Milestone Roadmap


Open Closed All Active Milestones All Milestones No Milestone SSSD 1.12.5 SSSD 1.13.5 SSSD 1.14.3 SSSD 1.15.3 SSSD 1.15.4 SSSD Continuous integration SSSD Future releases (no date set yet) SSSD Patches welcome SSSD Referrals Feature User/Group Info Tool Feature Wiki Updates
SSSD 1.12.5 Opened Modified Priority Assignee Status
#1985 expand the developer tutorials with best practices    10 3 years ago 2 months ago minor unassigned Open
#2181 Diagram of relations of our technologies would be nice    13 3 years ago 2 months ago trivial unassigned Open
SSSD 1.13.5 Opened Modified Priority Assignee Status
#3367 [abrt] [faf] sssd: unknown function(): /usr/libexec/sssd/sssd_pam killed by 6    6 15 days ago 13 days ago sbose Open
#2990 Review and update SSSD's wiki pages for 1.13.5 release    3 a year ago 2 months ago blocker unassigned Open
#3045 sssd should fallback to local users with ldap_rfc2307_fallback_to_local_users    7 10 months ago 2 months ago critical mzidek Open
#3274 sssd-1-13 and earlier only: requests without the "fast" flag do not reconnect to the remote server    3 4 months ago 2 months ago minor unassigned Open
SSSD 1.14.3 Opened Modified Priority Assignee Status
#3224 Review and update SSSD's wiki pages for 1.14.3 release    2 6 months ago 2 months ago blocker unassigned Open
#2926 Make list of local PAM services allowed for Smartcard authentication configurable    18 a year ago 2 months ago critical lslebodn Open
#3282 Group renaming issue when "id_provider = ldap" is set.    3 3 months ago 2 months ago major fidencio Open
#3272 timestamp entries are not added if the persistent cache entry exists but the timestamp entry does not    4 4 months ago 2 months ago major pcech Open
#3222 sssd still showing ipa user after removed from last group    5 6 months ago 2 months ago major pcech Open
#3208 Need detailed information about config-check option    3 7 months ago 2 months ago major mzidek Open
#3197 sssd is incorrectly handling ldap referrals    25 7 months ago 2 months ago major fidencio Open
#3117 ipa: getent netgroup does not return result for the first request    6 8 months ago 2 months ago major unassigned Open
#3063 add an integration test for the configuration include directories    5 10 months ago 2 months ago major unassigned Open
#3287 Lots of The Data Provider returned an error [org.freedesktop.sssd.Error.DataProvider.NotSupported] messages    5 3 months ago 2 months ago minor unassigned Open
SSSD 1.15.3 Opened Modified Priority Assignee Status
#3362 fiter_users and filter_groups stop working properly in v 1.15    22 21 days ago a day ago fidencio Open
#3361 sssd_be crashes if ad_enabled_domains is selected    6 21 days ago 2 days ago sbose Open
#3331 Wrong pam return code for user from subdomain with    9 a month ago a day ago blocker fidencio Open
#3216 Review and update SSSD's wiki pages for 1.15.3 Beta release    2 6 months ago a month ago blocker unassigned Open
#3373 Infopipe method ListByCertificate does not return the users with overrides    5 6 days ago 2 days ago critical sbose Open
#3351 User lookup failure due to search-base handling    18 a month ago 4 days ago critical mzidek Open
#3347 gpo_child fails when log is enabled in smb    4 a month ago a month ago critical mzidek Open
#3337 Options allowed in subdomain_inherit should be allowed in subdomain section of sssd.conf    4 a month ago a month ago critical mzidek Open
#3318 SSSD in server mode iterates over all domains for group-by-GID requests, causing unnecessary searches    4 2 months ago a month ago critical unassigned Open
#3356 Config file validator doesn't process entries from application domain    4 a month ago a month ago major jhrozek Open
#3355 application domain requires inherit_from and cannot be used separately    4 a month ago a month ago major jhrozek Open
#3336 subdomains: dp_options should indicate what option can be inherited    3 a month ago a month ago major mzidek Open
#3327 expect sss_ssh_authorizedkeys and sss_ssh_knownhostsproxy manuals to be packaged into sssd-common package    9 2 months ago a month ago major lslebodn Open
#3323 The sssd-$RESPONDER.service units should bind to their socket units    7 2 months ago a month ago major fidencio Open
#3321 userCertificate is not removed from entry in cache    2 2 months ago a month ago major unassigned Open
#3308 SELinux: Use libselinux's getseuserbyname to get the correct seuser    6 2 months ago 12 days ago major unassigned Open
#3254 Set udp_preference_limit=0 by sssd-ad using a krb5 snippet    9 4 months ago a month ago major pcech Open
#3338 subdomains: Remove code only used in tests    3 a month ago a month ago minor mzidek Open
#3353 make intgcheck doesn't warn that kdc needs to be installed    3 a month ago a month ago trivial pcech Open
SSSD 1.15.4 Opened Modified Priority Assignee Status
#3363 secrets: Per UID secrets quota    1 21 days ago 18 days ago unassigned Open
#3357 Support autodiscovered subdomains with application type domains    2 a month ago 22 days ago jhrozek Open
#3352 Enabling socket-activate services to refresh configuration    2 a month ago a month ago unassigned Open
#3341 implicit_files domain should not try authentication because /etc/shadow is not supported.    4 a month ago a month ago unassigned Open
#3339 sssd failed to start with missing /etc/sssd/sssd.conf if compiled without --enable-files-domain    3 a month ago 15 days ago unassigned Open
#3335 GPO retrieval doesn't work if SMB1 is disabled    1 a month ago a month ago unassigned Open
#3334 sssctl config-check does not check any special characters in domain name of domain section    5 a month ago a month ago mzidek Open
#3333 usermod -a -G bar foo fails due to some file providers races    1 a month ago a month ago unassigned Open
#3328 Use search_all_domains in the list IFP methods    1 2 months ago a month ago unassigned Open
#3324 GPO Security Filtering and Access Control are not Compliant with MS-ADTS    3 2 months ago a month ago unassigned Open
#3319 Review the use of domain_scope in sysdb_*upn functions    2 2 months ago a month ago unassigned Open
#3126 let the responder choose the level of sysdb write optimization    8 8 months ago a month ago critical unassigned Open
#3315 infopipe: org.freedesktop.sssd.infopipe.Groups.Group doesn't show users    9 2 months ago a month ago major pcech Open
#3312 SSSD AD Failover Failure    6 2 months ago a month ago major unassigned Open
#3306 infopipe: List* with limit = 0 returns 0 results    10 2 months ago a month ago major pcech Open
#3305 infopipe: crash when filter doesn't contain '*'    9 2 months ago a month ago major pcech Open
#3304 Only build the local provider conditionally    9 2 months ago a month ago major unassigned Open
#3255 Add SSSD to the OSS-Fuzz initiative    6 4 months ago a month ago major unassigned Open
#3253 Add Troubleshooting information for systemd integration    5 4 months ago a month ago major unassigned Open
#3243 Ding-libs changes required for sssctl config-show    4 5 months ago a month ago major unassigned Open
#3240 Smartcard authentication with UPN as logon name might fail    5 5 months ago a month ago major unassigned Open
#3217 Conflicting default timeout values    15 6 months ago a month ago major pbrezina Open
#3198 Incorrect error code returned from krb5_child for expired/locked user with id_provider AD    9 7 months ago a month ago major lslebodn Open
#3157 Add sssctl config-show command    13 8 months ago a month ago major mzidek Open
#3138 Enable socket-activate services to refresh configuration    14 8 months ago a month ago major fidencio Open
#3049 SSSD should respect krbprincipalexpiration in IPA for any authentication method    5 10 months ago a month ago major unassigned Open
#2995 RFE: Deliver FleetCommander URL endpoint from an IPA server    15 a year ago a month ago major fidencio Open
#2976 sdap code can mark the whole sssd_be offline    13 a year ago a month ago major unassigned Open
#2939 Bug in ghost user processing when a nested group is removed    8 a year ago a month ago major unassigned Open
#2884 [RFE] Trigger full refresh of sudo rules on desire    8 a year ago a month ago major pcech Open
#2821 Integration tests: Test authentication + authorisation    11 2 years ago a month ago major jhrozek Open
#2371 autofs: return a connection failure until maps have been fetched    9 2 years ago a month ago major unassigned Open
#1828 [RFE] Tool to display current configuration    26 4 years ago a month ago major pbrezina Open
#3371 sbus: set connection to NULL when destroyed    2 13 days ago 4 days ago minor unassigned Open
#3302 KCM: Offer configurable session-scoped access control to credentials    3 2 months ago a month ago minor unassigned Open
#3293 SSSD authentication fails when two IPA accounts share an email address    3 2 months ago a month ago minor unassigned Open
#3211 Refactor the sdap_async_groups.c module    9 6 months ago a month ago minor pcech Open
#3204 add a negcache wrapper for UPN entries    4 7 months ago a month ago minor mzidek Open
#3158 sssctl config-check does not show what file contains the problem    11 8 months ago a month ago minor amitkumar25nov Open
#3155 RFE: Return message when authentication fails because the machine is offline    11 8 months ago a month ago minor unassigned Open
#3147 sssctl: get and set debug level    6 8 months ago a month ago minor unassigned Open
#3061 Add systemtap probes into the top-level data provider requests    10 10 months ago 8 hours ago minor jstephen Open
#3057 Merge existing command line tools into sssctl    5 10 months ago 8 hours ago minor jstephen Open
#3048 amend the Internals Document for the new DP interface    10 10 months ago a month ago minor pbrezina Open
#2615 refactor pam_reply()    14 2 years ago a month ago minor jhrozek Open
#2607 sssd should not always read entire autofs map from ldap    10 2 years ago a month ago minor unassigned Open
#3278 Target [subdomains] is not initialized log spam    7 3 months ago 8 hours ago trivial jstephen Open
#2946 "domains" description in pam_sss(8) is misleading    8 a year ago a month ago trivial preichl Open
SSSD Continuous integration Opened Modified Priority Assignee Status
#2429 contrib/ci/run script: CI script cannot be executed from different directory.    15 2 years ago 2 months ago critical lslebodn Open
#3276 Revert workaround in CI for bug in python-{request,urllib3}    4 3 months ago 2 months ago major unassigned Open
#3119 CI: add netgroup tests with LDAP provider    5 8 months ago 2 months ago major unassigned Open
#2933 FAIL: test_child_common    3 a year ago 2 months ago major unassigned Open
#2883 CI: Make it possible to run tests against a real server    4 a year ago 2 months ago major unassigned Open
#2864 tests: when testing GetAll, make sure non-POSIX groups are tested    4 a year ago 2 months ago major unassigned Open
#2854 FAIL test-find-uid    6 2 years ago 2 months ago major unassigned Open
#2825 Integration tests: Implement tests for infopipe provider    5 2 years ago 2 months ago major unassigned Open
#2824 Integration tests: Prepare test plan for infopipe provider    8 2 years ago 2 months ago major sidecontrol Open
#2822 Integration tests: Use krb5kdc in cwrap enviroment for test    5 2 years ago 2 months ago major unassigned Open
#2818 Investigate if Samba4 in Fedora can be used for SSSD CI    14 2 years ago 2 months ago major pcech Open
#2696 CI: make intgcheck fails from git root dir    4 2 years ago 2 months ago major unassigned Open
#2693 CI: Fix crash in test_ipa_subdomains_server    4 2 years ago 2 months ago major unassigned Open
#2545 Support specifying data and socket locations at startup    4 2 years ago 2 months ago major unassigned Open
#2541 Implement LDAP integration tests    6 2 years ago 2 months ago major nkondras Open
#2277 Develop a set of upstream tests using cwrap    5 3 years ago 2 months ago major unassigned Open
#637 Enhance test suite to run test against running sssd and LDAP server    13 6 years ago 2 months ago major unassigned Open
#3058 The sssctl tool is missing integration tests    9 10 months ago 2 months ago minor pcech Open
#2935 Add filter_users/filter_groups LDAP integration tests    2 a year ago 2 months ago minor unassigned Open
#2859 CI: libsemanage functions fail in intgcheck tests    6 a year ago 2 months ago minor mzidek Open
#2832 Add support for snapshotting SSSD logs on any integration test failure    2 2 years ago 2 months ago minor unassigned Open
#2831 Add support for attaching gdb to SSSD instances running in integration tests    2 2 years ago 2 months ago minor unassigned Open
#2823 Integration tests: Use dbus-daemon in cwrap enviroment for test    10 2 years ago 2 months ago minor lslebodn Open
#2820 Integration tests: test ldap provider with TLS or SSL    9 2 years ago 2 months ago minor sidecontrol Open
#2809 CI doesn't work with DNF    3 2 years ago 2 months ago minor unassigned Open
#2753 FAIL: test_be_ptask    6 2 years ago 2 months ago minor unassigned Open
#2695 CI: Code coverage does not include integration tests    5 2 years ago 2 months ago minor unassigned Open
#2694 CI: Fix ramshackle test_ipa_subdomains_server (FAIL: test_ipa_subdom_server)    20 2 years ago 2 months ago minor unassigned Open
#2425 contrib/ci/run script: Add option to disable/enable specific tasks    5 2 years ago 2 months ago minor nkondras Open
#2419 unit tests for ldap access provider    6 2 years ago 2 months ago minor unassigned Open
#2366 Add compiler warning tracking to CI    4 2 years ago 2 months ago minor nkondras Open
#2365 Add coding style verification to CI    4 2 years ago 2 months ago minor nkondras Open
SSSD Future releases (no date set yet) Opened Modified Priority Assignee Status
#3370 sssd-secrets: support gssapi as authentication method against proxy server    2 13 days ago 4 days ago unassigned Open
#3368 IFP: Return an error, not a default value for some attributes should not be read    1 15 days ago 4 days ago unassigned Open
#3348 KCM: Implement a shim layer to format FILE-based credentials from KCM credential cache    1 a month ago a month ago unassigned Open
#3325 python module configures services line in random order, breaking idempotency    4 2 months ago a month ago unassigned Open
#2908 [RFE] Support OTP logins for AD trust users    2 a year ago 2 months ago blocker unassigned Open
#2240 [RFE] make nss/pam modules released independently of SSSD source tree    12 3 years ago 2 months ago blocker unassigned Open
#2228 [RFE] Manage local users from /etc/passwd and account service    23 3 years ago 4 days ago blocker unassigned Open
#1872 [RFE] Support User Private Groups for main domains, too    29 4 years ago 2 months ago blocker unassigned Open
#2840 [RFE] Produce access control attestation report    3 2 years ago 2 months ago critical unassigned Open
#2728 [RFE] Support KDC proxying of trusted domain operations to IPA master    7 2 years ago 2 months ago critical unassigned Open
#2727 Add a memcache for SID-by-id lookups    7 2 years ago 2 months ago critical lslebodn Open
#2328 IFP: Use PolicyKit for access control    9 2 years ago 2 months ago critical unassigned Open
#2012 [RFE] Support NTLM authentication when GSSAPI NTLM mech is available    8 3 years ago 2 months ago critical unassigned Open
#3307 RFE: Log to syslog when sssd cannot contact servers, goes offline    3 2 months ago 2 months ago major unassigned Open
#3294 Enumeration is not restarted later if the first run fails because sssd is offline    4 2 months ago 2 months ago major unassigned Open
#3291 RFE: sssd in cross realm trust configuration should be able to find AD KDCs from client site    2 2 months ago 2 months ago major unassigned Open
#3289 [RFE] Support U2F authentication workflow    4 3 months ago 2 months ago major unassigned Open
#3285 SSSD needs restart after incorrect clock is corrected with AD    12 3 months ago 2 months ago major unassigned Open
#3271 Go back to mainloop while processing large enumeration results    3 4 months ago 2 months ago major unassigned Open
#3265 [RFE] sssd should remember DNS sites from first search    1 4 months ago 2 months ago major unassigned Open
#3264 [RFE] Make 2FA prompting configurable    1 4 months ago 2 months ago major unassigned Open
#3263 consider adding sudo-i to the list of pam_response_filter services by default    3 4 months ago 2 months ago major unassigned Open
#3251 Don't enter offline mode if GC resolution fails, but gracefully disable GC lookups    3 4 months ago 2 months ago major unassigned Open
#3249 [RFE] To let sssd to lookup certain users or groups (opposite to filter_users or filter_groups)    3 5 months ago 2 months ago major unassigned Open
#3247 [RFE] Allow user private groups for trusted users when POSIX attributes are coming from AD    3 5 months ago 2 months ago major unassigned Open
#3242 Provide a "writable" D-Bus management API for local users    6 5 months ago 2 months ago major unassigned Open
#3219 [RFE] Regular expression used in sssd.conf not being able to consume an @-sign in the user/group name.    1 6 months ago 2 months ago major unassigned Open
#3193 [RFE] Support aliases in the memory cache    5 7 months ago 2 months ago major unassigned Open
#3183 [RFC] IPA: allow switching off user private groups for trusted AD users    5 7 months ago 2 months ago major unassigned Open
#3170 PAC: Process domain-local groups from another domain    3 7 months ago 2 months ago major unassigned Open
#3148 allow each responder to create a dbus server    7 8 months ago a month ago major pbrezina Open
#3105 SSSD cant parse GPO if AD server have Russain language    24 9 months ago 2 months ago major unassigned Open
#3099 sssctl to run as non-root    3 9 months ago 2 months ago major unassigned Open
#3083 sssd crashes in offline mode(when system is NOT connected to network) if AD forest is defined in ad_access_filter    2 9 months ago 2 months ago major unassigned Open
#3075 [RFE] Allow cached_auth_timeout to be applied per service and/or user    7 9 months ago 2 months ago major unassigned Open
#3067 watch changes to config snippets and only reload them on demand    4 10 months ago 2 months ago major unassigned Open
#3065 sssctl: distinguish between autodiscovered and joined domains    8 10 months ago 2 months ago major pcech Open
#3047 Remove selinux_provider    3 10 months ago 2 months ago major unassigned Open
#3014 machine credentials renewal with adcli doesn't work as non-root    4 11 months ago 2 months ago major unassigned Open
#3008 Document dbus integration for 3rd parties    5 a year ago 2 months ago major unassigned Open
#3004 SSSD does not update enumerated services properly    5 a year ago 2 months ago major unassigned Open
#2992 SSSD does not destroy user Kerberos cache upon logout    7 a year ago 2 months ago major unassigned Open
#2991 Filter out replication conflict entries    3 a year ago 2 months ago major unassigned Open
#2985 Make map_krb5_error() aware of SSSD's internal error codes    3 a year ago 2 months ago major unassigned Open
#2979 id does not list all groups after upgrade sssd-1.12.4-47 to sssd-1.13.3-22    3 a year ago 2 months ago major pcech Open
#2967 Intermittent attribute retrieval failure from AD    13 a year ago 2 months ago major lslebodn Open
#2963 GPO: Blocked access after switching from root mode to non-root mode    4 a year ago 2 months ago major unassigned Open
#2954 RFE: Add dbus method to perform talloc memory context dump    5 a year ago 2 months ago major unassigned Open
#2953 Provide offline password change    4 a year ago 2 months ago major unassigned Open
#2952 Adding a nested group hierarchy breaks ghost/memberUid propagation    4 a year ago 2 months ago major unassigned Open
#2949 use sdap_search_bases_send() in code    3 a year ago 2 months ago major unassigned Open
#2943 Split out the requests for IPA users and groups that include overrides into reusable requests    5 a year ago 2 months ago major unassigned Open
#2942 Use teven's thread support to resolve A/AAAA records with libresolv's resolver    2 a year ago 2 months ago major unassigned Open
#2915 Make the libsss_idmap.so library private    7 a year ago 2 months ago major unassigned Open
#2893 [RFE] Conditionally wrap user terminal with tlog    14 a year ago 2 months ago major spbnick Open
#2885 Provide documentation how to handle setups with and without server-side POSIX attributes    3 a year ago 2 months ago major unassigned Open
#2876 RFE : enable SSSD to support range retrieval even when the search filters are being used    4 a year ago 2 months ago major unassigned Open
#2873 DDNS - make adding and deleting PTR record in one transaction    7 a year ago 2 months ago major unassigned Open
#2872 DDNS - add server and realm commands for AAAA    17 a year ago 2 months ago major preichl Open
#2851 Account expiration attributes are not honored unless replicated to GC    14 2 years ago 2 months ago major unassigned Open
#2847 Create rules for OpenSCAP    8 2 years ago 2 months ago major jhrozek Open
#2836 Add support for iCal based time rules to libipa_hbac    8 2 years ago 2 months ago major stlaz Open
#2815 Optimize GPO logins    3 2 years ago 2 months ago major unassigned Open
#2808 Replace hexadecimal debug level code in log messages with a text tag    14 2 years ago 2 months ago major pcech Open
#2795 [RFE] Make initgroups request during login more configurable    9 2 years ago 2 months ago major pcech Open
#2794 [RFE] Provide interface which returns group-memberships by name for a given user    5 2 years ago 2 months ago major unassigned Open
#2767 The sdap_op code always ends request with EAGAIN    4 2 years ago 2 months ago major unassigned Open
#2763 [RFE] sssd: multilevel sub-domain support    6 2 years ago 2 months ago major unassigned Open
#2760 sss_cache & negative cache - improve behaviour    6 2 years ago 2 months ago major pcech Open
#2752 Detect captive portals and make sure SSSD treats networks with them as offline    7 2 years ago 2 months ago major unassigned Open
#2740 Add examples to retrieve user/group attributes from the bus in popular languages    6 2 years ago 2 months ago major unassigned Open
#2714 Add SSSD domain as property to user on D-Bus    7 2 years ago 2 months ago major pbrezina Open
#2707 make the list of localauth plugins configurable    4 2 years ago 2 months ago major unassigned Open
#2705 RFE: AD Provider POSIX UID/GID Priority with Autogenerated UID/GID Failover    3 2 years ago 2 months ago major unassigned Open
#2702 RFE: Improve AD site discovery process    12 2 years ago 2 months ago major unassigned Open
#2684 D-Bus interface for InfoPipe.GetUserAttr returns base64 encoded values for octetString attributes    4 2 years ago 2 months ago major unassigned Open
#2665 krb5_map_user shoiud support mapping to a full principal name including REALM    4 2 years ago 2 months ago major preichl Open
#2653 Group renaming issue when "id_provider = ldap" is set.    5 2 years ago 2 months ago major unassigned Open
#2651 [RFE] idmap_rid support added to sssd    5 2 years ago 2 months ago major unassigned Open
#2623 RFE: Add an option to clear cached entries even if offline    7 2 years ago 2 months ago major unassigned Open
#2589 Return normalized authenticated user name in PAM environment    12 2 years ago 2 months ago major mzidek Open
#2578 Check the usage of ldb_msg_find_attr_as_uint64    6 2 years ago 2 months ago major sbose Open
#2562 sssd can timeout ldap network connection incorrectly    16 2 years ago 2 months ago major unassigned Open
#2555 Handle setups with local nameservers better    17 2 years ago 2 months ago major unassigned Open
#2499 RFE: Support multiple IP addresses resolved from a single host name    7 2 years ago 2 months ago major pbrezina Open
#2476 Return domain of the authenticated user in PAM environment    18 2 years ago 2 months ago major mzidek Open
#2474 AD: do not override existing home-dir or shell if they are not available in the global catalog    9 2 years ago 2 months ago major unassigned Open
#2469 Read-only confdb in responders    6 2 years ago 2 months ago major unassigned Open
#2465 [RFE] Refactor SSSD to use configuration from ding-libs instead of DB    6 2 years ago 2 months ago major unassigned Open
#2458 [RFE] Support IPA as a member server in AD (SSSD part)    5 2 years ago 2 months ago major unassigned Open
#2417 refactor sdap_nested_group_hash_group    11 2 years ago 2 months ago major preichl Open
#2394 redesign failover    8 2 years ago 2 months ago major unassigned Open
#2393 failover: enable different dns discovery domain for AD subdomains    8 2 years ago 2 months ago major unassigned Open
#2378 Return connected state in sss_ldap_init_recv()    6 2 years ago 2 months ago major unassigned Open
#2327 SBUS: Support the ObjectManager interface    7 2 years ago 2 months ago major unassigned Open
#2261 investigate our netlink integration with virtual interfaces provided by Docker    13 3 years ago 2 months ago major unassigned Open
#2249 [RFE] SSSD should save and compare configuration    9 3 years ago 2 months ago major unassigned Open
#2244 [RFE] Support UID/GID changes    7 3 years ago 2 months ago major unassigned Open
#2233 RFE: Add a sbus signal send support    13 3 years ago 2 months ago major pbrezina Open
#2231 RFE: Drop the monitor process    6 3 years ago 2 months ago major unassigned Open
#2230 RFE: The 'domains' option should not be required    8 3 years ago 2 months ago major unassigned Open
#2229 Ship an immutable recovery mode config for local accounts    15 3 years ago 2 months ago major jhrozek Open
#2222 [RFE] Intergation with GNOME Keyring (phase 2)    12 3 years ago 2 months ago major unassigned Open
#2221 [RFE] Intergation with GNOME Keyring (phase 1)    16 3 years ago 2 months ago major unassigned Open
#2205 Always store home directory expansions to sysdb    16 3 years ago 2 months ago major preichl Open
#2187 [RFE] Expose different identity domains to different D-BUS consumers    11 3 years ago 2 months ago major pbrezina Open
#2174 [RFE] Store the "last password change" field with higher resolution than 24 hours    5 3 years ago 2 months ago major unassigned Open
#2122 Register responders only if backend initialization is complete    7 3 years ago 2 months ago major unassigned Open
#2117 [RFE] SID-Mapping: Store non-POSIX users in cache if they have a SID    17 3 years ago 2 months ago major preichl Open
#2088 Reorganize the sssd-ldap manual page    11 3 years ago 2 months ago major pcech Open
#2078 [RFE] Support AD users from a trusted forest in sssd-ad provider    7 3 years ago 2 months ago major unassigned Open
#2038 Review the structures introduced by GC lookups feature and server mode    11 3 years ago 2 months ago major unassigned Open
#2015 SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack    16 3 years ago 2 months ago major preichl Open
#1983 move the sudo library outside libdir    9 3 years ago 2 months ago major mmsrubar Open
#1981 [RFE] Allow updates and removal of ranges    8 3 years ago 2 months ago major unassigned Open
#1975 [RFE] Change the default of ldap_access_order    8 3 years ago 2 months ago major preichl Open
#1925 [RFE] Build a generic mechanism to invoke a callback after a provider is reconfigured    5 3 years ago 2 months ago major unassigned Open
#1907 Split the man dyndns man page options into an included file    4 3 years ago 2 months ago major unassigned Open
#1902 Investigate checking for subdomains expiration in responder_get_domain()    10 3 years ago 2 months ago major unassigned Open
#1887 [RFE] sss_cache should be able to clear ID-mappings    4 4 years ago 2 months ago major unassigned Open
#1851 filter out ipv6 autoconfiguration from libnl messages    2 4 years ago 2 months ago major unassigned Open
#1837 [RFE] Use extended data blob to extract error msg on AD krb password changes    7 4 years ago 2 months ago major unassigned Open
#1836 Support user credentials in during rebind    4 4 years ago 2 months ago major unassigned Open
#1788 [RFE] Create a command line tool to return the current debug level of sssd    17 4 years ago 2 months ago major preichl Open
#1729 Enumerating large number of users makes sssd_be hog the cpu for a long time.    9 4 years ago 2 months ago major unassigned Open
#1719 [RFE] Improve offline mode performance    5 4 years ago 2 months ago major unassigned Open
#1715 [RFE] Create a way to handle UID/GID changes in the central server    5 4 years ago 2 months ago major unassigned Open
#1691 [RFE] add a sss_cache option to completely remove the user from cache, not just invalidate    5 4 years ago 2 months ago major unassigned Open
#1653 [RFE] Reconsider the use of memberof in initgroups    8 4 years ago 2 months ago major unassigned Open
#1572 [RFE] Integrate local provider with user managment utilities on the system    4 4 years ago 2 months ago major unassigned Open
#1522 Delete a fail over server after all pending request have finished    8 4 years ago 2 months ago major unassigned Open
#1518 [RFE] Better diagnose keytab mismatch    7 4 years ago 2 months ago major unassigned Open
#1507 Investigate terminating connections in sdap_ops.c and comment the code some more    21 4 years ago a month ago major unassigned Open
#1498 sss_ssh_knownhostsproxy prevents connection if the network is unreachable via one IP address    10 4 years ago 15 days ago major unassigned Open
#1493 [RFE] SSSD should ignore offline timeout for auth when cached_credentials = false    15 4 years ago 2 months ago major preichl Open
#1397 [RFE] Pull in automount location for the host    7 4 years ago 2 months ago major unassigned Open
#1372 Set debug level to 2 by default    22 4 years ago 2 months ago major pcech Open
#1369 automount location changes not reflected    7 4 years ago 2 months ago major unassigned Open
#1326 [RFE] Allow chaining access_provider    7 4 years ago 2 months ago major unassigned Open
#1162 [Feature] Add RADIUS authentication provider to SSSD    10 5 years ago 2 months ago major unassigned Open
#1083 move the resolover cache handling from fail over to a new layer atop resolver    16 5 years ago 2 months ago major unassigned Open
#941 return multiple server addresses to the Kerberos locator plugin    31 5 years ago 2 months ago major unassigned Open
#3021 RFE: pam_echo to provide instructive output to users in pam stacks proxied by pam_sss.    3 11 months ago 2 months ago minor unassigned Open
#3020 sssd does not read in configuration file if changed during the last second    8 11 months ago 2 months ago minor unassigned Open
#3002 [RFE] Improve libwbclient functionality wrt fully qualified names    8 a year ago 2 months ago minor unassigned Open
#2983 amend the release process to include building COPR repositories    7 a year ago 2 months ago minor unassigned Open
#2982 SSSD complains about multiple groups having same GID    6 a year ago 2 months ago minor unassigned Open
#2975 optimize the LDAP search filter when looking for a specific ID    3 a year ago 2 months ago minor unassigned Open
#2945 RFE: Provide a solution so local override data can persist during cache clears    4 a year ago 2 months ago minor unassigned Open
#2882 Comparison between talloc and talloc_pool    9 a year ago 2 months ago minor unassigned Open
#2879 Add multiple domains tests to responder_cache_req-tests    5 a year ago 2 months ago minor unassigned Open
#2875 use thread-local storage for the client-side socket    7 a year ago 2 months ago minor unassigned Open
#2867 Non-POSIX groups are not seen in the IFP object interface - add a warning    9 a year ago 2 months ago minor unassigned Open
#2843 Enhance sdap_get_generic_ext_step() to pass timeout argument to ldap_search_ext    8 2 years ago 2 months ago minor preichl Open
#2806 AD subdomain code has no tests    9 2 years ago 2 months ago minor jhrozek Open
#2710 Propagate error about multiple entries found from cache_req to responder    6 2 years ago 2 months ago minor unassigned Open
#2689 proxy_child hardening    4 2 years ago 2 months ago minor pcech Open
#2685 Internal error in domain log on starting sssd    3 2 years ago 2 months ago minor unassigned Open
#2677 Check using zero for trust direction of a member domain    7 2 years ago 2 months ago minor unassigned Open
#2674 reduce the code duplication of timeout setting with child processes    10 2 years ago 2 months ago minor pcech Open
#2670 Log File Access Issues    4 2 years ago 2 months ago minor unassigned Open
#2664 Shortcut enumeration requests sooner than in the back ends    5 2 years ago 2 months ago minor unassigned Open
#2605 Skip replication conflict entries in the IPA provider    12 2 years ago 2 months ago minor mzidek Open
#2551 RFE To delete kerberos tickets once the user logs out (might be with KCM sessions)    6 2 years ago a month ago minor unassigned Open
#2508 Handle AD clients with FQDN longer than 15 characters    6 2 years ago 2 months ago minor preichl Open
#2494 Allow sssd to retrieve sudo rules of local users whose sudo rules stored in ldap server    7 2 years ago 2 months ago minor unassigned Open
#2489 refactor fill_pwent    4 2 years ago 2 months ago minor unassigned Open
#2480 sdap_extend_map_with_list() might leak memory if used the 4th and 6th argument being the same    7 2 years ago 2 months ago minor unassigned Open
#2479 Make return codes of sysdb_*_with_views operations consistent    8 2 years ago 2 months ago minor preichl Open
#2478 Provide sss_nss_* API to directly query SSSD instead of nsswitch.conf route    5 2 years ago 2 months ago minor unassigned Open
#2450 Implement dbus call to create socket on the fly to provides services for a set of domains    6 2 years ago 2 months ago minor unassigned Open
#2438 [RFE] Make it possible to use different Unix socket path, use it for distinguishing domains    7 2 years ago 2 months ago minor unassigned Open
#2434 Expose ldap filter for users as configuration item    9 2 years ago 2 months ago minor unassigned Open
#2422 Optimize validation away when FAST channel is used    8 2 years ago 2 months ago minor unassigned Open
#2414 [RFE] Support name@domain notation with our libwbclient interface    6 2 years ago 2 months ago minor unassigned Open
#2411 [RFE] Session Tracking Control    5 2 years ago 2 months ago minor unassigned Open
#2381 Fix lookup_netgr_step() not to access result of sysdb_getnetgr() in case of ret-val ENOENT    5 2 years ago 2 months ago minor unassigned Open
#2379 Do LDAP bind in get_user_dn_send() before calling sdap_search_user_send()    5 2 years ago 2 months ago minor unassigned Open
#2353 [RFE] Add support for S-1-22-* SIDs used by Samba    6 2 years ago 2 months ago minor unassigned Open
#2337 [RFE] Implement org.freedesktop.DBus.Properties.Set    12 2 years ago 2 months ago minor unassigned Open
#2336 Refactor sdap_attr_map to contain the map and the count in one structure    6 2 years ago 2 months ago minor unassigned Open
#2324 [RFE] Implement rate limiting for non privileged clients    6 2 years ago 2 months ago minor unassigned Open
#2316 sudoNotBefore time is not always respected    7 3 years ago 2 months ago minor unassigned Open
#2310 Wrong principal selected for AD authentication with lowercase machine account    12 3 years ago 2 months ago minor sbose Open
#2301 Print a warning when enumeration is requrested but disabled    8 3 years ago 2 months ago minor unassigned Open
#2299 Password-less login is allowed for expired ad user    10 3 years ago 2 months ago minor unassigned Open
#2276 Enable rootDSE code to retrieve configurationNamingContext attribute    10 3 years ago 2 months ago minor unassigned Open
#2255 Finish promtly when non existing user is requested in server mode    6 3 years ago 2 months ago minor unassigned Open
#2250 [RFE] If the cache is corrupt start with the fresh cache    8 3 years ago 2 months ago minor unassigned Open
#2217 [RFE] Discard and re-acquire kerberos ticket if get kerberos failure    6 3 years ago 2 months ago minor unassigned Open
#2216 Inspect the usage of find_subdomain_by_sid    16 3 years ago 2 months ago minor lslebodn Open
#2180 [RFE] Fetch netgroups hierarchy in one request.    2 3 years ago 2 months ago minor unassigned Open
#2141 convert backend specific options to dp_option array    10 3 years ago 2 months ago minor unassigned Open
#2062 Leverage RFC 4533 in server mode for enumeration and synchronization of external groups    10 3 years ago 2 months ago minor unassigned Open
#2054 Review if responder_cli pointers are actually needed    3 3 years ago 2 months ago minor unassigned Open
#2053 Stop saving the ccache collection name to sysdb unless it's needed    10 3 years ago 2 months ago minor simo Open
#2039 change the way how providers are initialized - create a provider constructor    5 3 years ago 2 months ago minor unassigned Open
#2021 Detect cycles in adding ghost users instead of using permissive ldb mod    7 3 years ago 2 months ago minor unassigned Open
#2020 Unify the child subprocess framework    7 3 years ago 2 months ago minor unassigned Open
#1954 Cached entry is returned from cache even if it doesn't match the min_id/max_id constraints    5 3 years ago 2 months ago minor unassigned Open
#1946 check if IPA hostname is a FQDN    7 3 years ago 2 months ago minor preichl Open
#1944 convert dyndns timer to be_ptask    8 3 years ago 2 months ago minor unassigned Open
#1898 Move header files consumed by both server and client to special folder    3 3 years ago 2 months ago minor unassigned Open
#1875 resolver interface should strdup/memdup input    7 4 years ago 2 months ago minor preichl Open
#1871 krb5 validation code always picks the first matching principal    9 4 years ago 2 months ago minor unassigned Open
#1829 investigate a better way to handle long-running requests in the SSSD    7 4 years ago 2 months ago minor unassigned Open
#1753 make check should also test tools    14 4 years ago 2 months ago minor preichl Open
#1752 sss_cache tool should probably work with aliases too    5 4 years ago 2 months ago minor unassigned Open
#1720 Stop using in-memory hash tables for netgroups and autofs maps    16 4 years ago 2 months ago minor unassigned Open
#1664 empty groups with filter_users_in_groups and enumerate enabled    15 4 years ago 2 months ago minor unassigned Open
#1579 [RFE] Make sure that SSSD uses GSSAPI with GSS proxy to extract PAC    11 4 years ago 2 months ago minor unassigned Open
#1570 Keep track of per-PID/cgroup/process group fds in the PAM responder.    11 4 years ago 2 months ago minor unassigned Open
#1555 validate the shell coming from the directory or the cache    4 4 years ago 2 months ago minor unassigned Open
#1497 [RFE] Expose Kerberos ticket data on IFP from KCM    16 4 years ago a month ago minor unassigned Open
#1443 Define internal PAM commands outside client scope    13 4 years ago 2 months ago minor unassigned Open
#1285 convert the sss_cli_recv_rep() consumers to use a single return code    9 5 years ago 2 months ago minor pbrezina Open
#1275 Inspect usage of sysdb_search_user_by_name() ba various parts of code    22 5 years ago 2 months ago minor preichl Open
#1149 Create custom abort function for talloc_get_type_abort()    29 5 years ago 2 months ago minor amitkumar25nov Open
#1030 [RFE] Improve SASL authentication method negotiation    13 5 years ago 2 months ago minor unassigned Open
#561 [RFE] Add support for certificate-based authentication to directory servers    26 6 years ago 2 months ago minor unassigned Open
#2739 ipa_s2n_save_objects is too long and does too many things    4 2 years ago 2 months ago trivial preichl Open
#2687 When sssd service fails to start due to misconfiguration, the error message would be nice in /var/log/messages as well    5 2 years ago 2 months ago trivial unassigned Open
#2568 RFE: sss_cache, allow invalidating by UID/GID    5 2 years ago 2 months ago trivial preichl Open
#2318 All responders read the negcache timeout setting from the [nss] section    8 3 years ago 2 months ago trivial unassigned Open
#1904 the .finalize handler is not used anywhere.    5 3 years ago 2 months ago trivial unassigned Open
#1768 Enabling proxy_fast_alias shows "ldb_modify failed: [Invalid attribute syntax]" for id lookups.    5 4 years ago 2 months ago trivial unassigned Open
#1392 Incorrect message in krb5_child.log when krb5_fast_principal is unset    9 4 years ago 2 months ago trivial unassigned Open
SSSD Patches welcome Opened Modified Priority Assignee Status
#3345 [RFE] Introduce option to differe min_id & max_id for users & groups.    3 a month ago a month ago unassigned Open
#1634 Extract the UPN from the pac    13 4 years ago 2 months ago critical sbose Open
#901 [Feature] Implement support for the LDAP served maps    12 5 years ago 2 months ago critical unassigned Open
#3311 group filter isn't useful    12 2 months ago 2 months ago major unassigned Open
#3246 sssctl: Improve config-check to catch more errors    3 5 months ago 2 months ago major unassigned Open
#3239 [RFE]: add the ability for sssd to also filter access using netgroups    2 5 months ago 2 months ago major unassigned Open
#3229 sssd[nss]: Stored copy of corrupted mmap cache in file /var/lib/sss/mc/passwd_corrupted    2 5 months ago 2 months ago major unassigned Open
#3226 CI: Run builds using with all options provided by configure and make sure we always can build SSSD    4 6 months ago 2 months ago major unassigned Open
#3223 sss_ssh_authorizedkeys: --debug N option is not documented in the man page    4 6 months ago 2 months ago major unassigned Open
#3221 RFE: Make "sssd-libwbclient" to display real names in permission dialog    3 6 months ago 2 months ago major unassigned Open
#3196 RFE: Add a new option to track the encoding of GPO INI files    2 7 months ago 2 months ago major unassigned Open
#3195 IFP: Implement group_attributes    3 7 months ago 2 months ago major unassigned Open
#3177 Built-in groups are not created during enumeration    10 7 months ago 2 months ago major unassigned Open
#3162 Add DBus call to allow account activation status lookup    12 8 months ago 2 months ago major unassigned Open
#3149 sssctl: obtain talloc report    3 8 months ago 2 months ago major unassigned Open
#3146 sssctl: print most recent provider requests    5 8 months ago 2 months ago major pbrezina Open
#3139 secrets: Consider if proxy provider globally is allowed    8 8 months ago 2 months ago major unassigned Open
#3098 infopipe: Allow non-root users to access information about themselfs    3 9 months ago 2 months ago major unassigned Open
#3074 Move timestamp cache to tmpfs    8 10 months ago 2 months ago major jhrozek Open
#3043 proxy provider loops when sss is in proxy_pam_target    3 10 months ago 2 months ago major unassigned Open
#3013 resolv_is_address failure in getaddrinfo on FreeBSD 10.3    4 11 months ago 2 months ago major unassigned Open
#2998 NSS: check if overridden shells are handled correctly in get_shell_override()    3 a year ago 2 months ago major unassigned Open
#2997 PAM: check if overriden shells are handled correctly in the PAM responder    4 a year ago 2 months ago major unassigned Open
#2996 Responders: Negative cache timeouts configuration for each responder separately    3 a year ago 2 months ago major unassigned Open
#2974 Crash in sdap_combine_filters_ex    4 a year ago 21 days ago major unassigned Open
#2947 [RFE] Integrate with p11-kit to provide CA certificates and enforce trust policy from IPA and AD    4 a year ago 2 months ago major unassigned Open
#2944 [RFE] In the cache, identify a group entity by more than its name.    5 a year ago 2 months ago major unassigned Open
#2895 Add logging to ID mapping library    4 a year ago 2 months ago major unassigned Open
#2880 certificates: add certificate validation to the OpenSSL version of the certificate utilities    4 a year ago 2 months ago major unassigned Open
#2878 sssd failover does not work on connecting to non-responsive ldaps:// server    10 a year ago 2 months ago major jhrozek Open
#2871 [RFE] split out DNS code into separate binary/out of SSSD    22 a year ago 2 months ago major unassigned Open
#2835 autogenerate docs from git sources    3 2 years ago 2 months ago major unassigned Open
#2817 dynamic dns - remove detection of 'realm' keyword support    5 2 years ago 2 months ago major preichl Open
#2793 refactor resolv_get_string_ptr_address    4 2 years ago 2 months ago major preichl Open
#2667 id_provider = ad requires ldap_use_tokengroups = False to see secondary groups    7 2 years ago 2 months ago major unassigned Open
#2617 sbus_tests and sbus_codegen_tests fail on Debian sid    7 2 years ago 2 months ago major lslebodn Open
#2616 [RFE] Allow filtering out groups that client does not care about    9 2 years ago 2 months ago major unassigned Open
#2594 [RFE] add warning for expired password when SSH keys are used    4 2 years ago 2 months ago major unassigned Open
#2497 When machine gets IPA-enrolled to different IPA with the same domain name and the same users, caches prevent correct operation    6 2 years ago 2 months ago major unassigned Open
#2491 Simple Access Provider - fail on non-existing objects in deny lists    12 2 years ago 2 months ago major unassigned Open
#2455 Log shows "Internal Error" when sssd comes back online and has wrong bind password    4 2 years ago 2 months ago major unassigned Open
#2440 Interoperability issue with sssd_proxy and pam_ldap    5 2 years ago 2 months ago major unassigned Open
#2427 man sssd(8) refers to sssd(8)    2 2 years ago 2 months ago major unassigned Open
#2350 Parallel make of "tests" target fails    26 2 years ago 2 months ago major unassigned Open
#2262 Warn loudly if AD is detected in rootDSE and referrals are on    4 3 years ago 2 months ago major unassigned Open
#2155 [RFE] use netresolve library for network name resolution    11 3 years ago 2 months ago major unassigned Open
#2136 Improve grace login warning against OpenLDAP server    7 3 years ago 2 months ago major preichl Open
#2118 [RFE] Consider enabling the line wrapping functionality    4 3 years ago 2 months ago major unassigned Open
#2099 [RFE] Read and use SSH keys stored in Active Directory    3 3 years ago 2 months ago major unassigned Open
#2098 Enable warning missing-declarations    5 3 years ago 2 months ago major unassigned Open
#2086 utils: namespace domain_info_utils.c    6 3 years ago 2 months ago major preichl Open
#2055 Create unit tests for the memory cache    12 3 years ago 2 months ago major lslebodn Open
#2048 [RFE] Provide a regex mapping similar to pam_krb5's mechanism    4 3 years ago 2 months ago major unassigned Open
#2042 [RFE] Create a library to control SSSD configuration    7 3 years ago 2 months ago major unassigned Open
#2010 Add sysdb unit tests for alias handling    10 3 years ago 2 months ago major mzidek Open
#1990 [RFE] Add option to store user kerberos creds in keyring permanently and rekinit    8 3 years ago 2 months ago major unassigned Open
#1956 Investigate and provide an alternative to enabling enumeration for pam_lastlog to work    9 3 years ago 2 months ago major unassigned Open
#1940 Create unit test for be_refresh    13 3 years ago 2 months ago major mzidek Open
#1920 default to ldaps instead of ldap if the port is set to 636 during service discovery    5 3 years ago 2 months ago major unassigned Open
#1903 too complex if-else structure in sss_dp_get_account_msg    5 3 years ago 2 months ago major unassigned Open
#1879 [RFE] Support other NSS maps in fastcache    5 4 years ago 2 months ago major unassigned Open
#1762 Authentication is done against krb5_kpasswd as well as krb5_server    4 4 years ago 2 months ago major unassigned Open
#1654 The memberof plugin does not retain the memberof attribute correctly when a user is removed from a nested group    11 4 years ago 2 months ago major unassigned Open
#1639 [RFE] Implement 3rd party ID mapper in SSSD    9 4 years ago 2 months ago major yelley Open
#1637 Automatically check for translatable sources added into po/POTFILES.in    7 4 years ago 2 months ago major unassigned Open
#1627 [RFE] Improve efficiency of diff_string_lists (and similar fns)    7 4 years ago 2 months ago major unassigned Open
#1618 Identify SSSD version for newly-added options    4 4 years ago 2 months ago major unassigned Open
#1582 Improve renewing the ccache with LDAP when using GSSAPI    11 4 years ago 2 months ago major unassigned Open
#1580 Only check for group memberships, not GIDs during initgroups (based on option value)    9 4 years ago 2 months ago major unassigned Open
#1550 Validate the SELinux user context with security_canonicalize_context()    9 4 years ago 2 months ago major unassigned Open
#1538 Create a unit test for the principal selection    14 4 years ago 2 months ago major preichl Open
#1527 [RFE] Access to cache credentials is lost on daemon restart    12 4 years ago 2 months ago major unassigned Open
#1465 Man pages are not rebuilt when the included files change    2 4 years ago 2 months ago major unassigned Open
#1450 [RFE] SEED TOOl :: support recreating groups when offline    15 4 years ago 2 months ago major unassigned Open
#1441 sysdb_store_ssh_host() function should add objectclass and name attributes to new hosts    3 4 years ago 2 months ago major unassigned Open
#1413 sssd.conf required to have permissions 0600    4 4 years ago 2 months ago major unassigned Open
#1400 [RFE] In memory fast cache should support negative caching    18 4 years ago 2 months ago major unassigned Open
#1386 [RFE] add way to list default options    6 4 years ago 2 months ago major unassigned Open
#1381 [RFE] Support failover authentication capabilities between Kerberos and LDAP    3 4 years ago 2 months ago major unassigned Open
#1374 Review all DEBUG messages for appropriate reporting level    9 4 years ago 2 months ago major unassigned Open
#1294 Quiet down the startup of sssd    13 5 years ago 2 months ago major arielb Open
#1286 RFE: allow checking both 'member' and 'uniqueMember'    4 5 years ago 2 months ago major unassigned Open
#1164 [RFE] prefer krbcanonicalname to krbprincipalname    22 5 years ago 2 months ago major unassigned Open
#1161 [Feature] Enumeration should be configurable on a per-map basis    3 5 years ago 2 months ago major unassigned Open
#1141 RFE: Add PAM option to allow to skip initgroups completely    4 5 years ago 2 months ago major unassigned Open
#1127 Create test program for krb5_child and ldap_child    18 5 years ago 2 months ago major jhrozek Open
#1062 lookup parent groups during RFC2307bis initgroups in parallel    3 5 years ago 2 months ago major unassigned Open
#1048 sssd should have a mode to only return Usernames for My UID and My Groups.    2 5 years ago 2 months ago major unassigned Open
#1047 Optimize HBAC rule lookups with modifyTimestamp    9 5 years ago 2 months ago major jzeleny Open
#1025 RFE Central management of pam_limits    5 5 years ago 2 months ago major unassigned Open
#992 Create a way to notify an external consumer about changes to the UID/GID    3 5 years ago 2 months ago major unassigned Open
#987 SSSD should use all DNS search domains in resolv.conf    13 5 years ago 2 months ago major unassigned Open
#961 Optionally allow expanding of groups outside of the group search base    7 5 years ago 2 months ago major unassigned Open
#959 Provide a new option for different ways of dealing with multi-valued names not matching RDN    12 5 years ago 2 months ago major jzeleny Open
#931 Support access-control similar to pam_groupdn in LDAP    7 5 years ago 2 months ago major unassigned Open
#908 PAM_RHOST may contain the IP address of the remote host    5 5 years ago 2 months ago major unassigned Open
#903 [RFE] sssd shouldn't use ipv6 if it is disabled    5 5 years ago 2 months ago major unassigned Open
#899 RFE: add option to add OIDs of supported but not listed LDAP controls    3 5 years ago 2 months ago major unassigned Open
#842 pam and nss clients are hanging if backend is dead    3 6 years ago 2 months ago major unassigned Open
#828 keep valid tickets on credentials refreshes    21 6 years ago 2 months ago major unassigned Open
#782 Fatal errors updating the cache should delete the entry    3 6 years ago 2 months ago major unassigned Open
#744 [RFE] Add a "client profile" configuration parameter    3 6 years ago 2 months ago major unassigned Open
#669 Create yubikey auth provider    9 6 years ago 2 months ago major sbose Open
#626 memberOf performance enhancements    24 6 years ago 2 months ago major sgallagh Open
#609 SSSD LDAP provider should support ldapi:// for optimized lookups on a local LDAP server    8 6 years ago 2 months ago major unassigned Open
#569 [REF] Add option like pam_password_prohibit_message of pam_ldap    5 6 years ago 2 months ago major sbose Open
#481 [RFE] autodiscover Kerberos domain through TXT records    13 6 years ago 2 months ago major jhrozek Open
#445 Support for rfc2307bis should also read the memberUid attribute.    14 7 years ago 2 months ago major unassigned Open
#359 SSSD NSS should support host map    9 7 years ago 2 months ago major simo Open
#315 RFE: Add SSSDDomain.get_domain_options() and SSSDDomain.get_provider_options()    3 7 years ago 2 months ago major sgallagh Open
#314 RFE: Add SSSDDomain.get_provider(<subtype>)    3 7 years ago 2 months ago major sgallagh Open
#313 RFE: Add SSSDDomain.list_provider_subtypes() call to SSSDConfig API    4 7 years ago 2 months ago major sgallagh Open
#303 RFE: get[pw|gr]ent should return previously cached users when enumeration = false    5 7 years ago 2 months ago major simo Open
#234 Create common option description mechanism    4 7 years ago 2 months ago major simo Open
#149 PAM conversations should support local and network auth configurations    15 7 years ago 2 months ago major jzeleny Open
#88 Make sure ldap bind doesn't block    20 7 years ago 2 months ago major mnagy Open
#3252 RFE: Support for user limits via cgroups    4 4 months ago 2 months ago minor unassigned Open
#3202 RFE: Autogenerate the SSSD options from a single place (of fewer places at least)    3 7 months ago 2 months ago minor unassigned Open
#3201 [TASK] Create a homepage for SSSD where we could link man pages    11 7 months ago 2 months ago minor unassigned Open
#3115 Parent/s of primary group are not retrieved with tokengroups disabled    5 8 months ago 2 months ago minor unassigned Open
#3081 consider changing defaults for autofs_provider=ldap and ldap_schema=ad    3 9 months ago 2 months ago minor unassigned Open
#3078 use the ERROR and PRINT macros consistently    3 9 months ago 2 months ago minor unassigned Open
#2890 revisit header files and check for missing includes    3 a year ago 2 months ago minor unassigned Open
#2844 Support round-robin in fail over    4 2 years ago 2 months ago minor unassigned Open
#2834 sss_override does not errorout on setting uid=0 but dels prev. override    6 2 years ago 19 days ago minor unassigned Open
#2798 Consider using sdap_steal_objects_in_dom in sdap_get_initgr_user    4 2 years ago 2 months ago minor unassigned Open
#2774 Fix PEP 8 violations in the SSSD's Python code    5 2 years ago 2 months ago minor unassigned Open
#2734 refactor nsupdate_msg_create_common    6 2 years ago 2 months ago minor preichl Open
#2720 Annotate the non-object D-Bus functions as Deprecated in the Introspection XML    3 2 years ago 2 months ago minor unassigned Open
#2679 sssd components mishandles sighup for helper processes    7 2 years ago 2 months ago minor mzidek Open
#2621 The ldap_entry_usn and ldap_rootdse_last_usn options are not documented    3 2 years ago 2 months ago minor unassigned Open
#2600 Predefined user message if chpass_provider = none    4 2 years ago 2 months ago minor unassigned Open
#2595 'unix group id' in sudoUser option is not supported    1 2 years ago 2 months ago minor unassigned Open
#2554 Update spec file according to updated guidelines    11 2 years ago 2 months ago minor lslebodn Open
#2505 Check it ${sysconfdir} and other autoconf/automake variables are expanded correctly    3 2 years ago 2 months ago minor unassigned Open
#2502 RFE: Merge ldap_child and krb5_child    3 2 years ago 2 months ago minor unassigned Open
#2500 RFE: Run the command line tools unprivileged, if possible    4 2 years ago 2 months ago minor unassigned Open
#2482 Use libcap-ng to drop privileges but retain capabilities    3 2 years ago 2 months ago minor unassigned Open
#2332 LDAP: Optionally optimize LDAP searches by objectclass only    5 2 years ago 2 months ago minor unassigned Open
#2329 sbus_get_sender_id_send should chain concurrent request for the same sender    2 2 years ago 2 months ago minor unassigned Open
#2144 proxy backend might get killed if proxied operation takes too long    3 3 years ago 2 months ago minor unassigned Open
#2135 [RFE] Ability of sssd to override shell and homedir per group and per netgroup    16 3 years ago 2 months ago minor preichl Open
#1982 [RFE] ldap_access_filter with variable expansion    4 3 years ago 2 months ago minor unassigned Open
#1978 translated man pages are not picked up when building in parallel build    5 3 years ago 2 months ago minor unassigned Open
#1723 [RFE] Expand kerberos ticket renewal in KCM    22 4 years ago a month ago minor unassigned Open
#1696 sssd: potential LDAP filter injection issues    9 4 years ago 2 months ago minor unassigned Open
#1678 sudoUser %#group_id values not supported    6 4 years ago 2 months ago minor mmsrubar Open
#1676 [RFE] move the ldb files on RPM downgrades if the version was different    3 4 years ago 2 months ago minor unassigned Open
#1665 Do not use AI_ADDRCONFIG    8 4 years ago 2 months ago minor jcholast Open
#1646 [RFE] Leverage GPO policies to define SUDO rules    10 4 years ago 2 months ago minor yelley Open
#1597 [RFE] Add option for sss_cache to force enumerate    2 4 years ago 2 months ago minor unassigned Open
#1362 Fill missing config options in SSSDConfig.py    19 4 years ago 2 months ago minor unassigned Open
#1342 Expose some shadow information to getent or other helper program    8 4 years ago 2 months ago minor unassigned Open
#1314 RFE Request for allowing password changes using SSSD in DS which dont follow OID's from RFC 3062    11 5 years ago 2 months ago minor unassigned Open
#1244 Performance enhancement when looking up case-insensitive netgroups    3 5 years ago 2 months ago minor unassigned Open
#1220 [FEATURE] User/Group Info Tool Feature    6 5 years ago 2 months ago minor unassigned Open
#1212 Gracefully handle -ENOSPC    10 5 years ago 14 days ago minor unassigned Open
#1210 src/man/po/po4a.cfg needs to be autogenerated    10 5 years ago 2 months ago minor jhrozek Open
#1198 Change behavior of clients once shared memory cache is enabled    13 5 years ago 2 months ago minor unassigned Open
#1091 Pass usernames from the NSS responder as byte arrays, not UTF-8 strings    4 5 years ago 2 months ago minor unassigned Open
#1045 SIGUSR2 should force SSSD to reread resolv.conf as well    8 5 years ago 2 months ago minor arielb Open
#1039 [RFE] Improve SSSD operation on diskless systems    7 5 years ago 2 months ago minor unassigned Open
#1015 RFE: Make storing period for password configurable    4 5 years ago 2 months ago minor unassigned Open
#993 SSSD should do failover DNS lookups in parallel    4 5 years ago 2 months ago minor jhrozek Open
#971 Add password quality checks to the local provider    2 5 years ago 2 months ago minor unassigned Open
#948 Provide an option to limit how far in advance the password expiration is displayed    3 5 years ago 2 months ago minor unassigned Open
#884 RFE: Support change in uid and gid number for the same user.    8 5 years ago 2 months ago minor unassigned Open
#801 RFE: SSSDConfig set_option() should accept a list and convert it into CSV    6 6 years ago 2 months ago minor sgallagh Open
#773 Investigate one-level indexing in ldb    3 6 years ago 2 months ago minor unassigned Open
#689 Split sssd-ldap man page    3 6 years ago 2 months ago minor unassigned Open
#678 Add 'nullok' option to pam_sss    3 6 years ago 2 months ago minor unassigned Open
#675 Add UID/GID uniqueness plugin for LDB    18 6 years ago 2 months ago minor simo Open
#633 Build general mechanism to limit number of parallel LDAP request on the same connection    9 6 years ago 2 months ago minor unassigned Open
#553 Now that users and groups can be filter by domain - should remove options in nss section    4 6 years ago 2 months ago minor unassigned Open
#463 Support/Cache OpenAFS Authentication    12 6 years ago 2 months ago minor sbose Open
#412 Split data provider sockets    11 7 years ago 2 months ago minor sgallagh Open
#402 SBUS needs to support introspection    10 7 years ago 2 months ago minor sgallagh Open
#362 Integrate with dnsmasq    4 7 years ago 2 months ago minor jhrozek Open
#361 Create native NIS backend    12 7 years ago 2 months ago minor sgallagh Open
#272 bash completion script    3 7 years ago 2 months ago minor jhrozek Open
#217 [RFE] Support pulling client configuration from ldap    6 7 years ago 2 months ago minor sgallagh Open
#44 Create a -devel package for SSSD back-ends    25 7 years ago 2 months ago minor sgallagh Open
#3290 HTML generated man pages contain two conflicting defaults    3 3 months ago 2 months ago trivial unassigned Open
#2488 sssd DBus service does not produce useful error message/code when sssd is not running.    4 2 years ago 2 months ago trivial unassigned Open
#2416 memory leaks in ldap_child    2 2 years ago 2 months ago trivial unassigned Open
#1876 provide unit tests for the new discovery mechanism    13 4 years ago 2 months ago trivial unassigned Open
#1391 Remove spaces after comment delimiters in the example config file    3 4 years ago 2 months ago trivial unassigned Open
#1328 sss_debuglevel "-c" option should work only with valid sssd.conf file    8 4 years ago 2 months ago trivial unassigned Open
#1309 Add --without-translations option to configure    3 5 years ago 2 months ago trivial unassigned Open
#1117 Clarify how comments work in sssd.conf    6 5 years ago 2 months ago trivial arielb Open
#1009 Provide information about configuration options used    3 5 years ago 2 months ago trivial unassigned Open
#1001 Modify krb5 child to use krb5_get_init_creds_opt_set_out_ccache when possible    18 5 years ago 2 months ago trivial unassigned Open
#500 Better error message for GID out of range    3 6 years ago 2 months ago trivial sgallagh Open
#444 RFE: use mmap to handle parent-child communication    6 7 years ago 2 months ago trivial unassigned Open
SSSD Referrals Feature Opened Modified Priority Assignee Status
#860 [RFE] SSSD should chase referrals explicitly    11 5 years ago 2 months ago critical sgallagh Open
#875 Changing password with a slave openldap server as primary server does not work    10 5 years ago 2 months ago major sgallagh Open
User/Group Info Tool Feature Opened Modified Priority Assignee Status
#1223 RFE: Provide group information in sssd query tool    4 5 years ago 2 months ago minor unassigned Open
#1222 RFE: Support detailed user information in sssd query tool    5 5 years ago 2 months ago minor unassigned Open
#1221 RFE: Support map enumeration is sssd query tool    4 5 years ago 2 months ago minor unassigned Open
Wiki Updates Opened Modified Priority Assignee Status
#2894 Enhance GPO documentation    12 a year ago 2 months ago minor unassigned Open
#1334 Document necessity of 32-bit SSSD for 32-bit software on 64-bit system    4 4 years ago 2 months ago minor unassigned Open