[ubuntu/precise] sssd 1.5.15-0ubuntu1 (Accepted)

Timo Aaltonen tjaalton at ubuntu.com
Thu Nov 24 18:05:31 UTC 2011


sssd (1.5.15-0ubuntu1) precise; urgency=low

  * Merge from Debian git, remaining changes: none.
  * Rebuild against current ldb (LP: #893043).

sssd (1.5.15-1) UNRELEASED; urgency=low

  [ Petter Reinholdtsen ]
  * New upstream version 1.2.4:
    - Resolves long-standing issues related to group processing with
      RFC2307bis LDAP servers.
    - Fixed bugs in RFC2307bis group memberships related to initgroups
      (Closes: #595564).
    - Fix tight-loop bug on systems with older OpenLDAP client
      libraries (such as Red Hat Enterprise Linux 5)
  * New Upstream Version 1.2.3:
    - Resolves CVE-2010-2940.
  * New Upstream Version 1.2.2:
    - The LDAP provider no longer requires access to the LDAP
      RootDSE. If it is unavailable, we will continue on with our best
      guess.
    - The LDAP provider will now log issues with TLS and GSSAPI to the
      syslog.
    - Significant performance improvement when performing initgroups
      on users who are members of large groups in LDAP.
    - The sss_client will now reconnect properly to the SSSD if the
      daemon is restarted.
      * This resolves an issue causing GDM to crash when logging out
        of a user after the SSSD had been restarted.
  * Correct package description for python-sss (Closes: #596215).
  * Update Standards-Version from 3.8.4 to 3.9.1.  No changes needed.

  [ Timo Aaltonen ]
  * New upstream release (1.5.15) (Closes: #595564, #624194, #640678).
    - Add libunistring-dev to build-deps.
  * Drop patch to ensure LDAP authentication never accept a zero
    length password, which is now included upstream.
  * sssd.upstart.ubuntu:
    - Don't start before net-device-up. (LP: 812943)
    - Source /etc/default/sssd. (LP: 812943)
  * sssd.default: Added a file to include the sssd daemon defaults,
    currently has '-D -f'.
  * sssd.init: Drop separate OPTIONS, '-D' comes from /etc/default/sssd
    now..
  * rules: Install the Python API files to /usr/share/sssd, as discussed
    with upstream. (LP: 859611)
  * fix-python-api-path.dpatch: Use the new location for the API files.
    (LP: 859611)
  * libpam-sss.pam-auth-update:
    - Add 'forward_pass' to auth stack to fix ecryptfs mounts. (LP: 826643)
    - Add pam_localuser.so to account stack to allow local users to log in.
      (LP: 860488)
    - Drop the priority so that pam_unix is always before pam_sss.
  * control: sssd now Recommends libpam-sss and libnss-sss, since sssd is
    mostly useless without them. (LP: 767337)
  * sssd.prerm: Remove empty script.
  * control, compat: Bump debhelper build-dep and compat level to 8.
  * Switch to source format 3.0 (quilt).
  * Do not install a working config file by default. The local domain
    definition was broken (upstream #1014). The daemon will need to be
    configured by other means before it's usable.
  * Add fix-format-security.diff (Closes: #643806)
  * Add support for Multi-Arch.
  * Migrate to dh, drop cdbs build-dep, add quilt, dh-autoreconf and
    autopoint to build-deps.
  * Remove unnecessary libnss-sss.links.
  * Add libdhash-dev, libcollection-dev and libini-config-dev to build-deps.
  * Drop cvs from build-depends.
  * Add new packages: libipa-hbac0, libipa-hbac-dev, python-libipa-hbac.
  * libnss-sss.overrides: Add an override for
    "package-name-doesnt-match-sonames".
  * Determine the used init system during build, add lsb-release to
    build-deps. Default to sysvinit, use upstart if Ubuntu.
  * Add ensure-all-input-valid-utf8.diff from upsream: Ensure that all
    input strings are valid UTF-8.

Date: Thu, 24 Nov 2011 19:57:41 +0200
Changed-By: Timo Aaltonen <tjaalton at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/sssd/1.5.15-0ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 24 Nov 2011 19:57:41 +0200
Source: sssd
Binary: sssd libnss-sss libpam-sss libipa-hbac0 libipa-hbac-dev python-libipa-hbac python-sss
Architecture: source
Version: 1.5.15-0ubuntu1
Distribution: precise
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Timo Aaltonen <tjaalton at ubuntu.com>
Description: 
 libipa-hbac-dev - FreeIPA HBAC Evaluator library
 libipa-hbac0 - FreeIPA HBAC Evaluator library
 libnss-sss - Nss library for the System Security Services Daemon
 libpam-sss - Pam module for the System Security Services Daemon
 python-libipa-hbac - Python bindings for the FreeIPA HBAC Evaluator library
 python-sss - Python module for the System Security Services Daemon
 sssd       - System Security Services Daemon
Closes: 595564 596215 624194 640678 643806
Launchpad-Bugs-Fixed: 893043
Changes: 
 sssd (1.5.15-0ubuntu1) precise; urgency=low
 .
   * Merge from Debian git, remaining changes: none.
   * Rebuild against current ldb (LP: #893043).
 .
 sssd (1.5.15-1) UNRELEASED; urgency=low
 .
   [ Petter Reinholdtsen ]
   * New upstream version 1.2.4:
     - Resolves long-standing issues related to group processing with
       RFC2307bis LDAP servers.
     - Fixed bugs in RFC2307bis group memberships related to initgroups
       (Closes: #595564).
     - Fix tight-loop bug on systems with older OpenLDAP client
       libraries (such as Red Hat Enterprise Linux 5)
   * New Upstream Version 1.2.3:
     - Resolves CVE-2010-2940.
   * New Upstream Version 1.2.2:
     - The LDAP provider no longer requires access to the LDAP
       RootDSE. If it is unavailable, we will continue on with our best
       guess.
     - The LDAP provider will now log issues with TLS and GSSAPI to the
       syslog.
     - Significant performance improvement when performing initgroups
       on users who are members of large groups in LDAP.
     - The sss_client will now reconnect properly to the SSSD if the
       daemon is restarted.
       * This resolves an issue causing GDM to crash when logging out
         of a user after the SSSD had been restarted.
   * Correct package description for python-sss (Closes: #596215).
   * Update Standards-Version from 3.8.4 to 3.9.1.  No changes needed.
 .
   [ Timo Aaltonen ]
   * New upstream release (1.5.15) (Closes: #595564, #624194, #640678).
     - Add libunistring-dev to build-deps.
   * Drop patch to ensure LDAP authentication never accept a zero
     length password, which is now included upstream.
   * sssd.upstart.ubuntu:
     - Don't start before net-device-up. (LP: 812943)
     - Source /etc/default/sssd. (LP: 812943)
   * sssd.default: Added a file to include the sssd daemon defaults,
     currently has '-D -f'.
   * sssd.init: Drop separate OPTIONS, '-D' comes from /etc/default/sssd
     now..
   * rules: Install the Python API files to /usr/share/sssd, as discussed
     with upstream. (LP: 859611)
   * fix-python-api-path.dpatch: Use the new location for the API files.
     (LP: 859611)
   * libpam-sss.pam-auth-update:
     - Add 'forward_pass' to auth stack to fix ecryptfs mounts. (LP: 826643)
     - Add pam_localuser.so to account stack to allow local users to log in.
       (LP: 860488)
     - Drop the priority so that pam_unix is always before pam_sss.
   * control: sssd now Recommends libpam-sss and libnss-sss, since sssd is
     mostly useless without them. (LP: 767337)
   * sssd.prerm: Remove empty script.
   * control, compat: Bump debhelper build-dep and compat level to 8.
   * Switch to source format 3.0 (quilt).
   * Do not install a working config file by default. The local domain
     definition was broken (upstream #1014). The daemon will need to be
     configured by other means before it's usable.
   * Add fix-format-security.diff (Closes: #643806)
   * Add support for Multi-Arch.
   * Migrate to dh, drop cdbs build-dep, add quilt, dh-autoreconf and
     autopoint to build-deps.
   * Remove unnecessary libnss-sss.links.
   * Add libdhash-dev, libcollection-dev and libini-config-dev to build-deps.
   * Drop cvs from build-depends.
   * Add new packages: libipa-hbac0, libipa-hbac-dev, python-libipa-hbac.
   * libnss-sss.overrides: Add an override for
     "package-name-doesnt-match-sonames".
   * Determine the used init system during build, add lsb-release to
     build-deps. Default to sysvinit, use upstart if Ubuntu.
   * Add ensure-all-input-valid-utf8.diff from upsream: Ensure that all
     input strings are valid UTF-8.
Checksums-Sha1: 
 3270cbdbe0b0da757f44638c35cb6e82cd8ea160 1877 sssd_1.5.15-0ubuntu1.dsc
 a546d6390f6b6307074c939c306cf824f042289c 3068919 sssd_1.5.15.orig.tar.gz
 3b8380227dcbe94ed324f01f625a03f961b01a75 37044 sssd_1.5.15-0ubuntu1.debian.tar.gz
Checksums-Sha256: 
 6f35862cceb48d4d06856753d4bcd2dd11b85ad65a2b33e1269dec7324b6af7a 1877 sssd_1.5.15-0ubuntu1.dsc
 b48ef5e22ef3541892c86a2369fe751300fa7e92a3e78cfe69e6afc56ed8fd91 3068919 sssd_1.5.15.orig.tar.gz
 1eb0cf1f7c93642ad13c46a0d400c0a3c8083da32edf68c2d3cf4a173158ca9c 37044 sssd_1.5.15-0ubuntu1.debian.tar.gz
Files: 
 a7fb4be9307925f4e705b3a3df9474e9 1877 utils extra sssd_1.5.15-0ubuntu1.dsc
 302f1a562047eec71c938e303759526d 3068919 utils extra sssd_1.5.15.orig.tar.gz
 170c1e61eb0b2a26e4d38af9dadca708 37044 utils extra sssd_1.5.15-0ubuntu1.debian.tar.gz
Original-Maintainer: Petter Reinholdtsen <pere at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk7Ohp8ACgkQCf/ckHZoKjdyaACghRseUH/fybNPcCFKS1AhzEFp
OUEAnRcSxK31xFza/VdxPgQI8ppMZA8G
=PKvy
-----END PGP SIGNATURE-----


More information about the Precise-changes mailing list