Packages changed: MicroOS-release (20250112 -> 20250113) sssd (2.9.5 -> 2.10.1) === Details === ==== MicroOS-release ==== Version update (20250112 -> 20250113) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== sssd ==== Version update (2.9.5 -> 2.10.1) Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap - Update to release 2.10.1 * SSSD does not create anymore missing path components of DIR:/FILE: ccache types while acquiring user's TGT. The parent directory of requested ccache directory must exist and the user trying to log in must have rwx access to this directory. This matches behavior of /usr/bin/kinit. * The option default_domain_suffix is deprecated. - Delete 0001-Configuration-make-sure-etc-sssd-and-everything.patch, 0001-INI-relax-config-files-checks.patch, 0001-INI-stop-using-libini_config-for-access-check.patch, 0001-sssd-always-print-path-when-config-object-is-rejecte.patch (merged) - Add 0001-TOOL-Fix-build-parameter-name-omitted.patch - Update to release 2.10.0 * The ``sssctl cache-upgrade`` command was removed. SSSD performs automatic upgrades at startup when needed. * Support of ``enumeration`` feature (i.e. ability to list all users/groups using ``getent passwd/group`` without argument) for AD/IPA providers is deprecated and might be removed in further releases. * The new tool ``sss_ssh_knownhosts`` can be used with ssh's ``KnownHostsCommand`` configuration option to retrieve the host's public keys from a remote server (FreeIPA, LDAP, etc.). It replaces ```sss_ssh_knownhostsproxy``. * The default value for ``ldap_id_use_start_tls`` changed from false to true for improved security. * https://github.com/SSSD/sssd/releases/tag/2.10.0 - Add 0001-sssd-always-print-path-when-config-object-is-rejecte.patch, 0001-INI-stop-using-libini_config-for-access-check.patch, 0001-INI-relax-config-files-checks.patch, 0001-Configuration-make-sure-etc-sssd-and-everything.patch - Fix socket activation of responders - Daemon runs now as unprivileged user 'sssd'