debian/changelog

 sssd (1.16.3-4) unstable; urgency=medium
 
+  [ Victor Tapia ]
   * d/p/GPO_CROND-customization.diff: Set GPO_CROND to cron for Debian
     and Ubuntu (LP: #1572908)
 
- -- Victor Tapia <victor.tapia@canonical.com>  Wed, 27 Feb 2019 17:45:49 +0100
+  [ Dominik George ]
+  * Acknowledge NMU.
+  * Add myself to Uploaders.
+
+ -- Dominik George <natureshadow@debian.org>  Thu, 28 Feb 2019 22:39:44 +0100
+
+sssd (1.16.3-3.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Fix copy_ccache test broken by recent krb5 changes. (Closes: #921761)
+  * Fix PAC responder build with krb5 1.17. (Closes: #923125)
+
+ -- Dominik George <natureshadow@debian.org>  Sun, 24 Feb 2019 11:05:55 +0100
 
 sssd (1.16.3-3) unstable; urgency=medium
 

debian/control

@@ -2,7 +2,8 @@ Source: sssd
 Section: utils
 Priority: optional
 Maintainer: Debian SSSD Team <pkg-sssd-devel@alioth-lists.debian.net>
-Uploaders: Timo Aaltonen <tjaalton@debian.org>
+Uploaders: Timo Aaltonen <tjaalton@debian.org>,
+ Dominik George <natureshadow@debian.org>
 Build-Depends:
  autopoint,
  check,

debian/patches/fix_authdata_krb5_1.17.diff

+From: Dominik George <natureshadow@debian.org>
+Subject: Allow building authdata plugin with krb5 1.17
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923125
+--- a/configure
++++ b/configure
+@@ -21092,7 +21092,8 @@ $as_echo_n "checking for supported MIT k
+         Kerberos\ 5\ release\ 1.13* | \
+         Kerberos\ 5\ release\ 1.14* | \
+         Kerberos\ 5\ release\ 1.15* | \
+-        Kerberos\ 5\ release\ 1.16*)
++        Kerberos\ 5\ release\ 1.16* | \
++        Kerberos\ 5\ release\ 1.17*)
+             krb5_version_ok=yes
+             { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+ $as_echo "yes" >&6; }
+--- a/src/external/pac_responder.m4
++++ b/src/external/pac_responder.m4
+@@ -18,7 +18,8 @@ then
+         Kerberos\ 5\ release\ 1.13* | \
+         Kerberos\ 5\ release\ 1.14* | \
+         Kerberos\ 5\ release\ 1.15* | \
+-        Kerberos\ 5\ release\ 1.16*)
++        Kerberos\ 5\ release\ 1.16* | \
++        Kerberos\ 5\ release\ 1.17*)
+             krb5_version_ok=yes
+             AC_MSG_RESULT([yes])
+             ;;

debian/patches/fix_copy_ccache_test.diff

+From: Sumit Bose <sbose@redhat.com>
+Date: Thu, 22 Nov 2018 11:36:57 +0100
+Subject: tests: fix mocking krb5_creds in test_copy_ccache
+ To just test some ccache related functionality without talking to an
+ actual KDC to get the tickets some needed libkrb5 structs were mocked
+ based on tests from the MIT Kerberos source code. One struct member
+ (is_skey) was so far not regarded by libkrb5 for out test case. But a
+ recent fix for http://krbdev.mit.edu/rt/Ticket/Display.html?id=8718
+ changed this and we have to change the mocking.
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921761
+Origin: https://github.com/SSSD/sssd/commit/08bba3a6e3e4e21f2e20b71cca463d50420aa9ee.patch
+Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
+diff --git a/src/tests/cmocka/test_copy_ccache.c b/src/tests/cmocka/test_copy_ccache.c
+index 84225b6bff..7c76c00e8f 100644
+--- a/src/tests/cmocka/test_copy_ccache.c
++++ b/src/tests/cmocka/test_copy_ccache.c
+@@ -88,7 +88,7 @@ static int setup_ccache(void **state)
+     test_creds.times.starttime = 2222;
+     test_creds.times.endtime = 3333;
+     test_creds.times.renew_till = 4444;
+-    test_creds.is_skey = 1;
++    test_creds.is_skey = 0;
+     test_creds.ticket_flags = 5555;
+     test_creds.addresses = addrs;
+ 

debian/patches/series

 fix-curl-ftbfs.diff
+fix_copy_ccache_test.diff 
+fix_authdata_krb5_1.17.diff
 GPO_CROND-customization.diff