Hello community, here is the log from the commit of package sssd for openSUSE:Leap:15.2 checked in at 2020-01-19 15:47:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/sssd (Old) and /work/SRC/openSUSE:Leap:15.2/.sssd.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sssd" Sun Jan 19 15:47:09 2020 rev:45 rq:764302 version:1.16.1 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/sssd/sssd.changes 2020-01-15 16:03:57.247942433 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.sssd.new.26092/sssd.changes 2020-01-19 15:47:44.349711619 +0100 @@ -1,0 +2,8 @@ +Mon Jan 13 14:40:11 UTC 2020 - David Mulder <dmul...@suse.com> + +- SSSD GPO host entries are ignored if computer cn does not + match it's samaccountname, add + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; + (jsc#SLE-9298); (bsc#1160688) + +------------------------------------------------------------------- New: ---- 0001-Resolve-computer-lookup-failure-when-sam-cn.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sssd.spec ++++++ --- /var/tmp/diff_new_pack.O5nfH7/_old 2020-01-19 15:47:44.933711965 +0100 +++ /var/tmp/diff_new_pack.O5nfH7/_new 2020-01-19 15:47:44.933711965 +0100 @@ -60,6 +60,7 @@ Patch27: 0027-utils-make-N_ELEMENTS-public.patch Patch28: 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch Patch29: sssd-gpo_host_security_filter-1.16.1.patch +Patch30: 0001-Resolve-computer-lookup-failure-when-sam-cn.patch %define servicename sssd %define sssdstatedir %_localstatedir/lib/sss @@ -423,6 +424,7 @@ %patch27 -p1 %patch28 -p1 %patch29 -p1 +%patch30 -p1 %build %if 0%{?suse_version} < 1210 ++++++ 0001-Resolve-computer-lookup-failure-when-sam-cn.patch ++++++ >From 0ea7661eeb7783c45d7f0ec9d19d99ce9fe407cf Mon Sep 17 00:00:00 2001 From: David Mulder <dmul...@suse.com> Date: Fri, 10 Jan 2020 18:21:05 +0000 Subject: [PATCH] Resolve computer lookup failure when sam!=cn References: jsc#SLE-9298 Upstream: submitted --- src/providers/ad/ad_gpo.c | 11 ++--------- 1 file changed, 2 insertions(+), 9 deletions(-) diff --git a/src/providers/ad/ad_gpo.c b/src/providers/ad/ad_gpo.c index 90e1909f8..6dd850cc9 100644 --- a/src/providers/ad/ad_gpo.c +++ b/src/providers/ad/ad_gpo.c @@ -1947,7 +1947,6 @@ ad_gpo_target_dn_retrieval_done(struct tevent_req *subreq) struct sysdb_attrs **reply; const char *target_dn = NULL; uint32_t uac; - char *filter = NULL; char *domain_dn; const char *attrs[] = {AD_AT_SID, NULL}; struct ldb_message *msg; @@ -2050,16 +2049,10 @@ ad_gpo_target_dn_retrieval_done(struct tevent_req *subreq) goto done; } - filter = talloc_asprintf(subreq, SYSDB_COMP_FILTER, state->ad_hostname); - if (!filter) { - ret = ENOMEM; - goto done; - } - subreq = sdap_get_generic_send(state, state->ev, state->opts, sdap_id_op_handle(state->sdap_op), - domain_dn, LDAP_SCOPE_SUBTREE, - filter, attrs, NULL, 0, + state->target_dn, LDAP_SCOPE_BASE, + "(&)", attrs, NULL, 0, state->timeout, false); -- 2.24.0