1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263
|
0.16.3
* Add os-name and os-version command line options
* Add computer-name support to realmd join CLI and config
* Don't fall over if a [domain] section in sssd.conf exists
* Fully qualify --computer-ou DN before passing to adcli
* Fix issue where diagnostics about package install hidden
* Updated translations
0.16.2
* Be more liberal with domain name chars
* Increase timeout when calling PackageKit
* List package names with spaces between them [#89464]
* Install to $prefix/lib instead of $libdir
0.16.1
* libsystemd build fix [#90519]
* Change default home directory to /home/%U@%D
* Add --automatic-id-mapping=no command line argument
0.16.0
* Disable automatic AD joins by default [#89205]
* Validate text we receive from LDAP
* Prefer adcli for AD joins
* Remove hard dependency on PackageKit
* Fix crash when empty password is used with realm client
0.15.2
* Fix PackageKit installation issue
* Remove our copy of valgrind.h
* Build fixes and tweaks
0.15.1
* Build fixes for PackageKit changes [#76800
* Correct the polkit policy for non-desktop users [#78273]
* Don't crash if missing full_name_format in sssd.conf
0.15.0
* Depend on Glib 2.36 or later
* Use safe printf when formatting sssd.conf full_name_format
* Fix logic issue when testing for EAGAIN [#71774]
* Build fixes
0.14.6
* Set 'kerberos method = system keytab' in smb.conf properly [#69037]
* Limit Netbios name to 15 chars when joining AD domain [#69016]
0.14.5
* Fix regression where --unattended conflicted with -U as in --user [#68112]
* Pass discovered server address to adcli [#68111]
* Fix failure message output
0.14.4
* Fix up the [sssd] section in sssd.conf if it's screwed up
* Add an --unattended argument to realm command line client
* Clearer 'realm permit' manual page example
* Other documentation fixes
0.14.3
* Populate LoginFormats properly when use_fully_qualified_names = False
* Several documentation fixes
* Set sssd.conf default_shell per domain
* Notify in terminal output when installing packages
* If joined via adcli, delete computer account with adcli as well
* If input is not tty, then just read from stdin without getpass()
* Force IPA joins so that computer can rejoin a domain
* Configure pam_winbind.conf appropriately when using winbind [#66831]
* Refer to FreeIPA as IPA [#66734]
* Support use of kerberos ccache to join when using winbind
* Don't create a top level directory in /var [#65435]
* Other build fixes
0.14.2
* Rework discovery for changes in FreeIPA 3.0 [#64895]
* Remove simple_allow_users/groups when permit/deny access provider [#64903]
* When FreeIPA domain with manage-system, we want NTP, so --force-ntpd
* Only allow joining one manage-system=true domain [#64928]
* Return a specific error code when host name is invalid
* Enable oddjobd service on Fedora and RHEL
0.14.1
* Don't use the slice allocator for small memory allocations [#56157]
* Don't do critical warning when service.Release() is called
* Just quit when Ctrl-C is pressed twice [#64538]
* Don't remove sssd domain if already removed
* Document the 'realm discover --all' option
* sssd-tools is no longer needed on Fedora
* Don't print journalctl command when cancelled [#64539]
* Enable sssd service even when in install mode [#64542]
* Use the full AD domain name as sssd.conf domain [#64544]
* When failing to write out data to subprocess, print errno
* Work around authconfig bug [#953851]
* Build fixes
0.14.0
* Work around krb5 bugs in krb5_get_init_creds_password()
* Fine tune the regular expressions and formats for AD and IPA
* Put documentation about realmd.conf in a manual page [#64182]
0.13.91
* Add support for permitting logins by group [#58397]
* Fix regression of service --debug argument
* Fix regression of discovery of FreeIPA
* Fix regression in 'realm join --one-time-password'
* Fix lots of possible uninitialized memory usage
0.13.90
* Rework the discovery mechanisms for AD and IPA [#62863 #63907 #63907]
* Allow specifying of servers for discovery and join [#63907]
* Option to disable use of fully qualified names [#60637]
* Option to disable automatic package installs [#61215]
* Option for turning on realmd debugging [#61219]
* Option for 'manage-system' [#61858]
* Option to turn off automatic id mapping [#60679]
* Option for creating user principal on computer account [#62755]
* Options for setting OS name and version [#54489]
* On failure print out journal command [#63739]
* When realm is not joinable say so [#63631]
* Handle IPA bad password error code [#63738]
* Work around samba bug which requires LOGNAME envvar [#63956]
* Use allow-realm-logins by default if manage-system [#61858]
* Temp file handling fixes [#63910]
* Don't set sssd.conf parameters to defaults [#62519]
* Remove empty keytab if all entries have been flushed [#56029]
* Support for using kerberos credential cache to join [#56022]
* Refactor internals [#63434 #63906]
0.13.3
* Fix permit/deny commands and implementation [#62517 #62518]
* Don't exit realmd when clients are still active [#61220]
* Send internal warnings/criticals/messages to syslog [#58084]
* Example domain fixes [#62215 #62372 #62214 #62162]
* Cleanup our 'net ads join' usage [#56023]
* Support realm login policy [#60628]
* Other tweaks and bug fixes [#62763 #62210 #60656 ...]
* Include a systemd unit file [#56012]
* Adding build support for SuSE [#55097]
* Check that package-kit finds all the packages we ask it to resolve [#60657]
* If PackageKit is not available, assume manual package installation [#60654]
* License clarification, we are LGPL v2.1 [#57943]
* Optionally use systemd's journal for logging [#62225]
* Documentation fixes and clarifications
* Build and testing fixes
0.13
* Pull in translations from transifex
* Detect incorrect passwords when using 'net ads join' login via RPC
* Use ipa-client-install to provide join functionality for IPA domains
* Don't assume that we can use kerberos to validate admin password
* Allow specifying --membership-software when discovering a realm
* Only use the XDG user data directory if it exists
* Quit the daemon when SIGTERM or SIGINT received
* Implement cancellation of operations
* Documentation fixes
* Add documentation about realmd internals
* Update commands and packages for Debian
* Use /var/cache/realmd instead of /tmp
* Build fixes and lots of other bugs fixed
0.12
* Add a --no-password option to realm join
* Check if domain is configured before trying to join
* Updated translations
* Build fixes
0.11
* Support install mode, where we try not to use the DBus system bus
* Support caller based package installation
* Fix various bugs
0.10
* Send diagnostics from subcommand to client as they come in
* Return configured realms back to callers
* Refuse to join a domain if hostname is localhost
* In realm permit or deny commands, fail when options are invalid
* Fix samba package names for Fedora changes
* Fix typo in realm manual
* Fix case where base dn in computer-ou doesn't match domain
* Don't crash when computer-ou is empty
* Fix problem where daemon goes away unexpectedly
0.9
* Add support for deconfiguring a realm without removing computer account
* Cleanup the krb5.keytab from realmd itself, rather than relying on samba
* Fix problems running authconfig from a system service
* Automatically create home directories for logged in accounts on Fedora and RHEL
* Setup a default shell and home directory for AD users coming via sssd
* Restart the accouts-daemon after joining a domain
* Use lower case realm names
* Enable offline logins with sssd
* Make sure the allow-permitted-logins policy works with sssd even when
no permitted logins specified
* Use systemctl and service commands to manage services rather than DBus
* Move the realm command to /usr/sbin
* Make --verbose work with 'realm permit -all' and 'realm deny --all'
* Make sure realm permit/deny only work with configured realms
* Work around sssd simple access provider issues
* Use sss_cache to clear caches when removing a domain
* Make 'realm discover' only print out realm line per domain by default
* Only list configured realms in 'realm list' by default
* Bug fixes
* Documentation
0.8.1
* Distribute debian settings file correctly
0.8
* Cleaner, faster and robuster IPA discovery
* Don't refret the PackageKit cache when installing
* Add first translation, although gettext not hooked up yet
* Pass passwords directly to the samba 'net' command
* Better prompting for realm administrator/user password in realm tool
* Remove custom debug code, just use glib
* Support basic one-time-password and automatic joining
* Ignore temporarily DNS failures when discovering
* Add a generic kerberos provider, for discovering non AD/IPA realms
* Add support for specifying a computer OU LDAP DN when joining
* Don't require unstable glib
* Fix timeout in the realm tool
* Some build and testing fixes
* Other bug fixes
0.7
* Refactor the DBus interface so we can add other realm types later
* Implement o.f.DBus.ObjectManager
* Some compat fixes for samba4
* Use better LoginFormats format
* Add DBus interface documentation
* Build fixes
0.6
* Switch default AD client to sssd
* Support building with automake 1.12.x
* Cleaner DBus API which handles password based authentication
required for samba3's net command.
* Remove support for out of process providers
* Lots of bug fixes
0.5
* Implement login policy concept
* Make the daemon exit-after-timeout work better
* Implement an AD provider based on sssd
* Fix accidental corruption of config files
* New 'realm' command with various sub-commands
* Display errors correctly in command line tools
* Add discovery of IPA servers
* Various bug fixes
0.4
* Fix up license headers
* Don't use SOA for MSDCS subdomain, use SRV record directly
0.3
* Build and packaging fixes
0.2
* Add possibility for cancellation to the DBus interface
* Add provider Name and Version properties
* Clearer diagnostics on discovery
* Add realm-discover tool to identify a domain
* Add proper DBus service files
0.1
* Initial release
|