sssd (2.8.2-4+deb12u1) bookworm; urgency=medium
* Non-maintainer upload.
* Fix CVE-2023-3758: Due to a race condition flaw the GPO policy is not
consistently applied for authenticated users. (Closes: #1070369)
* Add d/.gitlab-ci.yml for Salsa CI.
* Add d/.gitignore file to exclude d/p/*.patch from upstream gitignore(5)'d
rules.
-- Guilhem Moulin <guilhem@debian.org> Sun, 09 Feb 2025 11:45:11 +0100
sssd (2.8.2-4) unstable; urgency=medium
[ Sam Morris ]
* Don't add subid to /etc/nsswitch.conf (Closes: #1032990)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 11 Apr 2023 15:19:36 +0300
sssd (2.8.2-3) unstable; urgency=medium
[ Gioele Barabucci ]
* d/libnss-sss.nss: Update to `database-add`
* d/libsss-sudo.nss: Install `sss` service for sudoers via dh-nss (Closes: #783889)
* d/libsss-sudo.post{inst,rm}: Remove now that the services are installed via dh-nss
* d/sssd-common.nss: Use new directive name `database-add`
* Install dbus policy in /usr instead of /etc (Closes: #1031547)
[ Sam Morris ]
* sssd-common: add lintian overrides for libsubid_sss.so
-- Timo Aaltonen <tjaalton@debian.org> Sun, 26 Feb 2023 16:35:48 +0200
sssd (2.8.2-2) unstable; urgency=medium
[ Sam Morris ]
* Ship libsubid_sss.so in sssd-common package
-- Timo Aaltonen <tjaalton@debian.org> Tue, 14 Feb 2023 17:48:19 +0200
sssd (2.8.2-1) unstable; urgency=medium
* New upstream release.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 14 Feb 2023 17:40:37 +0200
sssd (2.8.1-2) unstable; urgency=medium
* d/rules: Fix 'find' syntax to remove '*.egg-info' files/directories.
(Closes: #1026490)
-- Sergio Durigan Junior <sergiodj@debian.org> Tue, 03 Jan 2023 16:36:00 -0500
sssd (2.8.1-1) unstable; urgency=medium
* New upstream release.
* watch: Updated for current github behaviour.
* support-krb5-1.20.diff: Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 23 Nov 2022 10:10:41 +0200
sssd (2.7.4-1) unstable; urgency=medium
[ Timo Aaltonen ]
* New upstream release.
* control: Add bind9-dnsutils to sssd-common Recommends, and rename
dnsutils build-dep. (Closes: #1018144)
[ Sergio Durigan Junior ]
* Simplify logic to add "automount" database into nsswitch.
- d/libnss-sss.nss: Add "automount database" directive.
- d/libnss-sss.postinst: Remove logic to insert "automount" database
into nsswitch; not necessary anymore now that the package uses dh-nss.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 22 Sep 2022 15:34:06 +0300
sssd (2.7.3-2) unstable; urgency=medium
[ Timo Aaltonen ]
* patches: Allow building the pac_responder with krb5 1.20. (Closes:
#1016220)
[ Gioele Barabucci ]
* d/libnss-sss.post{inst,rm}: Add DPKG_ROOT support
* d/libnss-sss.postinst: Fix use of outdated `automounter` instead of `automount`
* d/libnss-sss.nss: Install NSS service `sss` via dh_installnss
-- Timo Aaltonen <tjaalton@debian.org> Wed, 17 Aug 2022 16:46:47 +0300
sssd (2.7.3-1) unstable; urgency=medium
* New upstream release.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 06 Jul 2022 08:52:58 +0300
sssd (2.7.2-3) unstable; urgency=medium
* d/p/fix-shebang-on-sss_analyze.patch: Fix shebang on sss_analyze.
-- Sergio Durigan Junior <sergiodj@debian.org> Wed, 22 Jun 2022 11:00:11 -0400
sssd (2.7.2-2) unstable; urgency=medium
* rules, install: Fix python install directory. (LP: #1979453)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Jun 2022 16:54:42 +0300
sssd (2.7.2-1) unstable; urgency=medium
* New upstream release.
* pac-relax-default-for-pac_check-option.diff: Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Jun 2022 13:19:27 +0300
sssd (2.7.1-2) unstable; urgency=medium
* pac-relax-default-for-pac_check-option.diff: Drop pac_present from
default PAC check. (Closes: #1012502)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 09 Jun 2022 10:19:37 +0300
sssd (2.7.1-1) unstable; urgency=medium
* New upstream release.
* control: Drop sssd-ipd from sssd-ipa depends.
* sssd-common.install: Add a new manpage.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 06 Jun 2022 16:32:34 +0300
sssd (2.7.0-1) unstable; urgency=medium
* New upstream release.
* Update signing-key.asc.
* source: Update diff-ignores.
* control, rules: Add sssd-idp package, which includes plugins for
external identity providers.
* control, rules: Enable krb5 config snippets by default.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 25 May 2022 12:59:05 +0300
sssd (2.6.3-3) unstable; urgency=medium
* tests: Dump the daemon status after restart, hoping to see what the
error is if it fails to start.
* rules: Drop --with-ldb-dir, use the default value from the pkgconfig
file. (Closes: #1009223)
-- Timo Aaltonen <tjaalton@debian.org> Sun, 10 Apr 2022 10:57:30 +0300
sssd (2.6.3-2) unstable; urgency=medium
* rules: Disable lto.
* Rebuild against current python-defaults. (Closes: #1008583)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 29 Mar 2022 10:04:50 +0300
sssd (2.6.3-1) unstable; urgency=medium
* New upstream release.
* control: Migrate to PCRE2. (Closes: #999951)
* Update signing-key.asc.
* control: Drop python3-click from sssd-tools depends.
* sssd-tools.install: Updated.
* tests: Drop RANDFILE from tests/util. (Closes: #1001476)
-- Timo Aaltonen <tjaalton@debian.org> Fri, 11 Feb 2022 09:35:43 +0200
sssd (2.6.1-1) unstable; urgency=medium
* New upstream release.
* patches: Dropped upstream patches.
* control: Add libunistring-dev to build-depends.
* sssd-common.install: Drop libsss_secrets, removed upstream.
* tools: Add sss_analyze.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 17 Nov 2021 20:33:29 +0200
sssd (2.5.2-5) unstable; urgency=medium
* control: Fix libsemanage-dev build-dep. (Closes: #998634)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 08 Nov 2021 21:17:29 +0200
sssd (2.5.2-4) unstable; urgency=medium
* control: Promote libnss-sss and libpam-sss to sssd-common Depends.
(Closes: #995730)
* common: Drop old Breaks/Replaces.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 11 Oct 2021 17:46:04 +0300
sssd (2.5.2-3) unstable; urgency=medium
* rules: Explicitly set sssd-user as root.
* install: Add sssd-pcsc.rules to -common.
* postinst: Correct file/dir permissions and ownership when the daemon
is run as root. (Closes: #994807)
* 0001-ad-fallback-to-ldap-if-cldap-is-not-available-in-lib.patch: Our
libldap is built without LDAP_CONNECTIONLESS, cope with that.
(Closes: #994879)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 22 Sep 2021 18:54:07 +0300
sssd (2.5.2-2) unstable; urgency=medium
* rules: Disable tests for now. (Closes: #994479)
-- Timo Aaltonen <tjaalton@debian.org> Mon, 20 Sep 2021 17:38:19 +0300
sssd (2.5.2-1) unstable; urgency=medium
[ Sergio Durigan Junior ]
* d/apparmor-profile: Update profile:
- Extend read permissions to /etc/sssd/conf.d/* and /etc/gss/mech.d/*.
- Add read/execute permission to /usr/libexec/sssd/*.
[ Timo Aaltonen ]
* New upstream release. (Closes: #978904, #992815, #983795)
* fix-whitespace-test.diff: Refreshed.
* control, rules: Drop libwbclient-sssd-*, support for it was dropped upstream.
* fix_newer_autoconf.patch: Don't unset python prefix/exec-prefix.
* patches: Fix CVE-2021-3621. (Closes: #992710)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 16 Sep 2021 14:51:42 +0300
sssd (2.4.1-2) unstable; urgency=medium
[ Marco Trevisan (Treviño) ]
* debian/control: Mark test packages as <!nocheck>
- Add missing test dependencies
- Enable libcmocka (and so unit tests) all the archs
* debian/rules:
- Don't run tests if nocheck is set
- Enable tests again
* debian/patches:
- Get libsofthsm2 from right path for each architecture
[ Timo Aaltonen ]
* test_ca-Look-for-libsofthsm2-in-libdir-before-falling-bac.patch:
Dropped, upstream.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Feb 2021 13:49:04 +0200
sssd (2.4.1-1) unstable; urgency=medium
* New upstream release.
* libpam-sss.install: Add pam_sss_gss.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Feb 2021 11:32:35 +0200
sssd (2.4.0-1) unstable; urgency=medium
* New upstream release.
* source: Update diff-ignore.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 08 Dec 2020 22:36:54 +0200
sssd (2.3.1-3) unstable; urgency=medium
* control: Move libsss-sudo to sssd-common Suggests. (LP: #1249777)
-- Timo Aaltonen <tjaalton@debian.org> Tue, 06 Oct 2020 15:56:19 +0300
sssd (2.3.1-2) unstable; urgency=medium
* control: Add sssd-dbus to sssd-tools Recommends. (LP: #1895645)
-- Timo Aaltonen <tjaalton@debian.org> Thu, 17 Sep 2020 14:15:03 +0300
sssd (2.3.1-1) unstable; urgency=medium
* New upstream release. (Closes: #965307, #965143)
* source: Extend diff-ignore.
* rules: Set --with-libwbclient.
* control: Add libsofthsm2 to build-depends for tests.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 28 Jul 2020 17:14:55 +0300
sssd (2.3.0-2) unstable; urgency=medium
* rules: Drop quilt, autoreconf from dh.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 13 Jul 2020 15:49:20 +0300
sssd (2.3.0-1) unstable; urgency=medium
* New upstream release. (Closes: #964701, #964240)
* source: Migrate to 3.0 (quilt).
* source/local-options: Add files not found on upstream tarball to
extend-diff-ignore.
* rules: Use journald for logging. (Closes: #960673)
* rules: Use /run for pid-path.
* sssd-common.sssd.default: Add DEBUG_LOGGER but commented out.
* watch: Update url to github.
* Add signing-key from Pavel Březina.
* fix-946847.diff, fix-python3.8-ftbfs.diff: Dropped, upstream.
* control: Use debhelper-compat.
* control, rules: Build with openssl.
* rules: Disable tests until a failing pam upn test is sorted out.
* control: Drop quilt from build-depends.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 13 Jul 2020 11:35:33 +0300
sssd (2.2.3-3) unstable; urgency=medium
* libnss-sss: Fix a typo in adding the NSS entry for automount.
(LP: #1873752)
* control, watch: Update upstream url to github.
-- Timo Aaltonen <tjaalton@debian.org> Mon, 20 Apr 2020 17:52:18 +0300
sssd (2.2.3-2) unstable; urgency=medium
* libnss-sss: Add an entry for automounter to nsswitch.conf. This is
needed by ipa-client-automount.
* Added gitlab-ci.yml.
* fix-python3.8-ftbfs.diff: Fix build against python3.8.
-- Timo Aaltonen <tjaalton@debian.org> Fri, 06 Mar 2020 21:58:28 +0200
sssd (2.2.3-1.1) unstable; urgency=medium
* Non-maintainer upload with maintainer permission.
* Fix sssd_be busy-looping when LDAP connection flickers.
(Closes: #946847)
-- Thorsten Glaser <tg@mirbsd.de> Fri, 21 Feb 2020 14:04:25 +0100
sssd (2.2.3-1) unstable; urgency=medium
* New upstream release.
* default-to-socket-activated-services.diff: Refreshed.
* sssd-ldap.install: Updated.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 20 Feb 2020 13:06:35 +0200
sssd (2.2.2-1) unstable; urgency=medium
* New upstream release.
* default-to-socket-activated-services.diff: Don't enable any
services when run without a conffile.
* fix-have-systemd.diff: Dropped, upstream.
* default-to-socket-activated-services.diff: Refreshed.
* signing-key: Add key from Michal Židek.
* Get rid of all old pre/postinst file removal fluff, since that's all
obsolete by now.
* Drop python2 support. (Closes: #938566)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 18 Sep 2019 15:27:44 +0300
sssd (2.2.0-4) unstable; urgency=medium
[ Sam Morris ]
* fix-have-systemd.patch: correct detection of systemd.pc
(Closes: #932080)
* default-to-socket-activated-services.diff: rely on socket activation
to spawn nss and pam responders
-- Timo Aaltonen <tjaalton@debian.org> Fri, 19 Jul 2019 18:15:41 +0300
sssd (2.2.0-3) unstable; urgency=medium
* common/ipa/krb5-common/proxy.postinst: Use libexec path. (Closes:
#931859)
-- Timo Aaltonen <tjaalton@debian.org> Fri, 12 Jul 2019 10:01:06 +0300
sssd (2.2.0-2) unstable; urgency=medium
* rules: Override dh_installman, let dh_install handle installing
manpages too.
-- Timo Aaltonen <tjaalton@debian.org> Thu, 11 Jul 2019 00:53:36 +0300
sssd (2.2.0-1) unstable; urgency=medium
* New upstream release.
* control: Bump policy to 4.4.0.
* control, compat, rules: Bump debhelper to 12.
* *.install: Updated, some files moved to /usr/libexec.
-- Timo Aaltonen <tjaalton@debian.org> Wed, 10 Jul 2019 10:14:09 +0300
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog sssd-tools`.
Generated by dwww version 1.15 on Thu Aug 28 22:47:47 CEST 2025.