gpp_maybe
Recommended update for sssd
SUSE-SLES-16.0-729
This update for sssd fixes the following issues: - With the 2.10 update sssd runs under unprivileged user which is not possible in certain scenarios. This update reverts to run as root with minimum privileges (bsc#1259436); - Let krb5 child tolerate missing capabilities; - Add support for UsrEtc; (bsc#1257643); - The default configuration file is installed now in /usr/etc/sssd/sssd.conf. It can be completely overridden by manually creating the system specific config file /etc/sssd/sssd.conf, or partially overridden by creating config snippets in /etc/sssd/conf.d/ directory. Check sssd.conf manpage for more details. - Fix ldap_child process started by the backend process ending in defunc state. - Create the secrets directory for the KCM service; (bsc#1259253); - Make sure previously rotated logs are chown-ed as well (bsc#1259475); - Use %pre scriptlet instead of %pretrans to migrate from sssd-common (bsc#1257509); - Update to release 2.10.2; (jsc#PED-12449): * If the ssh responder is not running, sss_ssh_knownhosts will not fail. * SSSD is now capable of handling multiple services associated with the same port. * sssd_pam, being a privileged binary, now clears the environment and does not allow configuration of the PR_SET_DUMPABLE flag as a precaution. - Changes from sssd 2.10.1: * SSSD does not create anymore missing path components of DIR:/FILE: ccache types while acquiring user's TGT. * The option default_domain_suffix is deprecated. - Changes from sssd 2.10.0: * The ``sssctl cache-upgrade`` command was removed. SSSD performs automatic upgrades at startup when needed. * Support of ``enumeration`` feature for AD/IPA providers is deprecated and might be removed in further releases. * The new tool ``sss_ssh_knownhosts`` can be used with ssh's ``KnownHostsCommand`` configuration option to retrieve the host's public keys from a remote server. It replaces ```sss_ssh_knownhostsproxy``. * The default value for ``ldap_id_use_start_tls`` changed from false to true for improved security. - Fix socket activation of responders - Daemon runs now as unprivileged user 'sssd' - Fix sssctl config-check exit code when the conf.d snippets directory does not exist (bsc#1230348);
-
Release DateMay 11 2026
-
References
-
Typerecommended
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server 16.0 s390x
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 aarch64
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
-
Packageslibipa_hbac-devel
Development files for the FreeIPA HBAC Evaluator librarylibipa_hbac02.10.2-160000.1.1 lock rpm
FreeIPA HBAC Evaluator librarylibnfsidmap-sss2.10.2-160000.1.1 lock rpm
Library to allow communication between libnfsidmap and SSSDlibsss_certmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA certmap librarylibsss_certmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarylibsss_nss_idmap-devel2.10.2-160000.1.1 lock rpm
Development files for the FreeIPA idmap librarylibsss_nss_idmap02.10.2-160000.1.1 lock rpm
FreeIPA ID mapping librarypython3-ipa_hbac2.10.2-160000.1.1 lock rpm
Python bindings for the FreeIPA HBAC Evaluator librarypython3-sss-murmur2.10.2-160000.1.1 lock rpm
Python3 bindings for SSSD Murmur hash functionpython3-sss_nss_idmap2.10.2-160000.1.1 lock rpm
Python bindings for libsss_nss_idmappython3-sssd-config2.10.2-160000.1.1 lock rpm
Python API for configuring sssdsssd2.10.2-160000.1.1 lock rpm
System Security Services Daemonsssd-ad2.10.2-160000.1.1 lock rpm
The ActiveDirectory backend plugin for sssdsssd-dbus2.10.2-160000.1.1 lock rpm
The D-Bus responder of sssdsssd-ipa2.10.2-160000.1.1 lock rpm
FreeIPA backend plugin for sssdsssd-kcm2.10.2-160000.1.1 lock rpm
SSSD's Kerberos cache managersssd-krb52.10.2-160000.1.1 lock rpm
The Kerberos authentication backend plugin for sssdsssd-krb5-common2.10.2-160000.1.1 lock rpm
SSSD helpers needed for Kerberos and GSSAPI authenticationsssd-ldap2.10.2-160000.1.1 lock rpm
The LDAP backend plugin for sssdsssd-proxy2.10.2-160000.1.1 lock rpm
The proxy backend plugin for sssdsssd-tools2.10.2-160000.1.1 lock rpm
Commandline tools for sssdsssd-winbind-idmap2.10.2-160000.1.1 lock rpm
The sss idmap backend for Winbind2.10.2-160000.1.1 lock rpm