Ubuntu
sssd package

sssd 2.5.2-4ubuntu1 source package in Ubuntu

Changelog

sssd (2.5.2-4ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946904). Remaining changes:
    - Disable lto, not ready upstream.
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/p/fix-python-tests.patch: Fix Python tests by making them
      assert Python module paths by using full pathnames.
  * Dropped changes:
    - d/apparmor-profile: Update profile. (LP #1910611)
      + Extend read permissions to /etc/sssd/** and /etc/gss/**.
      + Add read/execute permission to /usr/libexec/sssd/*.
      [ Incorporated by Debian.  ]
    - Fix FTBFS with newer autoconf
      + debian/patches/fix_newer_autoconf.patch: do not unset PYTHON_PREFIX
        and PYTHON_EXEC_PREFIX in src/external/python.m4.
      [ Incorporated by Debian. ]
    - SECURITY UPDATE: shell command injection in sssctl comment
      + debian/patches/CVE-2021-3621.patch: replace system() with execvp() to
        avoid execution of user supplied command in
        src/tools/sssctl/sssctl.c, src/tools/sssctl/sssctl.h,
        src/tools/sssctl/sssctl_data.c, src/tools/sssctl/sssctl_logs.c.
      + CVE-2021-3621
      [ Incorporated by Debian. ]
    - d/p/disable-fail_over-tests.patch: Disable fail_over-tests,
      which is failing when running inside sbuild.
      [ Not needed anymore; issue does not reproduce on Jammy. ]

 -- Sergio Durigan Junior <email address hidden>  Wed, 27 Oct 2021 20:16:31 -0400

Upload details

Uploaded by:
Sergio Durigan Junior
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
sssd_2.5.2.orig.tar.gz 7.2 MiB 5e21b3c7b4a2f1063d0fbdd3216d29886b6eaba153b44fb5961698367f399a0f
sssd_2.5.2.orig.tar.gz.asc 488 bytes a5c22057dd54a75dc0b442d39925c5377ef32cdb1652f6b27418a6a5f253d5e2
sssd_2.5.2-4ubuntu1.debian.tar.xz 39.1 KiB b30996146553f1e4ffb51e84bd9e5b1faf8d76971117fbe8573b2227bacc76ab
sssd_2.5.2-4ubuntu1.dsc 5.0 KiB def26c72d96e5670e9303e00c244f01471e9021bc7249762628138cc7275171d

Available diffs

View changes file

Binary packages built by this source

libipa-hbac-dev: FreeIPA HBAC Evaluator library -- development files

 Utility library to validate FreeIPA HBAC rules for authorization requests.
 .
 This package contains header files and symlinks to develop programs which will
 use the libipa-hbac library.

libipa-hbac0: FreeIPA HBAC Evaluator library

 Utility library to validate FreeIPA HBAC rules for authorization requests.

libipa-hbac0-dbgsym: debug symbols for libipa-hbac0
libnss-sss: Nss library for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide the nss library to connect to the sssd daemon.

libnss-sss-dbgsym: debug symbols for libnss-sss
libpam-sss: Pam module for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide the pam module to connect to the sssd daemon.

libpam-sss-dbgsym: debug symbols for libpam-sss
libsss-certmap-dev: Certificate mapping library for SSSD -- development files

 Utility library to map certificates to users based on rules.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-certmap library.

libsss-certmap0: Certificate mapping library for SSSD

 Library to map certificates to users based on rules.

libsss-certmap0-dbgsym: debug symbols for libsss-certmap0
libsss-idmap-dev: ID mapping library for SSSD -- development files

 Utility library to convert SIDs to Unix uids and gids.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-idmap library.

libsss-idmap0: ID mapping library for SSSD

 Utility library to convert SIDs to Unix uids and gids.

libsss-idmap0-dbgsym: debug symbols for libsss-idmap0
libsss-nss-idmap-dev: SID based lookups library for SSSD -- development files

 Utility library for SID based lookups.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-nss-idmap library.

libsss-nss-idmap0: SID based lookups library for SSSD

 Utility library for SID based lookups.

libsss-nss-idmap0-dbgsym: debug symbols for libsss-nss-idmap0
libsss-simpleifp-dev: SSSD D-Bus responder helper library -- development files

 Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.
 .
 This package contains header files and symlinks to develop programs which will
 use the libsss-simpleifp0 library.

libsss-simpleifp0: SSSD D-Bus responder helper library

 Provides library that simplifies D-Bus API for the SSSD InfoPipe responder.

libsss-simpleifp0-dbgsym: debug symbols for libsss-simpleifp0
libsss-sudo: Communicator library for sudo

 Utility library to allow communication between sudo and SSSD for caching
 sudo rules by SSSD.

libsss-sudo-dbgsym: debug symbols for libsss-sudo
python3-libipa-hbac: Python3 bindings for the FreeIPA HBAC Evaluator library

 The libipa_hbac-python contains the bindings so that libipa_hbac can be
 used by Python applications.
 .
 This package installs the library for Python 3.

python3-libipa-hbac-dbgsym: debug symbols for python3-libipa-hbac
python3-libsss-nss-idmap: Python3 bindings for the SID lookups library

 This package contains the bindings for libnss_sss_idmap to be used by
 Python applications.
 .
 This package installs the library for Python 3.

python3-libsss-nss-idmap-dbgsym: debug symbols for python3-libsss-nss-idmap
python3-sss: Python3 module for the System Security Services Daemon

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provide a module to access the configuration of the sssd daemon.
 .
 This package installs the library for Python 3.

python3-sss-dbgsym: debug symbols for python3-sss
sssd: System Security Services Daemon -- metapackage

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package is a metapackage which installs the daemon and existing
 authentication back ends.

sssd-ad: System Security Services Daemon -- Active Directory back end

 Provides the Active Directory back end that the SSSD can utilize to fetch
 identity data from and authenticate against an Active Directory server.

sssd-ad-common: System Security Services Daemon -- PAC responder

 Provides the PAC responder that the AD and IPA backends can use for
 fetching additional attributes from the kerberos ticket.

sssd-ad-common-dbgsym: debug symbols for sssd-ad-common
sssd-ad-dbgsym: debug symbols for sssd-ad
sssd-common: System Security Services Daemon -- common files

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provides the daemon and other common files needed by the
 authentication back ends.

sssd-common-dbgsym: debug symbols for sssd-common
sssd-dbus: System Security Services Daemon -- D-Bus responder

 Provides the D-Bus responder called InfoPipe, that allows the information
 from the SSSD to be transmitted over the system bus.

sssd-dbus-dbgsym: debug symbols for sssd-dbus
sssd-ipa: System Security Services Daemon -- IPA back end

 Provides the IPA back end that the SSSD can utilize to fetch identity data
 from and authenticate against an IPA server.

sssd-ipa-dbgsym: debug symbols for sssd-ipa
sssd-kcm: System Security Services Daemon -- Kerberos KCM server implementation

 Provides an implementation of a Kerberos KCM server. Use this package if
 you want to use the KCM: Kerberos credentials cache.

sssd-kcm-dbgsym: debug symbols for sssd-kcm
sssd-krb5: System Security Services Daemon -- Kerberos back end

 Provides the Kerberos back end that the SSSD can utilize authenticate
 against a Kerberos server.

sssd-krb5-common: System Security Services Daemon -- Kerberos helpers

 Provides helper processes that the LDAP and Kerberos back ends can use for
 Kerberos user or host authentication.

sssd-krb5-common-dbgsym: debug symbols for sssd-krb5-common
sssd-krb5-dbgsym: debug symbols for sssd-krb5
sssd-ldap: System Security Services Daemon -- LDAP back end

 Provides the LDAP back end that the SSSD can utilize to fetch identity data
 from and authenticate against an LDAP server.

sssd-ldap-dbgsym: debug symbols for sssd-ldap
sssd-proxy: System Security Services Daemon -- proxy back end

 Provides the proxy back end which can be used to wrap an existing NSS and/or
 PAM modules to leverage SSSD caching.

sssd-proxy-dbgsym: debug symbols for sssd-proxy
sssd-tools: System Security Services Daemon -- tools

 Provides a set of daemons to manage access to remote directories and
 authentication mechanisms. It provides an NSS and PAM interface toward
 the system and a pluggable backend system to connect to multiple different
 account sources. It is also the basis to provide client auditing and policy
 services for projects like FreeIPA.
 .
 This package provides tools to manage users, groups and nested groups when
 using the local id provider.

sssd-tools-dbgsym: debug symbols for sssd-tools