sssd (2.10.1-2) unstable; urgency=medium
[ Timo Aaltonen ]
* control: Drop valgrind from build-depends again.
* drop-valgrind.diff: Drop a check for if a test is running on
valgrind, avoids the build-dep and ftbfs on where valgrind is not
available.
* control: Add systemd to build-depends since build-tests require
systemctl.
* tests: Use a 2048bit private key. (Closes: #1092722)
[ Michal Maloszewski ]
* d/apparmor-profile: Update profile to silence extraneous ALLOWED
messages.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 14 Jan 2025 08:45:10 +0200
sssd (2.10.1-1) unstable; urgency=medium
[ Timo Aaltonen ]
* New upstream release.
* watch: Updated.
* patches: Refreshed.
* control: Add valgrind and libcap-dev to build-depends.
* install: Updated.
[ Andreas Hasenack ]
* autopkgtests: also gather sssd logs in case of failure
* postinst: add filesystem capabilities to several helpers
* control: add libcap2-bin dependency
* rules: don't change permissions of proxy_child and sssd_pam
-- Timo Aaltonen <tjaalton@debian.org> Wed, 08 Jan 2025 12:34:49 +0200
sssd (2.9.5-5) unstable; urgency=medium
* Team upload.
[ Andreas Hasenack ]
* autopkgtests: switch to ssh for the login test (Closes: #1081027)
* autopkgtests: display logs in the case of a failure
-- Simon Josefsson <simon@josefsson.org> Fri, 20 Dec 2024 16:15:34 +0100
sssd (2.9.5-4) unstable; urgency=medium
* Team upload.
[ Michael Prokop ]
* autopkgtests: increase expect timeout to address flaky ldap-user-group-ldap-auth under control
(Closes: #1081027)
-- Simon Josefsson <simon@josefsson.org> Tue, 26 Nov 2024 11:06:09 +0100
sssd (2.9.5-3) unstable; urgency=medium
* rules: Flip the test logic to fix ftbfs on armel/armhf.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 04 Jun 2024 18:22:29 +0300
sssd (2.9.5-2) unstable; urgency=medium
* rules: Don't fail tests on armel, armhf for now.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 04 Jun 2024 15:00:53 +0300
sssd (2.9.5-1) unstable; urgency=medium
* New upstream release. (Closes: #1068063)
- CVE-2023-3758 (Closes: #1070369)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 20 May 2024 16:36:50 +0300
sssd (2.9.4-2) unstable; urgency=medium
[ Michael Biebl ]
* Install PAM and NSS modules into /usr. (Closes: #1061350)
[ Timo Aaltonen ]
* tests: Drop -extensions from openssl command if there is no -x509.
Thanks, Sebastian Andrzej Siewior! (Closes: #1061869)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Apr 2024 15:56:46 +0300
sssd (2.9.4-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1063074
-- Benjamin Drung <bdrung@debian.org> Thu, 29 Feb 2024 17:27:43 +0000
sssd (2.9.4-1) unstable; urgency=medium
[ Sergio Durigan Junior ]
* Improve certificate/smartcard dep8 tests.
- d/t/control: Don't depend on "needs-sudo" restriction, since the
tests don't really use "sudo" selectively but rather rely on a normal
user being setup as a side effect of "needs-sudo". Instead, we can
use "needs-root".
- d/t/sssd-smart-card-pam-auth-configs-tester.sh,
d/t/sssd-softhism2-certificates-tests.sh: Use
"${AUTOPKGTEST_NORMAL_USER}" instead of "$SUDO_USER".
[ Timo Aaltonen ]
* New upstream release.
* control: Migrate to systemd-dev. (Closes: #1060512)
* rules, install: Use systemdsystemunitdir.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 18 Jan 2024 12:04:33 +0200
sssd (2.9.2-1) unstable; urgency=medium
[ Timo Aaltonen ]
* New upstream release.
* control, rules: Add bc to build-depends, enable tests again.
[ Marco Trevisan (Treviño) ]
* debian: Add pam-auth-update SSSD Smart card configurations
* debian/tests: Add tests for smart card verification
-- Timo Aaltonen <tjaalton@debian.org> Fri, 15 Sep 2023 11:18:38 +0300
sssd (2.9.1-2) unstable; urgency=medium
[ Sergio Durigan Junior ]
* Enable files provider.
SSSD 2.9.0 has deprecated "id_provider = files", but that's still
needed for smartcard authentication of local users.
- d/rules: Build with "--with-files-provider".
- d/sssd-common.install: Install libsss_files.so and sssd-files.5.
(Closes: #1041438) (LP: #2028084)
* d/rules: Remove deprecated options "--disable-files-domain".
-- Timo Aaltonen <tjaalton@debian.org> Tue, 25 Jul 2023 15:01:14 +0300
sssd (2.9.1-1) unstable; urgency=medium
* New upstream release.
* libnss-sss.postinst: Migrate to use 'case' like the other postinsts.
* patches: Drop an upstreamed patch.
* Drop deprecated simple-ifp library and files provider.
* control, rules: Add sssd-passkey, and libfido2-dev to build-depends.
* ci: Allow piuparts to fail, because handling of nsswitch.conf ownership
is broken.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 04 Jul 2023 08:48:49 +0300
sssd (2.8.2-4) unstable; urgency=medium
[ Sam Morris ]
* Don't add subid to /etc/nsswitch.conf (Closes: #1032990)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 11 Apr 2023 15:19:36 +0300
sssd (2.8.2-3) unstable; urgency=medium
[ Gioele Barabucci ]
* d/libnss-sss.nss: Update to `database-add`
* d/libsss-sudo.nss: Install `sss` service for sudoers via dh-nss (Closes: #783889)
* d/libsss-sudo.post{inst,rm}: Remove now that the services are installed via dh-nss
* d/sssd-common.nss: Use new directive name `database-add`
* Install dbus policy in /usr instead of /etc (Closes: #1031547)
[ Sam Morris ]
* sssd-common: add lintian overrides for libsubid_sss.so
-- Timo Aaltonen <tjaalton@debian.org> Sun, 26 Feb 2023 16:35:48 +0200
sssd (2.8.2-2) unstable; urgency=medium
[ Sam Morris ]
* Ship libsubid_sss.so in sssd-common package
-- Timo Aaltonen <tjaalton@debian.org> Tue, 14 Feb 2023 17:48:19 +0200
sssd (2.8.2-1) unstable; urgency=medium
* New upstream release.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 14 Feb 2023 17:40:37 +0200
sssd (2.8.1-2) unstable; urgency=medium
* d/rules: Fix 'find' syntax to remove '*.egg-info' files/directories.
(Closes: #1026490)
-- Sergio Durigan Junior <sergiodj@debian.org> Tue, 03 Jan 2023 16:36:00 -0500
sssd (2.8.1-1) unstable; urgency=medium
* New upstream release.
* watch: Updated for current github behaviour.
* support-krb5-1.20.diff: Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 23 Nov 2022 10:10:41 +0200
sssd (2.7.4-1) unstable; urgency=medium
[ Timo Aaltonen ]
* New upstream release.
* control: Add bind9-dnsutils to sssd-common Recommends, and rename
dnsutils build-dep. (Closes: #1018144)
[ Sergio Durigan Junior ]
* Simplify logic to add "automount" database into nsswitch.
- d/libnss-sss.nss: Add "automount database" directive.
- d/libnss-sss.postinst: Remove logic to insert "automount" database
into nsswitch; not necessary anymore now that the package uses dh-nss.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 22 Sep 2022 15:34:06 +0300
sssd (2.7.3-2) unstable; urgency=medium
[ Timo Aaltonen ]
* patches: Allow building the pac_responder with krb5 1.20. (Closes:
#1016220)
[ Gioele Barabucci ]
* d/libnss-sss.post{inst,rm}: Add DPKG_ROOT support
* d/libnss-sss.postinst: Fix use of outdated `automounter` instead of `automount`
* d/libnss-sss.nss: Install NSS service `sss` via dh_installnss
-- Timo Aaltonen <tjaalton@debian.org> Wed, 17 Aug 2022 16:46:47 +0300
sssd (2.7.3-1) unstable; urgency=medium
* New upstream release.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 06 Jul 2022 08:52:58 +0300
sssd (2.7.2-3) unstable; urgency=medium
* d/p/fix-shebang-on-sss_analyze.patch: Fix shebang on sss_analyze.
-- Sergio Durigan Junior <sergiodj@debian.org> Wed, 22 Jun 2022 11:00:11 -0400
sssd (2.7.2-2) unstable; urgency=medium
* rules, install: Fix python install directory. (LP: #1979453)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Jun 2022 16:54:42 +0300
sssd (2.7.2-1) unstable; urgency=medium
* New upstream release.
* pac-relax-default-for-pac_check-option.diff: Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Jun 2022 13:19:27 +0300
sssd (2.7.1-2) unstable; urgency=medium
* pac-relax-default-for-pac_check-option.diff: Drop pac_present from
default PAC check. (Closes: #1012502)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 09 Jun 2022 10:19:37 +0300
sssd (2.7.1-1) unstable; urgency=medium
* New upstream release.
* control: Drop sssd-ipd from sssd-ipa depends.
* sssd-common.install: Add a new manpage.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 06 Jun 2022 16:32:34 +0300
sssd (2.7.0-1) unstable; urgency=medium
* New upstream release.
* Update signing-key.asc.
* source: Update diff-ignores.
* control, rules: Add sssd-idp package, which includes plugins for
external identity providers.
* control, rules: Enable krb5 config snippets by default.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 25 May 2022 12:59:05 +0300
sssd (2.6.3-3) unstable; urgency=medium
* tests: Dump the daemon status after restart, hoping to see what the
error is if it fails to start.
* rules: Drop --with-ldb-dir, use the default value from the pkgconfig
file. (Closes: #1009223)
-- Timo Aaltonen <tjaalton@debian.org> Sun, 10 Apr 2022 10:57:30 +0300
sssd (2.6.3-2) unstable; urgency=medium
* rules: Disable lto.
* Rebuild against current python-defaults. (Closes: #1008583)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 29 Mar 2022 10:04:50 +0300
sssd (2.6.3-1) unstable; urgency=medium
* New upstream release.
* control: Migrate to PCRE2. (Closes: #999951)
* Update signing-key.asc.
* control: Drop python3-click from sssd-tools depends.
* sssd-tools.install: Updated.
* tests: Drop RANDFILE from tests/util. (Closes: #1001476)
-- Timo Aaltonen <tjaalton@debian.org> Fri, 11 Feb 2022 09:35:43 +0200
sssd (2.6.1-1) unstable; urgency=medium
* New upstream release.
* patches: Dropped upstream patches.
* control: Add libunistring-dev to build-depends.
* sssd-common.install: Drop libsss_secrets, removed upstream.
* tools: Add sss_analyze.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 17 Nov 2021 20:33:29 +0200
sssd (2.5.2-5) unstable; urgency=medium
* control: Fix libsemanage-dev build-dep. (Closes: #998634)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 08 Nov 2021 21:17:29 +0200
sssd (2.5.2-4) unstable; urgency=medium
* control: Promote libnss-sss and libpam-sss to sssd-common Depends.
(Closes: #995730)
* common: Drop old Breaks/Replaces.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 11 Oct 2021 17:46:04 +0300
sssd (2.5.2-3) unstable; urgency=medium
* rules: Explicitly set sssd-user as root.
* install: Add sssd-pcsc.rules to -common.
* postinst: Correct file/dir permissions and ownership when the daemon
is run as root. (Closes: #994807)
* 0001-ad-fallback-to-ldap-if-cldap-is-not-available-in-lib.patch: Our
libldap is built without LDAP_CONNECTIONLESS, cope with that.
(Closes: #994879)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Sep 2021 18:54:07 +0300
sssd (2.5.2-2) unstable; urgency=medium
* rules: Disable tests for now. (Closes: #994479)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 20 Sep 2021 17:38:19 +0300
sssd (2.5.2-1) unstable; urgency=medium
[ Sergio Durigan Junior ]
* d/apparmor-profile: Update profile:
- Extend read permissions to /etc/sssd/conf.d/* and /etc/gss/mech.d/*.
- Add read/execute permission to /usr/libexec/sssd/*.
[ Timo Aaltonen ]
* New upstream release. (Closes: #978904, #992815, #983795)
* fix-whitespace-test.diff: Refreshed.
* control, rules: Drop libwbclient-sssd-*, support for it was dropped upstream.
* fix_newer_autoconf.patch: Don't unset python prefix/exec-prefix.
* patches: Fix CVE-2021-3621. (Closes: #992710)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 16 Sep 2021 14:51:42 +0300
sssd (2.4.1-2) unstable; urgency=medium
[ Marco Trevisan (Treviño) ]
* debian/control: Mark test packages as <!nocheck>
- Add missing test dependencies
- Enable libcmocka (and so unit tests) all the archs
* debian/rules:
- Don't run tests if nocheck is set
- Enable tests again
* debian/patches:
- Get libsofthsm2 from right path for each architecture
[ Timo Aaltonen ]
* test_ca-Look-for-libsofthsm2-in-libdir-before-falling-bac.patch:
Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Feb 2021 13:49:04 +0200
sssd (2.4.1-1) unstable; urgency=medium
* New upstream release.
* libpam-sss.install: Add pam_sss_gss.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Feb 2021 11:32:35 +0200
sssd (2.4.0-1) unstable; urgency=medium
* New upstream release.
* source: Update diff-ignore.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 08 Dec 2020 22:36:54 +0200
sssd (2.3.1-3) unstable; urgency=medium
* control: Move libsss-sudo to sssd-common Suggests. (LP: #1249777)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 06 Oct 2020 15:56:19 +0300
sssd (2.3.1-2) unstable; urgency=medium
* control: Add sssd-dbus to sssd-tools Recommends. (LP: #1895645)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 17 Sep 2020 14:15:03 +0300
sssd (2.3.1-1) unstable; urgency=medium
* New upstream release. (Closes: #965307, #965143)
* source: Extend diff-ignore.
* rules: Set --with-libwbclient.
* control: Add libsofthsm2 to build-depends for tests.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 28 Jul 2020 17:14:55 +0300
sssd (2.3.0-2) unstable; urgency=medium
* rules: Drop quilt, autoreconf from dh.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 13 Jul 2020 15:49:20 +0300
sssd (2.3.0-1) unstable; urgency=medium
* New upstream release. (Closes: #964701, #964240)
* source: Migrate to 3.0 (quilt).
* source/local-options: Add files not found on upstream tarball to
extend-diff-ignore.
* rules: Use journald for logging. (Closes: #960673)
* rules: Use /run for pid-path.
* sssd-common.sssd.default: Add DEBUG_LOGGER but commented out.
* watch: Update url to github.
* Add signing-key from Pavel Březina.
* fix-946847.diff, fix-python3.8-ftbfs.diff: Dropped, upstream.
* control: Use debhelper-compat.
* control, rules: Build with openssl.
* rules: Disable tests until a failing pam upn test is sorted out.
* control: Drop quilt from build-depends.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 13 Jul 2020 11:35:33 +0300
sssd (2.2.3-3) unstable; urgency=medium
* libnss-sss: Fix a typo in adding the NSS entry for automount.
(LP: #1873752)
* control, watch: Update upstream url to github.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 20 Apr 2020 17:52:18 +0300
sssd (2.2.3-2) unstable; urgency=medium
* libnss-sss: Add an entry for automounter to nsswitch.conf. This is
needed by ipa-client-automount.
* Added gitlab-ci.yml.
* fix-python3.8-ftbfs.diff: Fix build against python3.8.
-- Timo Aaltonen <tjaalton@debian.org> Fri, 06 Mar 2020 21:58:28 +0200
sssd (2.2.3-1.1) unstable; urgency=medium
* Non-maintainer upload with maintainer permission.
* Fix sssd_be busy-looping when LDAP connection flickers.
(Closes: #946847)
-- Thorsten Glaser <tg@mirbsd.de> Fri, 21 Feb 2020 14:04:25 +0100
sssd (2.2.3-1) unstable; urgency=medium
* New upstream release.
* default-to-socket-activated-services.diff: Refreshed.
* sssd-ldap.install: Updated.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 20 Feb 2020 13:06:35 +0200
sssd (2.2.2-1) unstable; urgency=medium
* New upstream release.
* default-to-socket-activated-services.diff: Don't enable any
services when run without a conffile.
* fix-have-systemd.diff: Dropped, upstream.
* default-to-socket-activated-services.diff: Refreshed.
* signing-key: Add key from Michal Židek.
* Get rid of all old pre/postinst file removal fluff, since that's all
obsolete by now.
* Drop python2 support. (Closes: #938566)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 18 Sep 2019 15:27:44 +0300
sssd (2.2.0-4) unstable; urgency=medium
[ Sam Morris ]
* fix-have-systemd.patch: correct detection of systemd.pc
(Closes: #932080)
* default-to-socket-activated-services.diff: rely on socket activation
to spawn nss and pam responders
-- Timo Aaltonen <tjaalton@debian.org> Fri, 19 Jul 2019 18:15:41 +0300
sssd (2.2.0-3) unstable; urgency=medium
* common/ipa/krb5-common/proxy.postinst: Use libexec path. (Closes:
#931859)
-- Timo Aaltonen <tjaalton@debian.org> Fri, 12 Jul 2019 10:01:06 +0300
sssd (2.2.0-2) unstable; urgency=medium
* rules: Override dh_installman, let dh_install handle installing
manpages too.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 11 Jul 2019 00:53:36 +0300
sssd (2.2.0-1) unstable; urgency=medium
* New upstream release.
* control: Bump policy to 4.4.0.
* control, compat, rules: Bump debhelper to 12.
* *.install: Updated, some files moved to /usr/libexec.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Jul 2019 10:14:09 +0300
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog sssd-krb5-common`.
Generated by dwww version 1.16 on Tue Dec 16 06:59:36 CET 2025.