| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: sssd-tools | Distribution: AlmaLinux |
| Version: 2.9.8 | Vendor: AlmaLinux |
| Release: 4.el9_8.1 | Build date: Thu Jul 23 21:32:22 2026 |
| Group: Unspecified | Build host: ppc64le-builder02.almalinux.org |
| Size: 472330 | Source RPM: sssd-2.9.8-4.el9_8.1.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://github.com/SSSD/sssd/ | |
| Summary: Userspace tools for use with the SSSD | |
Provides userspace tools for manipulating users, groups, and nested groups in
SSSD when using id_provider = local in /etc/sssd/sssd.conf.
Also provides several other administrative tools:
* sss_debuglevel to change the debug level on the fly
* sss_seed which pre-creates a user entry for use in kickstarts
* sss_obfuscate for generating an obfuscated LDAP password
* sssctl -- an sssd status and control utility
GPLv3+
* Wed Jul 08 2026 Justin Stephenson <jstephen@redhat.com> - 2.9.8-5
- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root
* Wed Apr 15 2026 Tomas Halman <thalman@redhat.com> - 2.9.8-4
- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'
* Mon Apr 13 2026 Tomas Halman <thalman@redhat.com> - 2.9.8-3
- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified
* Thu Apr 02 2026 Tomas Halman <thalman@redhat.com> - 2.9.8-2
- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group
* Thu Jan 22 2026 Tomas Halman <thalman@redhat.com> - 2.9.8-1
- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache
* Tue Sep 23 2025 Pavel Filipenský <pfilipen@redhat.com> - 2.9.7-5
- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release
* Thu Aug 14 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.
* Mon Jul 14 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working
* Wed Jun 11 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-2
- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release
* Tue May 20 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649
* Mon Apr 07 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-4.2
- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]
* Wed Apr 02 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-4.1
- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]
* Wed Feb 12 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-4
- Resolves: RHEL-78253 - 'sssd_kcm' leaks memory [rhel-9]
* Mon Feb 10 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-3
- Resolves: RHEL-78253 - 'sssd_kcm' leaks memory [rhel-9]
* Tue Jan 14 2025 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-2
- Resolves: RHEL-73400 - Use the DN from existing entry when updating a cached group [rhel-9]
* Thu Dec 05 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
- Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
- Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
- Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
- Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]
* Mon Oct 21 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-5
- Related: RHEL-59788 - Rebase Samba to the latest 4.21.x release
* Tue Sep 24 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
- Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
- Resolves: RHEL-50912 - possible regression of rhbz#2196521
* Thu Jul 18 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
- Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
- Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4
* Mon Jul 08 2024 Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-3
- Resolves: RHEL-40742 - passkey_child with wrong owner
/usr/lib/.build-id /usr/lib/.build-id/60 /usr/lib/.build-id/60/211a349f237a4dd277f94e7bdef191bde0d03a /usr/lib/.build-id/b3 /usr/lib/.build-id/b3/a14f495548122cae60e47f84d98edcc65e9ed0 /usr/lib/.build-id/f1 /usr/lib/.build-id/f1/2e0c215931793569a69fc0d4dc7748d9c722e1 /usr/lib/python3.9/site-packages/sssd /usr/lib/python3.9/site-packages/sssd/__init__.py /usr/lib/python3.9/site-packages/sssd/__pycache__ /usr/lib/python3.9/site-packages/sssd/__pycache__/__init__.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/__init__.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/parser.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/parser.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_files.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_files.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_journald.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_journald.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_reader.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/source_reader.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/sss_analyze.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/__pycache__/sss_analyze.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/modules /usr/lib/python3.9/site-packages/sssd/modules/__init__.py /usr/lib/python3.9/site-packages/sssd/modules/__pycache__ /usr/lib/python3.9/site-packages/sssd/modules/__pycache__/__init__.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/modules/__pycache__/__init__.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/modules/__pycache__/request.cpython-39.opt-1.pyc /usr/lib/python3.9/site-packages/sssd/modules/__pycache__/request.cpython-39.pyc /usr/lib/python3.9/site-packages/sssd/modules/request.py /usr/lib/python3.9/site-packages/sssd/parser.py /usr/lib/python3.9/site-packages/sssd/source_files.py /usr/lib/python3.9/site-packages/sssd/source_journald.py /usr/lib/python3.9/site-packages/sssd/source_reader.py /usr/lib/python3.9/site-packages/sssd/sss_analyze.py /usr/libexec/sssd/sss_analyze /usr/sbin/sss_debuglevel /usr/sbin/sss_obfuscate /usr/sbin/sss_override /usr/sbin/sss_seed /usr/sbin/sssctl /usr/share/licenses/sssd-tools /usr/share/licenses/sssd-tools/COPYING /usr/share/man/ca/man8/sss_obfuscate.8.gz /usr/share/man/ca/man8/sss_seed.8.gz /usr/share/man/de/man8/sss_obfuscate.8.gz /usr/share/man/de/man8/sss_seed.8.gz /usr/share/man/es/man8/sss_obfuscate.8.gz /usr/share/man/es/man8/sss_seed.8.gz /usr/share/man/fr/man8/sss_obfuscate.8.gz /usr/share/man/fr/man8/sss_seed.8.gz /usr/share/man/ja/man8/sss_obfuscate.8.gz /usr/share/man/man8/sss_debuglevel.8.gz /usr/share/man/man8/sss_obfuscate.8.gz /usr/share/man/man8/sss_override.8.gz /usr/share/man/man8/sss_seed.8.gz /usr/share/man/man8/sssctl.8.gz /usr/share/man/ru/man8/sss_debuglevel.8.gz /usr/share/man/ru/man8/sss_obfuscate.8.gz /usr/share/man/ru/man8/sss_override.8.gz /usr/share/man/ru/man8/sss_seed.8.gz /usr/share/man/ru/man8/sssctl.8.gz /usr/share/man/sv/man8/sss_debuglevel.8.gz /usr/share/man/sv/man8/sss_obfuscate.8.gz /usr/share/man/sv/man8/sss_override.8.gz /usr/share/man/sv/man8/sss_seed.8.gz /usr/share/man/sv/man8/sssctl.8.gz /usr/share/man/uk/man8/sss_debuglevel.8.gz /usr/share/man/uk/man8/sss_obfuscate.8.gz /usr/share/man/uk/man8/sss_override.8.gz /usr/share/man/uk/man8/sss_seed.8.gz /usr/share/man/uk/man8/sssctl.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Aug 15 06:44:04 2026