forked from simp/pupmod-simp-sssd
-
Notifications
You must be signed in to change notification settings - Fork 0
/
CHANGELOG
196 lines (150 loc) · 7.57 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
* Fri Jul 13 2018 Adam Yohrling <[email protected]> - 6.1.3-0
- Added ldap_use_tokengroups, ldap_group_objectsid, ldap_user_objectsid to sssd::provider::ad
- Updated required version of puppetlabs-stdlib to 4.19.0 since fact function is used
* Tue Jun 19 2018 Nick Miller <[email protected]> - 6.1.2-0
- Avoid changing the permissions from the vendored RPM
- /etc/sssd/ owner is no longer managed
- /etc/sssd/ perms went from 0640 to 0711
- /etc/init.d/sssd went from 0754 to 0755 on EL6
- Update version range of auditd dependency in metadata.json
- Cleanup requires in metadata.json
- Cleanup unneeded fixtures and update CI assets
* Wed Mar 28 2018 Nick Miller <[email protected]> - 6.1.1-0
- sssd::provider::ad::ldap_schema should be a string, not a boolean
- AD test cleanup
* Wed Mar 14 2018 Philippe Muller <[email protected]> - 6.1.0-0
- Allow passing ldap_tls_cacert to sssd::provider::ldap
* Wed Feb 28 2018 Nick Miller <[email protected]> - 6.1.0-0
- Some template and concat changes to make debugging the module easier
- Add headers to more easily diagnose where to stick params
- Order the concat sections
- Add some missing params from sssd::provider::ad
- default_shell
- dyndns_update
- fallback_homedir
- krb5_realm
- krb5_store_password_if_offline
- ldap_schema
* Fri Jan 19 2018 Liz Nemsick <[email protected]> - 6.1.0-0
- Added sssd class option to automatically configure SSSD for an IPA
domain, when the host is joined to an IPA domain.
* Fri Dec 15 2017 Liz Nemsick <[email protected]> - 6.1.0-0
- Leveraged PR from Mark Fitch to add ima provider configuration
* Wed Dec 13 2017 Trevor Vaughan <[email protected]> - 6.1.0-0
- Enforce limits set in /etc/login.defs for uid_min and uid_max by default and
fall back to something sensible for SSSD
* Mon Sep 18 2017 Lucas Yamanishi <[email protected]> - 6.0.4-0
- Set minimum length on sssd::domains
* Mon Sep 11 2017 Judy Johnson <[email protected]> - 6.0.3-0
- Only enable 'try_inotify' if explicitly set
* Wed Aug 30 2017 Nick Markowski <[email protected]> - 6.0.3-0
- Sssd::DebugLevel now handles all variants specfied in sssd.conf man page
- All instances of debug_level are now typed as Sssd::DebugLevel
* Thu Jul 06 2017 Liz Nemsick <[email protected]> - 6.0.2-0
- Confine puppet version in metadata.json
* Fri Apr 07 2017 Trevor Vaughan <[email protected]> - 6.0.1-0
- Worked around a bug in EL6 where the ldap client library incorrectly handles
128 bit ciphers in the cipher list
* Fri Mar 17 2017 Clayton Mentzer, Liz Nemsick 6.0.0-1
- Updated README
- Update puppet version in .travis.yaml
* Thu Feb 09 2017 Jeanne Greulich <[email protected]> - 6.0.0-0
- Changed type of debug level to be consistent for all modules.
* Mon Jan 23 2017 Trevor Vaughan <[email protected]> - 6.0.0-0
- Migrated to using puppetlabs-concat
- Added support for Active Directory Domains
* Thu Jan 12 2017 Nick Markowski <[email protected]> - 6.0.0-0
- Updated to use new pki scheme.
- Application certs now managed in /etc/pki/simp_apps/sssd/x509
- Strongly typed
* Mon Dec 19 2016 Jeanne Greulich <[email protected]> - 6.0.0-0
- Update Global Catalysts
* Wed Nov 23 2016 Jeanne Greulich <[email protected]> - 5.0.0-0
- Fix dependancies for simp 6 bump
* Mon Nov 21 2016 Chris Tessmer <[email protected]> - 5.0.0-0
- Updated to compliance_markup version 2
* Fri Sep 30 2016 Trevor Vaughan <[email protected]> - 5.0.0-0
- Updated to use the version of 'simpcat' that does not conflict with
'puppetlabs/concat'.
* Mon Aug 01 2016 Nicholas Hughes <[email protected]> - 4.1.3-0
- Fixed incorrect variable references in ldap.erb.
* Sat Mar 19 2016 Trevor Vaughan <[email protected]> - 4.1.2-0
- Migrated use_simp_pki to a global catalyst.
* Mon Mar 14 2016 Trevor Vaughan <[email protected]> - 4.1.1-0
- Moved to Semantic Versioning 2.0
- Fixed a bug in the LDAP provider where we had
`ldap_chpass_updates_last_change` as well as
`ldap_chpass_update_last_change`. These were consolidated into a correct
single `ldap_chpass_update_last_change` Boolean.
- Removed RPM dependencies on 'simp-boostrap' and 'puppet' since these are
technically not necessary for just installing the module.
* Tue Mar 01 2016 Ralph Wright <[email protected]> - 4.1.0-9
- Added compliance function support
* Thu Dec 24 2015 Trevor Vaughan <[email protected]> - 4.1.0-8
- Added an sssd::install::client class for installing only the client
libraries.
* Mon Nov 09 2015 Chris Tessmer <[email protected]> - 4.1.0-7
- migration to simplib and simpcat (lib/ only)
* Thu Apr 02 2015 Trevor Vaughan <[email protected]> - 4.1.0-7
- Fixed variable references in some templates.
* Thu Feb 19 2015 Trevor Vaughan <[email protected]> - 4.1.0-6
- Migrated to the new 'simp' environment.
* Fri Jan 16 2015 Trevor Vaughan <[email protected]> - 4.1.0-4
- Changed puppet-server requirement to puppet
* Thu Nov 06 2014 Chris Tessmer <[email protected]> - 4.1.0-3
- Remove sssd::conf as it is no longer needed and causes duplicate
concat_fragment error
* Fri Oct 17 2014 Trevor Vaughan <[email protected]> - 4.1.0-2
- CVE-2014-3566: Updated cipher suites to help mitigate POODLE.
- The tls_cipher_suite variable is set to HIGH:-SSLv2 because OpenLDAP
cannot set the SSL provider natively. By default, it will run TLSv1
but cannot handle TLSv1.2 therefore the SSLv3 ciphers cannot be
eliminated. Take care to ensure that your clients only connect with
TLSv1 if possible.
* Sun Jun 22 2014 Kendall Moore <[email protected]> - 4.1.0-1
- Removed MD5 file checksums for FIPS compliance.
* Mon Apr 14 2014 Kendall Moore <[email protected]> - 4.1.0-0
- Refactored manifests to pass all lint tests.
- Removed all singleton defines.
- Added spec tests.
* Fri Apr 04 2014 Trevor Vaughan <[email protected]> - 4.1.0-0
- Added some validation and removed the 'stock' class. It now resides in the
'simp' module.
- Collapsed the sssd::conf class into sssd.
* Thu Feb 13 2014 Kendall Moore <[email protected]> - 4.0.0-1
- Converted all string booleans to native booleans.
* Fri Oct 25 2013 Trevor Vaughan <[email protected]> - 4.0.0-0
- Updated all 'source' File parameters to use the modules directory
for Puppet 3 compatibility.
* Mon Oct 07 2013 Kendall Moore <[email protected]> 2.0.0-8
- Updated all erb templates to properly scope variables.
* Mon Jan 07 2013 Maintenance
2.0.0-7
- Created a Cucumber test to toggle the sssd flag to true and ensure that the
sssd service is running and the nscd service is stopped.
* Thu Jun 07 2012 Maintenance
2.0.0-6
- Ensure that Arrays in templates are flattened.
- Call facts as instance variables.
- Moved mit-tests to /usr/share/simp...
- Updated pp files to better meet Puppet's recommended style guide.
* Fri Mar 02 2012 Maintenance
2.0.0-5
- Improved test stubs.
* Mon Dec 26 2011 Maintenance
2.0-4
- Updated the spec file to not require a separate file list.
* Mon Oct 03 2011 Maintenance
2.0-3
- Updates to work around the fact that the latest version of SSSD will silently
allow expired users to access the system due to bugs in the way it works with
OpenLDAP.
* Fri Jul 15 2011 Maintenance
2.0-2
- Ensure that the minimum uid for LDAP is set to 501 by default.
* Wed May 25 2011 Maintenance - 2.0.0-1
- Updated to fix a bug where nscd was not getting shut down at boot time and
sssd was not triggered to start.
* Tue Apr 05 2011 Maintenance - 2.0.0-0
- Initial offering of the SSSD module.
- The use requires the $use_sssd variable to be set to 'true' within scope.