From a84e20a0d80684a29eb12ae6d11f221bd5670053 Mon Sep 17 00:00:00 2001 From: Michal Židek Date: Oct 09 2019 10:49:28 +0000 Subject: Fix bad release notes formatting. This caused the new lines to not appear in the HTML version. --- diff --git a/users/relnotes/notes_2_2_1.rst b/users/relnotes/notes_2_2_1.rst index eac23f3..702eb96 100644 --- a/users/relnotes/notes_2_2_1.rst +++ b/users/relnotes/notes_2_2_1.rst @@ -74,116 +74,128 @@ Tickets Fixed Detailed changelog ------------------ -Alex Rodin (1): - tests/cmocka/test_dyndns.c: Switching from tevent_loop_once() to tevent_loop_wait() - -Alexey Tikhonov (14): - util/crypto/libcrypto: changed sss_hmac_sha1() - util/crypto/libcrypto: changed sss_hmac_sha1() - util/secrets: memory leaks are fixed - util/crypto/nss/nss_nite: params sanitization - crypto/libcrypto/crypto_nite: HMAC calculation changed - util/find_uid.c: fixed debug message - util/find_uid.c: fixed race condition bug - util/crypto: removed erroneous declaration - util/crypto/sss_crypto.c: cleanup of includes - util/crypto: generate_csprng_buffer() changed - util/crypto: added sss_rand() - crypto/libcrypto/crypto_nite.c: memory leak fixed - FIPS140 compliant usage of PRNG - crypto/nss: some nss_ctx_init() params made const - -Jakub Hrozek (34): - Updating the version for the 2.2.1 release - TESTS: Install expect to drive password-change modifications - TESTS: Also add LDAP password when creating users - TESTS: Test changing LDAP password with extended operation and modification - TEST: Add a multihost test for not returning / for an empty home dir - MONITOR: Don't check for the nscd socket while regenerating configuration - SYSDB: Add sysdb_search_with_ts_attr - BE: search with sysdb_search_with_ts_attr - BE: Enable refresh for multiple domains - BE: Make be_refresh_ctx_init set up the periodical task, too - BE/LDAP: Call be_refresh_ctx_init() in the provider libraries, not in back end - BE: Pass in attribute to look up with instead of hardcoding SYSDB_NAME - BE: Change be_refresh_ctx_init to return errno and set be_ctx->refresh_ctx - BE/LDAP: Split out a helper function from sdap_refresh for later reuse - BE: Pass in filter_type when creating the refresh account request - BE: Send refresh requests in batches - BE: Extend be_ptask_create() with control when to schedule next run after success - BE: Schedule the refresh interval from the finish time of the last run - AD: Implement background refresh for AD domains - IPA: Implement background refresh for IPA domains - BE/IPA/AD/LDAP: Add inigroups refresh support - BE/IPA/AD/LDAP: Initialize the refresh callback from a list to reduce logic duplication - IPA/AD/SDAP/BE: Generate refresh callbacks with a macro - MAN: Amend the documentation for the background refresh - DP/SYSDB: Move the code to set initgrExpireTimestamp to a reusable function - IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request - MAN: Get rid of sssd-secrets reference - MAN: Document that it is enough to systemctl restart sssd-kcm.service lately - SECRETS: Use different option names from secrets and KCM for quota options - SECRETS: Don't limit the global number of ccaches - KCM: Pass confdb context to the ccache db initialization - KCM: Configurable quotas for the secdb ccache back end - TESTS: Add tests for the configurable quotas - Don't qualify users from files domain when default_domain_suffix is set - -Jakub Jelen (1): - pam_sss: Add missing colon to the PIN prompt - -Lukas Slebodnik (1): - PROXY: Return data in output parameter if everything is OK - -Michal Židek (2): - TESTS: ldb-tools and sssd-tools are required for multihost tests - Update the translations for the 2.2.1 release - -Niranjan M.R (1): - TESTS: Test kvno correctly displays vesion numbers of principals - -Pavel Březina (11): - ci: disable timeout - ci: switch to new tooling and remove 'Read trusted files' stage - ci: rebase pull request on the target branch - ci: print node on which the test is being run - sudo: use proper datetime for default modifyTimestamp value - systemd: add Restart=on-failure to sssd.service - man: fix description of dns_resolver_op_timeout - man: fix description of dns_resolver_timeout - failover: add dns_resolver_server_timeout option - failover: change default timeouts - config: add dns_resolver_op_timeout to option list - -Sam Morris (1): - build: fix detection of systemd.pc - -Samuel Cabrero (1): - nss: Fix command 'endservent' resetting wrong struct member - -Sumit Bose (10): - negcache: add fq-usernames of know domains to all UPN neg-caches - p11_child: prefer better digest function if card supports it - p11_child: fix a memory leak and other memory mangement issues - pam: make sure p11_child.log has the right permissions - ssh: make sure p11_child.log has the right permissions - BE: make sure child log files have the right permissions - utils: remove unused prototype (cert_to_ssh_key) - utils: move parse_cert_verify_opts() into separate file - p11_child: make OCSP digest configurable - pam: fix loop in Smartcard authentication - -Tomas Halman (9): - MAN: ldap_user_home_directory default missing - pcre: port to pcre2 - CACHE: SSSD doesn't clear cache entries - LDAP: failover does not work on non-responsive ldaps - CONFDB: Files domain if activated without .conf - TESTS: adapt tests to enabled default files domain - BE: Introduce flag for be_ptask_create - BE: Convert be_ptask params to flags - DYNDNS: dyndns_update is not enough - -Yuri Chornoivan (1): - Fix minor typos in docs - +* Alex Rodin (1): + + * tests/cmocka/test_dyndns.c: Switching from tevent_loop_once() to tevent_loop_wait() + +* Alexey Tikhonov (14): + + * util/crypto/libcrypto: changed sss_hmac_sha1() + * util/crypto/libcrypto: changed sss_hmac_sha1() + * util/secrets: memory leaks are fixed + * util/crypto/nss/nss_nite: params sanitization + * crypto/libcrypto/crypto_nite: HMAC calculation changed + * util/find_uid.c: fixed debug message + * util/find_uid.c: fixed race condition bug + * util/crypto: removed erroneous declaration + * util/crypto/sss_crypto.c: cleanup of includes + * util/crypto: generate_csprng_buffer() changed + * util/crypto: added sss_rand() + * crypto/libcrypto/crypto_nite.c: memory leak fixed + * FIPS140 compliant usage of PRNG + * crypto/nss: some nss_ctx_init() params made const + +* Jakub Hrozek (34): + + * Updating the version for the 2.2.1 release + * TESTS: Install expect to drive password-change modifications + * TESTS: Also add LDAP password when creating users + * TESTS: Test changing LDAP password with extended operation and modification + * TEST: Add a multihost test for not returning / for an empty home dir + * MONITOR: Don't check for the nscd socket while regenerating configuration + * SYSDB: Add sysdb_search_with_ts_attr + * BE: search with sysdb_search_with_ts_attr + * BE: Enable refresh for multiple domains + * BE: Make be_refresh_ctx_init set up the periodical task, too + * BE/LDAP: Call be_refresh_ctx_init() in the provider libraries, not in back end + * BE: Pass in attribute to look up with instead of hardcoding SYSDB_NAME + * BE: Change be_refresh_ctx_init to return errno and set be_ctx->refresh_ctx + * BE/LDAP: Split out a helper function from sdap_refresh for later reuse + * BE: Pass in filter_type when creating the refresh account request + * BE: Send refresh requests in batches + * BE: Extend be_ptask_create() with control when to schedule next run after success + * BE: Schedule the refresh interval from the finish time of the last run + * AD: Implement background refresh for AD domains + * IPA: Implement background refresh for IPA domains + * BE/IPA/AD/LDAP: Add inigroups refresh support + * BE/IPA/AD/LDAP: Initialize the refresh callback from a list to reduce logic duplication + * IPA/AD/SDAP/BE: Generate refresh callbacks with a macro + * MAN: Amend the documentation for the background refresh + * DP/SYSDB: Move the code to set initgrExpireTimestamp to a reusable function + * IPA/AD/LDAP: Increase the initgrExpireTimestamp after finishing refresh request + * MAN: Get rid of sssd-secrets reference + * MAN: Document that it is enough to systemctl restart sssd-kcm.service lately + * SECRETS: Use different option names from secrets and KCM for quota options + * SECRETS: Don't limit the global number of ccaches + * KCM: Pass confdb context to the ccache db initialization + * KCM: Configurable quotas for the secdb ccache back end + * TESTS: Add tests for the configurable quotas + * Don't qualify users from files domain when default_domain_suffix is set + +* Jakub Jelen (1): + + * pam_sss: Add missing colon to the PIN prompt + +* Lukas Slebodnik (1): + + * PROXY: Return data in output parameter if everything is OK + +* Michal Židek (2): + + * TESTS: ldb-tools and sssd-tools are required for multihost tests + * Update the translations for the 2.2.1 release + +* Niranjan M.R (1): + + * TESTS: Test kvno correctly displays vesion numbers of principals + +* Pavel Březina (11): + + * ci: disable timeout + * ci: switch to new tooling and remove 'Read trusted files' stage + * ci: rebase pull request on the target branch + * ci: print node on which the test is being run + * sudo: use proper datetime for default modifyTimestamp value + * systemd: add Restart=on-failure to sssd.service + * man: fix description of dns_resolver_op_timeout + * man: fix description of dns_resolver_timeout + * failover: add dns_resolver_server_timeout option + * failover: change default timeouts + * config: add dns_resolver_op_timeout to option list + +* Sam Morris (1): + + * build: fix detection of systemd.pc + +* Samuel Cabrero (1): + + * nss: Fix command 'endservent' resetting wrong struct member + +* Sumit Bose (10): + + * negcache: add fq-usernames of know domains to all UPN neg-caches + * p11_child: prefer better digest function if card supports it + * p11_child: fix a memory leak and other memory mangement issues + * pam: make sure p11_child.log has the right permissions + * ssh: make sure p11_child.log has the right permissions + * BE: make sure child log files have the right permissions + * utils: remove unused prototype (cert_to_ssh_key) + * utils: move parse_cert_verify_opts() into separate file + * p11_child: make OCSP digest configurable + * pam: fix loop in Smartcard authentication + +* Tomas Halman (9): + + * MAN: ldap_user_home_directory default missing + * pcre: port to pcre2 + * CACHE: SSSD doesn't clear cache entries + * LDAP: failover does not work on non-responsive ldaps + * CONFDB: Files domain if activated without .conf + * TESTS: adapt tests to enabled default files domain + * BE: Introduce flag for be_ptask_create + * BE: Convert be_ptask params to flags + * DYNDNS: dyndns_update is not enough + +* Yuri Chornoivan (1): + + * Fix minor typos in docs diff --git a/users/relnotes/notes_2_2_2.rst b/users/relnotes/notes_2_2_2.rst index 29081cc..7c9a946 100644 --- a/users/relnotes/notes_2_2_2.rst +++ b/users/relnotes/notes_2_2_2.rst @@ -43,62 +43,68 @@ Tickets Fixed Detailed changelog ------------------ -Jakub Hrozek (6): - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8 - IPA: Allow paging when fetching external groups - MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8 - IPA: Allow paging when fetching external groups - KCM: Use int32_t type conversion in DEBUG message for int32_t variable - KCM: Add a forgotten return - KCM: Allow modifications of ccache's principal - KCM: Fill empty cache, do not initialize a new one - -Lukas Slebodnik (18): - BUILD: Add macro for checking python3 modules - BUILD: Fix typo of detecting python module for intgcheck - BUILD: Move checking of python2 modules for intgcheck - BUILD: Add macro for checking pytest for intgcheck - BUILD: Change value of variable HAVE_PYTHON2/3_BINDINGS - BUILD: Move python checks for intgcheck to macro - INTG: Do hot hardcode version of python/pytest in intgcheck - BUILD: Prefer python3 for intgcheck - intg: Install python3 dependencies for intgcheck on new distros - pyhbac: Fix warning Wdiscarded-qualifiers - test_pam_responder: Fix unicore error - SSSDConfig: Add minimal test for parse method - SSSDConfig: Fix SyntaxWarning "is not" with a literal - TESTS: Add minimal test for pysss encrypt - pysss: Fix DeprecationWarning PY_SSIZE_T_CLEAN - pysss_murmur: Fix DeprecationWarning PY_SSIZE_T_CLEAN - test_pam_responder: Fix DeprecationWarning invalid escape sequence - testlib: Fix SyntaxWarning "is" with a literal - -Michal Židek (2): - Bumping the version to track the 2.2.2 development - Update the translations for the 2.2.2 release - -Pavel Březina (12): - ad: remove subdomain that has been disabled through ad_enabled_domains from sysdb - sysdb: add sysdb_domain_set_enabled() - ad: set enabled=false attribute for subdomains that no longer exists - sysdb: read and interpret domain's enabled attribute - sysdb: add sysdb_list_subdomains() - ad: remove all subdomains if only master domain is enabled - ad: make ad_enabled_domains case insensitive - ci: use python2 version of pytest - ci: pep8 was renamed to pycodestyle in Fedora 31 - ci: remove left overs from previous rebase - sudo: do not update last usn value on rules refresh - ifp: let cache_req parse input name so it can fallback to upn search - -Sumit Bose (5): - pam: keep pin on the PAM stack for forward_pass - pam: do not accept empty PIN - pam: user PAM return codes where expected - pam: set PAM_USER properly with allow_missing_name - Revert "SERVER: Receving SIGSEGV process on shutdown" - -Tomas Halman (3): - SERVER: Receving SIGSEGV process on shutdown - BE: Invalid oprator used in condition - SERVER: Receving SIGSEGV process on shutdown +* Jakub Hrozek (6): + + * MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8 + * IPA: Allow paging when fetching external groups + * MAN: Document that PAM stack contains the systemd-user service in the account phase in RHEL-8 + * IPA: Allow paging when fetching external groups + * KCM: Use int32_t type conversion in DEBUG message for int32_t variable + * KCM: Add a forgotten return + * KCM: Allow modifications of ccache's principal + * KCM: Fill empty cache, do not initialize a new one + +* Lukas Slebodnik (18): + + * BUILD: Add macro for checking python3 modules + * BUILD: Fix typo of detecting python module for intgcheck + * BUILD: Move checking of python2 modules for intgcheck + * BUILD: Add macro for checking pytest for intgcheck + * BUILD: Change value of variable HAVE_PYTHON2/3_BINDINGS + * BUILD: Move python checks for intgcheck to macro + * INTG: Do hot hardcode version of python/pytest in intgcheck + * BUILD: Prefer python3 for intgcheck + * intg: Install python3 dependencies for intgcheck on new distros + * pyhbac: Fix warning Wdiscarded-qualifiers + * test_pam_responder: Fix unicore error + * SSSDConfig: Add minimal test for parse method + * SSSDConfig: Fix SyntaxWarning "is not" with a literal + * TESTS: Add minimal test for pysss encrypt + * pysss: Fix DeprecationWarning PY_SSIZE_T_CLEAN + * pysss_murmur: Fix DeprecationWarning PY_SSIZE_T_CLEAN + * test_pam_responder: Fix DeprecationWarning invalid escape sequence + * testlib: Fix SyntaxWarning "is" with a literal + +* Michal Židek (2): + + * Bumping the version to track the 2.2.2 development + * Update the translations for the 2.2.2 release + +* Pavel Březina (12): + + * ad: remove subdomain that has been disabled through ad_enabled_domains from sysdb + * sysdb: add sysdb_domain_set_enabled() + * ad: set enabled=false attribute for subdomains that no longer exists + * sysdb: read and interpret domain's enabled attribute + * sysdb: add sysdb_list_subdomains() + * ad: remove all subdomains if only master domain is enabled + * ad: make ad_enabled_domains case insensitive + * ci: use python2 version of pytest + * ci: pep8 was renamed to pycodestyle in Fedora 31 + * ci: remove left overs from previous rebase + * sudo: do not update last usn value on rules refresh + * ifp: let cache_req parse input name so it can fallback to upn search + +* Sumit Bose (5): + + * pam: keep pin on the PAM stack for forward_pass + * pam: do not accept empty PIN + * pam: user PAM return codes where expected + * pam: set PAM_USER properly with allow_missing_name + * Revert "SERVER: Receving SIGSEGV process on shutdown" + +* Tomas Halman (3): + + * SERVER: Receving SIGSEGV process on shutdown + * BE: Invalid oprator used in condition + * SERVER: Receving SIGSEGV process on shutdown