1cdfb00 Backport patches from upstream 1.12.5 prerelease - contains many fixes

Authored and Committed by lslebodn 8 years ago
100 files changed. 12794 lines added. 105 lines removed.
0001-PAM-do-not-reject-abruptly.patch
file added
+222
0002-PAM-new-option-pam_account_expired_message.patch
file added
+157
0003-PAM-warn-all-services-about-account-expiration.patch
file added
+62
0004-PAM-check-return-value-of-confdb_get_string.patch
file added
+33
0005-resolv-Use-the-same-default-timeout-for-SRV-queries-.patch
file added
+57
0006-FO-Use-SRV-TTL-in-fail-over-code.patch
file added
+1020
0007-SDAP-refactor-pwexpire-policy.patch
file added
+204
0008-SDAP-enable-change-phase-of-pw-expire-policy-check.patch
file added
+258
0009-LDAP-unlink-ccname_file_dummy-if-there-is-an-error.patch
file added
+53
0010-selinux-Delete-existing-user-mapping-on-empty-defaul.patch0016-selinux-Delete-existing-user-mapping-on-empty-defaul.patch
file renamed
+3 -3
0011-ldap_child-initialized-ccname_file_dummy.patch
file added
+33
0012-UTIL-convert-GeneralizedTime-to-unix-time.patch
file added
+244
0013-SDAP-Lock-out-ssh-keys-when-account-naturally-expire.patch
file added
+725
0014-SDAP-fix-minor-neglect-in-is_account_locked.patch
file added
+32
0015-be_refresh-refresh-all-domains-in-backend.patch
file added
+224
0016-sdap_handle_acct_req_send-remove-be_req.patch
file added
+185
0017-be_refresh-refactor-netgroups-refresh.patch
file added
+224
0018-be_refresh-add-sdap_refresh_init.patch
file added
+143
0019-be_refresh-support-users.patch
file added
+159
0020-be_refresh-support-groups.patch
file added
+160
0021-Log-reason-in-debug-message-why-ldb_modify-failed.patch
file added
+257
0022-ldap_child-fix-coverity-warning.patch
file added
+58
0023-NSS-Handle-ENOENT-when-doing-initgroups-by-UPN.patch
file added
+79
0024-MAN-libkrb5-and-SSSD-use-different-expansions.patch
file added
+40
0025-DEBUG-Add-missing-strings-for-error-messages.patch
file added
+51
0026-test-Check-ERR_LAST.patch
file added
+78
0027-PAM-use-the-logon_name-as-the-key-for-the-PAM-initgr.patch
file added
+73
0028-pam_initgr_check_timeout-add-debug-output.patch
file added
+37
0029-ipa-do-not-treat-missing-sub-domain-users-as-error.patch
file added
+37
0030-ipa-make-sure-extdom-expo-data-is-available.patch
file added
+30
0031-ipa_selinux-Fix-warning-may-be-used-uninitialized.patch
file added
+35
0032-LDAP-AD-do-not-resolve-group-members-during-tokenGro.patch
file added
+297
0033-IPA-idviews-check-if-view-name-is-set.patch
file added
+50
0034-selinux-Handle-setup-with-empty-default-and-no-confi.patch0017-selinux-Handle-setup-with-empty-default-and-no-confi.patch
file renamed
+4 -4
0035-IPA-make-sure-output-variable-is-set.patch
file added
+29
0036-IPA-set-EINVAL-if-dn-can-t-be-linearized.patch
file added
+26
0037-GPO-error-out-instead-of-leaving-array-element-unini.patch
file added
+38
0038-LDAP-remove-unused-code.patch
file added
+39
0039-memberof-Do-not-create-request-with-0-attribute-valu.patch
file added
+42
0040-tests-convert-all-unit-tests-to-cmocka-1.0-or-later.patch
file added
+2795
0041-RPM-BuildRequire-libcmocka-1.0.patch
file added
+30
0042-build-Only-run-cmocka-tests-if-cmocka-1.0-or-newer-i.patch
file added
+40
0043-sdap-properly-handle-binary-objectGuid-attribute.patch
file added
+549
0044-Resolv-re-read-SRV-query-every-time-if-its-TTL-is-0.patch
file added
+118
0045-IPA-Use-custom-error-codes-when-validating-HBAC-rule.patch
file added
+315
0046-IPA-Drop-useless-sysdb-parameter.patch
file added
+154
0047-IPA-Only-treat-malformed-HBAC-rules-as-fatal-if-deny.patch
file added
+183
0048-IPA-Deprecate-the-ipa_hbac_treat_deny_as-option.patch
file added
+37
0049-LDAP-fix-a-typo-in-debug-message.patch
file added
+30
0050-MAN-Update-ppolicy-description.patch
file added
+40
0051-CLIENT-Clear-errno-with-enabled-sss-default-nss-plug.patch
file added
+76
0052-GPO-Check-return-value-of-ad_gpo_store_policy_settin.patch
file added
+30
0053-enumeration-fix-talloc-context.patch
file added
+51
0054-sudo-sanitize-filter-values.patch
file added
+61
0055-SDAP-Do-not-set-gid-0-twice.patch
file added
+49
0056-SDAP-Extract-filtering-AD-group-to-function.patch
file added
+239
0057-SDAP-Filter-ad-groups-in-initgroups.patch
file added
+50
0058-selinux-Disconnect-before-closing-the-handle.patch0018-selinux-Disconnect-before-closing-the-handle.patch
file renamed
+4 -3
0059-selinux-Begin-and-end-the-transaction-on-the-same-ne.patch0019-selinux-Begin-and-end-the-transaction-on-the-same-ne.patch
file renamed
+4 -3
0060-selinux-Only-call-semanage-if-the-context-actually-c.patch0020-selinux-Only-call-semanage-if-the-context-actually-c.patch
file renamed
+10 -8
0061-Option-filter_users-had-no-effect-for-retrieving-sud.patch
file added
+121
0062-AD-Clean-up-ad_access_gpo.patch
file added
+59
0063-AD-Always-get-domain-specific-ID-connection.patch
file added
+69
0064-AD-GPO-Always-look-up-GPOs-from-machine-domain.patch
file added
+217
0065-tests-Use-cmocka-1.0-API-in-test_sysdb_utils.patch
file added
+38
0066-sysdb-Add-cache_expire-to-the-default-sysdb_search_o.patch
file added
+32
0067-IPA-do-not-try-to-save-override-data-for-the-default.patch
file added
+47
0068-IPA-use-sysdb_attrs_add_string_safe-to-add-group-mem.patch
file added
+37
0069-IPA-check-ghosts-in-groups-found-by-uuid-as-well.patch
file added
+64
0070-simple-access-provider-make-user-grp-res-more-robust.patch
file added
+117
0071-IPA-allow-initgroups-by-SID-for-AD-users.patch
file added
+205
0072-IPA-fix-segfault-in-ipa_s2n_exop.patch
file added
+31
0073-autofs-fix-Cannot-allocate-memory-with-FQDNs.patch
file added
+36
0074-GPO-Do-not-ignore-missing-attrs-for-GPOs.patch
file added
+57
0075-sss_nss_idmap-tests-Use-different-prepared-buffers-f.patch
file added
+65
0076-SDAP-Fix-id-mapping-with-disabled-subdomains.patch
file added
+65
0077-IPA-do-initgroups-if-extdom-exop-supports-it.patch
file added
+99
0078-IPA-update-initgr-expire-timestamp-conditionally.patch
file added
+104
0079-IPA-enhance-ipa_initgr_get_overrides_send.patch
file added
+198
0080-IPA-search-for-overrides-during-initgroups-in-sever-.patch
file added
+115
0081-IPA-do-not-add-domain-name-unconditionally.patch
file added
+61
0082-NSS-check-for-overrides-before-calling-backend.patch
file added
+101
0083-IPA-allow-initgroups-by-UUID-for-FreeIPA-users.patch
file added
+266
0084-SPEC-Fix-cyclic-dependencies-between-sssd-krb5-commo.patch
file added
+61
0085-BUILD-Remove-unused-libraries-for-pysss.so.patch0001-BUILD-Remove-unused-libraries-for-pysss.so.patch
file renamed
+5 -5
0086-BUILD-Remove-unused-variables.patch0002-BUILD-Remove-unused-variables.patch
file renamed
+3 -3
0087-BUILD-Remove-detection-of-type-Py_ssize_t.patch0003-BUILD-Remove-detection-of-type-Py_ssize_t.patch
file renamed
+3 -3
0088-UTIL-Remove-python-wrapper-sss_python_set_new.patch0004-UTIL-Remove-python-wrapper-sss_python_set_new.patch
file renamed
+3 -3
0089-UTIL-Remove-python-wrapper-sss_python_set_add.patch0005-UTIL-Remove-python-wrapper-sss_python_set_add.patch
file renamed
+3 -3
0090-UTIL-Remove-python-wrapper-sss_python_set_check.patch0006-UTIL-Remove-python-wrapper-sss_python_set_check.patch
file renamed
+3 -3
0091-UTIL-Remove-compatibility-macro-PyModule_AddIntMacro.patch0007-UTIL-Remove-compatibility-macro-PyModule_AddIntMacro.patch
file renamed
+3 -3
0092-UTIL-Remove-python-wrapper-sss_python_unicode_from_s.patch0008-UTIL-Remove-python-wrapper-sss_python_unicode_from_s.patch
file renamed
+3 -3
0093-BUILD-Use-python-config-for-detection-FLAGS.patch0009-BUILD-Use-python-config-for-detection-FLAGS.patch
file renamed
+3 -3
0094-SPEC-Use-new-convention-for-python-packages.patch0010-SPEC-Use-new-convention-for-python-packages.patch
file renamed
+4 -4
0095-SPEC-Move-python-bindings-to-separate-packages.patch0011-SPEC-Move-python-bindings-to-separate-packages.patch
file renamed
+5 -5
0096-BUILD-Add-possibility-to-build-python-2-3-bindings.patch0012-BUILD-Add-possibility-to-build-python-2-3-bindings.patch
file renamed
+10 -10
0097-TESTS-Run-python-tests-with-all-supported-python-ver.patch0013-TESTS-Run-python-tests-with-all-supported-python-ver.patch
file renamed
+7 -7
0098-SPEC-Replace-python_-macros-with-python2_.patch0014-SPEC-Replace-python_-macros-with-python2_.patch
file renamed
+4 -4
0099-SPEC-Build-python3-bindings-on-available-platforms.patch0015-SPEC-Build-python3-bindings-on-available-platforms.patch
file renamed
+4 -4
sssd.spec
file modified
+103 -21
    Backport patches from upstream 1.12.5 prerelease - contains many fixes
    
        
0010-selinux-Delete-existing-user-mapping-on-empty-defaul.patch 0016-selinux-Delete-existing-user-mapping-on-empty-defaul.patch
file renamed
+3 -3
0034-selinux-Handle-setup-with-empty-default-and-no-confi.patch 0017-selinux-Handle-setup-with-empty-default-and-no-confi.patch
file renamed
+4 -4
0058-selinux-Disconnect-before-closing-the-handle.patch 0018-selinux-Disconnect-before-closing-the-handle.patch
file renamed
+4 -3
0059-selinux-Begin-and-end-the-transaction-on-the-same-ne.patch 0019-selinux-Begin-and-end-the-transaction-on-the-same-ne.patch
file renamed
+4 -3
0060-selinux-Only-call-semanage-if-the-context-actually-c.patch 0020-selinux-Only-call-semanage-if-the-context-actually-c.patch
file renamed
+10 -8
0085-BUILD-Remove-unused-libraries-for-pysss.so.patch 0001-BUILD-Remove-unused-libraries-for-pysss.so.patch
file renamed
+5 -5
0086-BUILD-Remove-unused-variables.patch 0002-BUILD-Remove-unused-variables.patch
file renamed
+3 -3
0087-BUILD-Remove-detection-of-type-Py_ssize_t.patch 0003-BUILD-Remove-detection-of-type-Py_ssize_t.patch
file renamed
+3 -3
0088-UTIL-Remove-python-wrapper-sss_python_set_new.patch 0004-UTIL-Remove-python-wrapper-sss_python_set_new.patch
file renamed
+3 -3
0089-UTIL-Remove-python-wrapper-sss_python_set_add.patch 0005-UTIL-Remove-python-wrapper-sss_python_set_add.patch
file renamed
+3 -3
0090-UTIL-Remove-python-wrapper-sss_python_set_check.patch 0006-UTIL-Remove-python-wrapper-sss_python_set_check.patch
file renamed
+3 -3
0091-UTIL-Remove-compatibility-macro-PyModule_AddIntMacro.patch 0007-UTIL-Remove-compatibility-macro-PyModule_AddIntMacro.patch
file renamed
+3 -3
0092-UTIL-Remove-python-wrapper-sss_python_unicode_from_s.patch 0008-UTIL-Remove-python-wrapper-sss_python_unicode_from_s.patch
file renamed
+3 -3
0093-BUILD-Use-python-config-for-detection-FLAGS.patch 0009-BUILD-Use-python-config-for-detection-FLAGS.patch
file renamed
+3 -3
0094-SPEC-Use-new-convention-for-python-packages.patch 0010-SPEC-Use-new-convention-for-python-packages.patch
file renamed
+4 -4
0095-SPEC-Move-python-bindings-to-separate-packages.patch 0011-SPEC-Move-python-bindings-to-separate-packages.patch
file renamed
+5 -5
0096-BUILD-Add-possibility-to-build-python-2-3-bindings.patch 0012-BUILD-Add-possibility-to-build-python-2-3-bindings.patch
file renamed
+10 -10
0097-TESTS-Run-python-tests-with-all-supported-python-ver.patch 0013-TESTS-Run-python-tests-with-all-supported-python-ver.patch
file renamed
+7 -7
0098-SPEC-Replace-python_-macros-with-python2_.patch 0014-SPEC-Replace-python_-macros-with-python2_.patch
file renamed
+4 -4
0099-SPEC-Build-python3-bindings-on-available-platforms.patch 0015-SPEC-Build-python3-bindings-on-available-platforms.patch
file renamed
+4 -4
file modified
+103 -21