-devel
      64. libsmbclient-devel
      65. po4a
      66. diffstat
      67. docbook-dtds
      68. docbook-style-xsl
      69. doxygen

    Last changed


    Jan. 31, 2026 Evgeny Sinelnikov 2.9.8-alt2
    - Fix typo in system-auth-use_first_pass-sss PAM stack rules.
    Jan. 23, 2026 Evgeny Sinelnikov 2.9.8-alt1
    - Update to latest 2.9 LTM release.
    - Enable build with subid ranges support.
    - Major fixes from upstream (GitHub#8209, GitHub#8184, GitHub#8253, GitHub#8257,
                                 GitHub#8260, GitHub#8273, GitHub#8311, GitHub#8302,
                                 GitHub#8327, GitHub#8347, GitHub#8380, GitHub#8249,
                                 GitHub#8229, GitHub#8317, GitHub#8274, GitHub#8276)
      + Improved DN filtering in IPA during ipa_add_trusted_memberships_send().
      + Fixed non-posix groups incorrectly storing gid=0 in cache.
      + Added SUBID support to the LDAP provider.
      + Fixed handling of empty trusts in ipa_get_trust_type().
      + Disabled 'session_provider' by default in configuration.
      + Removed deprecated 'ipa_enable_dns_sites' option (IPA).
      + Restricted root from accessing arbitrary KCM caches (security fix).
      + Fixed SSSD on IPA when using short user names.
      + Fixed pac_check=no_check behavior in PAC module.
      + IPA S2N no longer updates user-private-groups.
      + Increased SBUS_MESSAGE_TIMEOUT to 5 minutes for better robustness.
      + Filtered invalid IPv6 addresses for DNS updates.
      + krb5_child now uses ERR_CHECK_NEXT_AUTH_TYPE instead of EAGAIN.
      + Clarified sssd-idp package description.
      + Fixed IPA trust handling with unknown trust type errors.
      + Included local fixes and improvements for Passkey authentication.
    Jan. 19, 2026 Evgeny Sinelnikov 2.9.7-alt7
    - Move system-auth-sss local user check to system-check-localuser (hybrid
      authentication with conditional branching of determines the authentication
      path for local or non-local users with UID meeting a specific threshold).