.gitignore

file modified

+1 -1

.sssd.metadata

file modified

+1 -1

SOURCES/0001-KCM-Don-t-error-out-if-creating-a-new-ID-as-the-firs.patch

file removed

-41

SOURCES/0001-MAN-ldap_user_home_directory-default-missing.patch

file added

+36

SOURCES/0002-PROXY-Return-data-in-output-parameter-if-everything-.patch

file added

+135

SOURCES/0002-sbus-register-filter-on-new-connection.patch

file removed

-48

SOURCES/0003-LDAP-failover-does-not-work-on-non-responsive-ldaps.patch

file added

+80

SOURCES/0003-sysdb-extract-sysdb_ldb_msg_attr_to_certmap_info-cal.patch

file removed

-260

SOURCES/0004-sudo-use-proper-datetime-for-default-modifyTimestamp.patch

file added

+69

SOURCES/0004-sysdb_ldb_msg_attr_to_certmap_info-set-SSS_CERTMAP_M.patch

file removed

-40

SOURCES/0005-negcache-add-fq-usernames-of-know-domains-to-all-UPN.patch

file added

+126

SOURCES/0005-sysdb-add-attr_map-attribute-to-sysdb_ldb_msg_attr_t.patch

file removed

-141

SOURCES/0006-confdb-add-confdb_certmap_to_sysdb.patch

file removed

-168

SOURCES/0006-p11_child-prefer-better-digest-function-if-card-supp.patch

file added

+147

SOURCES/0007-AD-LDAP-read-certificate-mapping-rules-from-config-f.patch

file removed

-72

SOURCES/0007-p11_child-fix-a-memory-leak-and-other-memory-mangeme.patch

file added

+49

SOURCES/0008-man-fix-description-of-dns_resolver_op_timeout.patch

file added

+36

SOURCES/0008-sysdb-sysdb_certmap_add-handle-domains-more-flexible.patch

file removed

-33

SOURCES/0009-confdb-add-special-handling-for-rules-for-the-files-.patch

file removed

-132

SOURCES/0009-man-fix-description-of-dns_resolver_timeout.patch

file added

+31

SOURCES/0010-failover-add-dns_resolver_server_timeout-option.patch

file added

+276

SOURCES/0010-files-add-support-for-Smartcard-authentication.patch

file removed

-415

SOURCES/0011-failover-change-default-timeouts.patch

file added

+120

SOURCES/0011-responder-make-sure-SSS_DP_CERT-is-passed-to-files-p.patch

file removed

-69

SOURCES/0012-PAM-add-certificate-matching-rules-from-all-domains.patch

file removed

-167

SOURCES/0012-config-add-dns_resolver_op_timeout-to-option-list.patch

file added

+76

SOURCES/0013-doc-add-certificate-mapping-section-to-man-page.patch

file removed

-183

SOURCES/0013-pam_sss-Add-missing-colon-to-the-PIN-prompt.patch

file added

+33

SOURCES/0014-intg-user-default-locale.patch

file removed

-31

SOURCES/0014-pam-make-sure-p11_child.log-has-the-right-permission.patch

file added

+39

SOURCES/0015-PAM-use-better-PAM-error-code-for-failed-Smartcard-a.patch

file removed

-35

SOURCES/0015-ssh-make-sure-p11_child.log-has-the-right-permission.patch

file added

+40

SOURCES/0016-BE-make-sure-child-log-files-have-the-right-permissi.patch

file added

+61

SOURCES/0016-test_ca-test-library-only-for-readable.patch

file removed

-32

SOURCES/0017-MAN-Get-rid-of-sssd-secrets-reference.patch

file added

+41

SOURCES/0017-test_ca-set-a-password-PIN-to-nss-databases.patch

file removed

-58

SOURCES/0018-MAN-Document-that-it-is-enough-to-systemctl-restart-.patch

file added

+51

SOURCES/0018-getsockopt_wrapper-add-support-for-PAM-clients.patch

file removed

-79

SOURCES/0019-SECRETS-Use-different-option-names-from-secrets-and-.patch

file added

+280

SOURCES/0019-intg-add-Smartcard-authentication-tests.patch

file removed

-331

SOURCES/0020-SECRETS-Don-t-limit-the-global-number-of-ccaches.patch

file added

+51

SOURCES/0020-sbus-dectect-python-binary-for-sbus_generate.sh.patch

file removed

-88

SOURCES/0021-CONFDB-Skip-local-domain-if-not-supported.patch

file removed

-42

SOURCES/0021-KCM-Pass-confdb-context-to-the-ccache-db-initializat.patch

file added

+176

SOURCES/0022-KCM-Configurable-quotas-for-the-secdb-ccache-back-en.patch

file added

+179

SOURCES/0022-SELINUX-Always-add-SELinux-user-to-the-semanage-data.patch

file removed

-145

SOURCES/0023-MAN-Document-that-PAM-stack-contains-the-systemd-use.patch

file added

+36

SOURCES/0023-proxy-access-provider-directly-not-through-be_ctx.patch

file removed

-49

SOURCES/0024-Don-t-qualify-users-from-files-domain-when-default_d.patch

file added

+119

SOURCES/0024-dp-set-be_ctx-provider-as-part-of-dp_init-request.patch

file removed

-144

SOURCES/0025-pam-fix-loop-in-Smartcard-authentication.patch

file added

+42

SOURCES/0025-sbus-read-destination-after-sender-is-set.patch

file removed

-42

SOURCES/0026-SYSDB-Add-sysdb_search_with_ts_attr.patch

file added

+592

SOURCES/0026-sbus-do-not-try-to-remove-signal-listeners-when-disc.patch

file removed

-34

SOURCES/0027-BE-search-with-sysdb_search_with_ts_attr.patch

file added

+69

SOURCES/0027-sbus-free-watch_fd-fdevent-explicitly.patch

file removed

-29

SOURCES/0028-BE-Enable-refresh-for-multiple-domains.patch

file added

+34

SOURCES/0028-doc-remove-local-provider-reference-from-manpages.patch

file removed

-139

SOURCES/0029-BE-Make-be_refresh_ctx_init-set-up-the-periodical-ta.patch

file added

+111

SOURCES/0029-confdb-log-an-error-when-domain-is-misconfigured.patch

file removed

-48

SOURCES/0030-BE-LDAP-Call-be_refresh_ctx_init-in-the-provider-lib.patch

file added

+143

SOURCES/0030-be-use-be_is_offline-for-the-main-domain-when-asking.patch

file removed

-58

SOURCES/0031-BE-Pass-in-attribute-to-look-up-with-instead-of-hard.patch

file added

+108

SOURCES/0031-sudo-respect-case-sensitivity-in-sudo-responder.patch

file removed

-69

SOURCES/0032-BE-Change-be_refresh_ctx_init-to-return-errno-and-se.patch

file added

+99

SOURCES/0032-sbus-fix-typo.patch

file removed

-27

SOURCES/0033-BE-LDAP-Split-out-a-helper-function-from-sdap_refres.patch

file added

+131

SOURCES/0033-sbus-check-for-null-message-in-sbus_message_bound.patch

file removed

-42

SOURCES/0034-BE-Pass-in-filter_type-when-creating-the-refresh-acc.patch

file added

+70

SOURCES/0034-sbus-replace-sbus_message_bound_ref-with-sbus_messag.patch

file removed

-337

SOURCES/0035-BE-Send-refresh-requests-in-batches.patch

file added

+297

SOURCES/0035-sbus-add-unit-tests-for-public-sbus_message-module.patch

file removed

-664

SOURCES/0036-BE-Extend-be_ptask_create-with-control-when-to-sched.patch

file added

+496

SOURCES/0036-p11-handle-multiple-certs-during-auth-with-OpenSSL.patch

file removed

-147

SOURCES/0037-BE-Schedule-the-refresh-interval-from-the-finish-tim.patch

file added

+34

SOURCES/0037-p11_child-add-wait_for_card-option.patch

file removed

-476

SOURCES/0038-AD-Implement-background-refresh-for-AD-domains.patch

file added

+589

SOURCES/0038-PAM-add-p11_wait_for_card_timeout-option.patch

file removed

-144

SOURCES/0039-IPA-Implement-background-refresh-for-IPA-domains.patch

file added

+547

SOURCES/0039-pam_sss-make-flags-public.patch

file removed

-245

SOURCES/0040-BE-IPA-AD-LDAP-Add-inigroups-refresh-support.patch

file added

+291

SOURCES/0040-pam_sss-add-try_cert_auth-option.patch

file removed

-101

SOURCES/0041-BE-IPA-AD-LDAP-Initialize-the-refresh-callback-from-.patch

file added

+495

SOURCES/0041-pam_sss-add-option-require_cert_auth.patch

file removed

-372

SOURCES/0042-IPA-AD-SDAP-BE-Generate-refresh-callbacks-with-a-mac.patch

file added

+300

SOURCES/0042-intg-require-SC-tests.patch

file removed

-310

SOURCES/0043-MAN-Amend-the-documentation-for-the-background-refre.patch

file added

+36

SOURCES/0043-p11_child-show-PKCS-11-URI-in-debug-output.patch

file removed

-408

SOURCES/0044-DP-SYSDB-Move-the-code-to-set-initgrExpireTimestamp-.patch

file added

+216

SOURCES/0044-p11_child-add-PKCS-11-uri-to-restrict-selection.patch

file removed

-239

SOURCES/0045-IPA-AD-LDAP-Increase-the-initgrExpireTimestamp-after.patch

file added

+137

SOURCES/0045-PAM-add-p11_uri-option.patch

file removed

-194

SOURCES/0046-BE-Introduce-flag-for-be_ptask_create.patch

file added

+536

SOURCES/0046-tests-add-PKCS-11-URI-tests.patch

file removed

-210

SOURCES/0047-BE-Convert-be_ptask-params-to-flags.patch

file added

+916

SOURCES/0047-PAM-return-short-name-for-files-provider-users.patch

file removed

-148

SOURCES/0048-DYNDNS-dyndns_update-is-not-enough.patch

file added

+92

SOURCES/0048-doc-Add-nsswitch.conf-note-to-manpage.patch

file removed

-77

SOURCES/0049-intg-flush-the-SSSD-caches-to-sync-with-files.patch

file removed

-45

SOURCES/0049-tests-Use-idm-DL1-module-to-install-389-ds.patch

file added

+31

SOURCES/0050-FILES-The-files-provider-should-not-enumerate.patch

file removed

-101

SOURCES/0050-pam-keep-pin-on-the-PAM-stack-for-forward_pass.patch

file added

+135

SOURCES/0051-BE-Invalid-oprator-used-in-condition.patch

file added

+40

SOURCES/0051-p11_child-add-OCSP-check-ot-the-OpenSSL-version.patch

file removed

-490

SOURCES/0052-TESTS-Sync.-multihost-kcm-tests-with-master.patch

file added

+192

SOURCES/0052-p11_child-add-crl_file-option-for-the-OpenSSL-build.patch

file removed

-280

SOURCES/0053-KCM-Add-a-forgotten-return.patch

file added

+28

SOURCES/0053-p11-Fix-two-instances-of-Wmaybe-uninitialized-in-p11.patch

file removed

-38

SOURCES/0054-KCM-Allow-modifications-of-ccache-s-principal.patch

file added

+188

SOURCES/0054-sudo-use-correct-sbus-interface.patch

file removed

-32

SOURCES/0055-KCM-Fill-empty-cache-do-not-initialize-a-new-one.patch

file added

+160

SOURCES/0055-sudo-fix-error-handling-in-sudosrv_refresh_rules_don.patch

file removed

-41

SOURCES/0056-files-add-session-recording-flag.patch

file removed

-136

SOURCES/0057-UTIL-Suppress-Coverity-warning.patch

file removed

-43

SOURCES/0058-PYSSS-Re-add-the-pysss.getgrouplist-interface.patch

file removed

-121

SOURCES/0059-ifp-fix-typo-causing-a-crash-in-FindByNameAndCertifi.patch

file removed

-46

SOURCES/0060-IFP-Use-subreq-not-req-when-calling-RefreshRules_rec.patch

file removed

-35

SOURCES/0061-INI-Return-errno-not-1-on-failure-from-sss_ini_get_s.patch

file removed

-42

SOURCES/0062-MONITOR-Don-t-check-for-pidfile-if-SSSD-is-already-r.patch

file removed

-53

SOURCES/0063-SSSD-Allow-refreshing-only-certain-section-with-genc.patch

file removed

-399

SOURCES/0064-SYSTEMD-Re-read-KCM-configuration-on-systemctl-resta.patch

file removed

-84

SOURCES/0065-pam_sss-return-PAM_AUTHINFO_UNAVAIL-if-sc-options-ar.patch

file removed

-72

SOURCES/0066-p11_child-NSS-print-key-type-in-a-debug-message.patch

file removed

-72

SOURCES/0067-pam_test_srv-set-default-value-for-SOFTHSM2_CONF.patch

file removed

-47

SOURCES/0068-tests-add-ECC-CA.patch

file removed

-276

SOURCES/0069-test_pam_srv-add-test-for-certificate-with-EC-keys.patch

file removed

-198

SOURCES/0070-p11_child-openssl-add-support-for-EC-keys.patch

file removed

-409

SOURCES/0071-utils-refactor-ssh-key-extraction-OpenSSL.patch

file removed

-133

SOURCES/0072-utils-add-ec_pub_key_to_ssh-OpenSSL.patch

file removed

-265

SOURCES/0073-utils-refactor-ssh-key-extraction-NSS.patch

file removed

-153

SOURCES/0074-utils-add-ec_pub_key_to_ssh-NSS.patch

file removed

-158

SOURCES/0075-SSSCTL-user-show-says-that-user-is-expired.patch

file removed

-53

SOURCES/0076-sss_iface-prevent-from-using-invalid-names-that-star.patch

file removed

-52

SOURCES/0077-nss-use-enumeration-context-as-talloc-parent-for-cac.patch

file removed

-145

SOURCES/0078-LDAP-minor-refactoring-in-auth_send-to-conform-to-ou.patch

file removed

-71

SOURCES/0079-LDAP-Only-authenticate-the-auth-connection-if-we-nee.patch

file removed

-130

SOURCES/0080-LDAP-Log-the-encryption-used-during-LDAP-authenticat.patch

file removed

-59

SOURCES/0081-nss-sssd-returns-for-emtpy-home-directories.patch

file removed

-98

SOURCES/0082-PROXY-Copy-the-response-to-the-caller.patch

file removed

-57

SOURCES/0083-Revert-IPA-use-forest-name-when-looking-up-the-Globa.patch

file removed

-29

SOURCES/0084-ipa-use-only-the-global-catalog-service-of-the-fores.patch

file removed

-103

SOURCES/0085-krb5_child-fix-permissions-during-SC-auth.patch

file removed

-138

SOURCES/0086-MAN-Explicitly-state-that-not-all-generic-domain-opt.patch

file removed

-36

SOURCES/0087-KCM-Deleting-a-non-existent-ccache-should-not-yield-.patch

file removed

-38

SOURCES/0088-confdb-Always-read-snippet-files.patch

file removed

-220

SOURCES/0089-CONFDB-Remove-old-libini-support.patch

file removed

-269

SOURCES/0090-idmap_sss-improve-man-page.patch

file removed

-54

SOURCES/0091-sbus-allow-access-for-sssd-user.patch

file removed

-61

SOURCES/0092-sbus-use-120-second-default-timeout.patch

file removed

-50

SOURCES/0093-ifp-extraAttributes-is-UnknownProperty.patch

file removed

-113

SOURCES/0094-AD-IPA-Reset-subdomain-service-name-not-domain-name.patch

file removed

-140

SOURCES/0095-IPA-Add-explicit-return-after-tevent_req_error.patch

file removed

-37

SOURCES/0096-KCM-Return-a-valid-tevent-error-code-if-a-request-ca.patch

file removed

-35

SOURCES/0097-KCM-Allow-representing-ccaches-with-a-NULL-principal.patch

file removed

-281

SOURCES/0098-KCM-Create-an-empty-ccache-on-switch-to-a-non-existi.patch

file removed

-244

SOURCES/0099-PAM-use-user-name-hint-if-any-domain-has-set-it.patch

file removed

-67

SOURCES/0100-pam_sss-PAM_USER_UNKNOWN-if-socket-is-missing.patch

file removed

-139

SOURCES/0101-ipa-ipa_getkeytab-don-t-call-libnss_sss.patch

file removed

-44

SPECS/sssd.spec

file modified

+149 -118