[ol7_latest] sssd-ad-1.16.5-10.0.1.el7.aarch64

Provides the Active Directory back end that the SSSD can utilize to fetch
identity data from and authenticate against an Active Directory server.

Changelog (Show File list) (Show related packages)

• Wed Sep 30 2020 Todd Vierling <todd.vierling@oracle.com> - 1.16.5-10.0.1

  - sssd_be crash when refresh_expired_interval is set [orabug 31220112]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]

• Fri Jun 05 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10

  - Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False

• Fri May 29 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-9

  - Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization

• Wed May 27 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8

  - Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
  - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                             It is done in two steps (two different nsupdate messages).

• Thu May 21 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7

  - Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
  - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.

• Wed May 20 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6

  - Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
  - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen

• Tue May 19 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-5

  - Resolves: rhbz#1834266 - "off-by-one error" in watchdog implementation

• Mon May 11 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-4

  - Resolves: rhbz#1829806 - [Bug] Reduce logging about flat names
  - Resolves: rhbz#1800564 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package

• Thu May 07 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-3

  - Resolves: rhbz#1683946 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup

• Thu Apr 23 2020 Alexey Tikhonov <Alexey Tikhonov> 1.16.5-2

  - Resolves: rhbz#1513371 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_be[PROXY] killed by 6
  - Resolves: rhbz#1568083 - subdomain lookup fails when certmaprule contains DN
  - Resolves: rhbz#1781539 - PKINIT with KCM does not work
  - Resolves: rhbz#1786341 - SSSD doesn't honour the customized ID view created in IPA
  - Resolves: rhbz#1709818 - override_gid did not work for subdomain.
  - Resolves: rhbz#1719718 - Validator warning issue : Attribute 'dns_resolver_op_timeout' is not allowed in section 'domain/REMOVED'. Check for typos
  - Resolves: rhbz#1787067 - sssd (sssd_be) is consuming 100 CPU, partially due to failing mem-cache
  - Resolves: rhbz#1822461 - background refresh task does not refresh updated netgroup entries
  - Added missing 'Requires' to resolves some of rpmdiff tool warnings