Roadmap - SSSD/sssd

#3452 ad_account_can_shortcut: allow shortcut for unhandled IDs

5

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3448 Idle nss file descriptors should be closed

5

Opened 6 years ago by lslebodn. Modified 3 years ago

regression PR SSSD 1.15.3 blocker

#3447 files provider should not use LOCAL_pam_handler but call the backend

3

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3435 Create a function to copy search bases between sdap_domain structures

4

Opened 6 years ago by jhrozek. Modified 3 years ago

PR refactoring SSSD 1.15.3

#3431 Loading enterprise principals doesn't work with a primed cache

4

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3428 getent failed to fetch netgroup information after changing default_domain_suffix to ADdomin in /etc/sssd/sssd.conf

2

Opened 6 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 blocker

#3426 IPA client cannot change AD Trusted User password

3

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3424 calling nspr_nss_setup/cleanup repeatedly in sss_encrypt SIGABRTs NSS eventually

5

Opened 6 years ago by jhrozek. Modified 3 years ago

PR SSSD 1.15.3 major

#3421 Wrong search base used when SSSD is directly connected to AD child domain

3

Opened 6 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 critical

#3419 krb5: properly handle 'password expired' information retured by the KDC during PKINIT/Smartcard authentication

4

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3418 Segfault in access_provider = krb5 is set in sssd.conf due to an off-by-one error when constructing the child send buffer

2

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3410 python-sssdconfig doesn't parse hexadecimal debug_level, resulting in set_option(): /usr/lib/python2.7/site-packages/SSSDConfig/__init__.py killed by TypeError

3

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3408 Accept changed principal if krb5_canonicalize=True

7

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3407 IPA: do not lookup IPA users via extdom plugin

5

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3406 sssd goes offline when renewing expired ticket

5

Opened 6 years ago by lslebodn. Modified 3 years ago

regression PR SSSD 1.15.3 critical

#3405 Handle certmap errors gracefully during user lookups

5

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3404 man: Update option "ipa_server_mode=True" in "man sssd-ipa"

3

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3403 SSSD doesn't handle conflicts between users from trusted domains with the same name when shortname user resolution is enabled

3

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3398 MAN: The timeout option doesn't say after how many heartbeats will the process be killed

3

Opened 6 years ago by jhrozek. Modified 3 years ago

easyfix SSSD 1.15.3

#3397 ad provider: Child domains always use autodiscovered search bases

6

Opened 6 years ago by mzidek. Modified 3 years ago

SSSD 1.15.3

#3395 Properly support IPA's promptusername config option

5

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3394 LDAP to IPA migration doesn't work in master

5

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3393 sss_nss_getlistbycert() does not return results from multiple domains

4

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3392 org.freedesktop.sssd.infopipe.GetUserGroups does not resolve groups into names with AD

6

Opened 6 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3391 sss_override doesn't work with files provider

12

Opened 6 years ago by fidencio. Modified 3 years ago

SSSD 1.15.3

#3389 subdomain_homedir is not present in cfg_rules.ini

7

Opened 6 years ago by orion. Modified 3 years ago

SSSD 1.15.3

#3387 Dbus activate InfoPipe does not answer some initial request

4

Opened 6 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3385 Smart card login fails if same cert mapped to IdM user and AD user

2

Opened 7 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 major

#3382 SSSD should use memberOf, not originalMemberOf to evaluate group membership for HBAC rules

8

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3381 Per-subdomain LDAP filter is not applied for subsequent subdomains

8

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3378 domain_to_basedn() function should use SDAP_SEARCH_BASE value from the domain code

3

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3377 sssd-ad man page should clarify that GSSAPI is used

3

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3375 minor typo fix that might have big impact

4

Opened 7 years ago by sobek. Modified 3 years ago

SSSD 1.15.3

#3373 Infopipe method ListByCertificate does not return the users with overrides

6

Opened 7 years ago by frenaud. Modified 3 years ago

SSSD 1.15.3 critical

#3372 crash in sssd-kcm due to a race-condition between two concurrent requests

8

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 critical

#3369 ldap_purge_cache_timeout in RHEL7.3 invalidate most of the entries once the cleanup task kicks in

7

Opened 7 years ago by pbrezina. Modified 3 years ago

SSSD 1.15.3 critical

#3362 fiter_users and filter_groups stop working properly in v 1.15

44

Opened 7 years ago by akomlik. Modified 3 years ago

SSSD 1.15.3 critical

#3361 sssd_be crashes if ad_enabled_domains is selected

2

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3

#3359 Allow to disable krb5 locator plugin selectively

2

Opened 7 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3358 [abrt] [faf] sssd: vfprintf(): /usr/libexec/sssd/sssd_be killed by 11

3

Opened 7 years ago by pbrezina. Modified 3 years ago

SSSD 1.15.3

#3356 Config file validator doesn't process entries from application domain

6

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 blocker

#3355 application domain requires inherit_from and cannot be used separately

2

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3354 ifp: Users.FindByCertificate fails when certificate contains data before encapsilation boundary

4

Opened 7 years ago by dkupka. Modified 3 years ago

SSSD 1.15.3

#3351 User lookup failure due to search-base handling

8

Opened 7 years ago by sbose. Modified 3 years ago

SSSD 1.15.3 critical

#3347 gpo_child fails when log is enabled in smb

3

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3344 Include sssd-secrets in SEE ALSO section of sssd.conf man page

5

Opened 7 years ago by sumenon. Modified 3 years ago

SSSD 1.15.3

#3343 Properly fall back to local Smartcard authentication

4

Opened 7 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3340 The option enable_files_domain does not work if sssd is not compiled with --enable-files-domain

3

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3

#3339 sssd failed to start with missing /etc/sssd/sssd.conf if compiled without --enable-files-domain

4

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3

#3332 Issue processing ssh keys from certificates in ssh respoder

4

Opened 7 years ago by sbose. Modified 3 years ago

SSSD 1.15.3

#3331 Wrong pam return code for user from subdomain with

7

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 blocker

#3330 sssctl config-check does not give any error when default configuration file is not present

3

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 minor

#3329 Wrong principal found with ad provider and long host name

3

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 blocker

#3327 expect sss_ssh_authorizedkeys and sss_ssh_knownhostsproxy manuals to be packaged into sssd-common package

3

Opened 7 years ago by lslebodn. Modified 3 years ago

SSSD 1.15.3 major

#3318 SSSD in server mode iterates over all domains for group-by-GID requests, causing unnecessary searches

2

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3310 Support delivering non-POSIX users and groups through the IFP and PAM interfaces

6

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3297 selinux_provider fails in a container if libsemanage is not available

4

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3292 RFE: Create troubleshooting tool to check authentication, authorization and extended attribute lookup

4

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 minor

#3268 D-Bus GetUserGroups method of sssd is always qualifying all group names

7

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3240 Smartcard authentication with UPN as logon name might fail

5

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3216 Review and update SSSD's wiki pages for 1.15.3 Beta release

2

Opened 7 years ago by jhrozek. Modified 3 years ago

docs SSSD 1.15.3 blocker

#3210 [RFE] Read prioritized list of trusted domains for unqualified ID resolution from IDM server

8

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3192 [sssd-secrets] https proxy talks plain http

14

Opened 7 years ago by cheimes. Modified 3 years ago

SSSD 1.15.3 major

#3182 sssd does not refresh expired cache entries with enumerate=true

6

Opened 7 years ago by pcech. Modified 3 years ago

SSSD 1.15.3 major

#3133 RFE to add option of check user access in SSSD.

6

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 minor

#3065 sssctl: distinguish between autodiscovered and joined domains

9

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#3050 [RFE] Use one smartcard and certificate for authentication to distinct logon accounts

17

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#3001 [RFE] Short name input format with SSSD for users from all domains when domain autodiscovery is used or when SSSD acts as an IPA client for server with IPA-AD trusts

11

Opened 7 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 critical

#2940 The member link is not removed when the last group's nested member goes away

15

Opened 8 years ago by jhrozek. Modified 3 years ago

SSSD 1.15.3 major

#2887 [RFE] KCM ccache daemon in SSSD

19

Opened 8 years ago by simo. Modified 3 years ago

SSSD 1.15.3 critical

#2714 Add SSSD domain as property to user on D-Bus

9

Opened 8 years ago by adelton. Modified 3 years ago

SSSD 1.15.3 major

#1498 sss_ssh_knownhostsproxy prevents connection if the network is unreachable via one IP address

12

Opened 11 years ago by pbrezina. Modified 3 years ago

SSSD 1.15.3 major

SSSD / sssd

Source Code

Documentation

SSSD 1.15.3