Roadmap - SSSD/sssd

#4058 Paging not enabled when fetching external groups, limits the number of external groups to 2000

5

Opened 6 years ago by jhrozek. Modified 5 years ago

PR bug SSSD 2.3

#4052 sssd config option "default_domain_suffix" should not cause the files domain entries to be qualified

3

Opened 6 years ago by jhrozek. Modified 5 years ago

PR regression SSSD 2.3

#4051 Smart Card auth of local user: endless loop if wrong PIN was provided

4

Opened 6 years ago by atikhonov. Modified 5 years ago

bug SSSD 2.3 major

#4050 nss_cmd_endservent resets the wrong index

3

Opened 6 years ago by jhrozek. Modified 5 years ago

bug SSSD 2.3 minor

#4047 dyndns_update = True is no longer not enough to get the IP address of the machine updated in IPA upon sssd.service startup

2

Opened 6 years ago by thalman. Modified 5 years ago

SSSD 2.3

#4043 Typo in systemd.m4 prevents detection of systemd.pc

4

Opened 6 years ago by yrro. Modified 5 years ago

regression SSSD 2.3 minor PR#4044

#4040 Reasonable to Restart sssd on crashes?

4

Opened 6 years ago by paelzer. Modified 5 years ago

SSSD 2.3 minor

#4039 p11_child::sign_data() function implementation is not FIPS140 compliant

5

Opened 6 years ago by sbose. Modified 5 years ago

PR SSSD 2.3

#4037 Logins fail after upgrade to 2.2.0

3

Opened 6 years ago by jhrozek. Modified 5 years ago

SSSD 2.3

#4028 sssd-kcm calls sssd-genconf which triggers nscd warning

7

Opened 6 years ago by jhrozek. Modified 5 years ago

PR bug SSSD 2.3

#4026 EVP_PKEY_new_raw_private_key() was only added in OpenSSL 1.1.1

10

Opened 6 years ago by jhrozek. Modified 5 years ago

PR SSSD 2.3 minor

#4022 utils: sss_hmac_sha1() function implementation is not FIPS140 compliant

5

Opened 6 years ago by atikhonov. Modified 5 years ago

SSSD 2.3

#4013 Files domain prevents local group membership of a remote user from working

11

Opened 6 years ago by flip. Modified 5 years ago

bug bugzilla SSSD 2.3 minor

#4012 SSSD is not refreshing cached user data for the ipa sub-domain in a IPA/AD trust

15

Opened 6 years ago by jhrozek. Modified 5 years ago

PR RFE SSSD 2.3

#4009 Removing domain from ad_enabled_domains is not reflected in cache

5

Opened 6 years ago by pbrezina. Modified 5 years ago

PR bug SSSD 2.3 minor

#3971 Retrieving UID 0 or name root should not trigger getDomains

3

Opened 6 years ago by jhrozek. Modified 5 years ago

Next milestone SSSD 2.3 major

#3962 Problem with `tests/cmocka/test_dyndns.c`

4

Opened 6 years ago by atikhonov. Modified 5 years ago

easyfix SSSD 2.3 minor

#3938 sssctl config-check giving the wrong error message when there are only snippet files and no sssd. conf

2

Opened 6 years ago by jhrozek. Modified 5 years ago

SSSD 2.3

#3933 HBAC: Always allow the systemd-user service

5

Opened 6 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3 minor

#3932 MAN: Document that PAM stack contains the systemd-user service in the account phase in recent distributions

8

Opened 6 years ago by jhrozek. Modified 5 years ago

docs SSSD 2.3

#3913 Document what works and what does not as non-root

1

Opened 7 years ago by jhrozek. Modified 5 years ago

docs Next milestone SSSD 2.3 minor

#3905 SSSD doesn't clear cache entries for IDs below min_id.

4

Opened 7 years ago by thalman. Modified 5 years ago

PR bug SSSD 2.3

#3894 multihost tests: ldb-tools is needed for multihost tests

2

Opened 7 years ago by mzidek. Modified 5 years ago

PR bug SSSD 2.3 minor

#3883 A proper message asking to insert smartcard when with-smartcard-required is enabled on authselect and trying to login without smartcard

2

Opened 7 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3

#3877 SSSD not resolving user's group to name if user's GID number was overriden

2

Opened 7 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3

#3864 sss_ssh_authorizedkeys: no output when attribute value contains trailing whitespace

4

Opened 7 years ago by nxg. Modified 5 years ago

easyfix SSSD 2.3 minor

#3860 Refactor session recording to only use cache_req

1

Opened 7 years ago by sbose. Modified 5 years ago

refactoring Future milestone SSSD 2.3 minor

#3843 Do not download supplementary group overrides during getpwnam

2

Opened 7 years ago by jhrozek. Modified 5 years ago

performance Candidate to close SSSD 2.3 minor

#3842 Download overrides periodically, not on every request

2

Opened 7 years ago by jhrozek. Modified 5 years ago

performance RFE Candidate to close SSSD 2.3 minor

#3840 KCM: Don't use del and add, use mod when modifying the default ccache

1

Opened 7 years ago by jhrozek. Modified 5 years ago

KCM bug Next milestone SSSD 2.3 minor

#3839 KCM: Inspect the database code for proper transaction usage

1

Opened 7 years ago by jhrozek. Modified 5 years ago

KCM Next milestone SSSD 2.3 major

#3836 Add a sssd-smartcard manual page

3

Opened 7 years ago by jhrozek. Modified 5 years ago

docs Next milestone SSSD 2.3 minor

#3835 KCM: Increase the default client idle timeout, consider decreasing the timeout on busy servers

1

Opened 7 years ago by jhrozek. Modified 5 years ago

KCM Future milestone SSSD 2.3 critical

#3833 port to pcre2

5

Opened 7 years ago by tjaalton. Modified 5 years ago

easyfix PR SSSD 2.3 major

#3764 SSSD searches IPA users in Default Trust View

2

Opened 7 years ago by abbra. Modified 5 years ago

performance bugzilla SSSD 2.3 minor

#3750 [RFE] man 5 sssd-files should mention necessary changes in nsswitch.conf

3

Opened 7 years ago by tscherf. Modified 5 years ago

docs easyfix Candidate to close SSSD 2.3 minor

#3724 Access after free during kcm shutdown with a non-empty queue

2

Opened 7 years ago by pbrezina. Modified 5 years ago

KCM bugzilla SSSD 2.3 minor

#3721 subdomain lookup fails when certmaprule contains DN

3

Opened 7 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3

#3687 KCM: Don't pass a non null terminated string to json_loads()

3

Opened 7 years ago by fidencio. Modified 5 years ago

KCM bug Next milestone SSSD 2.3 minor

#3686 Optimize the s2n operation to look up the correct entry type

7

Opened 7 years ago by jhrozek. Modified 5 years ago

performance RFE Candidate to close SSSD 2.3 major

#3678 [RFE] SSSD - Add the ability to reference a local CRL file

4

Opened 7 years ago by jhrozek. Modified 5 years ago

SSSD 2.3 minor

#3677 [RFE] SSSD smart smard card, configure to soft fail when CRL not available.

4

Opened 7 years ago by jhrozek. Modified 5 years ago

SSSD 2.3 minor

#3676 [RFE] More than one OCSP responder need to be defined in SSSD

1

Opened 7 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3 minor

#3673 [RFE/RFC] Read only files with default options

2

Opened 7 years ago by mzidek. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#3672 Provide a list of pam_status return codes used by the pam_sss.so module in the module man file

4

Opened 7 years ago by hangarbait. Modified 5 years ago

docs PR SSSD 2.3 minor

#3670 [RFE] Add "defaults" domain section

2

Opened 7 years ago by mzidek. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#3665 dyndns_update and hostname format documentation

2

Opened 7 years ago by gnumaro. Modified 5 years ago

docs Next milestone SSSD 2.3 minor

#3662 Performance comparison between KCM and other ccache types

4

Opened 7 years ago by jhrozek. Modified 5 years ago

KCM performance Candidate to close SSSD 2.3 minor

#3659 sssctl domain-list should not rewrite the confdb.ldb file

2

Opened 7 years ago by fidencio. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#3657 Add man page for sssd_krb5_localauth_plugin

13

Opened 7 years ago by gerases. Modified 5 years ago

docs Next milestone SSSD 2.3 minor

#3655 SSSD produces suboptimal capaths for directly trusted domains

2

Opened 7 years ago by abbra. Modified 5 years ago

Patch is welcome SSSD 2.3 minor

#3647 sssd fails to release file descriptor on child logs after receiving HUP

4

Opened 7 years ago by jhrozek. Modified 5 years ago

bug bugzilla SSSD 2.3 major

#3642 RFE: Group merging

1

Opened 7 years ago by pbrezina. Modified 5 years ago

bugzilla Future milestone SSSD 2.3 blocker

#3637 memory leak in sssd_nss

5

Opened 7 years ago by jhrozek. Modified 5 years ago

bugzilla SSSD 2.3 critical

#3635 Don't let back end code use the sdap_id_op operations directly

2

Opened 7 years ago by jhrozek. Modified 5 years ago

refactoring Future milestone SSSD 2.3 major

#3631 Failing to save a user marks subdomain as offline

1

Opened 7 years ago by jhrozek. Modified 5 years ago

bug Future milestone SSSD 2.3 major

#3630 Randomize ldap_connection_expire_timeout either by default or w/ a configure option

4

Opened 7 years ago by jhrozek. Modified 5 years ago

performance RFE PR SSSD 2.3 minor

#3591 cachedPassword is removed with files provider

4

Opened 8 years ago by lslebodn. Modified 5 years ago

bug Next milestone SSSD 2.3 major

#3581 RFE: Add JSON output to sssctl access-report

2

Opened 8 years ago by jhrozek. Modified 5 years ago

RFE Candidate to close SSSD 2.3 minor

#3580 RFE: sssctl access-report: Add group unrolling

2

Opened 8 years ago by jhrozek. Modified 5 years ago

RFE Candidate to close SSSD 2.3 minor

#3577 Do not reuse the saved krb5 ccaches if the system default had changed

2

Opened 8 years ago by jhrozek. Modified 5 years ago

Candidate to close SSSD 2.3 major

#3572 mmap cache: memory mapped cache cannot use all allocated memory in the data table

2

Opened 8 years ago by sbose. Modified 5 years ago

bug Future milestone SSSD 2.3 minor

#3568 Support notification mechanism for KCM caches

3

Opened 8 years ago by rishi. Modified 5 years ago

RFE KCM bugzilla SSSD 2.3 major

#3552 sssctl: Add memcache diagnostic and inspection commands

3

Opened 8 years ago by mzidek. Modified 5 years ago

RFE Candidate to close SSSD 2.3 minor

#3548 KCM: klist fails with error: klist: Matching credential not found while listing ccache collection

8

Opened 8 years ago by lslebodn. Modified 5 years ago

KCM PR SSSD 2.3 major

#3512 pam_sss: add new option to check only if a local user is configured for smartcard authentication

3

Opened 8 years ago by pbrezina. Modified 5 years ago

RFE Candidate to close SSSD 2.3 critical

#3502 Hardening of systemd services

2

Opened 8 years ago by jhrozek. Modified 5 years ago

Next milestone SSSD 2.3 minor

#3471 RFE: lazy parsing of object received from LDAP

3

Opened 8 years ago by jhrozek. Modified 5 years ago

performance RFE Candidate to close SSSD 2.3 minor

#3462 pam_sss tests using the pam-wrapper project

4

Opened 8 years ago by jhrozek. Modified 5 years ago

PR Candidate to close SSSD 2.3 major

#3457 sssd-sudo uses SID instead of group name on AD

10

Opened 8 years ago by bouke. Modified 5 years ago

bug bugzilla SSSD 2.3 minor

#3455 Document differences between heimdal's KCM and sssd's KCM in the sssd-kcm man page

1

Opened 8 years ago by jhrozek. Modified 5 years ago

docs Next milestone SSSD 2.3 minor

#3434 KCM: Track the SELinux label of the peer

3

Opened 8 years ago by jhrozek. Modified 5 years ago

KCM Future milestone SSSD 2.3 critical

#3425 ldap_group_nesting_level 0 still leads to searches for parent groups of groups with rfc2307bis schema

10

Opened 8 years ago by jstephen. Modified 5 years ago

bug bugzilla Candidate to close SSSD 2.3 minor

#3422 RFE: A tool to inspect sssd-secrets quotas

3

Opened 8 years ago by jhrozek. Modified 5 years ago

KCM SSSD 2.3 blocker

#3420 kdcproxy + offline caching does not wok in offline mode

20

Opened 8 years ago by dsommers. Modified 5 years ago

bug bugzilla SSSD 2.3 critical

#3416 Add systemtap probes into handler codepaths

5

Opened 8 years ago by jstephen. Modified 5 years ago

RFE Candidate to close SSSD 2.3 minor

#3412 IPA: read realmdomains and add matching entries for [domain_realm] in krb5.conf

2

Opened 8 years ago by sbose. Modified 5 years ago

Future milestone SSSD 2.3 major

#3411 write up nslcd-sssd comparison

3

Opened 8 years ago by jhrozek. Modified 5 years ago

docs Candidate to close SSSD 2.3 trivial

#3388 If two certificate matching rules with the same priority match only one is used

6

Opened 8 years ago by sbose. Modified 5 years ago

bugzilla SSSD 2.3 major

#3386 sssd-kcm cannot handle big tickets

11

Opened 8 years ago by lslebodn. Modified 5 years ago

KCM PR SSSD 2.3 critical

#3380 sssd will resolve groups with different domain than default_domain_suffix without domain

29

Opened 8 years ago by orion. Modified 5 years ago

bugzilla SSSD 2.3 major

#3352 Enabling socket-activate services to refresh configuration

3

Opened 8 years ago by jhrozek. Modified 5 years ago

SSSD 2.3 blocker

#3341 implicit_files domain should not try authentication because /etc/shadow is not supported.

2

Opened 8 years ago by lslebodn. Modified 5 years ago

docs bugzilla SSSD 2.3 minor

#3337 Options allowed in subdomain_inherit should be allowed in subdomain section of sssd.conf

8

Opened 8 years ago by mzidek. Modified 5 years ago

PR Candidate to close SSSD 2.3 minor

#3324 GPO Security Filtering and Access Control are not Compliant with MS-ADTS

10

Opened 8 years ago by thor. Modified 5 years ago

PR SSSD 2.3 major

#3323 The sssd-$RESPONDER.service units should bind to their socket units

6

Opened 8 years ago by sgallagh. Modified 5 years ago

PR Candidate to close SSSD 2.3 major

#3321 userCertificate is not removed from entry in cache

4

Opened 8 years ago by dkupka. Modified 5 years ago

bug Next milestone SSSD 2.3 minor

#3319 Review the use of domain_scope in sysdb_*upn functions

2

Opened 8 years ago by jhrozek. Modified 5 years ago

refactoring Candidate to close SSSD 2.3 minor

#3312 SSSD AD Failover Failure

12

Opened 8 years ago by chrismwheeler. Modified 5 years ago

SSSD 2.3 major

#3302 KCM: Offer configurable session-scoped access control to credentials

4

Opened 8 years ago by jhrozek. Modified 5 years ago

KCM Future milestone SSSD 2.3 minor

#3294 Enumeration is not restarted later if the first run fails because sssd is offline

5

Opened 8 years ago by jhrozek. Modified 5 years ago

Future milestone SSSD 2.3 major

#3253 Add Troubleshooting information for systemd integration

5

Opened 9 years ago by mkosek. Modified 5 years ago

docs Candidate to close SSSD 2.3 minor

#3242 Provide a "writable" D-Bus management API for local users

7

Opened 9 years ago by jhrozek. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#3219 [RFE] Regular expression used in sssd.conf not being able to consume an @-sign in the user/group name.

6

Opened 9 years ago by jhrozek. Modified 5 years ago

RFE SSSD 2.3 major

#3217 Conflicting default timeout values

15

Opened 9 years ago by gagrio. Modified 5 years ago

breaks compatibility SSSD 2.3 critical

#3155 RFE: Return message when authentication fails because the machine is offline

15

Opened 9 years ago by tibbs. Modified 5 years ago

easyfix Candidate to close SSSD 2.3 critical

#3138 Enable socket-activate services to refresh configuration

13

Opened 9 years ago by jhrozek. Modified 5 years ago

Future milestone SSSD 2.3 critical

#3048 amend the Internals Document for the new DP interface

11

Opened 9 years ago by jhrozek. Modified 5 years ago

docs Candidate to close SSSD 2.3 minor

#2878 sssd failover does not work on connecting to non-responsive ldaps:// server

11

Opened 10 years ago by jhrozek. Modified 5 years ago

SSSD 2.3 major

#2854 FAIL test-find-uid

8

Opened 10 years ago by lslebodn. Modified 5 years ago

PR bug SSSD 2.3 major

#2821 Integration tests: Test authentication + authorisation

10

Opened 10 years ago by lslebodn. Modified 5 years ago

tests SSSD 2.3 trivial

#2727 Add a memcache for SID-by-id lookups

9

Opened 10 years ago by jhrozek. Modified 5 years ago

RFE bugzilla Future milestone SSSD 2.3 critical

#2615 refactor pam_reply()

15

Opened 10 years ago by preichl. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#2230 RFE: The 'domains' option should not be required

9

Opened 11 years ago by jhrozek. Modified 5 years ago

SSSD 2.3 major

#2228 [RFE] Manage local users from /etc/passwd and account service

19

Opened 11 years ago by jhrozek. Modified 5 years ago

Candidate to close SSSD 2.3 minor

#1723 [RFE] Expand kerberos ticket renewal in KCM

47

Opened 13 years ago by prefect. Modified 5 years ago

KCM Next milestone SSSD 2.3 minor

SSSD / sssd

Source Code

Documentation

SSSD 2.3