Skip to content
Snippets Groups Projects

Compare revisions

Changes are shown as if the source revision was being merged into the target revision. Learn more about comparing revisions.

Source

Select target project
No results found

Target

Select target project
  • mika/sssd
  • guillem/debian-pkg-sssd
  • john.veitch/sssd
  • jgullberg/sssd
  • gioele/sssd
  • oktay454/sssd
  • sergiodj/sssd
  • 3v1n0/sssd
  • jfalk-guest/sssd
  • sathieu/sssd
  • dpward/sssd
  • sssd-team/sssd
  • ahasenack/sssd
  • jbicha/sssd
  • yrro-guest/sssd
15 results
Show changes
Commits on Source (135)
srpm:
dnf -y install git rpm-build dnf-plugins-core libldb-devel
./contrib/fedora/make_srpm.sh --output $(outdir)
./contrib/fedora/make_srpm.sh --prerelease --output $(outdir)
......@@ -2,8 +2,53 @@ COMPONENT: Subject
Explanation
Resolves:
https://github.com/SSSD/sssd/issues/XXXX
Resolves: https://github.com/SSSD/sssd/issues/XXXX
# If a release note is required, choose one of the tags (or multiple tags if
# it makes sense) and place it here. See the description below for tag names
# and information. This is fully optional: not all changes require a release
# note.
#
# :relnote: Generic release note.
# :feature: New feature desription.
# :fixes: Notable bug fix desription.
# :packaging: Packaging change description.
# :config: Change in configuration (new option, new default, etc.)
# Try to keep the subject line within 52 chars ----|
# Also please try to not exceed 72 characters of length for the body --|
#
# *** Release notes ***
#
# Release notes for new versions are automatically generated from the
# information provided in commit messages.
#
# Ticket Resolution:
# If "Resolves: ticket_url" is found in the commit message then this ticket
# will be automatically closed when this commit is pushed to the upstream
# repository. The ticket will be also mentioned in the release notes as fixed.
#
# Ideally, each commit should resolve at most one ticket. If multiple tickets
# are resolved then repeat the whole line, i.e.:
# Resolves: Ticket #1
# Resolves: Ticket #2
#
# Release Notes Content
# You can also provide short description of the fix or new feature for
# the release notes using one of the release notes tag. The tag is associated
# with a human readable description which is automatically put into the
# release notes into the correct group that is determined by the tag name.
#
# The description is read until an empty line is found. And it can contain
# markdown language for enhanced formatting.
#
# Example:
# SUBJECT
#
# Commit description.
#
# Resolves: https://github.com/SSSD/sssd/issues/XXXX
#
# :fixes: This is an important bug that has been fixed. Keep the
# description short but it can also span multiple lines.
#
......@@ -112,3 +112,9 @@ sss_ssh_knownhostsproxy
sssd_ssh
test-authtok
/ci-build-*
# multihost tests
!src/tests/multihost/sssd
!src/tests/multihost/docs/Makefile
!src/tests/multihost/setup.py
!src/tests/multihost/sssd-testlib.spec
[main]
host = https://www.transifex.com
[sssd.master-po-sssd-pot]
file_filter = po/<lang>.po
source_file = po/sssd.pot
source_lang = en
[sssd.sssd-docspot_1]
file_filter = src/man/po/<lang>.po
source_file = src/man/po/sssd-docs.pot
source_lang = en
......@@ -124,6 +124,8 @@ if HAVE_GCC
-std=gnu99
endif
CMOCKA_CFLAGS = -fno-lto
pkgconfig_DATA =
ACLOCAL_AMFLAGS = -I m4 -I .
......@@ -905,11 +907,6 @@ dist_noinst_HEADERS = \
$(NULL)
if HAVE_NSS
dist_noinst_HEADERS += src/util/crypto/nss/nss_util.h \
src/util/crypto/nss/nss_crypto.h
endif
SSSD_DOCS = \
doc \
hbac_doc \
......@@ -952,61 +949,28 @@ libsss_child_la_LDFLAGS = -avoid-version
pkglib_LTLIBRARIES += libsss_crypt.la
# NOTE:
# Please try to avoid using SSS_CRYPT_{CFLAGS,LIBS} directly for compiling and
# linking programs or libraries. This is purpose of wrapper library
# libsss_crypt.so to hide internals. SSS_CRYPT_{CFLAGS,LIBS} might be used
# in unit tests if you directly uses functions from underlining crypto libraries
if HAVE_NSS
SSS_CRYPT_SOURCES = src/util/crypto/nss/nss_base64.c \
src/util/crypto/nss/nss_hmac_sha1.c \
src/util/crypto/nss/nss_sha512crypt.c \
src/util/crypto/nss/nss_obfuscate.c \
src/util/crypto/nss/nss_nite.c \
src/util/crypto/nss/nss_util.c \
src/util/crypto/nss/nss_prng.c \
src/util/atomic_io.c \
src/util/memory.c \
$(NULL)
SSS_CRYPT_CFLAGS = $(NSS_CFLAGS)
SSS_CRYPT_LIBS = $(NSS_LIBS)
SSS_CERT_SOURCES = \
src/util/cert/cert_common.c \
src/util/cert/cert_common_p11_child.c \
src/util/cert/nss/cert.c \
$(NULL)
SSS_CERT_CFLAGS = \
$(NSS_CFLAGS) \
$(NULL)
SSS_CERT_LIBS = \
$(NSS_LIBS) \
$(NULL)
else
SSS_CRYPT_SOURCES = src/util/crypto/libcrypto/crypto_base64.c \
src/util/crypto/libcrypto/crypto_hmac_sha1.c \
src/util/crypto/libcrypto/crypto_sha512crypt.c \
src/util/crypto/libcrypto/crypto_obfuscate.c \
src/util/crypto/libcrypto/crypto_nite.c \
src/util/crypto/libcrypto/crypto_prng.c \
src/util/atomic_io.c \
src/util/memory.c \
$(NULL)
SSS_CRYPT_CFLAGS = $(CRYPTO_CFLAGS)
SSS_CRYPT_LIBS = $(CRYPTO_LIBS)
SSS_CERT_SOURCES = \
src/util/cert/cert_common.c \
src/util/cert/cert_common_p11_child.c \
src/util/cert/libcrypto/cert.c \
$(NULL)
SSS_CERT_CFLAGS = \
$(CRYPTO_CFLAGS) \
$(NULL)
SSS_CERT_LIBS = \
$(CRYPTO_LIBS) \
$(NULL)
endif
SSS_CRYPT_SOURCES = src/util/crypto/libcrypto/crypto_base64.c \
src/util/crypto/libcrypto/crypto_hmac_sha1.c \
src/util/crypto/libcrypto/crypto_sha512crypt.c \
src/util/crypto/libcrypto/crypto_obfuscate.c \
src/util/crypto/libcrypto/crypto_nite.c \
src/util/crypto/libcrypto/crypto_prng.c \
src/util/atomic_io.c \
src/util/memory.c \
$(NULL)
SSS_CRYPT_CFLAGS = $(CRYPTO_CFLAGS)
SSS_CRYPT_LIBS = $(CRYPTO_LIBS)
SSS_CERT_SOURCES = \
src/util/cert/cert_common.c \
src/util/cert/libcrypto/cert.c \
$(NULL)
SSS_CERT_CFLAGS = \
$(CRYPTO_CFLAGS) \
$(NULL)
SSS_CERT_LIBS = \
$(CRYPTO_LIBS) \
$(NULL)
libsss_crypt_la_SOURCES = \
$(SSS_CRYPT_SOURCES)
......@@ -1044,7 +1008,6 @@ libsss_cert_la_LIBADD = \
libsss_crypt.la \
libsss_child.la \
libsss_debug.la \
libsss_certmap.la \
$(NULL)
libsss_cert_la_LDFLAGS = \
-avoid-version \
......@@ -1682,6 +1645,7 @@ sssd_ssh_SOURCES = \
src/responder/ssh/ssh_known_hosts.c \
src/responder/ssh/ssh_protocol.c \
src/responder/ssh/ssh_reply.c \
src/responder/ssh/ssh_cert_to_ssh_key.c \
$(SSSD_RESPONDER_OBJ) \
$(NULL)
sssd_ssh_LDADD = \
......@@ -2165,25 +2129,13 @@ libsss_certmap_la_LDFLAGS = \
-Wl,--version-script,$(srcdir)/src/lib/certmap/sss_certmap.exports \
-version-info 2:0:2
if HAVE_NSS
libsss_certmap_la_SOURCES += \
src/lib/certmap/sss_cert_content_nss.c \
src/util/crypto/nss/nss_base64.c \
src/util/cert/nss/cert.c \
src/util/crypto/nss/nss_util.c \
$(NULL)
libsss_certmap_la_CFLAGS += $(NSS_CFLAGS)
libsss_certmap_la_LIBADD += $(NSS_LIBS)
else
libsss_certmap_la_SOURCES += \
src/lib/certmap/sss_cert_content_crypto.c \
src/util/crypto/libcrypto/crypto_base64.c \
src/util/cert/libcrypto/cert.c \
$(NULL)
libsss_certmap_la_CFLAGS += $(CRYPTO_CFLAGS)
libsss_certmap_la_LIBADD += $(CRYPTO_LIBS)
endif
dist_noinst_DATA += src/lib/certmap/sss_certmap.exports
dist_noinst_HEADERS += src/lib/certmap/sss_certmap_int.h
......@@ -2229,7 +2181,6 @@ libsss_test_common_la_SOURCES += \
check_LTLIBRARIES += \
libdlopen_test_providers.la \
libsss_nss_idmap_tests.la \
$(NULL)
if BUILD_SAMBA
......@@ -2240,12 +2191,9 @@ check_LTLIBRARIES += \
endif
# libdlopen_test_providers is a helper library to provide missing symbols for
# dlopen_tests. It is mainly used for the backend modules but is used as well
# to provide __wrap_sss_nss_make_request_timeout needed make make dlopen_tests
# pass for libsss_nss_idmap_tests.
# dlopen_tests.
libdlopen_test_providers_la_SOURCES = \
$(sssd_be_SOURCES) \
src/tests/cmocka/wrap_sss_nss_make_request_timeout.c \
$(NULL)
libdlopen_test_providers_la_CFLAGS = \
$(AM_CFLAGS) \
......@@ -2270,17 +2218,6 @@ libdlopen_test_providers_la_LDFLAGS = \
-rpath $(abs_top_builddir) \
-export-dynamic
libsss_nss_idmap_tests_la_SOURCES = $(libsss_nss_idmap_la_SOURCES)
libsss_nss_idmap_tests_la_LIBADD = $(libsss_nss_idmap_la_LIBADD)
libsss_nss_idmap_tests_la_LDFLAGS = \
$(libsss_nss_idmap_la_LDFLAGS) \
-shared \
-rpath $(libdir) \
-Wl,-wrap,sss_nss_make_request_timeout \
-Wl,--version-script,$(srcdir)/src/sss_client/idmap/sss_nss_idmap.unit_tests
dist_noinst_DATA += src/sss_client/idmap/sss_nss_idmap.unit_tests
libsss_ad_tests_la_SOURCES = $(libsss_ad_la_SOURCES)
libsss_ad_tests_la_CFLAGS = $(libsss_ad_la_CFLAGS)
libsss_ad_tests_la_LIBADD = \
......@@ -2736,7 +2673,8 @@ nss_srv_tests_SOURCES = \
src/responder/nss/nss_utils.c \
src/responder/nss/nsssrv_mmap_cache.c
nss_srv_tests_CFLAGS = \
$(AM_CFLAGS)
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS)
nss_srv_tests_LDFLAGS = \
-Wl,-wrap,sss_ncache_check_user \
-Wl,-wrap,sss_ncache_check_upn \
......@@ -2780,6 +2718,7 @@ pam_srv_tests_CFLAGS = \
-U SSSD_LIBEXEC_PATH -DSSSD_LIBEXEC_PATH=\"$(abs_builddir)\" \
-I$(abs_builddir)/src \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
pam_srv_tests_LDFLAGS = \
-Wl,-wrap,sss_packet_get_body \
......@@ -2813,12 +2752,13 @@ ssh_srv_tests_SOURCES = \
src/responder/ssh/ssh_known_hosts.c \
src/responder/ssh/ssh_protocol.c \
src/responder/ssh/ssh_reply.c \
src/util/cert/cert_common_p11_child.c \
src/responder/ssh/ssh_cert_to_ssh_key.c \
$(NULL)
ssh_srv_tests_CFLAGS = \
-U SSSD_LIBEXEC_PATH -DSSSD_LIBEXEC_PATH=\"$(abs_builddir)\" \
-I$(abs_builddir)/src \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
ssh_srv_tests_LDFLAGS = \
-Wl,-wrap,sss_packet_get_body \
......@@ -2836,6 +2776,7 @@ ssh_srv_tests_LDADD = \
libsss_test_common.la \
libsss_iface.la \
libsss_sbus.la \
libsss_certmap.la \
$(NULL)
EXTRA_responder_get_domains_tests_DEPENDENCIES = \
......@@ -2845,7 +2786,8 @@ responder_get_domains_tests_SOURCES = \
src/tests/cmocka/test_responder_common.c \
src/tests/cmocka/common_mock_resp.c
responder_get_domains_tests_CFLAGS = \
$(AM_CFLAGS)
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS)
responder_get_domains_tests_LDFLAGS = \
-Wl,-wrap,sss_parse_name_for_domains \
-Wl,-wrap,sss_ncache_reset_repopulate_permanent
......@@ -2962,12 +2904,16 @@ test_prompt_config_LDADD = \
$(NULL)
sss_nss_idmap_tests_SOURCES = \
$(libsss_nss_idmap_la_SOURCES) \
src/tests/cmocka/sss_nss_idmap-tests.c
sss_nss_idmap_tests_CFLAGS = \
$(AM_CFLAGS)
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS)
sss_nss_idmap_tests_LDFLAGS = \
-Wl,-wrap,sss_nss_make_request_timeout
sss_nss_idmap_tests_LDADD = \
$(CMOCKA_LIBS) \
libsss_nss_idmap_tests.la \
$(libsss_nss_idmap_la_LIBADD) \
$(NULL)
deskprofile_utils_tests_SOURCES = \
......@@ -2990,6 +2936,7 @@ dyndns_tests_SOURCES = \
src/providers/data_provider_opts.c
dyndns_tests_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-DDYNDNS_TIMEOUT=2
dyndns_tests_LDFLAGS = \
-Wl,-wrap,execv \
......@@ -3062,7 +3009,8 @@ test_ipa_idmap_SOURCES = \
src/tests/cmocka/test_ipa_idmap.c \
src/providers/ipa/ipa_idmap.c
test_ipa_idmap_CFLAGS = \
$(AM_CFLAGS)
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS)
test_ipa_idmap_LDFLAGS = \
-Wl,-wrap,sysdb_get_ranges
test_ipa_idmap_LDADD = \
......@@ -3083,15 +3031,9 @@ test_utils_SOURCES += src/tests/cmocka/test_sss_ssh.c
endif
test_utils_CFLAGS = \
$(AM_CFLAGS)
if HAVE_NSS
test_utils_CFLAGS += \
$(NSS_CFLAGS) \
$(NULL)
else
test_utils_CFLAGS += \
$(P11_KIT_CFLAGS) \
$(NULL)
endif
test_utils_LDADD = \
$(CMOCKA_LIBS) \
$(POPT_LIBS) \
......@@ -3224,6 +3166,7 @@ ad_common_tests_CFLAGS = \
$(AM_CFLAGS) \
$(NDR_NBT_CFLAGS) \
$(NDR_KRB5PAC_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
ad_common_tests_LDFLAGS = \
-Wl,-wrap,sdap_set_sasl_options \
......@@ -3270,6 +3213,7 @@ sdap_tests_SOURCES = \
$(NULL)
sdap_tests_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
sdap_tests_LDFLAGS = \
-Wl,-wrap,ldap_set_option \
......@@ -3320,6 +3264,7 @@ sss_sifp_tests_SOURCES = \
src/lib/sifp/sss_sifp.c
sss_sifp_tests_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-I$(top_srcdir)/src/lib/sifp
sss_sifp_tests_LDFLAGS = \
-Wl,-wrap,dbus_bus_get \
......@@ -3449,6 +3394,7 @@ test_wbc_calls_SOURCES = \
$(NULL)
test_wbc_calls_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
test_wbc_calls_LDFLAGS = \
-Wl,-wrap,sss_nss_getnamebysid \
......@@ -3535,6 +3481,7 @@ test_child_common_SOURCES = \
$(NULL)
test_child_common_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-DCHILD_DIR=\"$(builddir)\" \
$(NULL)
test_child_common_LDFLAGS = \
......@@ -3555,6 +3502,7 @@ responder_cache_req_tests_SOURCES = \
$(NULL)
responder_cache_req_tests_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
responder_cache_req_tests_LDFLAGS = \
-Wl,-wrap,sss_dp_get_account_send \
......@@ -3577,6 +3525,7 @@ test_resolv_fake_SOURCES = \
$(NULL)
test_resolv_fake_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
$(NULL)
test_resolv_fake_LDFLAGS = \
-Wl,-wrap,ares_query \
......@@ -3685,6 +3634,7 @@ test_ipa_subdom_server_SOURCES = \
$(NULL)
test_ipa_subdom_server_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-DIPA_TRUST_KEYTAB_DIR=TEST_DIR\"/tp_test_ipa_subdom_server-test_ipa_subdomains_server\" \
$(NULL)
test_ipa_subdom_server_LDFLAGS = \
......@@ -3742,7 +3692,8 @@ test_krb5_wait_queue_LDADD = \
test_cert_utils_SOURCES = \
src/tests/cmocka/test_cert_utils.c \
src/util/cert/cert_common_p11_child.c \
src/responder/ssh/ssh_cert_to_ssh_key.c \
src/util/cert_derb64_to_ldap_filter.c \
$(NULL)
test_cert_utils_CFLAGS = \
$(AM_CFLAGS) \
......@@ -3759,6 +3710,7 @@ test_cert_utils_LDADD = \
libsss_test_common.la \
libsss_cert.la \
libsss_crypt.la \
libsss_certmap.la \
$(NULL)
test_data_provider_be_SOURCES = \
......@@ -3768,6 +3720,7 @@ test_data_provider_be_SOURCES = \
$(NULL)
test_data_provider_be_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-DUNIT_TESTING \
$(NULL)
test_data_provider_be_LDFLAGS = \
......@@ -3797,6 +3750,7 @@ test_dp_request_SOURCES = \
$(NULL)
test_dp_request_CFLAGS = \
$(AM_CFLAGS) \
$(CMOCKA_CFLAGS) \
-DUNIT_TESTING \
$(NULL)
test_dp_request_LDFLAGS = \
......@@ -3940,14 +3894,14 @@ sss_certmap_test_SOURCES = \
$(NULL)
sss_certmap_test_CFLAGS = \
$(AM_CFLAGS) \
$(NSS_CFLAGS) \
$(SSS_CERT_CFLAGS) \
-I$(abs_builddir)/src \
$(NULL)
sss_certmap_test_LDADD = \
$(CMOCKA_LIBS) \
$(POPT_LIBS) \
$(TALLOC_LIBS) \
$(NSS_LIBS) \
$(SSS_CERT_LIBS) \
$(SSSD_INTERNAL_LTLIBS) \
libsss_test_common.la \
libsss_certmap.la \
......@@ -3995,6 +3949,7 @@ test_kcm_json_LDADD = \
$(NULL)
test_kcm_queue_SOURCES = \
$(TEST_MOCK_RESP_OBJ) \
src/tests/cmocka/test_kcm_queue.c \
src/responder/kcm/kcmsrv_op_queue.c \
$(NULL)
......@@ -4002,10 +3957,13 @@ test_kcm_queue_CFLAGS = \
$(AM_CFLAGS) \
$(NULL)
test_kcm_queue_LDADD = \
$(LIBADD_DL) \
$(CMOCKA_LIBS) \
$(SSSD_LIBS) \
$(SSSD_INTERNAL_LTLIBS) \
libsss_test_common.la \
libsss_iface.la \
libsss_sbus.la \
$(NULL)
endif # BUILD_KCM
......@@ -4294,6 +4252,7 @@ libsss_ldap_common_la_SOURCES = \
src/util/user_info_msg.c \
src/util/sss_sockets.c \
src/util/sss_ldap.c \
src/util/cert_derb64_to_ldap_filter.c \
$(NULL)
libsss_ldap_common_la_CFLAGS = \
$(AM_CFLAGS) \
......@@ -4422,6 +4381,7 @@ libsss_files_la_SOURCES = \
src/providers/files/files_certmap.c \
src/providers/files/files_ops.c \
src/util/inotify.c \
src/util/cert_derb64_to_ldap_filter.c \
$(NULL)
libsss_files_la_CFLAGS = \
$(AM_CFLAGS) \
......@@ -4432,6 +4392,7 @@ libsss_files_la_LIBADD = \
$(LDB_LIBS) \
$(PAM_LIBS) \
$(SSSD_INTERNAL_LTLIBS) \
libsss_certmap.la \
$(NULL)
libsss_files_la_LDFLAGS = \
-avoid-version \
......@@ -4517,7 +4478,9 @@ libsss_ipa_la_SOURCES = \
src/providers/ad/ad_pac.c \
src/providers/ad/ad_pac_common.c \
src/providers/ad/ad_srv.c \
src/providers/ad/ad_domain_info.c
src/providers/ad/ad_domain_info.c \
src/providers/ad/ad_cldap_ping.c \
$(NULL)
libsss_ipa_la_CFLAGS = \
$(AM_CFLAGS) \
$(OPENLDAP_CFLAGS) \
......@@ -4585,6 +4548,7 @@ libsss_ad_la_SOURCES = \
src/providers/ad/ad_domain_info.c \
src/providers/ad/ad_refresh.c \
src/providers/ad/ad_resolver.c \
src/providers/ad/ad_cldap_ping.c \
$(NULL)
......@@ -4752,27 +4716,17 @@ p11_child_SOURCES = \
src/util/util.c \
src/util/util_ext.c \
$(NULL)
if HAVE_NSS
p11_child_SOURCES += src/p11_child/p11_child_nss.c
else
p11_child_SOURCES += src/p11_child/p11_child_openssl.c
endif
p11_child_CFLAGS = \
$(AM_CFLAGS) \
$(POPT_CFLAGS) \
$(NULL)
if HAVE_NSS
p11_child_CFLAGS += \
$(NSS_CFLAGS) \
$(NULL)
else
p11_child_CFLAGS += \
$(P11_KIT_CFLAGS) \
$(CRYPTO_CFLAGS) \
$(SSL_CFLAGS) \
$(NULL)
endif
p11_child_LDADD = \
libsss_debug.la \
......@@ -4781,17 +4735,11 @@ p11_child_LDADD = \
$(POPT_LIBS) \
libsss_crypt.la \
$(NULL)
if HAVE_NSS
p11_child_LDADD += \
$(NSS_LIBS) \
$(NULL)
else
p11_child_LDADD += \
$(P11_KIT_LIBS) \
$(CRYPTO_LIBS) \
$(SSL_LIBS) \
$(NULL)
endif
memberof_la_SOURCES = \
src/ldb_modules/memberof.c \
......@@ -5547,9 +5495,9 @@ dist_noinst_DATA += \
contrib/sssd.spec.in \
BUILD.txt \
COPYING \
src/tests/multihost/basic/conftest.py \
src/tests/multihost/README.md \
src/tests/multihost/conftest.py \
src/tests/multihost/basic/mhc.yaml \
src/tests/multihost/basic/README.md \
src/tests/multihost/basic/test_basic.py \
src/tests/multihost/basic/test_config.py \
src/tests/multihost/basic/test_files.py \
......
......@@ -161,7 +161,6 @@ WITH_SUDO_LIB_PATH
WITH_AUTOFS
WITH_SSH
WITH_IFP
WITH_CRYPTO
WITH_SYSLOG
WITH_SAMBA
WITH_NFS
......@@ -400,14 +399,8 @@ if test x$syslog = xjournald; then
AM_CHECK_JOURNALD
fi
if test x$cryptolib = xnss; then
AM_CHECK_NSS
fi
if test x$cryptolib = xlibcrypto; then
AM_CHECK_LIBCRYPTO
m4_include([src/external/p11-kit.m4])
fi
AM_CHECK_LIBCRYPTO
m4_include([src/external/p11-kit.m4])
AM_CHECK_INOTIFY
......
......@@ -29,6 +29,7 @@ declare -a CONFIGURE_ARG_LIST=(
"--enable-ldb-version-check"
"--with-syslog=journald"
"--enable-systemtap"
"--with-python2-bindings"
)
......@@ -65,16 +66,6 @@ if [[ "$DISTRO_BRANCH" == -debian-* ]]; then
)
fi
if [[ "$DISTRO_BRANCH" == -redhat-fedora-29* ||
"$DISTRO_BRANCH" == -redhat-fedora-3* ||
"$DISTRO_BRANCH" == -debian-* ||
"$DISTRO_BRANCH" == -redhat-redhatenterprise*-8.*- ||
"$DISTRO_BRANCH" == -redhat-centos-8.*- ]]; then
CONFIGURE_ARG_LIST+=(
"--with-crypto=libcrypto"
)
fi
if [[ "$DISTRO_BRANCH" == -redhat-fedora-3[2-9]* ]]; then
CONFIGURE_ARG_LIST+=(
"--without-python2-bindings"
......
#!/bin/bash
#
# Run multihost tests.
#
# CAUTION: This script will modify your system so execute it with caution. It is
# supposed to be run only in SSSD CI and it expected that it is executed from
# SSSD source directory.
#
# Copyright (C) 2020 Red Hat
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
set -o nounset -o pipefail -o errexit -o xtrace
declare -r CI_DIR=`dirname "\`readlink -f \"\$0\"\`"`
export PATH=$CI_DIR:$PATH
. distro.sh
if [[ $DISTRO_FAMILY != redhat ||
$DISTRO_BRANCH == -redhat-redhatenterprise*-7.*- ||
$DISTRO_BRANCH == -redhat-centos-7.*- ]]; then
echo "Unsupported platform."
exit 0
fi
echo "Building SSSD"
autoreconf -if &> multihost-build.log
./configure &>> multihost-build.log
make rpms &>> multihost-build.log
# Remove old packages to avoid conflict if something has changed
echo "Removing current SSSD packages"
sudo yum remove -y --noautoremove sssd\* &> multihost-remove.log
echo "Installing SSSD"
sudo yum install -y ./rpmbuild/RPMS/*/*.rpm &> multihost-install.log
DIR=src/tests/multihost
echo "Installing python requirements"
sudo pip3 install -r $DIR/requirements.txt &> multihost-pip.log
echo "Running tests"
pytest-3 -s --multihost-config=$DIR/basic/mhc.yaml $DIR &> multihost-pytest.log
......@@ -141,7 +141,7 @@ fi
PRERELEASE_VERSION=""
if [ -n "$PRERELEASE" ]; then
PRERELEASE_VERSION=.$(date +%Y%m%d.%H%M).git$(git log -1 --pretty=format:%h)
PRERELEASE_VERSION=.$(date +%y%m%d.%H%M%S).git$(git log -1 --pretty=format:%h)
fi
mkdir -p $RPMBUILD/BUILD
......
......@@ -65,6 +65,10 @@
%global use_systemd 1
%endif
%if (0%{?fedora} || 0%{?rhel} >= 8)
%global enable_files_domain 1
%endif
# on Fedora and RHEL7 p11_child needs a polkit config snippet to be allowed to
# talk to pcscd if SSSD runs as unprivileged user
%if (%{with sssd_user} && (0%{?fedora} || 0%{?rhel} >= 7))
......@@ -80,10 +84,6 @@
%global with_initscript --with-initscript=sysv
%endif
%if (0%{?fedora} > 28 || 0%{?rhel} > 7)
%global use_openssl 1
%endif
%global enable_experimental 1
%if (0%{?enable_experimental} == 1)
......@@ -113,6 +113,7 @@
%global with_python2_option --without-python2-bindings
%else
%global with_python2 1
%global with_python2_option --with-python2-bindings
%endif
%global enable_systemtap 1
......@@ -210,11 +211,8 @@ BuildRequires: dbus-devel
BuildRequires: dbus-libs
BuildRequires: openldap-devel
BuildRequires: pam-devel
%if (0%{?use_openssl} == 1)
BuildRequires: p11-kit-devel
BuildRequires: openssl-devel
%endif
BuildRequires: nss-devel
BuildRequires: nspr-devel
BuildRequires: pcre-devel
BuildRequires: libxslt
......@@ -245,23 +243,15 @@ BuildRequires: uid_wrapper
BuildRequires: nss_wrapper
BuildRequires: pam_wrapper
# Test CA requires openssl independent if SSSD is build with NSS or openssl,
# openssh is needed for ssh-keygen and NSS builds need nss-tools for certutil.
# Currently only cmocka based tests use the test CA. If it is used elsewhere
# you might want to move the following requires out of the if-block.
# If SSSD is build with OpenSSL instead of NSS p11tool from the gnutls-utils
# package and softhsm2-util from the softhsm package are needed to prepare the
# data needed for the p11_child Smartcard tests. Since p11_child only looks at
# slots with are flagged as 'removable' softhsm version 2.1.0 or higher is
# needed.
%if (0%{?use_openssl} == 1)
# p11tool from the gnutls-utils package and softhsm2-util from the softhsm package
# are needed to prepare the data needed for the p11_child Smartcard tests.
# Since p11_child only looks at slots with are flagged as 'removable'
# softhsm version 2.1.0 or higher is needed.
BuildRequires: gnutls-utils
BuildRequires: softhsm >= 2.1.0
%endif
BuildRequires: openssl
BuildRequires: openssh
BuildRequires: nss-tools
%endif
BuildRequires: libnl3-devel
%if (0%{?use_systemd} == 1)
......@@ -800,14 +790,12 @@ autoreconf -ivf
--enable-pammoddir=/%{_lib}/security \
--enable-nfsidmaplibdir=%{_libdir}/libnfsidmap \
--disable-static \
%if (0%{?use_openssl} == 1)
--with-crypto=libcrypto \
%else
--with-crypto=nss \
%endif
--disable-rpath \
%if %{with sssd_user}
--with-sssd-user=sssd \
%endif
%if (0%{?enable_files_domain} == 1)
--enable-files-domain \
%endif
%{with_initscript} \
%{?with_syslog} \
......@@ -850,6 +838,13 @@ install -m644 src/examples/logrotate $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/s
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/rwtab.d
install -m644 src/examples/rwtab $RPM_BUILD_ROOT%{_sysconfdir}/rwtab.d/sssd
# Kerberos KCM credential cache by default
%if (0%{?with_kcm} == 1)
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d
cp $RPM_BUILD_ROOT/%{_datadir}/sssd-kcm/kcm_default_ccache \
$RPM_BUILD_ROOT/%{_sysconfdir}/krb5.conf.d/kcm_default_ccache
%endif
%if (0%{?with_cifs_utils_plugin} == 1)
# Create directory for cifs-idmap alternative
# Otherwise this directory could not be owned by sssd-client
......@@ -1057,9 +1052,7 @@ done
%attr(750,sssd,sssd) %dir %{_var}/log/%{name}
%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd
%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd/conf.d
%if (0%{?use_openssl} == 1)
%attr(711,sssd,sssd) %dir %{_sysconfdir}/sssd/pki
%endif
%ghost %attr(0600,sssd,sssd) %config(noreplace) %{_sysconfdir}/sssd/sssd.conf
%dir %{_sysconfdir}/logrotate.d
%config(noreplace) %{_sysconfdir}/logrotate.d/sssd
......@@ -1365,6 +1358,7 @@ done
%if (0%{?with_secrets} == 1)
%{_libexecdir}/%{servicename}/sssd_secrets
%endif
%config(noreplace) %{_sysconfdir}/krb5.conf.d/kcm_default_ccache
%dir %{_datadir}/sssd-kcm
%{_datadir}/sssd-kcm/kcm_default_ccache
%{_unitdir}/sssd-kcm.socket
......
......@@ -10,3 +10,14 @@
- ci-build-debug/test-suite.log
- ci-build-debug/ci-mock-result/*.log
timeout: 6 hours
- name: Multihost tests Tier 0
machines:
- client
tasks:
- name: Running ./contrib/ci/run-multihost
shell: |
./contrib/ci/run-multihost
timeout: 6 hours
artifacts:
- multihost-*.log
sssd (2.4.0-1) unstable; urgency=medium
* New upstream release.
* source: Update diff-ignore.
-- Timo Aaltonen <tjaalton@debian.org> Tue, 08 Dec 2020 22:36:54 +0200
sssd (2.3.1-3) unstable; urgency=medium
* control: Move libsss-sudo to sssd-common Suggests. (LP: #1249777)
......
extend-diff-ignore = .copr|.git-commit-template|.travis*|.tx|zanata.xml
extend-diff-ignore = contrib|po/cs.po|scripts/release.sh|src/man/po/LINGUAS
extend-diff-ignore = contrib|po/.*|scripts/release.sh|src/man/po/LINGUAS
extend-diff-ignore = README.md|src/tests
extend-diff-ignore = Dockerfile*|Jenkinsfile|Vagrantfile
extend-diff-ignore = src/providers/data_provider/dp_pam_data.h|src/providers/data_provider/dp_sbus.c
......
bg
ca
cs
de
eu
es
eu
fr
hu
id
......
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.