Roadmap - SSSD/sssd

#4007 [RFE] SSSD should use GSS-SPNEGO instead of GSSAPI when talking to AD

Opened 5 months ago by jhrozek. Modified 5 months ago

SSSD Future releases (no date set yet)

#3970 Improve dereference threshold handling

Opened 8 months ago by jhrozek. Modified 7 months ago

performance SSSD Future releases (no date set yet) minor

#3966 Responders: PAM: calling blocking NSS API is dangerous

Opened 8 months ago by atikhonov. Modified 7 months ago

SSSD Future releases (no date set yet) minor

#3885 Feature Request: fallback_gidNumber

5

Opened 11 months ago by mopp. Modified 11 months ago

RFE SSSD Future releases (no date set yet) minor

#3837 Handle setups that filter only a subset of groups better

Opened a year ago by jhrozek. Modified a year ago

SSSD Future releases (no date set yet)

#3805 Completely remove the local provider

Opened a year ago by fidencio. Modified a year ago

SSSD Future releases (no date set yet) minor

#3772 The validator reports user and group attributes in the subdomain section as invalid

2

Opened a year ago by jhrozek. Modified a year ago

bug SSSD Future releases (no date set yet) minor

#3760 The upcoming cmocka release will support running only a subset of tests matching a wildcard

Opened a year ago by jhrozek. Modified a year ago

RFE SSSD Future releases (no date set yet) minor

#3759 OpenLDAP 2.5 will support asynchronous SASL bind

1

Opened a year ago by jhrozek. Modified a year ago

RFE SSSD Future releases (no date set yet) minor

#3735 [RFE] Add "enabled" option to domain section

Opened a year ago by mzidek. Modified a year ago

SSSD Future releases (no date set yet) minor

#3702 RFE: Use the domain-resolution order to internally resolve a sudoUser

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3669 After adding ssh pub_key to FreeIPA WebUI cannot log in right away. Prior unsuccesfull login solves the issue though.

3

Opened 2 years ago by mreznik. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3628 sssd fail to remove user enumeration cache

8

Opened 2 years ago by andreasl. Modified 2 years ago

SSSD Future releases (no date set yet)

#3625 Make sure periodical tasks use randomization

2

Opened 2 years ago by jhrozek. Modified 2 years ago

performance bug SSSD Future releases (no date set yet)

#3624 Randomize cache lifetime by a couple of percent

Opened 2 years ago by jhrozek. Modified 2 years ago

performance RFE SSSD Future releases (no date set yet)

#3623 Extend object lifetime if the object hadn't changed in a long time

Opened 2 years ago by jhrozek. Modified 2 years ago

performance RFE SSSD Future releases (no date set yet)

#3612 RFE: Provide a way to authenticate with one-way trusted AD domains

Opened 2 years ago by jhrozek. Modified 2 years ago

RFE SSSD Future releases (no date set yet)

#3584 [RFE] SSSD should allow ID mapping for some specific users.

1

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3553 tracker: IPA: Only generate kdcinfo files on clients

1

Opened 2 years ago by lslebodn. Modified 2 years ago

SSSD Future releases (no date set yet)

#3543 IFP: org.freedesktop.sssd.infopipe.GetUserGroups does not take SYSDB_PRIMARY_GROUP_GIDNUM into account

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3541 RFE: AD locator task

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3540 [RFE] SSSD should offer an option to enable keep alive packets

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3538 RFE: Use the global catalog only to look up the entry DN

6

Opened 2 years ago by jhrozek. Modified a year ago

SSSD Future releases (no date set yet)

#3533 [RFE] use URI records from DNS for Kerberos/IPA discovery

10

Opened 2 years ago by jh23453. Modified 2 years ago

SSSD Future releases (no date set yet)

#3532 Fleet Commander Active Directory support SSSD implementation details

2

Opened 2 years ago by ogutierrez. Modified 2 years ago

SSSD Future releases (no date set yet)

#3527 Additional options in subdomain section.

3

Opened 2 years ago by sm32. Modified 2 years ago

SSSD Future releases (no date set yet)

#3506 Feature Request: Need transaction ids associated with log entries

2

Opened 2 years ago by solitaryr. Modified 2 years ago

SSSD Future releases (no date set yet)

#3497 TOOLS: Add feature to delete the cached GPOs

2

Opened 2 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3483 sssd cannot translate SIDs S-1-22-{1,2}-*

7

Opened 2 years ago by lslebodn. Modified 2 years ago

SSSD Future releases (no date set yet)

#3446 password cache: use a better hash algorithm

1

Opened 2 years ago by ftweedal. Modified 2 years ago

SSSD Future releases (no date set yet)

#3443 [rfe] sssd should be able to process host-based security filtering when processing active directory gpos

4

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3432 sysdb_search_users_by_timestamp() searches in the ts cache, but doesn't merge back ts entries

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3423 Warn to syslog if secrets quota is (being) exceeded

4

Opened 2 years ago by jhrozek. Modified 2 years ago

KCM SSSD Future releases (no date set yet)

#3415 Review default settings with respect to FAST vs ticket validation

Opened 2 years ago by sbose. Modified 2 years ago

performance RFE SSSD Future releases (no date set yet)

#3414 ifp: Attempted to unregister path (path[0] = org path[1] = freedesktop) which isn't registered

Opened 2 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet)

#3409 Optimize IPA-specific LDAP searches to improve performance

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3396 RFE: remove allow_missing_name PAM option

Opened 2 years ago by abbra. Modified 2 years ago

SSSD Future releases (no date set yet)

#3390 [RFE] Improve the way getdomains request is used by cache_req

Opened 2 years ago by fidencio. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3370 sssd-secrets: support gssapi as authentication method against proxy server

1

Opened 2 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet)

#3368 IFP: Return an error, not a default value for some attributes should not be read

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3357 Support autodiscovered subdomains with application type domains

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet)

#3348 KCM: Implement a shim layer to format FILE-based credentials from KCM credential cache

Opened 2 years ago by jhrozek. Modified 2 years ago

KCM SSSD Future releases (no date set yet)

#3336 subdomains: dp_options should indicate what option can be inherited

1

Opened 2 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3328 Use search_all_domains in the list IFP methods

Opened 2 years ago by jhrozek. Modified 2 years ago

easyfix refactoring SSSD Future releases (no date set yet)

#3325 python module configures services line in random order, breaking idempotency

3

Opened 2 years ago by tibbs. Modified 2 years ago

SSSD Future releases (no date set yet)

#3289 [RFE] Support U2F authentication workflow

3

Opened 2 years ago by mkosek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3271 Go back to mainloop while processing large enumeration results

2

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3255 Add SSSD to the OSS-Fuzz initiative

4

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3251 Don't enter offline mode if GC resolution fails, but gracefully disable GC lookups

2

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3249 [RFE] To let sssd to lookup certain users or groups (opposite to filter_users or filter_groups)

2

Opened 2 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3247 [RFE] Allow user private groups for trusted users when POSIX attributes are coming from AD

3

Opened 2 years ago by sbose. Modified 2 years ago

RFE SSSD Future releases (no date set yet) major

#3243 Ding-libs changes required for sssctl config-show

2

Opened 2 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3211 Refactor the sdap_async_groups.c module

7

Opened 3 years ago by jhrozek. Modified 6 months ago

performance SSSD Future releases (no date set yet) minor

#3193 [RFE] Support aliases in the memory cache

4

Opened 3 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3183 [RFC] IPA: allow switching off user private groups for trusted AD users

4

Opened 3 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3170 PAC: Process domain-local groups from another domain

2

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3158 sssctl config-check does not show what file contains the problem

6

Opened 3 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3157 Add sssctl config-show command

9

Opened 3 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3148 allow each responder to create a dbus server

4

Opened 3 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3126 let the responder choose the level of sysdb write optimization

7

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3115 Parent/s of primary group are not retrieved with tokengroups disabled

5

Opened 3 years ago by jstephen. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3105 SSSD cant parse GPO if AD server have Russain language

25

Opened 3 years ago by slavon. Modified 9 months ago

SSSD Future releases (no date set yet) major

#3099 sssctl to run as non-root

2

Opened 3 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3083 sssd crashes in offline mode(when system is NOT connected to network) if AD forest is defined in ad_access_filter

1

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3075 [RFE] Allow cached_auth_timeout to be applied per service and/or user

6

Opened 3 years ago by nkinder. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3067 watch changes to config snippets and only reload them on demand

3

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3049 SSSD should respect krbprincipalexpiration in IPA for any authentication method

3

Opened 3 years ago by strikerttd. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3047 Remove selinux_provider

2

Opened 3 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3021 RFE: pam_echo to provide instructive output to users in pam stacks proxied by pam_sss.

2

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3020 sssd does not read in configuration file if changed during the last second

7

Opened 3 years ago by danielschmitz. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3014 machine credentials renewal with adcli doesn't work as non-root

3

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3008 Document dbus integration for 3rd parties

4

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3004 SSSD does not update enumerated services properly

4

Opened 3 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) major

#3002 [RFE] Improve libwbclient functionality wrt fully qualified names

7

Opened 3 years ago by stalbker. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2992 SSSD does not destroy user Kerberos cache upon logout

6

Opened 3 years ago by ondrejv2. Modified 2 years ago

KCM SSSD Future releases (no date set yet) major

#2991 Filter out replication conflict entries

4

Opened 3 years ago by jhrozek. Modified a year ago

SSSD Future releases (no date set yet) major

#2985 Make map_krb5_error() aware of SSSD's internal error codes

2

Opened 3 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2983 amend the release process to include building COPR repositories

6

Opened 3 years ago by jhrozek. Modified 2 years ago

docs SSSD Future releases (no date set yet) minor

#2982 SSSD complains about multiple groups having same GID

5

Opened 3 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2979 id does not list all groups after upgrade sssd-1.12.4-47 to sssd-1.13.3-22

2

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2975 optimize the LDAP search filter when looking for a specific ID

2

Opened 3 years ago by jhrozek. Modified 6 months ago

performance SSSD Future releases (no date set yet) minor

#2967 Intermittent attribute retrieval failure from AD

12

Opened 3 years ago by rootwyrm. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2963 GPO: Blocked access after switching from root mode to non-root mode

3

Opened 3 years ago by lslebodn. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2954 RFE: Add dbus method to perform talloc memory context dump

4

Opened 3 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2953 Provide offline password change

3

Opened 3 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2952 Adding a nested group hierarchy breaks ghost/memberUid propagation

3

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2949 use sdap_search_bases_send() in code

2

Opened 3 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2946 "domains" description in pam_sss(8) is misleading

6

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#2945 RFE: Provide a solution so local override data can persist during cache clears

3

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2943 Split out the requests for IPA users and groups that include overrides into reusable requests

4

Opened 3 years ago by jhrozek. Modified 6 months ago

performance SSSD Future releases (no date set yet) major

#2942 Use teven's thread support to resolve A/AAAA records with libresolv's resolver

1

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2915 Make the libsss_idmap.so library private

6

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2908 [RFE] Support OTP logins for AD trust users

1

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) blocker

#2885 Provide documentation how to handle setups with and without server-side POSIX attributes

2

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2884 [RFE] Trigger full refresh of sudo rules on desire

7

Opened 3 years ago by pcech. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2882 Comparison between talloc and talloc_pool

8

Opened 3 years ago by pcech. Modified 6 months ago

performance SSSD Future releases (no date set yet) minor

#2879 Add multiple domains tests to responder_cache_req-tests

4

Opened 3 years ago by pcech. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#2876 RFE : enable SSSD to support range retrieval even when the search filters are being used

3

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2875 use thread-local storage for the client-side socket

6

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2873 DDNS - make adding and deleting PTR record in one transaction

10

Opened 3 years ago by preichl. Modified 11 days ago

SSSD Future releases (no date set yet) major

#2872 DDNS - add server and realm commands for AAAA

16

Opened 3 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2867 Non-POSIX groups are not seen in the IFP object interface - add a warning

4

Opened 3 years ago by veruu. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2851 Account expiration attributes are not honored unless replicated to GC

13

Opened 3 years ago by simaofontes. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2847 Create rules for OpenSCAP

7

Opened 4 years ago by jhrozek. Modified 2 months ago

SSSD Future releases (no date set yet) major

#2843 Enhance sdap_get_generic_ext_step() to pass timeout argument to ldap_search_ext

7

Opened 4 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2836 Add support for iCal based time rules to libipa_hbac

7

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2815 Optimize GPO logins

2

Opened 4 years ago by jhrozek. Modified 6 months ago

performance SSSD Future releases (no date set yet) major

#2808 Replace hexadecimal debug level code in log messages with a text tag

13

Opened 4 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2806 AD subdomain code has no tests

8

Opened 4 years ago by jhrozek. Modified 2 months ago

SSSD Future releases (no date set yet) minor

#2795 [RFE] Make initgroups request during login more configurable

8

Opened 4 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2794 [RFE] Provide interface which returns group-memberships by name for a given user

4

Opened 4 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2767 The sdap_op code always ends request with EAGAIN

3

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2763 [RFE] sssd: multilevel sub-domain support

5

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2760 sss_cache & negative cache - improve behaviour

5

Opened 4 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2752 Detect captive portals and make sure SSSD treats networks with them as offline

6

Opened 4 years ago by abbra. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2740 Add examples to retrieve user/group attributes from the bus in popular languages

5

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2739 ipa_s2n_save_objects is too long and does too many things

3

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#2728 [RFE] Support KDC proxying of trusted domain operations to IPA master

6

Opened 4 years ago by abbra. Modified 2 years ago

SSSD Future releases (no date set yet) critical

#2710 Propagate error about multiple entries found from cache_req to responder

5

Opened 4 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#2707 make the list of localauth plugins configurable

3

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2705 RFE: AD Provider POSIX UID/GID Priority with Autogenerated UID/GID Failover

2

Opened 4 years ago by sidecontrol. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2702 RFE: Improve AD site discovery process

11

Opened 4 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2689 proxy_child hardening

4

Opened 4 years ago by fweimer. Modified a year ago

SSSD Future releases (no date set yet) minor

#2687 When sssd service fails to start due to misconfiguration, the error message would be nice in /var/log/messages as well

7

Opened 4 years ago by adelton. Modified a year ago

SSSD Future releases (no date set yet) trivial

#2685 Internal error in domain log on starting sssd

2

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2684 D-Bus interface for InfoPipe.GetUserAttr returns base64 encoded values for octetString attributes

3

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2677 Check using zero for trust direction of a member domain

6

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2674 reduce the code duplication of timeout setting with child processes

9

Opened 4 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#2670 Log File Access Issues

3

Opened 4 years ago by mtecknology. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2665 krb5_map_user shoiud support mapping to a full principal name including REALM

3

Opened 4 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2664 Shortcut enumeration requests sooner than in the back ends

4

Opened 4 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#2651 [RFE] idmap_rid support added to sssd

4

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2623 RFE: Add an option to clear cached entries even if offline

6

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2605 Skip replication conflict entries in the IPA provider

11

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2589 Return normalized authenticated user name in PAM environment

11

Opened 4 years ago by adelton. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2578 Check the usage of ldb_msg_find_attr_as_uint64

5

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2568 RFE: sss_cache, allow invalidating by UID/GID

4

Opened 4 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) trivial

#2562 sssd can timeout ldap network connection incorrectly

15

Opened 4 years ago by orion. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2555 Handle setups with local nameservers better

16

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2551 RFE To delete kerberos tickets once the user logs out (might be with KCM sessions)

4

Opened 4 years ago by jhrozek. Modified a year ago

KCM SSSD Future releases (no date set yet) minor

#2508 Handle AD clients with FQDN longer than 15 characters

5

Opened 4 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2499 RFE: Support multiple IP addresses resolved from a single host name

6

Opened 4 years ago by jhrozek. Modified 6 months ago

SSSD Future releases (no date set yet) major

#2489 refactor fill_pwent

3

Opened 4 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2479 Make return codes of sysdb_*_with_views operations consistent

7

Opened 4 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2476 Return domain of the authenticated user in PAM environment

17

Opened 4 years ago by adelton. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2469 Read-only confdb in responders

5

Opened 5 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2465 [RFE] Refactor SSSD to use configuration from ding-libs instead of DB

5

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2458 [RFE] Support IPA as a member server in AD (SSSD part)

4

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2450 Implement dbus call to create socket on the fly to provides services for a set of domains

5

Opened 5 years ago by adelton. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2438 [RFE] Make it possible to use different Unix socket path, use it for distinguishing domains

6

Opened 5 years ago by adelton. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2434 Expose ldap filter for users as configuration item

8

Opened 5 years ago by bnordgren. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2422 Optimize validation away when FAST channel is used

7

Opened 5 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2417 refactor sdap_nested_group_hash_group

10

Opened 5 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2414 [RFE] Support name@domain notation with our libwbclient interface

5

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2411 [RFE] Session Tracking Control

4

Opened 5 years ago by mstroeder. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2394 redesign failover

7

Opened 5 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2393 failover: enable different dns discovery domain for AD subdomains

7

Opened 5 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2381 Fix lookup_netgr_step() not to access result of sysdb_getnetgr() in case of ret-val ENOENT

4

Opened 5 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2379 Do LDAP bind in get_user_dn_send() before calling sdap_search_user_send()

4

Opened 5 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2378 Return connected state in sss_ldap_init_recv()

5

Opened 5 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2371 autofs: return a connection failure until maps have been fetched

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2353 [RFE] Add support for S-1-22-* SIDs used by Samba

5

Opened 5 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2337 [RFE] Implement org.freedesktop.DBus.Properties.Set

11

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2336 Refactor sdap_attr_map to contain the map and the count in one structure

5

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2328 IFP: Use PolicyKit for access control

8

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) critical

#2327 SBUS: Support the ObjectManager interface

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2324 [RFE] Implement rate limiting for non privileged clients

5

Opened 5 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2318 All responders read the negcache timeout setting from the [nss] section

7

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#2316 sudoNotBefore time is not always respected

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2310 Wrong principal selected for AD authentication with lowercase machine account

11

Opened 5 years ago by krissn. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2276 Enable rootDSE code to retrieve configurationNamingContext attribute

9

Opened 5 years ago by yelley. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2261 investigate our netlink integration with virtual interfaces provided by Docker

12

Opened 5 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) major

#2255 Finish promtly when non existing user is requested in server mode

5

Opened 5 years ago by preichl. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2250 [RFE] If the cache is corrupt start with the fresh cache

8

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2249 [RFE] SSSD should save and compare configuration

8

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2244 [RFE] Support UID/GID changes

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2240 [RFE] make nss/pam modules released independently of SSSD source tree

11

Opened 5 years ago by abbra. Modified 2 years ago

SSSD Future releases (no date set yet) blocker

#2231 RFE: Drop the monitor process

5

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2229 Ship an immutable recovery mode config for local accounts

14

Opened 5 years ago by jhrozek. Modified 2 months ago

SSSD Future releases (no date set yet) major

#2222 [RFE] Intergation with GNOME Keyring (phase 2)

11

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2221 [RFE] Intergation with GNOME Keyring (phase 1)

15

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2217 [RFE] Discard and re-acquire kerberos ticket if get kerberos failure

5

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2216 Inspect the usage of find_subdomain_by_sid

15

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2205 Always store home directory expansions to sysdb

15

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2187 [RFE] Expose different identity domains to different D-BUS consumers

10

Opened 5 years ago by dpal. Modified 6 months ago

SSSD Future releases (no date set yet) major

#2174 [RFE] Store the "last password change" field with higher resolution than 24 hours

4

Opened 5 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2141 convert backend specific options to dp_option array

9

Opened 5 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2122 Register responders only if backend initialization is complete

6

Opened 6 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2117 [RFE] SID-Mapping: Store non-POSIX users in cache if they have a SID

16

Opened 6 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2088 Reorganize the sssd-ldap manual page

10

Opened 6 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) major

#2078 [RFE] Support AD users from a trusted forest in sssd-ad provider

13

Opened 6 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2062 Leverage RFC 4533 in server mode for enumeration and synchronization of external groups

9

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2054 Review if responder_cli pointers are actually needed

3

Opened 6 years ago by jhrozek. Modified a year ago

SSSD Future releases (no date set yet) minor

#2053 Stop saving the ccache collection name to sysdb unless it's needed

9

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2039 change the way how providers are initialized - create a provider constructor

4

Opened 6 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2038 Review the structures introduced by GC lookups feature and server mode

10

Opened 6 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2021 Detect cycles in adding ghost users instead of using permissive ldb mod

6

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2020 Unify the child subprocess framework

6

Opened 6 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#2015 SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack

17

Opened 6 years ago by stgraber. Modified a year ago

SSSD Future releases (no date set yet) major

#2012 [RFE] Support NTLM authentication when GSSAPI NTLM mech is available

7

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) critical

#1983 move the sudo library outside libdir

8

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1981 [RFE] Allow updates and removal of ranges

7

Opened 6 years ago by sbose. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1975 [RFE] Change the default of ldap_access_order

7

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1954 Cached entry is returned from cache even if it doesn't match the min_id/max_id constraints

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1925 [RFE] Build a generic mechanism to invoke a callback after a provider is reconfigured

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1907 Split the man dyndns man page options into an included file

3

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1904 the .finalize handler is not used anywhere.

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#1902 Investigate checking for subdomains expiration in responder_get_domain()

9

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1887 [RFE] sss_cache should be able to clear ID-mappings

3

Opened 6 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1875 resolver interface should strdup/memdup input

6

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1871 krb5 validation code always picks the first matching principal

8

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1851 filter out ipv6 autoconfiguration from libnl messages

1

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1837 [RFE] Use extended data blob to extract error msg on AD krb password changes

6

Opened 6 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1836 Support user credentials in during rebind

5

Opened 6 years ago by sbose. Modified 7 months ago

SSSD Future releases (no date set yet) major

#1829 investigate a better way to handle long-running requests in the SSSD

6

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1828 [RFE] Tool to display current configuration

24

Opened 6 years ago by rcritten. Modified 6 months ago

SSSD Future releases (no date set yet) major

#1788 [RFE] Create a command line tool to return the current debug level of sssd

16

Opened 6 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1768 Enabling proxy_fast_alias shows "ldb_modify failed: [Invalid attribute syntax]" for id lookups.

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#1753 make check should also test tools

13

Opened 6 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1752 sss_cache tool should probably work with aliases too

4

Opened 6 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1720 Stop using in-memory hash tables for netgroups and autofs maps

15

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1719 [RFE] Improve offline mode performance

4

Opened 6 years ago by prefect. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1715 [RFE] Create a way to handle UID/GID changes in the central server

4

Opened 6 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1691 [RFE] add a sss_cache option to completely remove the user from cache, not just invalidate

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1664 empty groups with filter_users_in_groups and enumerate enabled

14

Opened 6 years ago by bergolth. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1653 [RFE] Reconsider the use of memberof in initgroups

7

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1579 [RFE] Make sure that SSSD uses GSSAPI with GSS proxy to extract PAC

10

Opened 7 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1572 [RFE] Integrate local provider with user managment utilities on the system

3

Opened 7 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1570 Keep track of per-PID/cgroup/process group fds in the PAM responder.

10

Opened 7 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1555 validate the shell coming from the directory or the cache

5

Opened 7 years ago by jhrozek. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) minor

#1522 Delete a fail over server after all pending request have finished

7

Opened 7 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1518 [RFE] Better diagnose keytab mismatch

6

Opened 7 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1507 Investigate terminating connections in sdap_ops.c and comment the code some more

18

Opened 7 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1497 [RFE] Expose Kerberos ticket data on IFP from KCM

13

Opened 7 years ago by nalin. Modified 2 years ago

KCM SSSD Future releases (no date set yet) minor

#1493 [RFE] SSSD should ignore offline timeout for auth when cached_credentials = false

14

Opened 7 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1443 Define internal PAM commands outside client scope

12

Opened 7 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1397 [RFE] Pull in automount location for the host

6

Opened 7 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1392 Incorrect message in krb5_child.log when krb5_fast_principal is unset

8

Opened 7 years ago by sgallagh. Modified 2 years ago

easyfix SSSD Future releases (no date set yet) trivial

#1372 Set debug level to 2 by default

21

Opened 7 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1369 automount location changes not reflected

6

Opened 7 years ago by rcritten. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1326 [RFE] Allow chaining access_provider

6

Opened 7 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1285 convert the sss_cli_recv_rep() consumers to use a single return code

11

Opened 7 years ago by pbrezina. Modified 6 months ago

SSSD Future releases (no date set yet) minor

#1275 Inspect usage of sysdb_search_user_by_name() ba various parts of code

21

Opened 7 years ago by jzeleny. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1162 [Feature] Add RADIUS authentication provider to SSSD

12

Opened 7 years ago by dpal. Modified 2 months ago

SSSD Future releases (no date set yet) major

#1149 Create custom abort function for talloc_get_type_abort()

29

Opened 7 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1083 move the resolover cache handling from fail over to a new layer atop resolver

15

Opened 7 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1030 [RFE] Improve SASL authentication method negotiation

12

Opened 8 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#561 [RFE] Add support for certificate-based authentication to directory servers

25

Opened 9 years ago by nalin. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#3258 [RFE] Provide a way to troubleshhot applications that use SSSD for authentication and identity

7

Opened 2 years ago by dpal. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2965 non-root: Cannot find users when second domain tree users are queried while joined to child domain

5

Opened 3 years ago by lslebodn. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2886 sssd-nss segfault on restart

7

Opened 3 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2857 Please add support for AD for autofs_provider

6

Opened 3 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2850 LOCAL domain: sss_userdel can not delete user if libsemanage fails

4

Opened 4 years ago by mzidek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2704 disable DNS SRV lookups for subdomains when AD DCs are explicitly specified

5

Opened 4 years ago by ondrejv2. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2607 sssd should not always read entire autofs map from ldap

7

Opened 4 years ago by henson. Modified a month ago

SSSD Future releases (no date set yet) minor

#2536 sssd issues STARTTLS even with GSSAPI in use

9

Opened 4 years ago by steuer. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2525 Monitor SIGKILL timer issue and service restart failure

15

Opened 4 years ago by kieren. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2480 sdap_extend_map_with_list() might leak memory if used the 4th and 6th argument being the same

9

Opened 4 years ago by sbose. Modified 9 months ago

easyfix SSSD Future releases (no date set yet) minor

#2457 Responder crashes if back end terminates sbus connection

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2432 RFE: sssd should support time format without minutes and seconds in sudo entries

4

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2395 The config manipulation interface should use a system message bus helper and does not belong in infopipe

18

Opened 5 years ago by simo. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2373 audit requirements for local provider

9

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2315 sss_userdel should use logind instead of proc in is_logged_in

9

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2303 Sssd fails to refresh nested groups correctly

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2302 Sssd delays group member retrieval

6

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2299 Password-less login is allowed for expired ad user

10

Opened 5 years ago by jhrozek. Modified 7 months ago

SSSD Future releases (no date set yet) minor

#2292 [RFE] Implement systemctl reload

8

Opened 5 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#2233 RFE: Add a sbus signal send support

13

Opened 5 years ago by jhrozek. Modified 11 months ago

SSSD Future releases (no date set yet) major

#2069 [RFE] When using sssd-ad in a forest should be able to flatten usernames for all domains

24

Opened 6 years ago by simpfeld. Modified 2 years ago

SSSD Future releases (no date set yet) major

#2065 Sssd initial enumeration has no effect sometimes

10

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1941 [RFE] ammend be_refresh with some throttling ability

13

Opened 6 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1878 The communication between the PAM responder and the DP should follow the tevent_req style

5

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1850 split the options for local domain to a separate man page or explain them better

5

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) trivial

#1798 refactor data_provider_be.c

6

Opened 6 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1780 sss_useradd: invalid group ownership of homedir when --uid is used

3

Opened 6 years ago by pbrezina. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1777 Improve error reporting in functions related to setting SELinux file context

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1709 sssd: Enable use of libuser API (lu_homedir_remove() / lu_homedir_copy()) instead of own remove_tree() / copy_dir() implementation

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) major

#1707 [RFE] Create a new option called ldap_sudo_include_wildcard that would make ldap_sudo_include_regexp obsolete

4

Opened 6 years ago by jhrozek. Modified 2 years ago

SSSD Future releases (no date set yet) minor

#1117 Clarify how comments work in sssd.conf

10

Opened 7 years ago by sgallagh. Modified a year ago

easyfix SSSD Future releases (no date set yet) trivial

#941 return multiple server addresses to the Kerberos locator plugin

38

Opened 8 years ago by jhrozek. Modified a year ago

SSSD Future releases (no date set yet) major

#489 GSSAPI and START_TLS should be mutually-exclusive

13

Opened 9 years ago by sgallagh. Modified 2 years ago

SSSD Future releases (no date set yet) minor

SSSD / sssd

Source Code

Documentation

SSSD Future releases (no date set yet)