stable

sssd-2.4.1-1.fc33

FEDORA-2021-b4adb66f7d created by pbrezina 3 years ago for Fedora 33

SSSD 2.4.1 Release Notes

Highlights

General information

  • SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald output, to avoid issues with PID parsing in rsyslog (BSD-style forwarder) output.

New features

  • New PAM module pam_sss_gss for authentication using GSSAPI
  • case_sensitive=Preserving can now be set for trusted domains with AD provider
  • case_sensitive=Preserving can now be set for trusted domains with IPA provider. However, the option needs to be set to Preserving on both client and the server for it to take effect.
  • case_sensitive option can be now inherited by subdomains
  • case_sensitive can be now set separately for each subdomain in [domain/parent/subdomain] section
  • krb5_use_subdomain_realm=True can now be used when sub-domain user principal names have upnSuffixes which are not known in the parent domain. SSSD will try to send the Kerberos request directly to a KDC of the sub-domain.

Important fixes

  • krb5_child uses proper umask for DIR type ccaches
  • Memory leak in the simple access provider
  • KCM performance has improved dramatically for cases where large amount of credentials are stored in the ccache.

Packaging changes

Configuration changes

  • New default value of debug_level is 0x0070
  • Added pam_gssapi_check_upn to enforce authentication only with principal that can be associated with target user.
  • Added pam_gssapi_services to list PAM services that can authenticate using GSSAPI

See full release notes here.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-b4adb66f7d

This update has been submitted for testing by pbrezina.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago
User Icon bojan provided feedback 3 years ago
karma
User Icon filiperosset commented & provided feedback 3 years ago
karma

no regressions noted

This update can be pushed to stable now if the maintainer wishes

3 years ago
User Icon pwalter commented & provided feedback 3 years ago
karma

Works

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata
Type
unspecified
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago

Automated Test Results