SSSD/sssd issues and pull requests

#6671 - IPA: Use a more specific filter when searching for BE_REQ_USER_AND_GROUP

Pull Request - State: open - Opened by aplopez over 1 year ago - 1 comment
Labels: Waiting for review, Bugzilla

#6670 - tests: split system test framework into standalone repository

Pull Request - State: closed - Opened by pbrezina over 1 year ago - 2 comments
Labels: Accepted, Pushed, Tests, backport-to-stable

#6669 - passkey: only accept the client realm as relaying party ID

Pull Request - State: closed - Opened by abbra over 1 year ago - 10 comments
Labels: Pushed, no-backport, passkey

#6667 - KCM: provide mechanism to purge expired credentials

Issue - State: open - Opened by qralston over 1 year ago - 1 comment
Labels: Bugzilla

#6666 - LDAP bind fails, but basic ldap tools work

Issue - State: open - Opened by viraptor over 1 year ago - 7 comments

#6665 - LDAP auth happens after search failure

Issue - State: open - Opened by viraptor over 1 year ago - 3 comments
Labels: Bugzilla

#6663 - Additional debug to track krb5_child pipe fd's

Pull Request - State: closed - Opened by alexey-tikhonov over 1 year ago
Labels: Changes requested, no-backport

#6660 - fail_over: protect against a segmentation fault

Pull Request - State: open - Opened by sumit-bose over 1 year ago
Labels: Changes requested, backport-to-stable

#6658 - Tests: Add a timeout to realm join for AD, modify realm leave.

Pull Request - State: closed - Opened by jakub-vavra-cz over 1 year ago - 2 comments
Labels: Pushed, Tests, backport-to-stable, branch: sssd-2-7

#6651 - COVSCAN: Fix several coverity warnings

Pull Request - State: closed - Opened by aplopez over 1 year ago - 4 comments
Labels: Pushed, no-backport

#6646 - util: Improve re_expression defaults

Pull Request - State: closed - Opened by thalman over 1 year ago - 1 comment
Labels: Pushed, Bugzilla, Trivial, no-backport

#6642 - MONITOR: disable 'user' config option in case

Pull Request - State: closed - Opened by alexey-tikhonov over 1 year ago - 14 comments
Labels: Pushed, no-backport

#6635 - sss allows extraneous @ characters prefixed to username

Issue - State: closed - Opened by pbhenson over 1 year ago - 5 comments
Labels: Closed: Fixed, Bugzilla, Future work

#6634 - Tests: Add following test cases for passkey with LDAP. IPA, AD and Samba

Pull Request - State: open - Opened by madhuriupadhye over 1 year ago - 11 comments
Labels: Waiting for review, Tests, passkey

#6633 - [WIP POC] proxy: add support for Smartcard authentication

Pull Request - State: open - Opened by sumit-bose over 1 year ago - 2 comments
Labels: backport-to-stable

#6627 - ad: skip filtering if ad_enabled_domains is set

Pull Request - State: closed - Opened by sumit-bose over 1 year ago - 8 comments
Labels: Pushed, Bugzilla, no-backport

#6626 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")

Issue - State: closed - Opened by sumit-bose over 1 year ago - 2 comments
Labels: Closed: Fixed, Bugzilla

#6624 - Remove the need for a keytab when using fast with anonymous pkinit

Pull Request - State: closed - Opened by lukeadickinson over 1 year ago - 9 comments
Labels: Accepted, Pushed, no-backport

#6621 - Tests: Add test for bz 1913284 keytab permission denied

Pull Request - State: open - Opened by jakub-vavra-cz over 1 year ago - 1 comment
Labels: Waiting for review, Tests, no-backport

#6617 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case

Issue - State: closed - Opened by aplopez over 1 year ago - 2 comments
Labels: Closed: Fixed, Bugzilla

#6613 - AD: Do not use the shortcut when filter_groups is set.

Pull Request - State: closed - Opened by aplopez over 1 year ago - 2 comments
Labels: Pushed, no-backport

#6604 - krb5: add joined/parent domain to [domain_realm]

Pull Request - State: closed - Opened by sumit-bose over 1 year ago - 8 comments
Labels: Pushed, Bugzilla, backport-to-stable

#6602 - Tests: Add a test for bz1900973 kcm delete expired tickets

Pull Request - State: open - Opened by jakub-vavra-cz over 1 year ago - 2 comments
Labels: Waiting for review, Tests

#6600 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)

Issue - State: closed - Opened by sumit-bose over 1 year ago - 2 comments
Labels: Closed: Fixed, Bugzilla

#6591 - SSSD Sudo not applying cn=defaults

Issue - State: open - Opened by sveldhuisen over 1 year ago - 9 comments

#6569 - Removing unnecessary restart for non root pipelines

Pull Request - State: closed - Opened by sidecontrol over 1 year ago - 1 comment
Labels: Pushed, Tests, Trivial, backport-to-stable

#6567 - Tests: Adding ptr zone creation to class setup

Pull Request - State: closed - Opened by sidecontrol over 1 year ago - 5 comments
Labels: Pushed, Tests, backport-to-stable

#6555 - Tests: Ported Bash-krb-credential-cache to pytest

Pull Request - State: closed - Opened by SargunNarula over 1 year ago - 2 comments
Labels: Tests

#6547 - dyndns cherrypick to 2-8

Pull Request - State: closed - Opened by sidecontrol over 1 year ago
Labels: Accepted, Pushed, Tests, Trivial

#6543 - Tests: port bash rfc2307 to pytest

Pull Request - State: open - Opened by shridhargadekar over 1 year ago - 3 comments
Labels: Tests

#6540 - dyns DNS update seems slow

Issue - State: open - Opened by joakim-tjernlund over 1 year ago - 15 comments

#6533 - Add force second factor

Pull Request - State: open - Opened by huckabeec over 1 year ago - 12 comments
Labels: Changes requested, no-backport

#6531 - FAST/OTP with Anonymous PKINIT - oddly requires a keytab to exist (can be a bogus keytab)

Issue - State: closed - Opened by lukeadickinson over 1 year ago - 1 comment
Labels: Future work

#6501 - CI: remove flake8 action

Pull Request - State: closed - Opened by ikerexxe almost 2 years ago - 4 comments
Labels: Pushed, backport-to-stable

#6489 - Translations update from Fedora Weblate

Pull Request - State: closed - Opened by weblate almost 2 years ago

#6484 - Add support for ldapi:// URLs

Pull Request - State: closed - Opened by minfrin almost 2 years ago - 29 comments
Labels: Pushed, Bugzilla, no-backport

#6482 - Translations update from Fedora Weblate

Pull Request - State: closed - Opened by weblate almost 2 years ago

#6453 - passkey: discoverable credentials

Pull Request - State: closed - Opened by ikerexxe almost 2 years ago - 5 comments
Labels: Pushed, no-backport, passkey

#6442 - PAC errors when no PAC configured

Issue - State: open - Opened by joakim-tjernlund almost 2 years ago - 7 comments
Labels: Needs triage

#6440 - Using fq format [%1$s@%2$s]

Issue - State: closed - Opened by paulb-opusvl almost 2 years ago - 10 comments

#6439 - dyndns_update and alias IP addresses getting registered

Issue - State: open - Opened by bluikko almost 2 years ago - 1 comment

#6409 - Adding Ported DynDNS Testcases

Pull Request - State: closed - Opened by sidecontrol almost 2 years ago - 4 comments
Labels: Accepted, Tests, backport-to-stable

#6363 - Added more testcases to dyndns and during debugging found several issues

Pull Request - State: closed - Opened by sidecontrol about 2 years ago - 8 comments
Labels: Changes requested, Tests

#6344 - TESTS: Ported over dyndns from downstream to upstream

Pull Request - State: closed - Opened by sidecontrol about 2 years ago - 8 comments
Labels: Waiting for review, Tests

#6322 - dyndns update fails when no search domain is configured

Issue - State: open - Opened by glorang about 2 years ago - 4 comments

#6280 - Tests: Add test for bz1913839 gid of filtered group still present

Pull Request - State: closed - Opened by jakub-vavra-cz about 2 years ago - 2 comments
Labels: Pushed, Tests

#6219 - sssd don't restart properly after being killed by watchdog

Issue - State: open - Opened by paulz1 over 2 years ago - 24 comments

#6166 - Adding testcase for bz2070189

Pull Request - State: closed - Opened by sidecontrol over 2 years ago - 5 comments
Labels: Pushed, Tests

#6076 - Tests: Add test for BZ1765354

Pull Request - State: closed - Opened by jakub-vavra-cz over 2 years ago - 10 comments
Labels: Pushed, Tests, no-backport

#5581 - [Feature Request] alternate LDAP password change algorithm for compatibility with AD

Issue - State: open - Opened by sbrynen over 3 years ago - 2 comments
Labels: Candidate to close

#5575 - 2.4.2: sssd is not LTO ready

Issue - State: open - Opened by kloczek over 3 years ago - 27 comments
Labels: Candidate to close

#5574 - KCM in non systemd computers?

Issue - State: open - Opened by joakim-tjernlund over 3 years ago - 24 comments
Labels: Candidate to close

#5553 - PyPI package for pysss

Issue - State: open - Opened by shatil over 3 years ago - 1 comment
Labels: Candidate to close

#5536 - Backend running as non-root user cannot kill child processes after timeout

Issue - State: open - Opened by dpward over 3 years ago - 8 comments
Labels: Future work

#5520 - Recreate /var/cache/krb5rcache if it is missing

Issue - State: open - Opened by pbrezina over 3 years ago - 1 comment
Labels: Candidate to close

#5518 - openssh 8.5 will support KnownHostsCommand

Issue - State: open - Opened by Jakuje over 3 years ago - 2 comments
Labels: Future work

#5508 - sssctl: add utility to switch the user config option and change directory and file permissions accordingly

Issue - State: open - Opened by sumit-bose over 3 years ago - 4 comments
Labels: Candidate to close

#5497 - Can't switch to right ccache

Issue - State: closed - Opened by AndrewTsao over 3 years ago - 1 comment

#5496 - Domain substitution in fallback_homedir for subdomains

Issue - State: open - Opened by mastersin over 3 years ago - 3 comments
Labels: Needs triage

#5480 - PAM authentication failed or timeout if AD of the forest root is unavailable

Issue - State: open - Opened by cedricverk over 3 years ago - 3 comments
Labels: Needs triage

#5479 - logonHours not checked in pam account, still allowing ssh pubkey authentication

Issue - State: open - Opened by bjacke over 3 years ago - 2 comments
Labels: Needs triage

#5449 - fail to start sssd.service after installation which seems to prevent SSH auth with non-root users (i.e ubuntu)

Issue - State: closed - Opened by serialp over 3 years ago - 4 comments

#5445 - sssd taking long time to resolve some queries

Issue - State: open - Opened by sanjay-agrawal over 3 years ago - 2 comments

#5444 - Fails to validate certificate of recent OpenLDAP; vague error message

Issue - State: open - Opened by akorn over 3 years ago - 10 comments
Labels: Candidate to close

#5443 - sssd container support

Issue - State: open - Opened by holmanb almost 4 years ago
Labels: Future work

#5441 - Possible issue with the override_space character matching a character in a group name

Issue - State: closed - Opened by dcarlojr almost 4 years ago - 2 comments

#5429 - RFE: host based access control with data in ldap via pam_sssd

Issue - State: open - Opened by ikerexxe almost 4 years ago
Labels: Bugzilla, RFE, Candidate to close

#5421 - ldap provider: add nested groups filter (compatibility with ldap_account_expire_policy)

Issue - State: open - Opened by lazouz almost 4 years ago - 2 comments
Labels: Candidate to close

#5420 - Files provider can only handle BE_FILTER_ENUM but reponder sends BE_FILTER_IDNUM

Issue - State: closed - Opened by alexey-tikhonov almost 4 years ago

#5418 - Problem with transition user's credentials through pam-stack

Issue - State: open - Opened by enot586 almost 4 years ago - 4 comments
Labels: Needs triage

#5402 - ldap_group_type should be string and not integer

Issue - State: closed - Opened by tobias-gruenewald almost 4 years ago - 3 comments

#5397 - CentOS8 build fail: error: 'SOFTHSM2_PATH' undeclared

Issue - State: closed - Opened by minfrin almost 4 years ago - 13 comments

#5396 - sssd-2.4.0 works from command line but fails to start from systemd/sssctl

Issue - State: closed - Opened by smclinden almost 4 years ago - 1 comment

#5395 - CentOS8 build fail: configure: error: "Please install libdhash-devel"

Issue - State: closed - Opened by minfrin almost 4 years ago - 4 comments

#5393 - configure.ac:29: error: required file 'build/config.rpath' not found

Issue - State: closed - Opened by minfrin almost 4 years ago - 4 comments

#5379 - SSSD is not closing sockets properly

Issue - State: closed - Opened by ikerexxe almost 4 years ago

#5372 - Update `util/selinux.c` to avoid using deprecated stuff

Issue - State: open - Opened by alexey-tikhonov almost 4 years ago - 1 comment
Labels: Future work

#5371 - Pinpad card reader for login authentication yet you are asked also enter pin on pc keyboard

Issue - State: open - Opened by ngpsteen almost 4 years ago - 1 comment
Labels: Bugzilla, Needs triage

#5368 - activedirectory autofs direct maps

Issue - State: open - Opened by mpicjohn almost 4 years ago
Labels: Future work

#5363 - "Current Password:" shows inappropriately when using passwd to change normal user

Issue - State: closed - Opened by nora-pxh almost 4 years ago - 19 comments

#5362 - select uris randomly

Issue - State: open - Opened by uli42 almost 4 years ago - 2 comments
Labels: Candidate to close

#5342 - Call to `sss_cache` might add unjustified overhead to shadow-utils user/group management commands.

Issue - State: open - Opened by alexey-tikhonov almost 4 years ago - 11 comments
Labels: Future work

#5340 - SSSD not removing stale PTR records

Issue - State: open - Opened by dnv about 4 years ago - 7 comments
Labels: Needs triage

#5334 - KCM: Support for per-session credential cache, similar to KEYRING:session:

Issue - State: open - Opened by Jakuje about 4 years ago - 7 comments
Labels: KCM, Needs triage

#5329 - ./configure fails to pick proper softhsm2 module resulting in `pam-srv-tests` fail later

Issue - State: closed - Opened by kloczek about 4 years ago - 33 comments
Labels: Needs triage

#5323 - sssd need to stop talking to the CMX.LOCAL domain

Issue - State: open - Opened by joakim-tjernlund about 4 years ago - 19 comments
Labels: Needs triage

#5321 - validate_tgt fails to validate trusted domain when the last entry is cannot be used

Issue - State: open - Opened by luizluca about 4 years ago
Labels: Needs triage

#5320 - sssd.service: Failed with result 'exit-code'.

Issue - State: closed - Opened by amdjml about 4 years ago - 3 comments

#5310 - sssd: AD group range retrieval fails when enumeration is enabled

Issue - State: closed - Opened by rd117015 about 4 years ago - 4 comments

#5309 - Compilation 1.16.5 on Centos7 fails

Issue - State: closed - Opened by urban-it-solutions about 4 years ago - 6 comments

#5293 - [RFE] SSSD, Group accounts, Kerberos, and prompt_principal

Issue - State: closed - Opened by thalman about 4 years ago - 1 comment

#5292 - [RFE] SSSD, Group accounts, Kerberos, and prompt_principal

Issue - State: closed - Opened by thalman about 4 years ago - 2 comments

#5291 - Improve documentation about ssh integration

Issue - State: open - Opened by Jakuje about 4 years ago
Labels: Future work

#5285 - sssd service fails if system language is turkish

Issue - State: closed - Opened by haltunbay about 4 years ago - 2 comments

#5273 - sssd builds every translation there is

Issue - State: closed - Opened by joakim-tjernlund about 4 years ago - 1 comment
Labels: Candidate to close

#5254 - Can't set up login as "User logon name"

Issue - State: closed - Opened by vorbster about 4 years ago - 6 comments

#5219 - Kerberos Krb5: "Account Locked" Warning Message on Login Screen

Issue - State: open - Opened by manofftoday over 4 years ago - 6 comments
Labels: Future work, Needs triage

#5214 - cache: support volatile DB for graceful rollbacks

Issue - State: open - Opened by lucab over 4 years ago - 5 comments
Labels: Needs triage, Improvement-Tech-Debt

#5211 - [Feature Request] sss_chsh

Issue - State: open - Opened by tats-u over 4 years ago - 3 comments
Labels: Candidate to close

#5198 - monatomically should have been monotonically

Issue - State: closed - Opened by martindorey over 4 years ago - 2 comments
Labels: Closed: Fixed

GitHub / SSSD/sssd issues and pull requests