[Freeipa-interest] Announcing SSSD 1.8.4

[Stephen Gallagher]

The SSSD team is proud to announce the bugfix release of the System
Security Services Daemon version 1.8.4.

As usual, the source can be downloaded from
https://fedorahosted.org/sssd/


== Highlights ==

    Fix a bug causing AD servers not to fail over properly when the KDC
    on the primary server is down
    Fix an endianness bug on big-endian systems when looking up services
    Fix a segfault dealing with nested groups
    Make the nowait cache updates work for netgroups
    Fix a regression that broke domains with
    use_fully_qualified_names = True 


== Tickets Fixed ==

https://fedorahosted.org/sssd/ticket/1206
    RHEL5 detection in sssd.spec.in does not work

https://fedorahosted.org/sssd/ticket/1321
    Warning in debug log about nscd

https://fedorahosted.org/sssd/ticket/1322
    Special-case LDAP_SIZELIMIT_EXCEEDED when handling ldap return codes

https://fedorahosted.org/sssd/ticket/1324
    LDAP provider needs to use all available servers for GSSAPI if the
    child times out

https://fedorahosted.org/sssd/ticket/1325
    heimdal: configure: Kerberos locator plugin cannot be build

https://fedorahosted.org/sssd/ticket/1329
    Group enumeration fails in proxy provider

https://fedorahosted.org/sssd/ticket/1333
    Potential NULL dereference in proxy provider

https://fedorahosted.org/sssd/ticket/1335
    sss_groupadd no longer detects duplicate GID numbers

https://fedorahosted.org/sssd/ticket/1338
    sssd does not provide maps for automounter when custom schema is
    being used

https://fedorahosted.org/sssd/ticket/1340
    SSSD netgroups do not honor entry_cache_nowait_percentage

https://fedorahosted.org/sssd/ticket/1343
    sssd_be crashed with SIGSEGV in _tevent_schedule_immediate()

https://fedorahosted.org/sssd/ticket/1344
    Loading of selinux user maps broken

https://fedorahosted.org/sssd/ticket/1348
    Service lookups by port number doesn't work on s390x/ppc64 arches


== Detailed Changelog ==

Ariel Barria (2):

    Potential NULL dereference in proxy provider
    Warn to syslog when dereference requests fail 

Jakub Hrozek (11):

    Special-case LDAP_SIZELIMIT_EXCEEDED
    Kerberos locator: Include the correct krb5.h header file
    krb5 locator: Do not leak addrinfo
    Try all KDCs when getting TGT for LDAP
    Send the correct enumeration request
    SYSDB: Handle user and group renames better
    Use the sysdb attribute name, not LDAP attribute name
    LDAP nested groups: Do not process callback with _post deep in the
    nested structure
    Use sized_string correctly in FQDN domains
    Send 16bit protocol numbers from the sss_client
    Revert the client packet length, too, after reverting the packet
    protocol 

Jan Engelhardt (1):

    build: resolve link failure 

Jan Zeleny (1):

    Fixed issue in SELinux user maps 

Stef Walter (3):

    Limit krb5_get_init_creds_keytab() to etypes in keytab
    If canon'ing principals, write ccache with updated default principal
    Remove erroneous failure message in find_principal_in_keytab 

Stephen Gallagher (7):

    Bump version to 1.8.4
    murmurhash: Relax inline requirement
    RPM: Allow running 'make rpms' on RHEL 5 machines
    NSS: Expire in-memory netgroup cache before the nowait timeout
    KRB5: Avoid NULL-dereference with empty keytab
    NSS: Restore original protocol for getservbyport
    Updating translations for 1.8.4 release 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/freeipa-interest/attachments/20120530/083b5a68/attachment.sig>