%if ! (0%{?fedora} > 12 || 0%{?rhel} > 5)

%{!?python_sitelib: %global python_sitelib %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib())")}

%{!?python_sitearch: %global python_sitearch %(%{__python} -c "from distutils.sysconfig import get_python_lib; print(get_python_lib(1))")}

%endif

# we don't want to provide private python extension libs

%define __provides_exclude_from %{python_sitearch}/.*\.so$

%if (0%{?fedora} > 15)

%define _hardened_build 1

%endif

# Determine the location of the LDB modules directory

%global ldb_modulesdir %(pkg-config --variable=modulesdir ldb)

%global ldb_version 1.1.15

Name: sssd

Version: 1.10.0

Release: 4%{?dist}.beta1

Group: Applications/System

Summary: System Security Services Daemon

License: GPLv3+

URL: http://fedorahosted.org/sssd/

Source0: https://fedorahosted.org/released/sssd/%{name}-%{version}beta1.tar.gz

BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)

### Patches ###

Patch0001: 0001-AD-read-flat-name-and-SID-of-the-AD-domain.patch

Patch0002: 0002-Actually-use-the-index-parameter-in-resolv_get_socka.patch

Patch0003: 0003-UTIL-Add-function-sss_names_init_from_args.patch

Patch0004: 0004-SSH-Fix-parsing-of-names-from-client-requests.patch

Patch0005: 0005-SSH-Use-separate-field-for-domain-name-in-client-req.patch

Patch0006: 0006-SSH-Do-not-skip-domains-with-use_fully_qualified_nam.patch

Patch0501:  0501-FEDORA-Switch-the-default-ccache-location.patch

### Dependencies ###

Conflicts: selinux-policy < 3.10.0-46

Requires: libldb%{?_isa} = %{ldb_version}

Requires: libtdb%{?_isa} >= 1.1.3

Requires: sssd-client%{?_isa} = %{version}-%{release}

Requires: cyrus-sasl-gssapi%{?_isa}

Requires: libipa_hbac%{?_isa} = %{version}-%{release}

Requires: libsss_idmap%{?_isa} = %{version}-%{release}

Requires: python-sssdconfig = %{version}-%{release}

Requires: krb5-libs%{?_isa} >= 1.10

Requires: libini_config >= 1.0.0.1

Requires(post): systemd-units initscripts chkconfig

Requires(preun): systemd-units initscripts chkconfig

Requires(postun): systemd-units initscripts chkconfig

%global servicename sssd

%global sssdstatedir %{_localstatedir}/lib/sss

%global dbpath %{sssdstatedir}/db

%global pipepath %{sssdstatedir}/pipes

%global mcpath %{sssdstatedir}/mc

%global pubconfpath %{sssdstatedir}/pubconf

### Build Dependencies ###

BuildRequires: autoconf

BuildRequires: automake

BuildRequires: libtool

BuildRequires: m4

%{?fedora:BuildRequires: popt-devel}

%if 0%{?rhel} <= 5

BuildRequires: popt

%endif

%if 0%{?rhel} >= 6

BuildRequires: popt-devel

%endif

BuildRequires: libtalloc-devel

BuildRequires: libtevent-devel

BuildRequires: libtdb-devel

BuildRequires: libldb-devel = %{ldb_version}

BuildRequires: libdhash-devel >= 0.4.2

BuildRequires: libcollection-devel

BuildRequires: libini_config-devel >= 1.0.0.1

BuildRequires: dbus-devel

BuildRequires: dbus-libs

BuildRequires: openldap-devel

BuildRequires: pam-devel

BuildRequires: nss-devel

BuildRequires: nspr-devel

BuildRequires: pcre-devel

BuildRequires: libxslt

BuildRequires: libxml2

BuildRequires: docbook-style-xsl

BuildRequires: krb5-devel >= 1.10

BuildRequires: c-ares-devel

BuildRequires: python-devel

BuildRequires: check-devel

BuildRequires: doxygen

BuildRequires: libselinux-devel

BuildRequires: libsemanage-devel

BuildRequires: bind-utils

BuildRequires: keyutils-libs-devel

BuildRequires: libnl-devel

BuildRequires: gettext-devel

BuildRequires: pkgconfig

BuildRequires: glib2-devel

BuildRequires: diffstat

BuildRequires: findutils

BuildRequires: samba4-devel >= samba4-4.0.0-59beta2

BuildRequires: selinux-policy-targeted

%description

Provides a set of daemons to manage access to remote directories and

authentication mechanisms. It provides an NSS and PAM interface toward

the system and a pluggable backend system to connect to multiple different

account sources. It is also the basis to provide client auditing and policy

services for projects like FreeIPA.

%package client

Summary: SSSD Client libraries for NSS and PAM

Group: Applications/System

License: LGPLv3+

Requires(post): /sbin/ldconfig

Requires(postun): /sbin/ldconfig

%description client

Provides the libraries needed by the PAM and NSS stacks to connect to the SSSD

service.

%package tools

Summary: Userspace tools for use with the SSSD

Group: Applications/System

License: GPLv3+

Requires: sssd = %{version}-%{release}

%description tools

Provides userspace tools for manipulating users, groups, and nested groups in

SSSD when using id_provider = local in /etc/sssd/sssd.conf.

Also provides several other administrative tools:

    * sss_debuglevel to change the debug level on the fly

    * sss_seed which pre-creates a user entry for use in kickstarts

    * sss_obfuscate for generating an obfuscated LDAP password

%package -n python-sssdconfig

Summary: SSSD and IPA configuration file manipulation classes and functions

Group: Applications/System

License: GPLv3+

BuildArch: noarch

%description -n python-sssdconfig

Provides python files for manipulation SSSD and IPA configuration files.

%package -n libsss_idmap

Summary: FreeIPA Idmap library

Group: Development/Libraries

License: LGPLv3+

Requires(post): /sbin/ldconfig

Requires(postun): /sbin/ldconfig

%description -n libsss_idmap

Utility library to convert SIDs to Unix uids and gids

%package -n libsss_idmap-devel

Summary: FreeIPA Idmap library

Group: Development/Libraries

License: LGPLv3+

Requires: libsss_idmap = %{version}-%{release}

%description -n libsss_idmap-devel

Utility library to SIDs to Unix uids and gids

%package -n libipa_hbac

Summary: FreeIPA HBAC Evaluator library

Group: Development/Libraries

License: LGPLv3+

Requires(post): /sbin/ldconfig

Requires(postun): /sbin/ldconfig

%description -n libipa_hbac

Utility library to validate FreeIPA HBAC rules for authorization requests

%package -n libipa_hbac-devel

Summary: FreeIPA HBAC Evaluator library

Group: Development/Libraries

License: LGPLv3+

Requires: libipa_hbac = %{version}-%{release}

%description -n libipa_hbac-devel

Utility library to validate FreeIPA HBAC rules for authorization requests

%package -n libipa_hbac-python

Summary: Python bindings for the FreeIPA HBAC Evaluator library

Group: Development/Libraries

License: LGPLv3+

Requires: libipa_hbac = %{version}-%{release}

%description -n libipa_hbac-python

The libipa_hbac-python contains the bindings so that libipa_hbac can be

used by Python applications.

%package -n libsss_nss_idmap

Summary: Library for SID based lookups

Group: Development/Libraries

License: LGPLv3+

Requires(post): /sbin/ldconfig

Requires(postun): /sbin/ldconfig

%description -n libsss_nss_idmap

Utility library for SID based lookups

%package -n libsss_nss_idmap-devel

Summary: Library for SID based lookups

Group: Development/Libraries

License: LGPLv3+

Requires: libsss_nss_idmap = %{version}-%{release}

%description -n libsss_nss_idmap-devel

Utility library for SID based lookups

%package -n libsss_nss_idmap-python

Summary: Python bindings for libsss_nss_idmap

Group: Development/Libraries

License: LGPLv3+

Requires: libsss_nss_idmap = %{version}-%{release}

%description -n libsss_nss_idmap-python

The libsss_nss_idmap-python contains the bindings so that libsss_nss_idmap can

be used by Python applications.

%package -n libsss_sudo

Summary: A library to allow communication between SUDO and SSSD

Group: Development/Libraries

License: LGPLv3+

Requires(post): /sbin/ldconfig

Requires(postun): /sbin/ldconfig

Requires: sssd = %{version}-%{release}

%description -n libsss_sudo

A utility library to allow communication between SUDO and SSSD

%package -n libsss_sudo-devel

Summary: A library to allow communication between SUDO and SSSD

Group: Development/Libraries

License: LGPLv3+

Requires: libsss_sudo = %{version}-%{release}

%description -n libsss_sudo-devel

A utility library to allow communication between SUDO and SSSD

%prep

# Update timestamps on the files touched by a patch, to avoid non-equal

# .pyc/.pyo files across the multilib peers within a build, where "Level"

# is the patch prefix option (e.g. -p1)

# Taken from specfile for python-simplejson

UpdateTimestamps() {

  Level=$1

  PatchFile=$2

  # Locate the affected files:

  for f in $(diffstat $Level -l $PatchFile); do

    # Set the files to have the same timestamp as that of the patch:

    touch -r $PatchFile $f

  done

}

%setup -q -n %{name}-1.9.92

for p in %patches ; do

    %__patch -p1 -i $p

    UpdateTimestamps -p1 $p

done

%build

autoreconf -ivf

%configure \

    --with-db-path=%{dbpath} \

    --with-pipe-path=%{pipepath} \

    --with-pubconf-path=%{pubconfpath} \

    --with-mcache-path=%{mcpath} \

    --with-init-dir=%{_initrddir} \

    --with-krb5-rcache-dir=%{_localstatedir}/cache/krb5rcache \

    --with-default-ccache-dir=/run/user/%U \

    --with-default-ccname-template=DIR:%d/krb5cc \

    --enable-nsslibdir=/%{_lib} \

    --enable-pammoddir=/%{_lib}/security \

    --disable-static \

    --disable-rpath \

    --with-test-dir=/dev/shm

make %{?_smp_mflags} all docs

%check

export CK_TIMEOUT_MULTIPLIER=10

make %{?_smp_mflags} check

unset CK_TIMEOUT_MULTIPLIER

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT

# Prepare language files

/usr/lib/rpm/find-lang.sh $RPM_BUILD_ROOT sssd

# Prepare empty config file

mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sssd

touch $RPM_BUILD_ROOT/%{_sysconfdir}/sssd/sssd.conf

# Copy default logrotate file

mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d

install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/sssd

# Make sure SSSD is able to run on read-only root

mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d

install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd

# Replace sysv init script with systemd unit file

rm -f $RPM_BUILD_ROOT/%{_initrddir}/%{name}

mkdir -p $RPM_BUILD_ROOT/%{_unitdir}/

cp src/sysv/systemd/sssd.service $RPM_BUILD_ROOT/%{_unitdir}/

# Remove .la files created by libtool

find $RPM_BUILD_ROOT -name "*.la" -exec rm -f {} \;

# Suppress developer-only documentation

rm -Rf ${RPM_BUILD_ROOT}/%{_docdir}/%{name}

# Older versions of rpmbuild can only handle one -f option

# So we need to append to the sssd*.lang file

for file in `ls $RPM_BUILD_ROOT/%{python_sitelib}/*.egg-info 2> /dev/null`

do

    echo %{python_sitelib}/`basename $file` >> python_sssdconfig.lang

done

touch sssd_tools.lang

touch sssd_client.lang

for man in `find $RPM_BUILD_ROOT/%{_mandir}/??/man?/ -type f | sed -e "s#$RPM_BUILD_ROOT/%{_mandir}/##"`

do

    lang=`echo $man | cut -c 1-2`

    case `basename $man` in

        sss_cache*)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang

            ;;

        sss_*)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_tools.lang

            ;;

        sssd_krb5_*)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang

            ;;

        pam_sss*)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang

            ;;

        sssd_krb5_locator_plugin*)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd_client.lang

            ;;

        *)

            echo \%lang\(${lang}\) \%{_mandir}/${man}\* >> sssd.lang

            ;;

    esac

done

# Print these to the rpmbuild log

echo "sssd.lang:"

cat sssd.lang

echo "sssd_client.lang:"

cat sssd_client.lang

echo "sssd_tools.lang:"

cat sssd_tools.lang

%clean

rm -rf $RPM_BUILD_ROOT

%files -f sssd.lang

%defattr(-,root,root,-)

%doc COPYING

%doc src/examples/sssd-example.conf

%{_unitdir}/sssd.service

%{_sbindir}/sssd

%dir %{_libexecdir}/%{servicename}

%{_libexecdir}/%{servicename}/krb5_child

%{_libexecdir}/%{servicename}/ldap_child

%{_libexecdir}/%{servicename}/proxy_child

%{_libexecdir}/%{servicename}/sssd_be

%{_libexecdir}/%{servicename}/sssd_nss

%{_libexecdir}/%{servicename}/sssd_pam

%{_libexecdir}/%{servicename}/sssd_autofs

%{_libexecdir}/%{servicename}/sssd_ssh

%{_libexecdir}/%{servicename}/sssd_sudo

%{_libexecdir}/%{servicename}/sssd_pac

%dir %{_libdir}/%{name}

%{_libdir}/%{name}/libsss_ipa.so

%{_libdir}/%{name}/libsss_krb5.so

%{_libdir}/%{name}/libsss_ldap.so

%{_libdir}/%{name}/libsss_proxy.so

%{_libdir}/%{name}/libsss_simple.so

%{_libdir}/%{name}/libsss_ad.so

#Internal shared libraries

%{_libdir}/%{name}/libsss_child.so

%{_libdir}/%{name}/libsss_crypt.so

%{_libdir}/%{name}/libsss_debug.so

%{_libdir}/%{name}/libsss_krb5_common.so

%{_libdir}/%{name}/libsss_ldap_common.so

%{_libdir}/%{name}/libsss_util.so

%{ldb_modulesdir}/memberof.so

%{_bindir}/sss_ssh_authorizedkeys

%{_bindir}/sss_ssh_knownhostsproxy

%{_sbindir}/sss_cache

%dir %{sssdstatedir}

%dir %{_localstatedir}/cache/krb5rcache

%attr(700,root,root) %dir %{dbpath}

%attr(755,root,root) %dir %{mcpath}

%ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/passwd

%ghost %attr(0644,root,root) %verify(not md5 size mtime) %{mcpath}/group

%attr(755,root,root) %dir %{pipepath}

%attr(755,root,root) %dir %{pubconfpath}

%attr(755,root,root) %dir %{pubconfpath}/krb5.include.d

%attr(700,root,root) %dir %{pipepath}/private

%attr(750,root,root) %dir %{_var}/log/%{name}

%attr(700,root,root) %dir %{_sysconfdir}/sssd

%ghost %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf

%config(noreplace) %{_sysconfdir}/logrotate.d/sssd

%config(noreplace) %{_sysconfdir}/rwtab.d/sssd

%dir %{_datadir}/sssd

%{_datadir}/sssd/sssd.api.conf

%{_datadir}/sssd/sssd.api.d

%{_mandir}/man1/sss_ssh_authorizedkeys.1*

%{_mandir}/man1/sss_ssh_knownhostsproxy.1*

%{_mandir}/man5/sssd.conf.5*

%{_mandir}/man5/sssd-ipa.5*

%{_mandir}/man5/sssd-krb5.5*

%{_mandir}/man5/sssd-ldap.5*

%{_mandir}/man5/sssd-simple.5*

%{_mandir}/man5/sssd-ad.5*

%{_mandir}/man5/sssd-sudo.5*

%{_mandir}/man8/sssd.8*

%{_mandir}/man8/sss_cache.8*

%{python_sitearch}/pysss.so

%{python_sitearch}/pysss_murmur.so

%files client -f sssd_client.lang

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

/%{_lib}/libnss_sss.so.2

/%{_lib}/security/pam_sss.so

%{_libdir}/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so

%{_libdir}/krb5/plugins/authdata/sssd_pac_plugin.so

%{_mandir}/man8/pam_sss.8*

%{_mandir}/man8/sssd_krb5_locator_plugin.8*

%files tools -f sssd_tools.lang

%defattr(-,root,root,-)

%doc COPYING

%{_sbindir}/sss_useradd

%{_sbindir}/sss_userdel

%{_sbindir}/sss_usermod

%{_sbindir}/sss_groupadd

%{_sbindir}/sss_groupdel

%{_sbindir}/sss_groupmod

%{_sbindir}/sss_groupshow

%{_sbindir}/sss_obfuscate

%{_sbindir}/sss_debuglevel

%{_sbindir}/sss_seed

%{_mandir}/man8/sss_groupadd.8*

%{_mandir}/man8/sss_groupdel.8*

%{_mandir}/man8/sss_groupmod.8*

%{_mandir}/man8/sss_groupshow.8*

%{_mandir}/man8/sss_useradd.8*

%{_mandir}/man8/sss_userdel.8*

%{_mandir}/man8/sss_usermod.8*

%{_mandir}/man8/sss_obfuscate.8*

%{_mandir}/man8/sss_debuglevel.8*

%{_mandir}/man8/sss_seed.8*

%files -n python-sssdconfig -f python_sssdconfig.lang

%defattr(-,root,root,-)

%dir %{python_sitelib}/SSSDConfig

%{python_sitelib}/SSSDConfig/*.py*

%files -n libsss_idmap

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

%{_libdir}/libsss_idmap.so.*

%files -n libsss_idmap-devel

%defattr(-,root,root,-)

%doc idmap_doc/html

%{_includedir}/sss_idmap.h

%{_libdir}/libsss_idmap.so

%{_libdir}/pkgconfig/sss_idmap.pc

%files -n libipa_hbac

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

%{_libdir}/libipa_hbac.so.*

%files -n libipa_hbac-devel

%defattr(-,root,root,-)

%doc hbac_doc/html

%{_includedir}/ipa_hbac.h

%{_libdir}/libipa_hbac.so

%{_libdir}/pkgconfig/ipa_hbac.pc

%files -n libipa_hbac-python

%defattr(-,root,root,-)

%{python_sitearch}/pyhbac.so

%package -n libsss_autofs

Summary: A library to allow communication between Autofs and SSSD

Group: Development/Libraries

License: LGPLv3+

%description -n libsss_autofs

A utility library to allow communication between Autofs and SSSD

%files -n libsss_sudo

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

%{_libdir}/libsss_sudo.so*

%files -n libsss_sudo-devel

%doc libsss_sudo_doc/html

%{_includedir}/sss_sudo.h

%files -n libsss_autofs

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

%{_libdir}/sssd/modules/libsss_autofs.so*

%files -n libsss_nss_idmap

%defattr(-,root,root,-)

%doc src/sss_client/COPYING src/sss_client/COPYING.LESSER

%{_libdir}/libsss_nss_idmap.so.*

%files -n libsss_nss_idmap-devel

%defattr(-,root,root,-)

%if 0%{?fedora}

%doc nss_idmap_doc/html

%endif

%if 0%{?rhel} >= 6

%doc nss_idmap_doc/html

%endif

%{_includedir}/sss_nss_idmap.h

%{_libdir}/libsss_nss_idmap.so

%{_libdir}/pkgconfig/sss_nss_idmap.pc

%files -n libsss_nss_idmap-python

%defattr(-,root,root,-)

%{python_sitearch}/pysss_nss_idmap.so

%post

if [ $1 -ge 1 ] ; then

    # Initial installation

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

fi

%preun

if [ $1 -eq 0 ]; then

     # Package removal, not upgrade

    /bin/systemctl --no-reload disable sssd.service > /dev/null 2>&1 || :

    /bin/systemctl stop sssd.service > /dev/null 2>&1 || :

fi

%triggerun -- sssd < %{version}-%{release}

if /sbin/chkconfig --level 3 sssd ; then

        /bin/systemctl --no-reload enable sssd.service >/dev/null 2>&1 || :

fi

if /sbin/chkconfig --level 5 sssd ; then

        /bin/systemctl --no-reload enable sssd.service >/dev/null 2>&1 || :

fi

/sbin/chkconfig --del sssd >/dev/null 2>&1 || :

%postun

/bin/systemctl daemon-reload >/dev/null 2>&1 || :

if [ $1 -ge 1 ] ; then

    /bin/systemctl try-restart sssd.service >/dev/null 2>&1 || :

fi

%post client -p /sbin/ldconfig

%postun client -p /sbin/ldconfig

%post -n libipa_hbac -p /sbin/ldconfig

%postun -n libipa_hbac -p /sbin/ldconfig

%post -n libsss_idmap -p /sbin/ldconfig

%postun -n libsss_idmap -p /sbin/ldconfig

%post -n libsss_sudo -p /sbin/ldconfig

%postun -n libsss_sudo -p /sbin/ldconfig

%changelog

* Tue May  7 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-4.beta1

- Explicitly Require libini_config >= 1.0.0.1 to work around a SONAME bug

  in ding-libs

- Fix SSH integration with fully-qualified domains

- Add the ability to dynamically discover the NetBIOS name

* Fri May  3 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-3.beta1

- New upstream release 1.10 beta1

- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0beta1

* Wed Apr 17 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-2.alpha1

- Add a patch to fix krb5 ccache creation issue with krb5 1.11

* Tue Apr  2 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.10.0-1.alpha1

- New upstream release 1.10 alpha1

- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.10.0alpha1

* Fri Mar 01 2013 Stephen Gallagher <sgallagh@redhat.com> - 1.9.4-9

- Split internal helper libraries into a shared object

- Significantly reduce disk-space usage

* Thu Feb 14 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-8

- Fix the Kerberos password expiration warning (#912223)

* Thu Feb 14 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-7

- Do not write out dots in the domain-realm mapping file (#905650)

* Mon Feb 11 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-6

- Include upstream patch to build with krb5-1.11

* Thu Feb 07 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-5

- Rebuild against new libldb

* Mon Feb 04 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-4

- Fix build with new automake versions

* Wed Jan 30 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-3

- Recreate Kerberos ccache directory if it's missing

- Resolves: rhbz#853558 - [sssd[krb5_child[PID]]]: Credential cache

                          directory /run/user/UID/ccdir does not exist

* Tue Jan 29 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-2

- Fix changelog dates to make F19 rpmbuild happy

* Mon Jan 28 2013 Jakub Hrozek <jhrozek@redhat.com> - 1.9.4-1

- New upstream release 1.9.4

* Thu Dec 06 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.3-1

- New upstream release 1.9.3

* Tue Oct 30 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-5

- Resolve groups from AD correctly

* Tue Oct 30 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-4

- Check the validity of naming context

* Thu Oct 18 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-3

- Move the sss_cache tool to the main package

* Sun Oct 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-2

- Include the 1.9.2 tarball

* Sun Oct 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.2-1

- New upstream release 1.9.2

* Sun Oct 07 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.1-1

- New upstream release 1.9.1

* Wed Oct 03 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-24

- require the latest libldb

* Tue Sep 25 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-24

- Use mcpath insted of mcachepath macro to be consistent with

  upsteam spec file

* Tue Sep 25 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-23

- New upstream release 1.9.0

* Fri Sep 14 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-22.rc1

- New upstream release 1.9.0 rc1

* Thu Sep 06 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-21.beta7

- New upstream release 1.9.0 beta7

- obsoletes patches #1-#3

* Mon Sep 03 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-20.beta6

- Rebuild against libldb 1.12

* Tue Aug 28 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-19.beta6

- Rebuild against libldb 1.11

* Fri Aug 24 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-18.beta6

- Change the default ccache location to DIR:/run/user/${UID}/krb5cc

  and patch man page accordingly

- Resolves: rhbz#851304

* Mon Aug 20 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-17.beta6

- Rebuild against libldb 1.10

* Fri Aug 17 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-16.beta6

- Only create the SELinux login file if there are SELinux mappings on

  the IPA server

* Fri Aug 10 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-14.beta6

- Don't discard HBAC rule processing result if SELinux is on

  Resolves: rhbz#846792 (CVE-2012-3462)

* Thu Aug 02 2012 Jakub Hrozek <jhrozek@redhat.com> - 1.9.0-13.beta6

- New upstream release 1.9.0 beta 6

- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.9.0beta6

- A new option, override_shell was added. If this option is set, all users

  managed by SSSD will have their shell set to its value.

- Fixes for the support for setting default SELinux user context from FreeIPA.