shield Recommended update for sssd

SUSE-SLE-Module-Basesystem-15-SP7-2026-640

This update for sssd fixes the following issues: - Use %pre scriptlet instead of %pretrans to migrate from sssd-common (bsc#1257509) - Update to release 2.10.2 (jsc#PED-12449): * If the ssh responder is not running, sss_ssh_knownhosts will not fail * SSSD is now capable of handling multiple services associated with the same port. * sssd_pam, being a privileged binary, now clears the environment and does not allow configuration of the PR_SET_DUMPABLE flag as a precaution. - Changes from sssd 2.10.1: * SSSD does not create anymore missing path components of DIR:/FILE: ccache types while acquiring user's TGT. The parent directory of requested ccache directory must exist and the user trying to log in must have rwx access to this directory. This matches behavior of /usr/bin/kinit. * The option default_domain_suffix is deprecated. - Changes from sssd 2.10.0: * The ``sssctl cache-upgrade`` command was removed. SSSD performs automatic upgrades at startup when needed. * Support of ``enumeration`` feature for AD/IPA providers is deprecated and might be removed in further releases. * The new tool ``sss_ssh_knownhosts`` can be used with ssh's ``KnownHostsCommand`` configuration option to retrieve the host's public keys from a remote server. It replaces ```sss_ssh_knownhostsproxy``. * The default value for ``ldap_id_use_start_tls`` changed from false to true for improved security. - Fix socket activation of responders - Daemon runs now as unprivileged user 'sssd' - Fix build parameter name omitted - Update filelists involving memberof.so and idmap/sss.so to avoid gobbling up one file into multiple sssd subpackages. - Fix spec file for openSUSE ALP and SUSE SLFO, where the python3_fix_shebang_path RPM macro is not available - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro (bsc#1212476)

• Release Date
  Feb 25 2026
• References
  Bugzilla: 1212476, 1257509
  
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.7 aarch64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap-devel
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap0
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd
  System Security Services Daemon

  2.10.2-150700.9.17.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.10.2-150700.9.17.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.10.2-150700.9.17.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap-devel
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap0
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd
  System Security Services Daemon

  2.10.2-150700.9.17.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.10.2-150700.9.17.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.10.2-150700.9.17.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap-devel
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap0
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd
  System Security Services Daemon

  2.10.2-150700.9.17.1 lock rpm lock src

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.10.2-150700.9.17.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.10.2-150700.9.17.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  libipa_hbac-devel
  Development files for the FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libipa_hbac0
  FreeIPA HBAC Evaluator library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap-devel
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_certmap0
  SSSD Certificate Mapping Library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap-devel
  Development files for the FreeIPA idmap library

  2.10.2-150700.9.17.1 lock rpm

  libsss_nss_idmap0
  FreeIPA ID mapping library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp-devel
  Development files for the SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  libsss_simpleifp0
  The SSSD D-Bus responder helper library

  2.10.2-150700.9.17.1 lock rpm

  python3-sssd-config
  Python API for configuring sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd
  System Security Services Daemon

  2.10.2-150700.9.17.1 lock rpm lock src

  sssd-32bit
  System Security Services Daemon

  2.10.2-150700.9.17.1 lock rpm

  sssd-ad
  The ActiveDirectory backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-dbus
  The D-Bus responder of sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-ipa
  FreeIPA backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-kcm
  SSSD's Kerberos cache manager

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5
  The Kerberos authentication backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-krb5-common
  SSSD helpers needed for Kerberos and GSSAPI authentication

  2.10.2-150700.9.17.1 lock rpm

  sssd-ldap
  The LDAP backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-proxy
  The proxy backend plugin for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-tools
  Commandline tools for sssd

  2.10.2-150700.9.17.1 lock rpm

  sssd-winbind-idmap
  The sss idmap backend for Winbind

  2.10.2-150700.9.17.1 lock rpm