sssd (2.11.1-1) unstable; urgency=medium

  * New upstream release.
  * watch: Updated.
  * d/p/drop-valgrind.diff: Dropped, obsolete.
  * source: Update local-options.
  * rules, install: Drop files-provider, removed upstream.
  * sssd-common: Add sssd-idp.
  * copyright: Update FSF address.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 10 Nov 2025 16:34:59 +0200

sssd (2.10.1-2) unstable; urgency=medium

  [ Timo Aaltonen ]
  * control: Drop valgrind from build-depends again.
  * drop-valgrind.diff: Drop a check for if a test is running on
    valgrind, avoids the build-dep and ftbfs on where valgrind is not
    available.
  * control: Add systemd to build-depends since build-tests require
    systemctl.
  * tests: Use a 2048bit private key. (Closes: #1092722)

  [ Michal Maloszewski  ]
  * d/apparmor-profile: Update profile to silence extraneous ALLOWED
    messages.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Jan 2025 08:45:10 +0200

sssd (2.10.1-1) unstable; urgency=medium

  [ Timo Aaltonen ]
  * New upstream release.
  * watch: Updated.
  * patches: Refreshed.
  * control: Add valgrind and libcap-dev to build-depends.
  * install: Updated.

  [ Andreas Hasenack ]
  * autopkgtests: also gather sssd logs in case of failure
  * postinst: add filesystem capabilities to several helpers
  * control: add libcap2-bin dependency
  * rules: don't change permissions of proxy_child and sssd_pam

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 08 Jan 2025 12:34:49 +0200

sssd (2.9.5-5) unstable; urgency=medium

  * Team upload.

  [ Andreas Hasenack ]
  * autopkgtests: switch to ssh for the login test (Closes: #1081027)
  * autopkgtests: display logs in the case of a failure

 -- Simon Josefsson <simon@josefsson.org>  Fri, 20 Dec 2024 16:15:34 +0100

sssd (2.9.5-4) unstable; urgency=medium

  * Team upload.

  [ Michael Prokop ]
  * autopkgtests: increase expect timeout to address flaky ldap-user-group-ldap-auth under control
    (Closes: #1081027)

 -- Simon Josefsson <simon@josefsson.org>  Tue, 26 Nov 2024 11:06:09 +0100

sssd (2.9.5-3) unstable; urgency=medium

  * rules: Flip the test logic to fix ftbfs on armel/armhf.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 04 Jun 2024 18:22:29 +0300

sssd (2.9.5-2) unstable; urgency=medium

  * rules: Don't fail tests on armel, armhf for now.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 04 Jun 2024 15:00:53 +0300

sssd (2.9.5-1) unstable; urgency=medium

  * New upstream release. (Closes: #1068063)
    - CVE-2023-3758 (Closes: #1070369)

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 20 May 2024 16:36:50 +0300

sssd (2.9.4-2) unstable; urgency=medium

  [ Michael Biebl ]
  * Install PAM and NSS modules into /usr. (Closes: #1061350)

  [ Timo Aaltonen ]
  * tests: Drop -extensions from openssl command if there is no -x509.
    Thanks, Sebastian Andrzej Siewior! (Closes: #1061869)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 10 Apr 2024 15:56:46 +0300

sssd (2.9.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1063074

 -- Benjamin Drung <bdrung@debian.org>  Thu, 29 Feb 2024 17:27:43 +0000

sssd (2.9.4-1) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * Improve certificate/smartcard dep8 tests.
    - d/t/control: Don't depend on "needs-sudo" restriction, since the
      tests don't really use "sudo" selectively but rather rely on a normal
      user being setup as a side effect of "needs-sudo".  Instead, we can
      use "needs-root".
    - d/t/sssd-smart-card-pam-auth-configs-tester.sh,
      d/t/sssd-softhism2-certificates-tests.sh: Use
      "${AUTOPKGTEST_NORMAL_USER}" instead of "$SUDO_USER".

  [ Timo Aaltonen ]
  * New upstream release.
  * control: Migrate to systemd-dev. (Closes: #1060512)
  * rules, install: Use systemdsystemunitdir.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 18 Jan 2024 12:04:33 +0200

sssd (2.9.2-1) unstable; urgency=medium

  [ Timo Aaltonen ]
  * New upstream release.
  * control, rules: Add bc to build-depends, enable tests again.

  [ Marco Trevisan (Treviño) ]
  * debian: Add pam-auth-update SSSD Smart card configurations
  * debian/tests: Add tests for smart card verification

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 15 Sep 2023 11:18:38 +0300

sssd (2.9.1-2) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * Enable files provider.
    SSSD 2.9.0 has deprecated "id_provider = files", but that's still
    needed for smartcard authentication of local users.
    - d/rules: Build with "--with-files-provider".
    - d/sssd-common.install: Install libsss_files.so and sssd-files.5.
    (Closes: #1041438) (LP: #2028084)
  * d/rules: Remove deprecated options "--disable-files-domain".

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 25 Jul 2023 15:01:14 +0300

sssd (2.9.1-1) unstable; urgency=medium

  * New upstream release.
  * libnss-sss.postinst: Migrate to use 'case' like the other postinsts.
  * patches: Drop an upstreamed patch.
  * Drop deprecated simple-ifp library and files provider.
  * control, rules: Add sssd-passkey, and libfido2-dev to build-depends.
  * ci: Allow piuparts to fail, because handling of nsswitch.conf ownership
    is broken.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 04 Jul 2023 08:48:49 +0300

sssd (2.8.2-4) unstable; urgency=medium

  [ Sam Morris ]
  * Don't add subid to /etc/nsswitch.conf (Closes: #1032990)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 11 Apr 2023 15:19:36 +0300

sssd (2.8.2-3) unstable; urgency=medium

  [ Gioele Barabucci ]
  * d/libnss-sss.nss: Update to `database-add`
  * d/libsss-sudo.nss: Install `sss` service for sudoers via dh-nss (Closes: #783889)
  * d/libsss-sudo.post{inst,rm}: Remove now that the services are installed via dh-nss
  * d/sssd-common.nss: Use new directive name `database-add`
  * Install dbus policy in /usr instead of /etc (Closes: #1031547)

  [ Sam Morris ]
  * sssd-common: add lintian overrides for libsubid_sss.so

 -- Timo Aaltonen <tjaalton@debian.org>  Sun, 26 Feb 2023 16:35:48 +0200

sssd (2.8.2-2) unstable; urgency=medium

  [ Sam Morris ]
  * Ship libsubid_sss.so in sssd-common package

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Feb 2023 17:48:19 +0200

sssd (2.8.2-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 14 Feb 2023 17:40:37 +0200

sssd (2.8.1-2) unstable; urgency=medium

  * d/rules: Fix 'find' syntax to remove '*.egg-info' files/directories.
    (Closes: #1026490)

 -- Sergio Durigan Junior <sergiodj@debian.org>  Tue, 03 Jan 2023 16:36:00 -0500

sssd (2.8.1-1) unstable; urgency=medium

  * New upstream release.
  * watch: Updated for current github behaviour.
  * support-krb5-1.20.diff: Dropped, upstream.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 23 Nov 2022 10:10:41 +0200

sssd (2.7.4-1) unstable; urgency=medium

  [ Timo Aaltonen ]
  * New upstream release.
  * control: Add bind9-dnsutils to sssd-common Recommends, and rename
    dnsutils build-dep. (Closes: #1018144)

  [ Sergio Durigan Junior ]
  * Simplify logic to add "automount" database into nsswitch.
    - d/libnss-sss.nss: Add "automount database" directive.
    - d/libnss-sss.postinst: Remove logic to insert "automount" database
      into nsswitch; not necessary anymore now that the package uses dh-nss.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 22 Sep 2022 15:34:06 +0300

sssd (2.7.3-2) unstable; urgency=medium

  [ Timo Aaltonen ]
  * patches: Allow building the pac_responder with krb5 1.20. (Closes:
    #1016220)

  [ Gioele Barabucci ]
  * d/libnss-sss.post{inst,rm}: Add DPKG_ROOT support
  * d/libnss-sss.postinst: Fix use of outdated `automounter` instead of `automount`
  * d/libnss-sss.nss: Install NSS service `sss` via dh_installnss

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Aug 2022 16:46:47 +0300

sssd (2.7.3-1) unstable; urgency=medium

  * New upstream release.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 06 Jul 2022 08:52:58 +0300

sssd (2.7.2-3) unstable; urgency=medium

  * d/p/fix-shebang-on-sss_analyze.patch: Fix shebang on sss_analyze.

 -- Sergio Durigan Junior <sergiodj@debian.org>  Wed, 22 Jun 2022 11:00:11 -0400

sssd (2.7.2-2) unstable; urgency=medium

  * rules, install: Fix python install directory. (LP: #1979453)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 22 Jun 2022 16:54:42 +0300

sssd (2.7.2-1) unstable; urgency=medium

  * New upstream release.
  * pac-relax-default-for-pac_check-option.diff: Dropped, upstream.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 22 Jun 2022 13:19:27 +0300

sssd (2.7.1-2) unstable; urgency=medium

  * pac-relax-default-for-pac_check-option.diff: Drop pac_present from
    default PAC check. (Closes: #1012502)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 09 Jun 2022 10:19:37 +0300

sssd (2.7.1-1) unstable; urgency=medium

  * New upstream release.
  * control: Drop sssd-ipd from sssd-ipa depends.
  * sssd-common.install: Add a new manpage.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 06 Jun 2022 16:32:34 +0300

sssd (2.7.0-1) unstable; urgency=medium

  * New upstream release.
  * Update signing-key.asc.
  * source: Update diff-ignores.
  * control, rules: Add sssd-idp package, which includes plugins for
    external identity providers.
  * control, rules: Enable krb5 config snippets by default.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 25 May 2022 12:59:05 +0300

sssd (2.6.3-3) unstable; urgency=medium

  * tests: Dump the daemon status after restart, hoping to see what the
    error is if it fails to start.
  * rules: Drop --with-ldb-dir, use the default value from the pkgconfig
    file. (Closes: #1009223)

 -- Timo Aaltonen <tjaalton@debian.org>  Sun, 10 Apr 2022 10:57:30 +0300

sssd (2.6.3-2) unstable; urgency=medium

  * rules: Disable lto.
  * Rebuild against current python-defaults. (Closes: #1008583)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 29 Mar 2022 10:04:50 +0300

sssd (2.6.3-1) unstable; urgency=medium

  * New upstream release.
  * control: Migrate to PCRE2. (Closes: #999951)
  * Update signing-key.asc.
  * control: Drop python3-click from sssd-tools depends.
  * sssd-tools.install: Updated.
  * tests: Drop RANDFILE from tests/util. (Closes: #1001476)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 11 Feb 2022 09:35:43 +0200

sssd (2.6.1-1) unstable; urgency=medium

  * New upstream release.
  * patches: Dropped upstream patches.
  * control: Add libunistring-dev to build-depends.
  * sssd-common.install: Drop libsss_secrets, removed upstream.
  * tools: Add sss_analyze.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 17 Nov 2021 20:33:29 +0200

sssd (2.5.2-5) unstable; urgency=medium

  * control: Fix libsemanage-dev build-dep. (Closes: #998634)

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 08 Nov 2021 21:17:29 +0200

sssd (2.5.2-4) unstable; urgency=medium

  * control: Promote libnss-sss and libpam-sss to sssd-common Depends.
    (Closes: #995730)
  * common: Drop old Breaks/Replaces.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 11 Oct 2021 17:46:04 +0300

sssd (2.5.2-3) unstable; urgency=medium

  * rules: Explicitly set sssd-user as root.
  * install: Add sssd-pcsc.rules to -common.
  * postinst: Correct file/dir permissions and ownership when the daemon
    is run as root. (Closes: #994807)
  * 0001-ad-fallback-to-ldap-if-cldap-is-not-available-in-lib.patch: Our
    libldap is built without LDAP_CONNECTIONLESS, cope with that.
    (Closes: #994879)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 22 Sep 2021 18:54:07 +0300

sssd (2.5.2-2) unstable; urgency=medium

  * rules: Disable tests for now. (Closes: #994479)

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 20 Sep 2021 17:38:19 +0300

sssd (2.5.2-1) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * d/apparmor-profile: Update profile:
    - Extend read permissions to /etc/sssd/conf.d/* and /etc/gss/mech.d/*.
    - Add read/execute permission to /usr/libexec/sssd/*.

  [ Timo Aaltonen ]
  * New upstream release. (Closes: #978904, #992815, #983795)
  * fix-whitespace-test.diff: Refreshed.
  * control, rules: Drop libwbclient-sssd-*, support for it was dropped upstream.
  * fix_newer_autoconf.patch: Don't unset python prefix/exec-prefix.
  * patches: Fix CVE-2021-3621. (Closes: #992710)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 16 Sep 2021 14:51:42 +0300

sssd (2.4.1-2) unstable; urgency=medium

  [ Marco Trevisan (Treviño) ]
  * debian/control: Mark test packages as <!nocheck>
    - Add missing test dependencies
    - Enable libcmocka (and so unit tests) all the archs
  * debian/rules:
    - Don't run tests if nocheck is set
    - Enable tests again
  * debian/patches:
    - Get libsofthsm2 from right path for each architecture

  [ Timo Aaltonen ]
  * test_ca-Look-for-libsofthsm2-in-libdir-before-falling-bac.patch:
    Dropped, upstream.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 10 Feb 2021 13:49:04 +0200

sssd (2.4.1-1) unstable; urgency=medium

  * New upstream release.
  * libpam-sss.install: Add pam_sss_gss.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 10 Feb 2021 11:32:35 +0200

sssd (2.4.0-1) unstable; urgency=medium

  * New upstream release.
  * source: Update diff-ignore.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 08 Dec 2020 22:36:54 +0200

sssd (2.3.1-3) unstable; urgency=medium

  * control: Move libsss-sudo to sssd-common Suggests. (LP: #1249777)

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 06 Oct 2020 15:56:19 +0300

sssd (2.3.1-2) unstable; urgency=medium

  * control: Add sssd-dbus to sssd-tools Recommends. (LP: #1895645)

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 17 Sep 2020 14:15:03 +0300

sssd (2.3.1-1) unstable; urgency=medium

  * New upstream release. (Closes: #965307, #965143)
  * source: Extend diff-ignore.
  * rules: Set --with-libwbclient.
  * control: Add libsofthsm2 to build-depends for tests.

 -- Timo Aaltonen <tjaalton@debian.org>  Tue, 28 Jul 2020 17:14:55 +0300

sssd (2.3.0-2) unstable; urgency=medium

  * rules: Drop quilt, autoreconf from dh.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 13 Jul 2020 15:49:20 +0300

sssd (2.3.0-1) unstable; urgency=medium

  * New upstream release. (Closes: #964701, #964240)
  * source: Migrate to 3.0 (quilt).
  * source/local-options: Add files not found on upstream tarball to
    extend-diff-ignore.
  * rules: Use journald for logging. (Closes: #960673)
  * rules: Use /run for pid-path.
  * sssd-common.sssd.default: Add DEBUG_LOGGER but commented out.
  * watch: Update url to github.
  * Add signing-key from Pavel Březina.
  * fix-946847.diff, fix-python3.8-ftbfs.diff: Dropped, upstream.
  * control: Use debhelper-compat.
  * control, rules: Build with openssl.
  * rules: Disable tests until a failing pam upn test is sorted out.
  * control: Drop quilt from build-depends.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 13 Jul 2020 11:35:33 +0300

sssd (2.2.3-3) unstable; urgency=medium

  * libnss-sss: Fix a typo in adding the NSS entry for automount.
    (LP: #1873752)
  * control, watch: Update upstream url to github.

 -- Timo Aaltonen <tjaalton@debian.org>  Mon, 20 Apr 2020 17:52:18 +0300

sssd (2.2.3-2) unstable; urgency=medium

  * libnss-sss: Add an entry for automounter to nsswitch.conf. This is
    needed by ipa-client-automount.
  * Added gitlab-ci.yml.
  * fix-python3.8-ftbfs.diff: Fix build against python3.8.

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 06 Mar 2020 21:58:28 +0200

sssd (2.2.3-1.1) unstable; urgency=medium

  * Non-maintainer upload with maintainer permission.
  * Fix sssd_be busy-looping when LDAP connection flickers.
    (Closes: #946847)

 -- Thorsten Glaser <tg@mirbsd.de>  Fri, 21 Feb 2020 14:04:25 +0100

sssd (2.2.3-1) unstable; urgency=medium

  * New upstream release.
  * default-to-socket-activated-services.diff: Refreshed.
  * sssd-ldap.install: Updated.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 20 Feb 2020 13:06:35 +0200

sssd (2.2.2-1) unstable; urgency=medium

  * New upstream release.
  * default-to-socket-activated-services.diff: Don't enable any
    services when run without a conffile.
  * fix-have-systemd.diff: Dropped, upstream.
  * default-to-socket-activated-services.diff: Refreshed.
  * signing-key: Add key from Michal Židek.
  * Get rid of all old pre/postinst file removal fluff, since that's all
    obsolete by now.
  * Drop python2 support. (Closes: #938566)

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 18 Sep 2019 15:27:44 +0300

sssd (2.2.0-4) unstable; urgency=medium

  [ Sam Morris ]
  * fix-have-systemd.patch: correct detection of systemd.pc
    (Closes: #932080)
  * default-to-socket-activated-services.diff: rely on socket activation
    to spawn nss and pam responders

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 19 Jul 2019 18:15:41 +0300

sssd (2.2.0-3) unstable; urgency=medium

  * common/ipa/krb5-common/proxy.postinst: Use libexec path. (Closes:
    #931859)

 -- Timo Aaltonen <tjaalton@debian.org>  Fri, 12 Jul 2019 10:01:06 +0300

sssd (2.2.0-2) unstable; urgency=medium

  * rules: Override dh_installman, let dh_install handle installing
    manpages too.

 -- Timo Aaltonen <tjaalton@debian.org>  Thu, 11 Jul 2019 00:53:36 +0300

sssd (2.2.0-1) unstable; urgency=medium

  * New upstream release.
  * control: Bump policy to 4.4.0.
  * control, compat, rules: Bump debhelper to 12.
  * *.install: Updated, some files moved to /usr/libexec.

 -- Timo Aaltonen <tjaalton@debian.org>  Wed, 10 Jul 2019 10:14:09 +0300

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog sssd-idp`.
