< back to search

gpp_maybe Recommended update for sssd
SUSE-SL-Micro-6.2-729

This update for sssd fixes the following issues: - With the 2.10 update sssd runs under unprivileged user which is not possible in certain scenarios. This update reverts to run as root with minimum privileges (bsc#1259436); - Let krb5 child tolerate missing capabilities; - Add support for UsrEtc; (bsc#1257643); - The default configuration file is installed now in /usr/etc/sssd/sssd.conf. It can be completely overridden by manually creating the system specific config file /etc/sssd/sssd.conf, or partially overridden by creating config snippets in /etc/sssd/conf.d/ directory. Check sssd.conf manpage for more details. - Fix ldap_child process started by the backend process ending in defunc state. - Create the secrets directory for the KCM service; (bsc#1259253); - Make sure previously rotated logs are chown-ed as well (bsc#1259475); - Use %pre scriptlet instead of %pretrans to migrate from sssd-common (bsc#1257509); - Update to release 2.10.2; (jsc#PED-12449): * If the ssh responder is not running, sss_ssh_knownhosts will not fail. * SSSD is now capable of handling multiple services associated with the same port. * sssd_pam, being a privileged binary, now clears the environment and does not allow configuration of the PR_SET_DUMPABLE flag as a precaution. - Changes from sssd 2.10.1: * SSSD does not create anymore missing path components of DIR:/FILE: ccache types while acquiring user's TGT. * The option default_domain_suffix is deprecated. - Changes from sssd 2.10.0: * The ``sssctl cache-upgrade`` command was removed. SSSD performs automatic upgrades at startup when needed. * Support of ``enumeration`` feature for AD/IPA providers is deprecated and might be removed in further releases. * The new tool ``sss_ssh_knownhosts`` can be used with ssh's ``KnownHostsCommand`` configuration option to retrieve the host's public keys from a remote server. It replaces ```sss_ssh_knownhostsproxy``. * The default value for ``ldap_id_use_start_tls`` changed from false to true for improved security. - Fix socket activation of responders - Daemon runs now as unprivileged user 'sssd' - Fix sssctl config-check exit code when the conf.d snippets directory does not exist (bsc#1230348);

cloud_download Downloads

SUSE Linux Micro 6.2 aarch64
  • Packages
    libsss_certmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    libsss_idmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    python3-sssd-config
    Python API for configuring sssd
    2.10.2-160000.1.1 lock rpm
    sssd
    System Security Services Daemon
    2.10.2-160000.1.1 lock rpm
    sssd-ad
    The ActiveDirectory backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-dbus
    The D-Bus responder of sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5
    The Kerberos authentication backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5-common
    SSSD helpers needed for Kerberos and GSSAPI authentication
    2.10.2-160000.1.1 lock rpm
    sssd-ldap
    The LDAP backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-tools
    Commandline tools for sssd
    2.10.2-160000.1.1 lock rpm
SUSE Linux Micro 6.2 ppc64le
  • Packages
    libsss_certmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    libsss_idmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    python3-sssd-config
    Python API for configuring sssd
    2.10.2-160000.1.1 lock rpm
    sssd
    System Security Services Daemon
    2.10.2-160000.1.1 lock rpm
    sssd-ad
    The ActiveDirectory backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-dbus
    The D-Bus responder of sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5
    The Kerberos authentication backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5-common
    SSSD helpers needed for Kerberos and GSSAPI authentication
    2.10.2-160000.1.1 lock rpm
    sssd-ldap
    The LDAP backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-tools
    Commandline tools for sssd
    2.10.2-160000.1.1 lock rpm
SUSE Linux Micro 6.2 s390x
  • Packages
    libsss_certmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    libsss_idmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    python3-sssd-config
    Python API for configuring sssd
    2.10.2-160000.1.1 lock rpm
    sssd
    System Security Services Daemon
    2.10.2-160000.1.1 lock rpm
    sssd-ad
    The ActiveDirectory backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-dbus
    The D-Bus responder of sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5
    The Kerberos authentication backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5-common
    SSSD helpers needed for Kerberos and GSSAPI authentication
    2.10.2-160000.1.1 lock rpm
    sssd-ldap
    The LDAP backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-tools
    Commandline tools for sssd
    2.10.2-160000.1.1 lock rpm
SUSE Linux Micro 6.2 x86_64
  • Packages
    libsss_certmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    libsss_idmap0
    FreeIPA ID mapping library
    2.10.2-160000.1.1 lock rpm
    python3-sssd-config
    Python API for configuring sssd
    2.10.2-160000.1.1 lock rpm
    sssd
    System Security Services Daemon
    2.10.2-160000.1.1 lock rpm
    sssd-ad
    The ActiveDirectory backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-dbus
    The D-Bus responder of sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5
    The Kerberos authentication backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-krb5-common
    SSSD helpers needed for Kerberos and GSSAPI authentication
    2.10.2-160000.1.1 lock rpm
    sssd-ldap
    The LDAP backend plugin for sssd
    2.10.2-160000.1.1 lock rpm
    sssd-tools
    Commandline tools for sssd
    2.10.2-160000.1.1 lock rpm