Star0
32
代码
代码
Issues13
Pull Requests2
项目讨论
Wiki
分析
Star0
32
已合并
update to 2.11.1 #222
xuraoqing创建于 2025年10月10日
update to 2.11.1 #222
已合并
xuraoqing创建于 2025年10月10日
从refs/pull/222/head合入到master
共 11 个文件变更+36-292
Dbackport-Make-sure-invalid-krb5-context-is-not-used.patch+0-33
@@ -1,33 +0,0 @@
1-From bdfb92012d6dec2999469d483ba67d6c2521a078 Mon Sep 17 00:00:00 2001
2-From: Sumit Bose <sbose@redhat.com>
3-Date: Thu, 21 Nov 2024 09:23:36 +0100
4-Subject: [PATCH] ldap_child: make sure invalid krb5 context is not used -
5- 2.9.4
6- 
7-Resolves: https://github.com/SSSD/sssd/issues/7715
8----
9- src/util/sss_krb5.c | 3 ++-
10- 1 file changed, 2 insertions(+), 1 deletion(-)
11- 
12-diff --git a/src/util/sss_krb5.c b/src/util/sss_krb5.c
13-index 3f57e5b268f..0b83142ddfc 100644
14---- a/src/util/sss_krb5.c
15-+++ b/src/util/sss_krb5.c
16-@@ -140,6 +140,7 @@ errno_t select_principal_from_keytab(TALLOC_CTX *mem_ctx,
17-
18- kerr = sss_krb5_init_context(&krb_ctx);
19- if (kerr) {
20-+ krb_ctx = NULL;
21- error_message = "Failed to init Kerberos context";
22- ret = EFAULT;
23- goto done;
24-@@ -269,7 +270,7 @@ errno_t select_principal_from_keytab(TALLOC_CTX *mem_ctx,
25- }
26-
27- done:
28-- if (ret != EOK) {
29-+ if (ret != EOK && krb_ctx != NULL) {
30- DEBUG(SSSDBG_FATAL_FAILURE, "Failed to read keytab [%s]: %s\n",
31- sss_printable_keytab_name(krb_ctx, keytab_name),
32- (error_message ? error_message : sss_strerror(ret)));
33- 
Dbackport-PAM-fix-issue-found-by-Coverity.patch+0-36
@@ -1,36 +0,0 @@
1-From c36c320d12e48178b041d9859e3035f0c65c4909 Mon Sep 17 00:00:00 2001
2-From: Alexey Tikhonov <atikhono@redhat.com>
3-Date: Tue, 14 Jan 2025 12:35:43 +0100
4-Subject: [PATCH] PAM: fix issue found by Coverity
5- 
6-```
7-1614 D(("Illegal task [%#x]", task));
8- 9. out_of_scope: Variable buf goes out of scope.
9- 
10-CID 530049: (#1 of 1): Resource leak (RESOURCE_LEAK)
11-10. leaked_storage: Variable rd going out of scope leaks the storage rd.data points to.
12-1615 return PAM_SYSTEM_ERR;
13-1616 }
14-```
15- 
16-Reviewed-by: Justin Stephenson <jstephen@redhat.com>
17----
18- src/sss_client/pam_sss.c | 2 +-
19- 1 file changed, 1 insertion(+), 1 deletion(-)
20- 
21-diff --git a/src/sss_client/pam_sss.c b/src/sss_client/pam_sss.c
22-index 600c3616a..9aec74ce3 100644
23---- a/src/sss_client/pam_sss.c
24-+++ b/src/sss_client/pam_sss.c
25-@@ -1612,7 +1612,7 @@ static int send_and_receive(pam_handle_t *pamh, struct pam_items *pi,
26- break;
27- default:
28- D(("Illegal task [%#x]", task));
29-- return PAM_SYSTEM_ERR;
30-+ pam_status = PAM_SYSTEM_ERR;
31- }
32-
33- done:
34---
35-2.43.0
36- 
Dbackport-authtok-add-IS_PW_OR_ST_AUTHTOK.patch+0-42
@@ -1,42 +0,0 @@
1-From be42436c2070e1dc9b2e5d3e03700624f4cc20bf Mon Sep 17 00:00:00 2001
2-From: Sumit Bose <sbose@redhat.com>
3-Date: Wed, 18 Jun 2025 14:30:57 +0200
4-Subject: [PATCH] authtok: add IS_PW_OR_ST_AUTHTOK()
5-MIME-Version: 1.0
6-Content-Type: text/plain; charset=UTF-8
7-Content-Transfer-Encoding: 8bit
8- 
9-This patch adds a helper macro to determine if an authtok struct is of
10-type SSS_AUTHTOK_TYPE_PASSWORD or SSS_AUTHTOK_TYPE_PAM_STACKED. This is
11-useful if a password is expected but an authentication token forwarded
12-by an different PAM module, which is most probably a password, can be
13-used as well.
14- 
15-Resolves: https://github.com/SSSD/sssd/issues/7968
16- 
17-Reviewed-by: Pavel Březina <pbrezina@redhat.com>
18-Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
19-Reviewed-by: Tomáš Halman <thalman@redhat.com>
20-(cherry picked from commit 297ecc467efb6035e370f62e62ffa668bb1d0050)
21----
22- src/util/authtok.h | 4 ++++
23- 1 file changed, 4 insertions(+)
24- 
25-diff --git a/src/util/authtok.h b/src/util/authtok.h
26-index b58e9dbbd..acabb7078 100644
27---- a/src/util/authtok.h
28-+++ b/src/util/authtok.h
29-@@ -28,6 +28,10 @@
30- sss_authtok_get_type((tok)) == SSS_AUTHTOK_TYPE_SC_PIN \
31- || sss_authtok_get_type((tok)) == SSS_AUTHTOK_TYPE_SC_KEYPAD)
32-
33-+#define IS_PW_OR_ST_AUTHTOK(tok) ( \
34-+ sss_authtok_get_type((tok)) == SSS_AUTHTOK_TYPE_PASSWORD \
35-+ || sss_authtok_get_type((tok)) == SSS_AUTHTOK_TYPE_PAM_STACKED)
36-+
37-
38- /* Use sss_authtok_* accessor functions instead of struct sss_auth_token
39- */
40---
41-2.43.0
42- 
Dbackport-krb5-offline-with-SSS_AUTHTOK_TYPE_PAM_STACKED.patch+0-104
@@ -1,104 +0,0 @@
1-From 6d3e61523698bc0ec17287de01a2dbe1a2d0acab Mon Sep 17 00:00:00 2001
2-From: Sumit Bose <sbose@redhat.com>
3-Date: Tue, 10 Jun 2025 14:22:19 +0200
4-Subject: [PATCH] krb5: offline with SSS_AUTHTOK_TYPE_PAM_STACKED
5-MIME-Version: 1.0
6-Content-Type: text/plain; charset=UTF-8
7-Content-Transfer-Encoding: 8bit
8- 
9-Recently a new authtok type SSS_AUTHTOK_TYPE_PAM_STACKED was added to
10-handle credentials forwarded by other PAM modules. Before it was
11-unconditionally assumed that it is a password and hence
12-SSS_AUTHTOK_TYPE_PASSWORD was used.
13- 
14-When SSS_AUTHTOK_TYPE_PAM_STACKED was introduce the main use-cases were
15-already handled but currently offline use-cases fail because here only
16-SSS_AUTHTOK_TYPE_PASSWORD is expected. With this patch
17-SSS_AUTHTOK_TYPE_PAM_STACKED can be used to store or validate offline
18-credentials as well.
19- 
20-Resolves: https://github.com/SSSD/sssd/issues/7968
21- 
22-Reviewed-by: Pavel Březina <pbrezina@redhat.com>
23-Reviewed-by: Shridhar Gadekar <sgadekar@redhat.com>
24-Reviewed-by: Tomáš Halman <thalman@redhat.com>
25-(cherry picked from commit 3b106f1888b6430b8bab75e1c0fe0f054eafce48)
26----
27- src/providers/krb5/krb5_auth.c | 11 +++++++----
28- src/providers/krb5/krb5_child.c | 4 ++++
29- .../krb5/krb5_delayed_online_authentication.c | 2 +-
30- src/responder/pam/pamsrv_cmd.c | 1 +
31- 4 files changed, 13 insertions(+), 5 deletions(-)
32- 
33-diff --git a/src/providers/krb5/krb5_auth.c b/src/providers/krb5/krb5_auth.c
34-index 07e4d807f..fb2f58869 100644
35---- a/src/providers/krb5/krb5_auth.c
36-+++ b/src/providers/krb5/krb5_auth.c
37-@@ -366,8 +366,12 @@ static void krb5_auth_store_creds(struct sss_domain_info *domain,
38- domain->cache_credentials_min_ff_length);
39- ret = EINVAL;
40- }
41-- } else if (sss_authtok_get_type(pd->authtok) ==
42-- SSS_AUTHTOK_TYPE_PASSWORD) {
43-+ } else if (IS_PW_OR_ST_AUTHTOK(pd->authtok)) {
44-+ /* At this point we can be sure that
45-+ * SSS_AUTHTOK_TYPE_PAM_STACKED is a password because
46-+ * krb5_auth_store_creds() is not called if 2FA/otp was used,
47-+ * only if SSS_AUTHTOK_TYPE_2FA was used for authentication.
48-+ */
49- ret = sss_authtok_get_password(pd->authtok, &password, NULL);
50- } else {
51- DEBUG(SSSDBG_MINOR_FAILURE, "Cannot cache authtok type [%d].\n",
52-@@ -1211,8 +1215,7 @@ static void krb5_auth_done(struct tevent_req *subreq)
53- if (kr->is_offline) {
54- if (dp_opt_get_bool(kr->krb5_ctx->opts,
55- KRB5_STORE_PASSWORD_IF_OFFLINE)
56-- && sss_authtok_get_type(pd->authtok)
57-- == SSS_AUTHTOK_TYPE_PASSWORD) {
58-+ && IS_PW_OR_ST_AUTHTOK(pd->authtok)) {
59- krb5_auth_cache_creds(state->kr->krb5_ctx,
60- state->domain,
61- state->be_ctx->cdb,
62-diff --git a/src/providers/krb5/krb5_child.c b/src/providers/krb5/krb5_child.c
63-index 5830305a0..21ec38627 100644
64---- a/src/providers/krb5/krb5_child.c
65-+++ b/src/providers/krb5/krb5_child.c
66-@@ -2385,6 +2385,10 @@ static krb5_error_code get_and_save_tgt(struct krb5_req *kr,
67- if (kerr != 0) {
68- KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr);
69-
70-+ if (kerr == EAGAIN) {
71-+ kerr = KRB5_KDC_UNREACH;
72-+ }
73-+
74- /* Special case for IPA password migration */
75- if (kr->pd->cmd == SSS_PAM_AUTHENTICATE
76- && kerr == KRB5_PREAUTH_FAILED
77-diff --git a/src/providers/krb5/krb5_delayed_online_authentication.c b/src/providers/krb5/krb5_delayed_online_authentication.c
78-index f88d8ab9b..1fac986a6 100644
79---- a/src/providers/krb5/krb5_delayed_online_authentication.c
80-+++ b/src/providers/krb5/krb5_delayed_online_authentication.c
81-@@ -258,7 +258,7 @@ errno_t add_user_to_delayed_online_authentication(struct krb5_ctx *krb5_ctx,
82- return EINVAL;
83- }
84-
85-- if (sss_authtok_get_type(pd->authtok) != SSS_AUTHTOK_TYPE_PASSWORD) {
86-+ if (!IS_PW_OR_ST_AUTHTOK(pd->authtok)) {
87- DEBUG(SSSDBG_CRIT_FAILURE,
88- "Invalid authtok for user [%s].\n", pd->user);
89- return EINVAL;
90-diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
91-index d4cb421f4..c6a436069 100644
92---- a/src/responder/pam/pamsrv_cmd.c
93-+++ b/src/responder/pam/pamsrv_cmd.c
94-@@ -1101,6 +1101,7 @@ static errno_t get_password_for_cache_auth(struct sss_auth_token *authtok,
95-
96- switch (sss_authtok_get_type(authtok)) {
97- case SSS_AUTHTOK_TYPE_PASSWORD:
98-+ case SSS_AUTHTOK_TYPE_PAM_STACKED:
99- ret = sss_authtok_get_password(authtok, password, NULL);
100- break;
101- case SSS_AUTHTOK_TYPE_2FA:
102---
103-2.43.0
104- 
Dbackport-mistype-fix.patch+0-27
@@ -1,27 +0,0 @@
1-From 3621a587a32589e8404ed1f2356fcbfebc128efc Mon Sep 17 00:00:00 2001
2-From: Alexey Tikhonov <atikhono@redhat.com>
3-Date: Mon, 2 Sep 2024 21:04:34 +0200
4-Subject: [PATCH] TOOLS: mistype fix
5-MIME-Version: 1.0
6-Content-Type: text/plain; charset=UTF-8
7-Content-Transfer-Encoding: 8bit
8- 
9-Reviewed-by: Iker Pedrosa <ipedrosa@redhat.com>
10-Reviewed-by: Tomáš Halman <thalman@redhat.com>
11----
12- src/tools/sssctl/sssctl_data.c | 2 +-
13- 1 file changed, 1 insertion(+), 1 deletion(-)
14- 
15-diff --git a/src/tools/sssctl/sssctl_data.c b/src/tools/sssctl/sssctl_data.c
16-index 79e12078e4b..43b9814eaf0 100644
17---- a/src/tools/sssctl/sssctl_data.c
18-+++ b/src/tools/sssctl/sssctl_data.c
19-@@ -168,7 +168,7 @@ static errno_t sssctl_restore(bool force_start, bool force_restart)
20- }
21- }
22-
23-- if (sssctl_backup_file_exists(SSS_BACKUP_USER_OVERRIDES)) {
24-+ if (sssctl_backup_file_exists(SSS_BACKUP_GROUP_OVERRIDES)) {
25- ret = sssctl_run_command((const char *[]){"sss_override", "group-import",
26- SSS_BACKUP_GROUP_OVERRIDES, NULL});
27- if (ret != EOK) {
Areplace-openEuler-version.patch+26-0
@@ -0,0 +1,26 @@
1+From 63b9265686bb68f7067b0d1dc3a8ddb8fcc2e0ff Mon Sep 17 00:00:00 2001
2+From: Xu Raoqing <xuraoqing@huawei.com>
3+Date: Fri, 10 Oct 2025 15:06:22 +0800
4+Subject: [PATCH] replace openEuler version
5+ 
6+Signed-off-by: Xu Raoqing <xuraoqing@huawei.com>
7+---
8+ src/config/setup.py.in | 2 +-
9+ 1 file changed, 1 insertion(+), 1 deletion(-)
10+ 
11+diff --git a/src/config/setup.py.in b/src/config/setup.py.in
12+index 8482f27..702e02b 100644
13+--- a/src/config/setup.py.in
14++++ b/src/config/setup.py.in
15+@@ -34,7 +34,7 @@ def sanitize_version(version):
16+ # X.Y.Z-alpha1 -> X.Y.Za1
17+ # X.Y.Z-beta1 -> X.Y.Zb1
18+ # X.Y.Z-rc1 -> X.Y.Zrc1
19+- return version.replace('-', '').replace('alpha', 'a').replace('beta', 'b')
20++ return version.replace('-', '').replace('alpha', 'a').replace('beta', 'b').replace(' (LTS)', '')
21+
22+ setup(
23+ name='SSSDConfig',
24+--
25+2.48.1
26+ 
Asssd-2.11.1.tar.gz+0-0
Binary files do not support preview
Dsssd-2.9.7.tar.gz+0-3
@@ -1,3 +0,0 @@
1-version https://git-lfs.github.com/spec/v1
2-oid sha256:6b5284a4d72b67c0897699794360d79e0f67461957e20273c2649f025e76c248
3-size 9161891
Dsssd-openEuler-replace-version.patch+0-27
@@ -1,27 +0,0 @@
1-diff --git a/src/config/setup.py.in b/src/config/setup.py.in
2-index 27f63c4..9b9db31 100644
3---- a/src/config/setup.py.in
4-+++ b/src/config/setup.py.in
5-@@ -24,9 +24,21 @@ Python-level packaging using distutils.
6-
7- from distutils.core import setup
8-
9-+def sanitize_version(version):
10-+ """
11-+ We need to convert Fedora version guidelines which we follow in version.m4
12-+ to Python guidelines. See:
13-+ * https://docs.fedoraproject.org/en-US/packaging-guidelines/Versioning/
14-+ * https://packaging.python.org/en/latest/discussions/versioning/
15-+ """
16-+ # X.Y.Z-alpha1 -> X.Y.Za1
17-+ # X.Y.Z-beta1 -> X.Y.Zb1
18-+ # X.Y.Z-rc1 -> X.Y.Zrc1
19-+ return version.replace('-', '').replace('alpha', 'a').replace('beta', 'b').replace(' (LTS)', '')
20-+
21- setup(
22- name='SSSDConfig',
23-- version='@VERSION@',
24-+ version=sanitize_version('@VERSION@'),
25- license='GPLv3+',
26- url='https://github.com/SSSD/sssd/',
27- packages=['SSSDConfig'],
Msssd.spec+10-16
@@ -7,20 +7,15 @@
7%global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})7%global samba_package_version %(rpm -q samba-devel --queryformat %{version}-%{release})
8 8 
9Name: sssd9Name: sssd
10-Version: 2.9.710+Version: 2.11.1
11-Release: 611+Release: 1
12Summary: System Security Services Daemon12Summary: System Security Services Daemon
13License: GPL-3.0-or-later13License: GPL-3.0-or-later
14URL: https://github.com/SSSD/sssd/14URL: https://github.com/SSSD/sssd/
15Source0: https://github.com/SSSD/sssd/releases/download/%{version}/sssd-%{version}.tar.gz15Source0: https://github.com/SSSD/sssd/releases/download/%{version}/sssd-%{version}.tar.gz
16 16 
17-Patch0000: sssd-openEuler-replace-version.patch17+Patch0001: replace-openEuler-version.patch
18-Patch0001: backport-Make-sure-invalid-krb5-context-is-not-used.patch18+Patch0002: backport-SSS_CLIENT-MC-simplify-logic-and.patch
19-Patch0002: backport-mistype-fix.patch
20-Patch0003: backport-PAM-fix-issue-found-by-Coverity.patch
21-Patch0004: backport-SSS_CLIENT-MC-simplify-logic-and.patch
22-Patch0005: backport-krb5-offline-with-SSS_AUTHTOK_TYPE_PAM_STACKED.patch
23-Patch0006: backport-authtok-add-IS_PW_OR_ST_AUTHTOK.patch
24 19 
25Requires: sssd-ad = %{version}-%{release}20Requires: sssd-ad = %{version}-%{release}
26Requires: sssd-common = %{version}-%{release}21Requires: sssd-common = %{version}-%{release}
@@ -35,7 +30,7 @@ Suggests: sssd-dbus = %{version}-%{release}
35Obsoletes: python3-sssd < %{version}-%{release}30Obsoletes: python3-sssd < %{version}-%{release}
36 31 
37BuildRequires: make autoconf automake libtool32BuildRequires: make autoconf automake libtool
38-BuildRequires: openldap-devel pam-devel33+BuildRequires: openldap-devel pam-devel libcap-devel
39BuildRequires: libxslt docbook-style-xsl34BuildRequires: libxslt docbook-style-xsl
40BuildRequires: python3-devel check-devel35BuildRequires: python3-devel check-devel
41BuildRequires: doxygen libsemanage-devel bind-utils36BuildRequires: doxygen libsemanage-devel bind-utils
@@ -511,7 +506,6 @@ chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_iface.so
511chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_iface_sync.so506chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_iface_sync.so
512chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_krb5_common.so507chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_krb5_common.so
513chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ldap_common.so508chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_ldap_common.so
514-chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_semanage.so
515chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_simple.so509chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_simple.so
516chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_util.so510chrpath -d $RPM_BUILD_ROOT%{_libdir}/%{name}/libsss_util.so
517chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/p11_child511chrpath -d $RPM_BUILD_ROOT%{_libexecdir}/sssd/p11_child
@@ -631,7 +625,6 @@ done
631%{_unitdir}/sssd-pac.socket625%{_unitdir}/sssd-pac.socket
632%{_unitdir}/sssd-pac.service626%{_unitdir}/sssd-pac.service
633%{_unitdir}/sssd-pam.socket627%{_unitdir}/sssd-pam.socket
634-%{_unitdir}/sssd-pam-priv.socket
635%{_unitdir}/sssd-pam.service628%{_unitdir}/sssd-pam.service
636%{_unitdir}/sssd-ssh.socket629%{_unitdir}/sssd-ssh.socket
637%{_unitdir}/sssd-ssh.service630%{_unitdir}/sssd-ssh.service
@@ -658,7 +651,6 @@ done
658%{_libdir}/%{name}/libsss_krb5_common.so651%{_libdir}/%{name}/libsss_krb5_common.so
659%{_libdir}/%{name}/libsss_ldap_common.so652%{_libdir}/%{name}/libsss_ldap_common.so
660%{_libdir}/%{name}/libsss_util.so653%{_libdir}/%{name}/libsss_util.so
661-%{_libdir}/%{name}/libsss_semanage.so
662%{_libdir}/%{name}/libifp_iface.so654%{_libdir}/%{name}/libifp_iface.so
663%{_libdir}/%{name}/libifp_iface_sync.so655%{_libdir}/%{name}/libifp_iface_sync.so
664%{_libdir}/%{name}/libsss_iface.so656%{_libdir}/%{name}/libsss_iface.so
@@ -668,6 +660,7 @@ done
668 660 
669%{ldb_modulesdir}/memberof.so661%{ldb_modulesdir}/memberof.so
670%{_bindir}/sss_ssh_authorizedkeys662%{_bindir}/sss_ssh_authorizedkeys
663+%{_bindir}/sss_ssh_knownhosts
671%{_bindir}/sss_ssh_knownhostsproxy664%{_bindir}/sss_ssh_knownhostsproxy
672%{_sbindir}/sss_cache665%{_sbindir}/sss_cache
673%{_libexecdir}/sssd/sss_signal666%{_libexecdir}/sssd/sss_signal
@@ -866,6 +859,7 @@ done
866 859 
867%files idp860%files idp
868%{_libexecdir}/sssd/oidc_child861%{_libexecdir}/sssd/oidc_child
862+%{_libdir}/%{name}/libsss_idp.so
869%{_libdir}/%{name}/modules/sssd_krb5_idp_plugin.so863%{_libdir}/%{name}/modules/sssd_krb5_idp_plugin.so
870%{_datadir}/sssd/krb5-snippets/sssd_enable_idp864%{_datadir}/sssd/krb5-snippets/sssd_enable_idp
871%config(noreplace) %{_sysconfdir}/krb5.conf.d/sssd_enable_idp865%config(noreplace) %{_sysconfdir}/krb5.conf.d/sssd_enable_idp
@@ -882,7 +876,6 @@ done
882%systemd_post sssd-nss.socket876%systemd_post sssd-nss.socket
883%systemd_post sssd-pac.socket877%systemd_post sssd-pac.socket
884%systemd_post sssd-pam.socket878%systemd_post sssd-pam.socket
885-%systemd_post sssd-pam-priv.socket
886%systemd_post sssd-ssh.socket879%systemd_post sssd-ssh.socket
887%systemd_post sssd-sudo.socket880%systemd_post sssd-sudo.socket
888 881 
@@ -892,7 +885,6 @@ done
892%systemd_preun sssd-nss.socket885%systemd_preun sssd-nss.socket
893%systemd_preun sssd-pac.socket886%systemd_preun sssd-pac.socket
894%systemd_preun sssd-pam.socket887%systemd_preun sssd-pam.socket
895-%systemd_preun sssd-pam-priv.socket
896%systemd_preun sssd-ssh.socket888%systemd_preun sssd-ssh.socket
897%systemd_preun sssd-sudo.socket889%systemd_preun sssd-sudo.socket
898 890 
@@ -901,7 +893,6 @@ done
901%systemd_postun_with_restart sssd-nss.socket893%systemd_postun_with_restart sssd-nss.socket
902%systemd_postun_with_restart sssd-pac.socket894%systemd_postun_with_restart sssd-pac.socket
903%systemd_postun_with_restart sssd-pam.socket895%systemd_postun_with_restart sssd-pam.socket
904-%systemd_postun_with_restart sssd-pam-priv.socket
905%systemd_postun_with_restart sssd-ssh.socket896%systemd_postun_with_restart sssd-ssh.socket
906%systemd_postun_with_restart sssd-sudo.socket897%systemd_postun_with_restart sssd-sudo.socket
907 898 
@@ -943,6 +934,9 @@ fi
943%systemd_postun_with_restart sssd.service934%systemd_postun_with_restart sssd.service
944 935 
945%changelog936%changelog
937+* Fri Oct 10 2025 Xu Raoqing <xuraoqing@h-partners.com> - 2.11.1-1
938+- update to 2.11.1
939+ 
946* Mon Sep 08 2025 Linux_zhang <zhangruifang@h-partners.com> - 2.9.7-6940* Mon Sep 08 2025 Linux_zhang <zhangruifang@h-partners.com> - 2.9.7-6
947- Fix sssd offline validation failure941- Fix sssd offline validation failure
948 942 
Dsssd.yaml+0-4
@@ -1,4 +0,0 @@
1-version_control: github
2-src_repo: SSSD/sssd
3-tag_prefix:
4-separator: .