[FFe] Merge sssd 2.7.3-2 from Debian unstable

Bug #1988615 reported by Sergio Durigan Junior
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sssd (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

sssd 2.7.3 was released back in July and brings an important improvement to users, as can be seen in its changelog:

https://github.com/SSSD/sssd/releases/tag/2.7.3

"All SSSD client libraries (nss, pam, etc) won't serialize requests anymore by default, i.e. requests from multiple threads can be executed in parallel. Old behavior (serialization) can be enabled by setting environment variable "SSS_LOCKFREE" to "NO"."

Debian unstable is carrying this upstream version, but with a major modification on how the package handles the /etc/nsswitch.conf file. There is a new dh sequencer called "dh-nss" which aims at making the /etc/nsswitch.conf update process smoother, but there are a few rough edges that are being sorted out and, for that reason, I don't consider it stable enough to be shipped in Ubuntu yet. I intend to revert the dh-nss change for now and carry it as a delta. I have been working with the dh-nss maintainer in order to be able to have a stable sssd for next cycle.

Although the dh-nss changes will be reverted, I intend to include the following two changes that were added together with the dh-nss one:

- The maintainer scripts now honour $DPKG_ROOT (https://salsa.debian.org/sssd-team/sssd/-/commit/62b8a467711b0edac5a679742219b3a2cc07fe6b)
- Use "automount" instead of the deprecated "automounter" on /etc/nsswitch.conf (https://salsa.debian.org/sssd-team/sssd/-/commit/4ded9ab2187fa7be963cbc844139ace79d1d25ba)

Aside from the Debian-specific changes mentioned above, there is also a list of changes implemented by upstream on this release.

Alexey Tikhonov (8):
    abc2ae569 PAM P11: fixed mistype in a log message
## Minor.
    aec973314 PAM P11: fixed minor mem-leak
## Minor.
    f0609d82c PAM: user feedback when login fails due to blocked PIN
## Medium. The change revolves around improving error checking/messaging and not a new feature.
    c7918bef5 CLIENT: use thread local storage for socket to avoid the need for a lock.
## Medium. This is the feature I would like to bring in.
    455940d93 SSS_CLIENT: mem-cache: fixed missing error code
## Minor.
    ddcf9a06d SSS_CLIENT: got rid of code duplication
## Minor.
    0a8a5b6c2 TESTS: test_memory_cache: execute NSS functions in teardown to force sss_client libs to realize mem-cache files were deleted
## Test related.
    ab749f02d confdb: supress false positive warning: src/confdb/confdb.c:260:10: warning[-Wanalyzer-use-of-uninitialized-value]: use of uninitialized value 'secdn'
## Build-time related.

Anuj Borah (2):
    a694a2064 Tests: Add automation for bz 2056035
## Test related.
    ff67197ae Tests: sssd runs out of proxy child slots and doesn't clear the counter for Active requests
## Test related.

Elena Mishina (1):
    3678f40b4 po: update translations
## i18n related.

Iker Pedrosa (3):
    42e4bbfff CI: update python dependencies to version 3
## CI related.
    3bf58985a CI: build debian without python 2 bindings
## CI related.
    289ff0ca2 Fix E226 reported by flake8
## Minor.

Jakub Vavra (4):
    490b23bef Tests: Fix/finish Sasl authid tests, minor tweak to hostname test.
## Test related.
    ae400d259 Fix some flake 8 violations
## Minor.
    0b0fdb667 Tests: Add a test for bz2026799 bz2070138
## Test related.
    17c60bb84 Tests: Extend test to cover bz2098615.
## Test related.

Kemal Oktay Aktoğan (2):
    2b62330c0 po: update translations
## i18n related.
    590ff9067 po: update translations
## i18n related.

Pavel Březina (9):
    5d39cd5c5 tests: fix pep8 issues
## Test related.
    b7893b9a5 ci: switch to debian-latest
## CI related.
    7f71eec46 ci: upload test-suite.log as an artifact
## CI related.
    7f30777ea intgcheck: mark files provider tests as flaky
## Test related.
    446002b9a sbus: ensure single new line at end of file
## Minor.
    440076ebb sbus: apply changes in codegen
## Minor.
    1861d4342 pot: update translations
## i18n related.
    acfec6130 pot: update translations
## i18n related.
    160bbf488 Release sssd-2.7.2

The new sssd package builds fine on Kinetic, as can be seen here:

https://launchpad.net/~sergiodj/+archive/ubuntu/sssd-merge/+packages

Its reverse Build-Depends are:

* autofs (for sssd-common)
* freeipa (for python3-libsss-nss-idmap)
* freeipa (for python3-sss)
* freeipa (for python3-libipa-hbac)
* slapi-nis (for libsss-nss-idmap-dev)

They also build fine against the new sssd:

https://launchpad.net/~sergiodj/+archive/ubuntu/sssd-merge-kinetic/+packages

The autopkgtest results for the new sssd are also passing:

Results: (from http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/?format=plain)
  sssd @ amd64:
    http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/kinetic/amd64/s/sssd/20220903_042948_718f7@/log.gz
    03.09.22 04:29:48 ✅ Triggers: sssd/2.7.3-2ubuntu1~ppa2
  sssd @ arm64:
    http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/kinetic/arm64/s/sssd/20220903_043150_f85a9@/log.gz
    03.09.22 04:31:50 ✅ Triggers: sssd/2.7.3-2ubuntu1~ppa2
  sssd @ armhf:
    http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/kinetic/armhf/s/sssd/20220903_044318_5af0f@/log.gz
    03.09.22 04:43:18 ✅ Triggers: sssd/2.7.3-2ubuntu1~ppa2
  sssd @ ppc64el:
    http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/kinetic/ppc64el/s/sssd/20220903_042902_f85a9@/log.gz
    03.09.22 04:29:02 ✅ Triggers: sssd/2.7.3-2ubuntu1~ppa2
  sssd @ s390x:
    http://autopkgtest.ubuntu.com/results/autopkgtest-kinetic-sergiodj-sssd-merge/kinetic/s390x/s/sssd/20220903_042643_68c49@/log.gz
    03.09.22 04:26:43 ✅ Triggers: sssd/2.7.3-2ubuntu1~ppa2

Related branches

description: updated
description: updated
Revision history for this message
Steve Langasek (vorlon) wrote :

LGTM, thanks

Changed in sssd (Ubuntu):
status: New → Confirmed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package sssd - 2.7.3-2ubuntu1

---------------
sssd (2.7.3-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1987348, #1988615). Remaining changes:
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/control: Don't build sssd-tools on i386, now uninstallable due
      to added python3-{click,systemd} dependencies.
  * Add changes:
    - Revert dh_nss usage; the feature is still being polished.
      + d/control: Don't Build-Depend on dh-sequence-installnss.
      + d/libnss-sss.nss: Remove file.
      + d/libnss-sss.postinst: Revert changes to use dh-nss.
      + d/libnss-sss.postrm: Likewise.

 -- Sergio Durigan Junior <email address hidden> Tue, 06 Sep 2022 13:56:06 -0400

Changed in sssd (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.