# SSSD 2.9.6

The SSSD team is announcing the release of version 2.9.6 of the
System Security Services Daemon. The tarball can be downloaded from:
     https://github.com/SSSD/sssd/releases/tag/2.9.6

Note that this is the latest release of 2.9.x LTM branch.

See the full release notes at:
     https://sssd.io/release-notes/sssd-2.9.6.html

RPM packages will be made available for Fedora shortly.

## Feedback

Please provide comments, bugs and other feedback via the sssd-devel
or sssd-users mailing lists:
     https://lists.fedorahosted.org/mailman/listinfo/sssd-devel
     https://lists.fedorahosted.org/mailman/listinfo/sssd-users

# SSSD 2.9.6 Release Notes

## Highlights

### General information

* The DoT for dynamic DNS updates is supported now. It requires new version of
  `nsupdate` from BIND 9.19+.

* The option `default_domain_suffix` is deprecated. Consider using the more
  flexible `domain_resolution_order` instead.

### Important fixes

* When the `DP_OPT_DYNDNS_REFRESH_OFFSET` enumerator was created, the
associated `struct dp_option` was not. Because these structures are part of an array and the enumerator is used as the index, the wrong structure would be accessed when trying to use this index. This problem was fixed by creating the
  missing structure.


### Configuration changes

* The `dyndns_server` option is extended so it can be in form of URI
  (`dns+tls://1.2.3.4:853#servername`). New set of options
  `dyndns_dot_cacert`, `dyndns_dot_cert` and `dyndns_dot_key` allows to
  configure DNS-over-TLS communication.

* Added `exop_force` value for configuration option `ldap_pwmodify_mode`.
This can be used to force a password change even if no grace logins are left. Depending on the configuration of the LDAP server it might be expected that
  the password change will fail.




--
_______________________________________________
sssd-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to