Milestone Roadmap


Open Closed All Active Milestones All Milestones No Milestone SSSD 1.12.5 SSSD 1.13.5 SSSD 1.14.3 SSSD 1.15.4 SSSD 1.16.0 SSSD 2.0 SSSD Continuous integration SSSD Future releases (no date set yet) SSSD Patches welcome SSSD Referrals Feature User/Group Info Tool Feature Wiki Updates breaks compatibility bug docs easyfix performance PR refactoring regression RFE
SSSD 1.12.5 Opened Modified Priority Assignee Status
#1985 expand the developer tutorials with best practices    10 4 years ago 7 months ago minor unassigned Open
#2181 Diagram of relations of our technologies would be nice    13 3 years ago 7 months ago trivial unassigned Open
SSSD 1.13.5 Opened Modified Priority Assignee Status
#2990 Review and update SSSD's wiki pages for 1.13.5 release    3 a year ago 7 months ago blocker unassigned Open
#3045 sssd should fallback to local users with ldap_rfc2307_fallback_to_local_users    7 a year ago 7 months ago critical mzidek Open
#3505 Backport 9b8fcf685c5ca70a5067a621385bcdc8d9fd6469 which fixes UPN login issues to sssd-1-13    7 PR 13 days ago 8 days ago major lslebodn Open
#3274 sssd-1-13 and earlier only: requests without the "fast" flag do not reconnect to the remote server    3 9 months ago 7 months ago minor unassigned Open
SSSD 1.14.3 Opened Modified Priority Assignee Status
#3224 Review and update SSSD's wiki pages for 1.14.3 release    2 11 months ago 7 months ago blocker unassigned Open
#2926 Make list of local PAM services allowed for Smartcard authentication configurable    18 2 years ago 7 months ago critical lslebodn Open
#3272 timestamp entries are not added if the persistent cache entry exists but the timestamp entry does not    4 9 months ago 7 months ago major pcech Open
#3222 sssd still showing ipa user after removed from last group    5 11 months ago 7 months ago major pcech Open
#3208 Need detailed information about config-check option    3 a year ago 7 months ago major mzidek Open
#3197 sssd is incorrectly handling ldap referrals    25 a year ago 7 months ago major fidencio Open
#3117 ipa: getent netgroup does not return result for the first request    6 a year ago 7 months ago major unassigned Open
#3063 add an integration test for the configuration include directories    5 a year ago 7 months ago major unassigned Open
SSSD 1.15.4 Opened Modified Priority Assignee Status
#3504 intermittent failures in test_idle_timeout    2 13 days ago 5 days ago blocker fidencio Open
#3463 TESTS: make intgcheck is not always passing in the internal CI (enumeration tests)    9 a month ago a month ago blocker unassigned Open
#3337 Options allowed in subdomain_inherit should be allowed in subdomain section of sssd.conf    9 PR 6 months ago 14 days ago blocker mzidek Open
#3434 KCM: Track the SELinux label of the peer    3 3 months ago 21 hours ago critical jhrozek Open
#3420 kdcproxy + offline caching does not wok in offline mode    20 3 months ago 13 days ago critical jhrozek Open
#3386 sssd-kcm cannot handle big tickets    12 4 months ago 2 months ago critical jhrozek Open
#3499 Change the ldap_user_certificate to userCertificate;binary for the generic LDAP provider as well    5 easyfix PR 15 days ago 6 days ago major unassigned Open
#3470 sssd-kcm crashes with multiple parallel requests    5 a month ago a month ago major unassigned Open
#3465 sssd_be memory leak on EL6 and EL7    17 a month ago 20 days ago major unassigned Open
#3449 Fleet Commander with SSSD: Having to specify a host or hostgroup to get profiles apply to an user    9 PR 2 months ago a month ago major fidencio Open
#3324 GPO Security Filtering and Access Control are not Compliant with MS-ADTS    6 PR 6 months ago 6 days ago major mzidek Open
#3323 The sssd-$RESPONDER.service units should bind to their socket units    9 PR 6 months ago a month ago major fidencio Open
#3312 SSSD AD Failover Failure    9 7 months ago 6 days ago major unassigned Open
#3282 Group renaming issue when "id_provider = ldap" is set.    7 PR 8 months ago a month ago major fidencio Open
#3455 Document differences between heimdal's KCM and sssd's KCM in the sssd-kcm man page    2 docs 2 months ago a month ago minor unassigned Open
#3341 implicit_files domain should not try authentication because /etc/shadow is not supported.    5 docs 6 months ago a month ago minor unassigned Open
#3333 usermod -a -G bar foo fails due to some file providers races    2 6 months ago a month ago minor unassigned Open
#3147 sssctl: get and set debug level    13 easyfix PR a year ago a month ago minor jstephen Open
#3057 Merge existing command line tools into sssctl    6 PR a year ago 2 months ago minor jstephen Open
#3353 make intgcheck doesn't warn that kdc needs to be installed    5 PR 6 months ago 2 months ago trivial pcech Open
SSSD 1.16.0 Opened Modified Priority Assignee Status
#3507 Long search filters are created during IPA sudo command + command group retrieval    10 PR 11 days ago 5 days ago jstephen Open
#3496 [RFE] Add a configuration option to SSSD to disable the memory cache    4 19 days ago 8 days ago mzidek Open
#3489 p11_child should work wit openssl1.0+    1 a month ago 19 days ago unassigned Open
#3484 MAN: Describe the constrains of ipa_server_mode better in the man page    3 docs easyfix a month ago 19 days ago unassigned Open
#3401 sssd does not failover to another IPA server if just the KDC service fails    2 bug 4 months ago a month ago blocker unassigned Open
#1872 [RFE] Support User Private Groups for main domains, too    31 RFE 4 years ago a month ago blocker unassigned Open
#3503 Do not index objectclass, add and index objectcategory instead    1 PR performance RFE 13 days ago 8 days ago critical sbose Open
#3413 kdestroy -A doesn't work with more than 2 principals    5 4 months ago a month ago critical unassigned Open
#3335 GPO retrieval doesn't work if SMB1 is disabled    6 6 months ago a month ago critical mzidek Open
#3155 RFE: Return message when authentication fails because the machine is offline    14 easyfix a year ago a month ago critical unassigned Open
#2840 [RFE] Produce access control attestation report    7 RFE 2 years ago a month ago critical unassigned Open
#2727 Add a memcache for SID-by-id lookups    9 RFE 2 years ago a month ago critical lslebodn Open
#3471 RFE: lazy parsing of object received from LDAP    3 performance RFE a month ago a month ago major unassigned Open
#3468 SSSD doesn't use AD global catalog for gidnumber lookup, resulting in unacceptable delay for large forests    4 performance a month ago a month ago major unassigned Open
#3462 pam_sss tests using the pam-wrapper project    3 PR 2 months ago a month ago major jhrozek Open
#3451 When sssd is configured with id_provider proxy and auth_provider ldap, login fails if the LDAP server is not allowing anonymous binds.    5 bug 2 months ago a month ago major unassigned Open
#3443 [rfe] sssd should be able to process host-based security filtering when processing active directory gpos    4 3 months ago a month ago major unassigned Open
#3425 ldap_group_nesting_level 0 still leads to searches for parent groups of groups with rfc2307bis schema    24 3 months ago a month ago major jstephen Open
#3416 Add systemtap probes into handler codepaths    8 RFE 4 months ago 14 days ago major jstephen Open
#3412 IPA: read realmdomains and add matching entries for [domain_realm] in krb5.conf    3 4 months ago a month ago major unassigned Open
#3388 If two certificate matching rules with the same priority match only one is used    13 4 months ago a month ago major unassigned Open
#3380 sssd will resolve groups with different domain than default_domain_suffix without domain    32 5 months ago a month ago major unassigned Open
#3336 subdomains: dp_options should indicate what option can be inherited    6 6 months ago a month ago major mzidek Open
#3307 RFE: Log to syslog when sssd cannot contact servers, goes offline    5 RFE 7 months ago a month ago major unassigned Open
#3294 Enumeration is not restarted later if the first run fails because sssd is offline    5 7 months ago a month ago major unassigned Open
#3265 [RFE] sssd should remember DNS sites from first search    6 RFE 9 months ago a month ago major unassigned Open
#3264 [RFE] Make 2FA prompting configurable    5 RFE 9 months ago a month ago major unassigned Open
#3247 [RFE] Allow user private groups for trusted users when POSIX attributes are coming from AD    5 RFE 10 months ago a month ago major unassigned Open
#3219 [RFE] Regular expression used in sssd.conf not being able to consume an @-sign in the user/group name.    3 RFE 11 months ago a month ago major unassigned Open
#2976 sdap code can mark the whole sssd_be offline    15 2 years ago a month ago major fidencio Open
#2821 Integration tests: Test authentication + authorisation    13 2 years ago a month ago major jhrozek Open
#2653 Group renaming issue when "id_provider = ldap" is set.    11 PR 2 years ago a month ago major fidencio Open
#1729 Enumerating large number of users makes sssd_be hog the cpu for a long time.    16 performance 4 years ago a month ago major unassigned Open
#3486 Improve `enumerate` documentation/troubleshooting guide    2 docs a month ago 13 days ago minor unassigned Open
#3467 online detection in case sssd starts before network does appears to be broken    3 a month ago a month ago minor unassigned Open
#3457 sssd-sudo uses SID instead of group name on AD    9 2 months ago 8 days ago minor pbrezina Open
#3444 document information on why SSSD does not use host-based security filtering when processing AD GPOs    6 docs 3 months ago a month ago minor unassigned Open
#3439 Snippets are not used when sssd.conf does not exist    7 3 months ago a month ago minor unassigned Open
#3436 Certificates used in unit tests have limited lifetime    4 3 months ago a month ago minor unassigned Open
#3433 SYSLOG_IDENTIFIER is different    10 regression 3 months ago 4 days ago minor unassigned Open
#3402 Support alternative sources for the files provider    8 easyfix 4 months ago a month ago minor jstephen Open
#3376 root user unable to access users kerberos cache from KCM backend    15 5 months ago a month ago minor unassigned Open
#3338 subdomains: Remove code only used in tests    6 6 months ago a month ago minor mzidek Open
#3321 userCertificate is not removed from entry in cache    7 6 months ago a month ago minor unassigned Open
#3319 Review the use of domain_scope in sysdb_*upn functions    4 refactoring 6 months ago a month ago minor unassigned Open
#3302 KCM: Offer configurable session-scoped access control to credentials    6 7 months ago a month ago minor unassigned Open
#3293 SSSD authentication fails when two IPA accounts share an email address    6 7 months ago a month ago minor unassigned Open
#3253 Add Troubleshooting information for systemd integration    7 docs 9 months ago a month ago minor unassigned Open
#3211 Refactor the sdap_async_groups.c module    10 a year ago a month ago minor pcech Open
#3198 Incorrect error code returned from krb5_child for expired/locked user with id_provider AD    11 a year ago a month ago minor lslebodn Open
#3126 let the responder choose the level of sysdb write optimization    10 a year ago a month ago minor unassigned Open
#3048 amend the Internals Document for the new DP interface    12 docs a year ago a month ago minor pbrezina Open
#2615 refactor pam_reply()    16 2 years ago a month ago minor jhrozek Open
#2494 Allow sssd to retrieve sudo rules of local users whose sudo rules stored in ldap server    9 2 years ago a month ago minor unassigned Open
#3475 Full information regarding priority of lookup of principal in keytab not in man page    3 a month ago a month ago trivial unassigned Open
#3469 extend sss-certmap man page regarding priority processing    3 a month ago a month ago trivial unassigned Open
#3411 write up nslcd-sssd comparison    4 docs 4 months ago a month ago trivial unassigned Open
SSSD 2.0 Opened Modified Priority Assignee Status
#3515 Disable host wildcards in sudoHost attribute (ldap_sudo_include_regexp=false)    3 breaks compatibility 6 days ago 2 days ago unassigned Open
#3512 pam_sss: add new option to check only if a local user is configured for smartcard authentication    3 7 days ago 5 days ago sbose Open
#3502 Hardening of systemd services    3 15 days ago 8 days ago lslebodn Open
#3500 Make sure sssd is a replacement for pam_pkcs11 also for local account authentication    1 15 days ago 8 days ago unassigned Open
#3495 Default for OpenSSL for crypto    1 20 days ago 19 days ago unassigned Open
#3494 Remove the special-case for RFC2307bis with zero nesting level    2 breaks compatibility 20 days ago 6 days ago unassigned Open
#3493 Remove the pysss.local interface    2 breaks compatibility 20 days ago 6 days ago unassigned Open
#3492 Remove support for ldap_groups_use_matching_rule_in_chain and ldap_initgroups_use_matching_rule_in_chain    2 breaks compatibility 20 days ago 6 days ago unassigned Open
#3352 Enabling socket-activate services to refresh configuration    4 6 months ago a month ago unassigned Open
#2228 [RFE] Manage local users from /etc/passwd and account service    24 3 years ago 15 days ago blocker unassigned Open
#3304 Only build the local provider conditionally    12 breaks compatibility 7 months ago 6 days ago major unassigned Open
#3242 Provide a "writable" D-Bus management API for local users    7 10 months ago 15 days ago major unassigned Open
#3217 Conflicting default timeout values    20 a year ago a month ago major pbrezina Open
#3138 Enable socket-activate services to refresh configuration    16 a year ago a month ago major fidencio Open
SSSD Continuous integration Opened Modified Priority Assignee Status
#2429 contrib/ci/run script: CI script cannot be executed from different directory.    15 3 years ago 7 months ago critical lslebodn Open
#3276 Revert workaround in CI for bug in python-{request,urllib3}    4 8 months ago 7 months ago major unassigned Open
#3119 CI: add netgroup tests with LDAP provider    5 a year ago 7 months ago major unassigned Open
#2933 FAIL: test_child_common    3 2 years ago 7 months ago major unassigned Open
#2883 CI: Make it possible to run tests against a real server    4 2 years ago 7 months ago major unassigned Open
#2864 tests: when testing GetAll, make sure non-POSIX groups are tested    4 2 years ago 7 months ago major unassigned Open
#2854 FAIL test-find-uid    6 2 years ago 7 months ago major unassigned Open
#2825 Integration tests: Implement tests for infopipe provider    5 2 years ago 7 months ago major unassigned Open
#2824 Integration tests: Prepare test plan for infopipe provider    8 2 years ago 7 months ago major sidecontrol Open
#2822 Integration tests: Use krb5kdc in cwrap enviroment for test    5 2 years ago 7 months ago major unassigned Open
#2818 Investigate if Samba4 in Fedora can be used for SSSD CI    14 2 years ago 7 months ago major pcech Open
#2696 CI: make intgcheck fails from git root dir    4 2 years ago 7 months ago major unassigned Open
#2693 CI: Fix crash in test_ipa_subdomains_server    4 2 years ago 7 months ago major unassigned Open
#2545 Support specifying data and socket locations at startup    4 2 years ago 7 months ago major unassigned Open
#2541 Implement LDAP integration tests    6 2 years ago 7 months ago major nkondras Open
#2277 Develop a set of upstream tests using cwrap    5 3 years ago 7 months ago major unassigned Open
#637 Enhance test suite to run test against running sssd and LDAP server    13 6 years ago 7 months ago major unassigned Open
#3058 The sssctl tool is missing integration tests    9 a year ago 7 months ago minor pcech Open
#2935 Add filter_users/filter_groups LDAP integration tests    2 2 years ago 7 months ago minor unassigned Open
#2859 CI: libsemanage functions fail in intgcheck tests    6 2 years ago 7 months ago minor mzidek Open
#2832 Add support for snapshotting SSSD logs on any integration test failure    2 2 years ago 7 months ago minor unassigned Open
#2831 Add support for attaching gdb to SSSD instances running in integration tests    2 2 years ago 7 months ago minor unassigned Open
#2823 Integration tests: Use dbus-daemon in cwrap enviroment for test    10 2 years ago 7 months ago minor lslebodn Open
#2820 Integration tests: test ldap provider with TLS or SSL    9 2 years ago 7 months ago minor sidecontrol Open
#2753 FAIL: test_be_ptask    6 2 years ago 7 months ago minor unassigned Open
#2695 CI: Code coverage does not include integration tests    5 2 years ago 7 months ago minor unassigned Open
#2694 CI: Fix ramshackle test_ipa_subdomains_server (FAIL: test_ipa_subdom_server)    20 2 years ago 7 months ago minor unassigned Open
#2425 contrib/ci/run script: Add option to disable/enable specific tasks    5 3 years ago 7 months ago minor nkondras Open
#2419 unit tests for ldap access provider    6 3 years ago 7 months ago minor unassigned Open
#2366 Add compiler warning tracking to CI    4 3 years ago 7 months ago minor nkondras Open
#2365 Add coding style verification to CI    4 3 years ago 7 months ago minor nkondras Open
SSSD Future releases (no date set yet) Opened Modified Priority Assignee Status
#3506 Feature Request: Need transaction ids associated with log entries    3 11 days ago 4 days ago unassigned Open
#3497 TOOLS: Add feature to delete the cached GPOs    2 18 days ago 8 days ago unassigned Open
#3483 sssd cannot translate SIDs S-1-22-{1,2}-*    8 a month ago 19 days ago unassigned Open
#3446 password cache: use a better hash algorithm    2 2 months ago 2 months ago unassigned Open
#3423 Warn to syslog if secrets quota is (being) exceeded    5 3 months ago 3 months ago unassigned Open
#3422 RFE: A tool to inspect sssd-secrets quotas    1 3 months ago 3 months ago unassigned Open
#3415 Review default settings with respect to FAST vs ticket validation    2 performance RFE 4 months ago 3 months ago unassigned Open
#3414 ifp: Attempted to unregister path (path[0] = org path[1] = freedesktop) which isn't registered    1 4 months ago 3 months ago unassigned Open
#3409 Optimize IPA-specific LDAP searches to improve performance    1 4 months ago 3 months ago unassigned Open
#3396 RFE: remove allow_missing_name PAM option    1 4 months ago 3 months ago unassigned Open
#3370 sssd-secrets: support gssapi as authentication method against proxy server    2 5 months ago 5 months ago unassigned Open
#3368 IFP: Return an error, not a default value for some attributes should not be read    1 5 months ago 5 months ago unassigned Open
#3357 Support autodiscovered subdomains with application type domains    4 6 months ago a month ago unassigned Open
#3348 KCM: Implement a shim layer to format FILE-based credentials from KCM credential cache    1 6 months ago 6 months ago unassigned Open
#3328 Use search_all_domains in the list IFP methods    4 easyfix refactoring 6 months ago a month ago unassigned Open
#3325 python module configures services line in random order, breaking idempotency    4 6 months ago 6 months ago unassigned Open
#2908 [RFE] Support OTP logins for AD trust users    2 2 years ago 7 months ago blocker unassigned Open
#2240 [RFE] make nss/pam modules released independently of SSSD source tree    12 3 years ago 7 months ago blocker unassigned Open
#2728 [RFE] Support KDC proxying of trusted domain operations to IPA master    7 2 years ago 7 months ago critical unassigned Open
#2328 IFP: Use PolicyKit for access control    9 3 years ago 7 months ago critical unassigned Open
#2012 [RFE] Support NTLM authentication when GSSAPI NTLM mech is available    8 4 years ago 7 months ago critical unassigned Open
#3390 [RFE] Improve the way getdomains request is used by cache_req    7 4 months ago a month ago major unassigned Open
#3291 RFE: sssd in cross realm trust configuration should be able to find AD KDCs from client site    2 7 months ago 7 months ago major unassigned Open
#3289 [RFE] Support U2F authentication workflow    4 8 months ago 7 months ago major unassigned Open
#3285 SSSD needs restart after incorrect clock is corrected with AD    12 8 months ago 7 months ago major unassigned Open
#3271 Go back to mainloop while processing large enumeration results    3 9 months ago 7 months ago major unassigned Open
#3263 consider adding sudo-i to the list of pam_response_filter services by default    3 9 months ago 7 months ago major unassigned Open
#3255 Add SSSD to the OSS-Fuzz initiative    8 9 months ago a month ago major unassigned Open
#3251 Don't enter offline mode if GC resolution fails, but gracefully disable GC lookups    3 9 months ago 7 months ago major unassigned Open
#3249 [RFE] To let sssd to lookup certain users or groups (opposite to filter_users or filter_groups)    3 10 months ago 7 months ago major unassigned Open
#3243 Ding-libs changes required for sssctl config-show    6 10 months ago a month ago major unassigned Open
#3193 [RFE] Support aliases in the memory cache    5 a year ago 7 months ago major unassigned Open
#3183 [RFC] IPA: allow switching off user private groups for trusted AD users    5 a year ago 7 months ago major unassigned Open
#3170 PAC: Process domain-local groups from another domain    3 a year ago 7 months ago major unassigned Open
#3157 Add sssctl config-show command    15 a year ago a month ago major mzidek Open
#3148 allow each responder to create a dbus server    7 a year ago 6 months ago major pbrezina Open
#3105 SSSD cant parse GPO if AD server have Russain language    24 a year ago 7 months ago major unassigned Open
#3099 sssctl to run as non-root    3 a year ago 7 months ago major unassigned Open
#3083 sssd crashes in offline mode(when system is NOT connected to network) if AD forest is defined in ad_access_filter    2 a year ago 7 months ago major unassigned Open
#3075 [RFE] Allow cached_auth_timeout to be applied per service and/or user    7 a year ago 7 months ago major unassigned Open
#3067 watch changes to config snippets and only reload them on demand    4 a year ago 7 months ago major unassigned Open
#3049 SSSD should respect krbprincipalexpiration in IPA for any authentication method    7 a year ago a month ago major unassigned Open
#3047 Remove selinux_provider    3 a year ago 7 months ago major unassigned Open
#3014 machine credentials renewal with adcli doesn't work as non-root    4 a year ago 7 months ago major unassigned Open
#3008 Document dbus integration for 3rd parties    5 a year ago 7 months ago major unassigned Open
#3004 SSSD does not update enumerated services properly    5 a year ago 7 months ago major unassigned Open
#2992 SSSD does not destroy user Kerberos cache upon logout    7 a year ago 7 months ago major unassigned Open
#2991 Filter out replication conflict entries    6 a year ago a month ago major unassigned Open
#2985 Make map_krb5_error() aware of SSSD's internal error codes    3 a year ago 7 months ago major unassigned Open
#2979 id does not list all groups after upgrade sssd-1.12.4-47 to sssd-1.13.3-22    3 a year ago 7 months ago major pcech Open
#2967 Intermittent attribute retrieval failure from AD    13 2 years ago 7 months ago major lslebodn Open
#2963 GPO: Blocked access after switching from root mode to non-root mode    4 2 years ago 7 months ago major unassigned Open
#2954 RFE: Add dbus method to perform talloc memory context dump    5 2 years ago 7 months ago major unassigned Open
#2953 Provide offline password change    4 2 years ago 7 months ago major unassigned Open
#2952 Adding a nested group hierarchy breaks ghost/memberUid propagation    4 2 years ago 7 months ago major unassigned Open
#2949 use sdap_search_bases_send() in code    3 2 years ago 7 months ago major unassigned Open
#2943 Split out the requests for IPA users and groups that include overrides into reusable requests    5 2 years ago 7 months ago major unassigned Open
#2942 Use teven's thread support to resolve A/AAAA records with libresolv's resolver    2 2 years ago 7 months ago major unassigned Open
#2915 Make the libsss_idmap.so library private    7 2 years ago 7 months ago major unassigned Open
#2885 Provide documentation how to handle setups with and without server-side POSIX attributes    3 2 years ago 7 months ago major unassigned Open
#2884 [RFE] Trigger full refresh of sudo rules on desire    13 2 years ago a month ago major pcech Open
#2876 RFE : enable SSSD to support range retrieval even when the search filters are being used    4 2 years ago 7 months ago major unassigned Open
#2873 DDNS - make adding and deleting PTR record in one transaction    7 2 years ago 7 months ago major unassigned Open
#2872 DDNS - add server and realm commands for AAAA    17 2 years ago 7 months ago major preichl Open
#2851 Account expiration attributes are not honored unless replicated to GC    14 2 years ago 7 months ago major unassigned Open
#2847 Create rules for OpenSCAP    8 2 years ago 7 months ago major jhrozek Open
#2836 Add support for iCal based time rules to libipa_hbac    8 2 years ago 7 months ago major stlaz Open
#2815 Optimize GPO logins    3 2 years ago 7 months ago major unassigned Open
#2808 Replace hexadecimal debug level code in log messages with a text tag    14 2 years ago 7 months ago major pcech Open
#2795 [RFE] Make initgroups request during login more configurable    9 2 years ago 7 months ago major pcech Open
#2794 [RFE] Provide interface which returns group-memberships by name for a given user    5 2 years ago 7 months ago major unassigned Open
#2767 The sdap_op code always ends request with EAGAIN    4 2 years ago 7 months ago major unassigned Open
#2763 [RFE] sssd: multilevel sub-domain support    6 2 years ago 7 months ago major unassigned Open
#2760 sss_cache & negative cache - improve behaviour    6 2 years ago 7 months ago major pcech Open
#2752 Detect captive portals and make sure SSSD treats networks with them as offline    7 2 years ago 7 months ago major unassigned Open
#2740 Add examples to retrieve user/group attributes from the bus in popular languages    6 2 years ago 7 months ago major unassigned Open
#2707 make the list of localauth plugins configurable    4 2 years ago 7 months ago major unassigned Open
#2705 RFE: AD Provider POSIX UID/GID Priority with Autogenerated UID/GID Failover    3 2 years ago 7 months ago major unassigned Open
#2702 RFE: Improve AD site discovery process    12 2 years ago 7 months ago major unassigned Open
#2684 D-Bus interface for InfoPipe.GetUserAttr returns base64 encoded values for octetString attributes    4 2 years ago 7 months ago major unassigned Open
#2665 krb5_map_user shoiud support mapping to a full principal name including REALM    4 2 years ago 7 months ago major preichl Open
#2651 [RFE] idmap_rid support added to sssd    5 2 years ago 7 months ago major unassigned Open
#2623 RFE: Add an option to clear cached entries even if offline    7 2 years ago 7 months ago major unassigned Open
#2589 Return normalized authenticated user name in PAM environment    12 2 years ago 7 months ago major mzidek Open
#2578 Check the usage of ldb_msg_find_attr_as_uint64    6 2 years ago 7 months ago major sbose Open
#2562 sssd can timeout ldap network connection incorrectly    16 2 years ago 7 months ago major unassigned Open
#2555 Handle setups with local nameservers better    17 2 years ago 7 months ago major unassigned Open
#2499 RFE: Support multiple IP addresses resolved from a single host name    7 2 years ago 7 months ago major pbrezina Open
#2476 Return domain of the authenticated user in PAM environment    18 2 years ago 7 months ago major mzidek Open
#2474 AD: do not override existing home-dir or shell if they are not available in the global catalog    9 2 years ago 7 months ago major unassigned Open
#2469 Read-only confdb in responders    6 2 years ago 7 months ago major unassigned Open
#2465 [RFE] Refactor SSSD to use configuration from ding-libs instead of DB    6 2 years ago 7 months ago major unassigned Open
#2458 [RFE] Support IPA as a member server in AD (SSSD part)    5 2 years ago 7 months ago major unassigned Open
#2417 refactor sdap_nested_group_hash_group    11 3 years ago 7 months ago major preichl Open
#2394 redesign failover    8 3 years ago 7 months ago major unassigned Open
#2393 failover: enable different dns discovery domain for AD subdomains    8 3 years ago 7 months ago major unassigned Open
#2378 Return connected state in sss_ldap_init_recv()    6 3 years ago 7 months ago major unassigned Open
#2371 autofs: return a connection failure until maps have been fetched    12 3 years ago a month ago major unassigned Open
#2327 SBUS: Support the ObjectManager interface    7 3 years ago 7 months ago major unassigned Open
#2261 investigate our netlink integration with virtual interfaces provided by Docker    14 easyfix 3 years ago 2 months ago major unassigned Open
#2249 [RFE] SSSD should save and compare configuration    9 3 years ago 7 months ago major unassigned Open
#2244 [RFE] Support UID/GID changes    7 3 years ago 7 months ago major unassigned Open
#2233 RFE: Add a sbus signal send support    13 3 years ago 7 months ago major pbrezina Open
#2231 RFE: Drop the monitor process    6 3 years ago 7 months ago major unassigned Open
#2230 RFE: The 'domains' option should not be required    8 3 years ago 7 months ago major unassigned Open
#2229 Ship an immutable recovery mode config for local accounts    15 3 years ago 7 months ago major jhrozek Open
#2222 [RFE] Intergation with GNOME Keyring (phase 2)    12 3 years ago 7 months ago major unassigned Open
#2221 [RFE] Intergation with GNOME Keyring (phase 1)    16 3 years ago 7 months ago major unassigned Open
#2205 Always store home directory expansions to sysdb    16 3 years ago 7 months ago major preichl Open
#2187 [RFE] Expose different identity domains to different D-BUS consumers    11 3 years ago 7 months ago major pbrezina Open
#2174 [RFE] Store the "last password change" field with higher resolution than 24 hours    5 3 years ago 7 months ago major unassigned Open
#2122 Register responders only if backend initialization is complete    7 3 years ago 7 months ago major unassigned Open
#2117 [RFE] SID-Mapping: Store non-POSIX users in cache if they have a SID    17 3 years ago 7 months ago major preichl Open
#2088 Reorganize the sssd-ldap manual page    13 easyfix 4 years ago 2 months ago major unassigned Open
#2078 [RFE] Support AD users from a trusted forest in sssd-ad provider    11 4 years ago 7 days ago major unassigned Open
#2038 Review the structures introduced by GC lookups feature and server mode    11 4 years ago 7 months ago major unassigned Open
#2015 SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack    18 4 years ago 2 months ago major preichl Open
#1983 move the sudo library outside libdir    9 4 years ago 7 months ago major mmsrubar Open
#1981 [RFE] Allow updates and removal of ranges    8 4 years ago 7 months ago major unassigned Open
#1975 [RFE] Change the default of ldap_access_order    8 4 years ago 7 months ago major preichl Open
#1925 [RFE] Build a generic mechanism to invoke a callback after a provider is reconfigured    5 4 years ago 7 months ago major unassigned Open
#1907 Split the man dyndns man page options into an included file    4 4 years ago 7 months ago major unassigned Open
#1902 Investigate checking for subdomains expiration in responder_get_domain()    10 4 years ago 7 months ago major unassigned Open
#1887 [RFE] sss_cache should be able to clear ID-mappings    4 4 years ago 7 months ago major unassigned Open
#1851 filter out ipv6 autoconfiguration from libnl messages    2 4 years ago 7 months ago major unassigned Open
#1837 [RFE] Use extended data blob to extract error msg on AD krb password changes    7 4 years ago 7 months ago major unassigned Open
#1836 Support user credentials in during rebind    4 4 years ago 7 months ago major unassigned Open
#1828 [RFE] Tool to display current configuration    28 4 years ago a month ago major pbrezina Open
#1788 [RFE] Create a command line tool to return the current debug level of sssd    17 4 years ago 7 months ago major preichl Open
#1719 [RFE] Improve offline mode performance    5 4 years ago 7 months ago major unassigned Open
#1715 [RFE] Create a way to handle UID/GID changes in the central server    5 4 years ago 7 months ago major unassigned Open
#1691 [RFE] add a sss_cache option to completely remove the user from cache, not just invalidate    5 4 years ago 7 months ago major unassigned Open
#1653 [RFE] Reconsider the use of memberof in initgroups    8 4 years ago 7 months ago major unassigned Open
#1572 [RFE] Integrate local provider with user managment utilities on the system    4 4 years ago 7 months ago major unassigned Open
#1522 Delete a fail over server after all pending request have finished    8 5 years ago 7 months ago major unassigned Open
#1518 [RFE] Better diagnose keytab mismatch    7 5 years ago 7 months ago major unassigned Open
#1507 Investigate terminating connections in sdap_ops.c and comment the code some more    21 5 years ago 6 months ago major unassigned Open
#1493 [RFE] SSSD should ignore offline timeout for auth when cached_credentials = false    15 5 years ago 7 months ago major preichl Open
#1397 [RFE] Pull in automount location for the host    7 5 years ago 7 months ago major unassigned Open
#1372 Set debug level to 2 by default    22 5 years ago 7 months ago major pcech Open
#1369 automount location changes not reflected    7 5 years ago 7 months ago major unassigned Open
#1326 [RFE] Allow chaining access_provider    7 5 years ago 7 months ago major unassigned Open
#1162 [Feature] Add RADIUS authentication provider to SSSD    10 5 years ago 7 months ago major unassigned Open
#1083 move the resolover cache handling from fail over to a new layer atop resolver    16 5 years ago 7 months ago major unassigned Open
#941 return multiple server addresses to the Kerberos locator plugin    31 6 years ago 7 months ago major unassigned Open
#3432 sysdb_search_users_by_timestamp() searches in the ts cache, but doesn't merge back ts entries    2 3 months ago 3 months ago minor unassigned Open
#3158 sssctl config-check does not show what file contains the problem    13 a year ago a month ago minor amitkumar25nov Open
#3115 Parent/s of primary group are not retrieved with tokengroups disabled    10 a year ago 8 days ago minor unassigned Open
#3021 RFE: pam_echo to provide instructive output to users in pam stacks proxied by pam_sss.    3 a year ago 7 months ago minor unassigned Open
#3020 sssd does not read in configuration file if changed during the last second    8 a year ago 7 months ago minor unassigned Open
#3002 [RFE] Improve libwbclient functionality wrt fully qualified names    8 a year ago 7 months ago minor unassigned Open
#2983 amend the release process to include building COPR repositories    7 a year ago 7 months ago minor unassigned Open
#2982 SSSD complains about multiple groups having same GID    6 a year ago 7 months ago minor unassigned Open
#2975 optimize the LDAP search filter when looking for a specific ID    3 2 years ago 7 months ago minor unassigned Open
#2945 RFE: Provide a solution so local override data can persist during cache clears    4 2 years ago 7 months ago minor unassigned Open
#2882 Comparison between talloc and talloc_pool    9 2 years ago 7 months ago minor unassigned Open
#2879 Add multiple domains tests to responder_cache_req-tests    6 easyfix 2 years ago 2 months ago minor unassigned Open
#2875 use thread-local storage for the client-side socket    7 2 years ago 7 months ago minor unassigned Open
#2867 Non-POSIX groups are not seen in the IFP object interface - add a warning    9 2 years ago 6 months ago minor unassigned Open
#2843 Enhance sdap_get_generic_ext_step() to pass timeout argument to ldap_search_ext    8 2 years ago 7 months ago minor preichl Open
#2806 AD subdomain code has no tests    9 2 years ago 7 months ago minor jhrozek Open
#2710 Propagate error about multiple entries found from cache_req to responder    7 easyfix 2 years ago 2 months ago minor unassigned Open
#2689 proxy_child hardening    4 2 years ago 7 months ago minor pcech Open
#2685 Internal error in domain log on starting sssd    3 2 years ago 7 months ago minor unassigned Open
#2677 Check using zero for trust direction of a member domain    7 2 years ago 7 months ago minor unassigned Open
#2674 reduce the code duplication of timeout setting with child processes    11 easyfix 2 years ago 2 months ago minor unassigned Open
#2670 Log File Access Issues    4 2 years ago 7 months ago minor unassigned Open
#2664 Shortcut enumeration requests sooner than in the back ends    6 easyfix 2 years ago 2 months ago minor unassigned Open
#2607 sssd should not always read entire autofs map from ldap    13 2 years ago a month ago minor unassigned Open
#2605 Skip replication conflict entries in the IPA provider    12 2 years ago 7 months ago minor mzidek Open
#2551 RFE To delete kerberos tickets once the user logs out (might be with KCM sessions)    6 2 years ago 6 months ago minor unassigned Open
#2508 Handle AD clients with FQDN longer than 15 characters    6 2 years ago 7 months ago minor preichl Open
#2489 refactor fill_pwent    4 2 years ago 7 months ago minor unassigned Open
#2480 sdap_extend_map_with_list() might leak memory if used the 4th and 6th argument being the same    8 easyfix 2 years ago 2 months ago minor unassigned Open
#2479 Make return codes of sysdb_*_with_views operations consistent    8 2 years ago 7 months ago minor preichl Open
#2478 Provide sss_nss_* API to directly query SSSD instead of nsswitch.conf route    5 2 years ago 7 months ago minor unassigned Open
#2450 Implement dbus call to create socket on the fly to provides services for a set of domains    6 2 years ago 7 months ago minor unassigned Open
#2438 [RFE] Make it possible to use different Unix socket path, use it for distinguishing domains    7 3 years ago 7 months ago minor unassigned Open
#2434 Expose ldap filter for users as configuration item    9 3 years ago 7 months ago minor unassigned Open
#2422 Optimize validation away when FAST channel is used    8 3 years ago 7 months ago minor unassigned Open
#2414 [RFE] Support name@domain notation with our libwbclient interface    6 3 years ago 7 months ago minor unassigned Open
#2411 [RFE] Session Tracking Control    5 3 years ago 7 months ago minor unassigned Open
#2381 Fix lookup_netgr_step() not to access result of sysdb_getnetgr() in case of ret-val ENOENT    5 3 years ago 7 months ago minor unassigned Open
#2379 Do LDAP bind in get_user_dn_send() before calling sdap_search_user_send()    5 3 years ago 7 months ago minor unassigned Open
#2353 [RFE] Add support for S-1-22-* SIDs used by Samba    6 3 years ago 7 months ago minor unassigned Open
#2337 [RFE] Implement org.freedesktop.DBus.Properties.Set    12 3 years ago 7 months ago minor unassigned Open
#2336 Refactor sdap_attr_map to contain the map and the count in one structure    6 3 years ago 7 months ago minor unassigned Open
#2324 [RFE] Implement rate limiting for non privileged clients    6 3 years ago 7 months ago minor unassigned Open
#2316 sudoNotBefore time is not always respected    7 3 years ago 7 months ago minor unassigned Open
#2310 Wrong principal selected for AD authentication with lowercase machine account    12 3 years ago 7 months ago minor sbose Open
#2301 Print a warning when enumeration is requrested but disabled    10 easyfix 3 years ago 2 months ago minor unassigned Open
#2299 Password-less login is allowed for expired ad user    10 3 years ago 7 months ago minor unassigned Open
#2276 Enable rootDSE code to retrieve configurationNamingContext attribute    10 3 years ago 7 months ago minor unassigned Open
#2255 Finish promtly when non existing user is requested in server mode    6 3 years ago 7 months ago minor unassigned Open
#2250 [RFE] If the cache is corrupt start with the fresh cache    11 3 years ago 2 months ago minor unassigned Open
#2217 [RFE] Discard and re-acquire kerberos ticket if get kerberos failure    6 3 years ago 7 months ago minor unassigned Open
#2216 Inspect the usage of find_subdomain_by_sid    16 3 years ago 7 months ago minor lslebodn Open
#2180 [RFE] Fetch netgroups hierarchy in one request.    2 3 years ago 7 months ago minor unassigned Open
#2141 convert backend specific options to dp_option array    10 3 years ago 7 months ago minor unassigned Open
#2062 Leverage RFC 4533 in server mode for enumeration and synchronization of external groups    10 4 years ago 7 months ago minor unassigned Open
#2054 Review if responder_cli pointers are actually needed    3 4 years ago 7 months ago minor unassigned Open
#2053 Stop saving the ccache collection name to sysdb unless it's needed    10 4 years ago 7 months ago minor simo Open
#2039 change the way how providers are initialized - create a provider constructor    5 4 years ago 7 months ago minor unassigned Open
#2021 Detect cycles in adding ghost users instead of using permissive ldb mod    7 4 years ago 7 months ago minor unassigned Open
#2020 Unify the child subprocess framework    8 easyfix 4 years ago 2 months ago minor unassigned Open
#1954 Cached entry is returned from cache even if it doesn't match the min_id/max_id constraints    5 4 years ago 7 months ago minor unassigned Open
#1946 check if IPA hostname is a FQDN    9 easyfix 4 years ago 2 months ago minor unassigned Open
#1944 convert dyndns timer to be_ptask    9 easyfix 4 years ago 2 months ago minor unassigned Open
#1875 resolver interface should strdup/memdup input    7 4 years ago 7 months ago minor preichl Open
#1871 krb5 validation code always picks the first matching principal    9 4 years ago 7 months ago minor unassigned Open
#1829 investigate a better way to handle long-running requests in the SSSD    7 4 years ago 7 months ago minor unassigned Open
#1753 make check should also test tools    14 4 years ago 7 months ago minor preichl Open
#1752 sss_cache tool should probably work with aliases too    5 4 years ago 7 months ago minor unassigned Open
#1720 Stop using in-memory hash tables for netgroups and autofs maps    16 4 years ago 7 months ago minor unassigned Open
#1664 empty groups with filter_users_in_groups and enumerate enabled    15 4 years ago 7 months ago minor unassigned Open
#1579 [RFE] Make sure that SSSD uses GSSAPI with GSS proxy to extract PAC    11 4 years ago 7 months ago minor unassigned Open
#1570 Keep track of per-PID/cgroup/process group fds in the PAM responder.    11 4 years ago 7 months ago minor unassigned Open
#1555 validate the shell coming from the directory or the cache    8 easyfix 4 years ago 6 days ago minor unassigned Open
#1497 [RFE] Expose Kerberos ticket data on IFP from KCM    16 5 years ago 6 months ago minor unassigned Open
#1443 Define internal PAM commands outside client scope    13 5 years ago 7 months ago minor unassigned Open
#1285 convert the sss_cli_recv_rep() consumers to use a single return code    9 5 years ago 7 months ago minor pbrezina Open
#1275 Inspect usage of sysdb_search_user_by_name() ba various parts of code    22 5 years ago 7 months ago minor preichl Open
#1149 Create custom abort function for talloc_get_type_abort()    30 5 years ago 2 months ago minor amitkumar25nov Open
#1030 [RFE] Improve SASL authentication method negotiation    13 5 years ago 7 months ago minor unassigned Open
#561 [RFE] Add support for certificate-based authentication to directory servers    26 7 years ago 7 months ago minor unassigned Open
#2946 "domains" description in pam_sss(8) is misleading    10 2 years ago a month ago trivial unassigned Open
#2739 ipa_s2n_save_objects is too long and does too many things    4 2 years ago 7 months ago trivial preichl Open
#2687 When sssd service fails to start due to misconfiguration, the error message would be nice in /var/log/messages as well    5 2 years ago 7 months ago trivial unassigned Open
#2568 RFE: sss_cache, allow invalidating by UID/GID    6 easyfix 2 years ago 2 months ago trivial unassigned Open
#2318 All responders read the negcache timeout setting from the [nss] section    8 3 years ago 7 months ago trivial unassigned Open
#1904 the .finalize handler is not used anywhere.    5 4 years ago 7 months ago trivial unassigned Open
#1768 Enabling proxy_fast_alias shows "ldb_modify failed: [Invalid attribute syntax]" for id lookups.    5 4 years ago 7 months ago trivial unassigned Open
#1392 Incorrect message in krb5_child.log when krb5_fast_principal is unset    10 easyfix 5 years ago 2 months ago trivial unassigned Open
#1117 Clarify how comments work in sssd.conf    16 easyfix 5 years ago 2 months ago trivial unassigned Open
SSSD Patches welcome Opened Modified Priority Assignee Status
#3514 Fix pep8 issues from SSSDConfig related files    6 6 days ago 2 days ago unassigned Open
#3487 sssd_be dereferences NULL pointer server->common and crashes with assertion error    6 a month ago 20 days ago mzidek Open
#3345 [RFE] Introduce option to differe min_id & max_id for users & groups.    3 6 months ago 6 months ago unassigned Open
#3334 sssctl config-check does not check any special characters in domain name of domain section    12 easyfix 6 months ago 7 days ago mzidek Open
#1634 Extract the UPN from the pac    13 4 years ago 7 months ago critical sbose Open
#901 [Feature] Implement support for the LDAP served maps    12 6 years ago 7 months ago critical unassigned Open
#3311 group filter isn't useful    12 7 months ago 6 months ago major unassigned Open
#3246 sssctl: Improve config-check to catch more errors    3 10 months ago 7 months ago major unassigned Open
#3239 [RFE]: add the ability for sssd to also filter access using netgroups    2 10 months ago 7 months ago major unassigned Open
#3229 sssd[nss]: Stored copy of corrupted mmap cache in file /var/lib/sss/mc/passwd_corrupted    10 10 months ago 18 days ago major unassigned Open
#3226 CI: Run builds using with all options provided by configure and make sure we always can build SSSD    4 11 months ago 7 months ago major unassigned Open
#3223 sss_ssh_authorizedkeys: --debug N option is not documented in the man page    9 easyfix 11 months ago 7 days ago major unassigned Open
#3221 RFE: Make "sssd-libwbclient" to display real names in permission dialog    3 11 months ago 7 months ago major unassigned Open
#3196 RFE: Add a new option to track the encoding of GPO INI files    2 a year ago 7 months ago major unassigned Open
#3195 IFP: Implement group_attributes    3 a year ago 7 months ago major unassigned Open
#3177 Built-in groups are not created during enumeration    10 a year ago 7 months ago major unassigned Open
#3162 Add DBus call to allow account activation status lookup    12 a year ago 7 months ago major unassigned Open
#3149 sssctl: obtain talloc report    3 a year ago 7 months ago major unassigned Open
#3146 sssctl: print most recent provider requests    5 a year ago 7 months ago major pbrezina Open
#3139 secrets: Consider if proxy provider globally is allowed    8 a year ago 7 months ago major unassigned Open
#3098 infopipe: Allow non-root users to access information about themselfs    3 a year ago 7 months ago major unassigned Open
#3074 Move timestamp cache to tmpfs    8 a year ago 7 months ago major jhrozek Open
#3043 proxy provider loops when sss is in proxy_pam_target    3 a year ago 7 months ago major unassigned Open
#3013 resolv_is_address failure in getaddrinfo on FreeBSD 10.3    4 a year ago 7 months ago major unassigned Open
#2998 NSS: check if overridden shells are handled correctly in get_shell_override()    3 a year ago 7 months ago major unassigned Open
#2997 PAM: check if overriden shells are handled correctly in the PAM responder    4 a year ago 7 months ago major unassigned Open
#2996 Responders: Negative cache timeouts configuration for each responder separately    3 a year ago 7 months ago major unassigned Open
#2974 Crash in sdap_combine_filters_ex    4 2 years ago 5 months ago major unassigned Open
#2947 [RFE] Integrate with p11-kit to provide CA certificates and enforce trust policy from IPA and AD    4 2 years ago 7 months ago major unassigned Open
#2944 [RFE] In the cache, identify a group entity by more than its name.    5 2 years ago 7 months ago major unassigned Open
#2895 Add logging to ID mapping library    4 2 years ago 7 months ago major unassigned Open
#2880 certificates: add certificate validation to the OpenSSL version of the certificate utilities    4 2 years ago 7 months ago major unassigned Open
#2878 sssd failover does not work on connecting to non-responsive ldaps:// server    10 2 years ago 7 months ago major jhrozek Open
#2871 [RFE] split out DNS code into separate binary/out of SSSD    22 2 years ago 7 months ago major unassigned Open
#2835 autogenerate docs from git sources    3 2 years ago 7 months ago major unassigned Open
#2817 dynamic dns - remove detection of 'realm' keyword support    6 easyfix 2 years ago 2 months ago major unassigned Open
#2793 refactor resolv_get_string_ptr_address    4 2 years ago 7 months ago major preichl Open
#2667 id_provider = ad requires ldap_use_tokengroups = False to see secondary groups    7 2 years ago 7 months ago major unassigned Open
#2617 sbus_tests and sbus_codegen_tests fail on Debian sid    7 2 years ago 7 months ago major lslebodn Open
#2616 [RFE] Allow filtering out groups that client does not care about    9 2 years ago 7 months ago major unassigned Open
#2594 [RFE] add warning for expired password when SSH keys are used    4 2 years ago 7 months ago major unassigned Open
#2497 When machine gets IPA-enrolled to different IPA with the same domain name and the same users, caches prevent correct operation    6 2 years ago 7 months ago major unassigned Open
#2491 Simple Access Provider - fail on non-existing objects in deny lists    12 2 years ago 7 months ago major unassigned Open
#2455 Log shows "Internal Error" when sssd comes back online and has wrong bind password    4 2 years ago 7 months ago major unassigned Open
#2440 Interoperability issue with sssd_proxy and pam_ldap    5 3 years ago 7 months ago major unassigned Open
#2427 man sssd(8) refers to sssd(8)    2 3 years ago 7 months ago major unassigned Open
#2350 Parallel make of "tests" target fails    26 3 years ago 7 months ago major unassigned Open
#2262 Warn loudly if AD is detected in rootDSE and referrals are on    4 3 years ago 7 months ago major unassigned Open
#2155 [RFE] use netresolve library for network name resolution    11 3 years ago 7 months ago major unassigned Open
#2136 Improve grace login warning against OpenLDAP server    7 3 years ago 7 months ago major preichl Open
#2118 [RFE] Consider enabling the line wrapping functionality    4 3 years ago 7 months ago major unassigned Open
#2099 [RFE] Read and use SSH keys stored in Active Directory    3 3 years ago 7 months ago major unassigned Open
#2098 Enable warning missing-declarations    5 3 years ago 7 months ago major unassigned Open
#2086 utils: namespace domain_info_utils.c    6 4 years ago 7 months ago major preichl Open
#2055 Create unit tests for the memory cache    12 4 years ago 7 months ago major lslebodn Open
#2048 [RFE] Provide a regex mapping similar to pam_krb5's mechanism    4 4 years ago 7 months ago major unassigned Open
#2042 [RFE] Create a library to control SSSD configuration    7 4 years ago 7 months ago major unassigned Open
#2010 Add sysdb unit tests for alias handling    10 4 years ago 7 months ago major mzidek Open
#1990 [RFE] Add option to store user kerberos creds in keyring permanently and rekinit    8 4 years ago 7 months ago major unassigned Open
#1956 Investigate and provide an alternative to enabling enumeration for pam_lastlog to work    9 4 years ago 7 months ago major unassigned Open
#1940 Create unit test for be_refresh    13 4 years ago 7 months ago major mzidek Open
#1920 default to ldaps instead of ldap if the port is set to 636 during service discovery    5 4 years ago 7 months ago major unassigned Open
#1903 too complex if-else structure in sss_dp_get_account_msg    5 4 years ago 7 months ago major unassigned Open
#1879 [RFE] Support other NSS maps in fastcache    5 4 years ago 7 months ago major unassigned Open
#1762 Authentication is done against krb5_kpasswd as well as krb5_server    4 4 years ago 7 months ago major unassigned Open
#1654 The memberof plugin does not retain the memberof attribute correctly when a user is removed from a nested group    11 4 years ago 7 months ago major unassigned Open
#1639 [RFE] Implement 3rd party ID mapper in SSSD    9 4 years ago 7 months ago major yelley Open
#1637 Automatically check for translatable sources added into po/POTFILES.in    7 4 years ago 7 months ago major unassigned Open
#1627 [RFE] Improve efficiency of diff_string_lists (and similar fns)    7 4 years ago 7 months ago major unassigned Open
#1618 Identify SSSD version for newly-added options    4 4 years ago 7 months ago major unassigned Open
#1582 Improve renewing the ccache with LDAP when using GSSAPI    11 4 years ago 7 months ago major unassigned Open
#1580 Only check for group memberships, not GIDs during initgroups (based on option value)    9 4 years ago 7 months ago major unassigned Open
#1550 Validate the SELinux user context with security_canonicalize_context()    9 4 years ago 7 months ago major unassigned Open
#1538 Create a unit test for the principal selection    15 easyfix 4 years ago 2 months ago major unassigned Open
#1527 [RFE] Access to cache credentials is lost on daemon restart    12 5 years ago 6 months ago major unassigned Open
#1465 Man pages are not rebuilt when the included files change    2 5 years ago 7 months ago major unassigned Open
#1450 [RFE] SEED TOOl :: support recreating groups when offline    15 5 years ago 7 months ago major unassigned Open
#1441 sysdb_store_ssh_host() function should add objectclass and name attributes to new hosts    3 5 years ago 7 months ago major unassigned Open
#1413 sssd.conf required to have permissions 0600    7 5 years ago 4 months ago major unassigned Open
#1400 [RFE] In memory fast cache should support negative caching    18 5 years ago 7 months ago major unassigned Open
#1386 [RFE] add way to list default options    6 5 years ago 7 months ago major unassigned Open
#1381 [RFE] Support failover authentication capabilities between Kerberos and LDAP    3 5 years ago 7 months ago major unassigned Open
#1374 Review all DEBUG messages for appropriate reporting level    10 easyfix 5 years ago 2 months ago major unassigned Open
#1294 Quiet down the startup of sssd    13 5 years ago 7 months ago major arielb Open
#1286 RFE: allow checking both 'member' and 'uniqueMember'    4 5 years ago 7 months ago major unassigned Open
#1164 [RFE] prefer krbcanonicalname to krbprincipalname    22 5 years ago 7 months ago major unassigned Open
#1161 [Feature] Enumeration should be configurable on a per-map basis    3 5 years ago 7 months ago major unassigned Open
#1141 RFE: Add PAM option to allow to skip initgroups completely    4 5 years ago 7 months ago major unassigned Open
#1127 Create test program for krb5_child and ldap_child    18 5 years ago 7 months ago major jhrozek Open
#1062 lookup parent groups during RFC2307bis initgroups in parallel    3 5 years ago 7 months ago major unassigned Open
#1048 sssd should have a mode to only return Usernames for My UID and My Groups.    2 5 years ago 7 months ago major unassigned Open
#1047 Optimize HBAC rule lookups with modifyTimestamp    9 5 years ago 7 months ago major jzeleny Open
#1025 RFE Central management of pam_limits    5 5 years ago 7 months ago major unassigned Open
#992 Create a way to notify an external consumer about changes to the UID/GID    3 6 years ago 7 months ago major unassigned Open
#987 SSSD should use all DNS search domains in resolv.conf    13 6 years ago 7 months ago major unassigned Open
#961 Optionally allow expanding of groups outside of the group search base    7 6 years ago 7 months ago major unassigned Open
#959 Provide a new option for different ways of dealing with multi-valued names not matching RDN    12 6 years ago 7 months ago major jzeleny Open
#931 Support access-control similar to pam_groupdn in LDAP    7 6 years ago 7 months ago major unassigned Open
#908 PAM_RHOST may contain the IP address of the remote host    5 6 years ago 7 months ago major unassigned Open
#903 [RFE] sssd shouldn't use ipv6 if it is disabled    5 6 years ago 7 months ago major unassigned Open
#899 RFE: add option to add OIDs of supported but not listed LDAP controls    3 6 years ago 7 months ago major unassigned Open
#842 pam and nss clients are hanging if backend is dead    3 6 years ago 7 months ago major unassigned Open
#828 keep valid tickets on credentials refreshes    21 6 years ago 7 months ago major unassigned Open
#782 Fatal errors updating the cache should delete the entry    3 6 years ago 7 months ago major unassigned Open
#744 [RFE] Add a "client profile" configuration parameter    3 6 years ago 7 months ago major unassigned Open
#669 Create yubikey auth provider    9 6 years ago 7 months ago major sbose Open
#626 memberOf performance enhancements    24 7 years ago 7 months ago major sgallagh Open
#609 SSSD LDAP provider should support ldapi:// for optimized lookups on a local LDAP server    8 7 years ago 7 months ago major unassigned Open
#569 [REF] Add option like pam_password_prohibit_message of pam_ldap    5 7 years ago 7 months ago major sbose Open
#481 [RFE] autodiscover Kerberos domain through TXT records    13 7 years ago 7 months ago major jhrozek Open
#445 Support for rfc2307bis should also read the memberUid attribute.    14 7 years ago 7 months ago major unassigned Open
#359 SSSD NSS should support host map    9 7 years ago 7 months ago major simo Open
#315 RFE: Add SSSDDomain.get_domain_options() and SSSDDomain.get_provider_options()    3 7 years ago 7 months ago major sgallagh Open
#314 RFE: Add SSSDDomain.get_provider(<subtype>)    3 7 years ago 7 months ago major sgallagh Open
#313 RFE: Add SSSDDomain.list_provider_subtypes() call to SSSDConfig API    4 7 years ago 7 months ago major sgallagh Open
#303 RFE: get[pw|gr]ent should return previously cached users when enumeration = false    5 7 years ago 7 months ago major simo Open
#234 Create common option description mechanism    4 7 years ago 7 months ago major simo Open
#149 PAM conversations should support local and network auth configurations    15 8 years ago 7 months ago major jzeleny Open
#88 Make sure ldap bind doesn't block    20 8 years ago 7 months ago major mnagy Open
#3371 sbus: set connection to NULL when destroyed    5 5 months ago a month ago minor unassigned Open
#3252 RFE: Support for user limits via cgroups    4 9 months ago 7 months ago minor unassigned Open
#3202 RFE: Autogenerate the SSSD options from a single place (of fewer places at least)    3 a year ago 7 months ago minor unassigned Open
#3201 [TASK] Create a homepage for SSSD where we could link man pages    11 a year ago 7 months ago minor unassigned Open
#3081 consider changing defaults for autofs_provider=ldap and ldap_schema=ad    3 a year ago 7 months ago minor unassigned Open
#3078 use the ERROR and PRINT macros consistently    3 a year ago 7 months ago minor unassigned Open
#2890 revisit header files and check for missing includes    3 2 years ago 7 months ago minor unassigned Open
#2844 Support round-robin in fail over    4 2 years ago 7 months ago minor unassigned Open
#2834 sss_override does not errorout on setting uid=0 but dels prev. override    13 2 years ago 4 months ago minor unassigned Open
#2798 Consider using sdap_steal_objects_in_dom in sdap_get_initgr_user    4 2 years ago 7 months ago minor unassigned Open
#2774 Fix PEP 8 violations in the SSSD's Python code    5 2 years ago 7 months ago minor unassigned Open
#2734 refactor nsupdate_msg_create_common    6 2 years ago 7 months ago minor preichl Open
#2720 Annotate the non-object D-Bus functions as Deprecated in the Introspection XML    3 2 years ago 7 months ago minor unassigned Open
#2679 sssd components mishandles sighup for helper processes    7 2 years ago 7 months ago minor mzidek Open
#2621 The ldap_entry_usn and ldap_rootdse_last_usn options are not documented    3 2 years ago 7 months ago minor unassigned Open
#2600 Predefined user message if chpass_provider = none    4 2 years ago 7 months ago minor unassigned Open
#2595 'unix group id' in sudoUser option is not supported    1 2 years ago 7 months ago minor unassigned Open
#2554 Update spec file according to updated guidelines    11 2 years ago 7 months ago minor lslebodn Open
#2505 Check it ${sysconfdir} and other autoconf/automake variables are expanded correctly    3 2 years ago 7 months ago minor unassigned Open
#2502 RFE: Merge ldap_child and krb5_child    3 2 years ago 7 months ago minor unassigned Open
#2500 RFE: Run the command line tools unprivileged, if possible    4 2 years ago 7 months ago minor unassigned Open
#2482 Use libcap-ng to drop privileges but retain capabilities    3 2 years ago 7 months ago minor unassigned Open
#2332 LDAP: Optionally optimize LDAP searches by objectclass only    5 3 years ago 7 months ago minor unassigned Open
#2329 sbus_get_sender_id_send should chain concurrent request for the same sender    2 3 years ago 7 months ago minor unassigned Open
#2144 proxy backend might get killed if proxied operation takes too long    3 3 years ago 7 months ago minor unassigned Open
#2135 [RFE] Ability of sssd to override shell and homedir per group and per netgroup    16 3 years ago 7 months ago minor preichl Open
#1982 [RFE] ldap_access_filter with variable expansion    4 4 years ago 7 months ago minor unassigned Open
#1978 translated man pages are not picked up when building in parallel build    5 4 years ago 7 months ago minor unassigned Open
#1723 [RFE] Expand kerberos ticket renewal in KCM    22 4 years ago 6 months ago minor unassigned Open
#1696 sssd: potential LDAP filter injection issues    9 4 years ago 7 months ago minor unassigned Open
#1678 sudoUser %#group_id values not supported    6 4 years ago 7 months ago minor mmsrubar Open
#1676 [RFE] move the ldb files on RPM downgrades if the version was different    3 4 years ago 7 months ago minor unassigned Open
#1665 Do not use AI_ADDRCONFIG    8 4 years ago 7 months ago minor jcholast Open
#1646 [RFE] Leverage GPO policies to define SUDO rules    10 4 years ago 7 months ago minor yelley Open
#1597 [RFE] Add option for sss_cache to force enumerate    2 4 years ago 7 months ago minor unassigned Open
#1362 Fill missing config options in SSSDConfig.py    20 easyfix 5 years ago 2 months ago minor unassigned Open
#1342 Expose some shadow information to getent or other helper program    8 5 years ago 7 months ago minor unassigned Open
#1314 RFE Request for allowing password changes using SSSD in DS which dont follow OID's from RFC 3062    11 5 years ago 7 months ago minor unassigned Open
#1244 Performance enhancement when looking up case-insensitive netgroups    3 5 years ago 7 months ago minor unassigned Open
#1220 [FEATURE] User/Group Info Tool Feature    6 5 years ago 7 months ago minor unassigned Open
#1212 Gracefully handle -ENOSPC    10 5 years ago 5 months ago minor unassigned Open
#1210 src/man/po/po4a.cfg needs to be autogenerated    10 5 years ago 7 months ago minor jhrozek Open
#1198 Change behavior of clients once shared memory cache is enabled    13 5 years ago 7 months ago minor unassigned Open
#1091 Pass usernames from the NSS responder as byte arrays, not UTF-8 strings    4 5 years ago 7 months ago minor unassigned Open
#1045 SIGUSR2 should force SSSD to reread resolv.conf as well    11 easyfix 5 years ago 2 months ago minor unassigned Open
#1039 [RFE] Improve SSSD operation on diskless systems    7 5 years ago 7 months ago minor unassigned Open
#1015 RFE: Make storing period for password configurable    4 5 years ago 7 months ago minor unassigned Open
#993 SSSD should do failover DNS lookups in parallel    4 6 years ago 7 months ago minor jhrozek Open
#971 Add password quality checks to the local provider    2 6 years ago 7 months ago minor unassigned Open
#948 Provide an option to limit how far in advance the password expiration is displayed    3 6 years ago 7 months ago minor unassigned Open
#884 RFE: Support change in uid and gid number for the same user.    8 6 years ago 7 months ago minor unassigned Open
#801 RFE: SSSDConfig set_option() should accept a list and convert it into CSV    6 6 years ago 7 months ago minor sgallagh Open
#773 Investigate one-level indexing in ldb    3 6 years ago 7 months ago minor unassigned Open
#689 Split sssd-ldap man page    3 6 years ago 7 months ago minor unassigned Open
#678 Add 'nullok' option to pam_sss    3 6 years ago 7 months ago minor unassigned Open
#675 Add UID/GID uniqueness plugin for LDB    18 6 years ago 7 months ago minor simo Open
#633 Build general mechanism to limit number of parallel LDAP request on the same connection    9 6 years ago 7 months ago minor unassigned Open
#553 Now that users and groups can be filter by domain - should remove options in nss section    4 7 years ago 7 months ago minor unassigned Open
#463 Support/Cache OpenAFS Authentication    12 7 years ago 7 months ago minor sbose Open
#412 Split data provider sockets    11 7 years ago 7 months ago minor sgallagh Open
#402 SBUS needs to support introspection    10 7 years ago 7 months ago minor sgallagh Open
#362 Integrate with dnsmasq    4 7 years ago 7 months ago minor jhrozek Open
#361 Create native NIS backend    12 7 years ago 7 months ago minor sgallagh Open
#272 bash completion script    3 7 years ago 7 months ago minor jhrozek Open
#217 [RFE] Support pulling client configuration from ldap    6 7 years ago 7 months ago minor sgallagh Open
#44 Create a -devel package for SSSD back-ends    25 8 years ago 7 months ago minor sgallagh Open
#3290 HTML generated man pages contain two conflicting defaults    4 8 months ago 2 months ago trivial unassigned Open
#2488 sssd DBus service does not produce useful error message/code when sssd is not running.    4 2 years ago 7 months ago trivial unassigned Open
#2416 memory leaks in ldap_child    2 3 years ago 7 months ago trivial unassigned Open
#1876 provide unit tests for the new discovery mechanism    13 4 years ago 7 months ago trivial unassigned Open
#1391 Remove spaces after comment delimiters in the example config file    4 easyfix 5 years ago 2 months ago trivial unassigned Open
#1328 sss_debuglevel "-c" option should work only with valid sssd.conf file    9 easyfix 5 years ago 2 months ago trivial unassigned Open
#1309 Add --without-translations option to configure    3 5 years ago 7 months ago trivial unassigned Open
#1009 Provide information about configuration options used    3 5 years ago 7 months ago trivial unassigned Open
#1001 Modify krb5 child to use krb5_get_init_creds_opt_set_out_ccache when possible    18 6 years ago 7 months ago trivial unassigned Open
#500 Better error message for GID out of range    3 7 years ago 7 months ago trivial sgallagh Open
#444 RFE: use mmap to handle parent-child communication    6 7 years ago 7 months ago trivial unassigned Open
SSSD Referrals Feature Opened Modified Priority Assignee Status
#860 [RFE] SSSD should chase referrals explicitly    11 6 years ago 7 months ago critical sgallagh Open
#875 Changing password with a slave openldap server as primary server does not work    10 6 years ago 7 months ago major sgallagh Open
User/Group Info Tool Feature Opened Modified Priority Assignee Status
#1223 RFE: Provide group information in sssd query tool    4 5 years ago 7 months ago minor unassigned Open
#1222 RFE: Support detailed user information in sssd query tool    5 5 years ago 7 months ago minor unassigned Open
#1221 RFE: Support map enumeration is sssd query tool    4 5 years ago 7 months ago minor unassigned Open
Wiki Updates Opened Modified Priority Assignee Status
#2894 Enhance GPO documentation    12 2 years ago 7 months ago minor unassigned Open
#1334 Document necessity of 32-bit SSSD for 32-bit software on 64-bit system    5 easyfix 5 years ago 2 months ago minor unassigned Open