Merge sssd from Debian unstable for kinetic

[Bryce Harrington]

Upstream: tbd
Debian: 2.6.3-3
Ubuntu: 2.6.3-1ubuntu3

Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.

### New Debian Changes ###

sssd (2.6.3-3) unstable; urgency=medium

  * tests: Dump the daemon status after restart, hoping to see what the
    error is if it fails to start.
  * rules: Drop --with-ldb-dir, use the default value from the pkgconfig
    file. (Closes: #1009223)

 -- Timo Aaltonen <email address hidden> Sun, 10 Apr 2022 10:57:30 +0300

sssd (2.6.3-2) unstable; urgency=medium

  * rules: Disable lto.
  * Rebuild against current python-defaults. (Closes: #1008583)

 -- Timo Aaltonen <email address hidden> Tue, 29 Mar 2022 10:04:50 +0300

sssd (2.6.3-1) unstable; urgency=medium

  * New upstream release.
  * control: Migrate to PCRE2. (Closes: #999951)
  * Update signing-key.asc.
  * control: Drop python3-click from sssd-tools depends.
  * sssd-tools.install: Updated.
  * tests: Drop RANDFILE from tests/util. (Closes: #1001476)

 -- Timo Aaltonen <email address hidden> Fri, 11 Feb 2022 09:35:43 +0200

sssd (2.6.1-1) unstable; urgency=medium

  * New upstream release.
  * patches: Dropped upstream patches.
  * control: Add libunistring-dev to build-depends.
  * sssd-common.install: Drop libsss_secrets, removed upstream.
  * tools: Add sss_analyze.

 -- Timo Aaltonen <email address hidden> Wed, 17 Nov 2021 20:33:29 +0200

sssd (2.5.2-5) unstable; urgency=medium

  * control: Fix libsemanage-dev build-dep. (Closes: #998634)

 -- Timo Aaltonen <email address hidden> Mon, 08 Nov 2021 21:17:29 +0200

sssd (2.5.2-4) unstable; urgency=medium

  * control: Promote libnss-sss and libpam-sss to sssd-common Depends.
    (Closes: #995730)
  * common: Drop old Breaks/Replaces.

 -- Timo Aaltonen <email address hidden> Mon, 11 Oct 2021 17:46:04 +0300

sssd (2.5.2-3) unstable; urgency=medium

  * rules: Explicitly set sssd-user as root.
  * install: Add sssd-pcsc.rules to -common.
  * postinst: Correct file/dir permissions and ownership when the daemon
    is run as root. (Closes: #994807)
  * 0001-ad-fallback-to-ldap-if-cldap-is-not-available-in-lib.patch: Our
    libldap is built without LDAP_CONNECTIONLESS, cope with that.
    (Closes: #994879)

 -- Timo Aaltonen <email address hidden> Wed, 22 Sep 2021 18:54:07 +0300

sssd (2.5.2-2) unstable; urgency=medium

  * rules: Disable tests for now. (Closes: #994479)

 -- Timo Aaltonen <email address hidden> Mon, 20 Sep 2021 17:38:19 +0300

sssd (2.5.2-1) unstable; urgency=medium

  [ Sergio Durigan Junior ]
  * d/apparmor-profile: Update profile:
    - Extend read permissions to /etc/sssd/conf.d/* and /etc/gss/mech.d/*.
    - Add read/execute permission to /usr/libexec/sssd/*.

  [ Timo Aaltonen ]
  * New upstream release. (Closes: #978904, #992815, #983795)
  * fix-whitespace-test.diff: Refreshed.
  * control, rules: Drop libwbclient-sssd-*, support for it was dropped upstream.
  * fix_newer_autoconf.patch: Don't unset python prefix/exec-prefix.
  * patches: Fix CVE-2021-3621. (Closes: #992710)

 -- Timo Aaltonen <email address hidden> Thu, 16 Sep 2021 14:51:42 +0300

sssd (2.4.1-2) unstable; urgency=medium

  [ Marco Trevisan (Treviño) ]
  * debian/control: Mark test packages as <!nocheck>
    - Add missing test dependencies
    - Enable libcmocka (and so unit tests) all the archs
  * debian/rules:
    - Don't run tests if nocheck is set
    - Enable tests again
  * debian/patches:
    - Get libsofthsm2 from right path for each architecture

  [ Timo Aaltonen ]
  * test_ca-Look-for-libsofthsm2-in-libdir-before-falling-bac.patch:
    Dropped, upstream.

### Old Ubuntu Delta ###

sssd (2.6.3-1ubuntu3) jammy; urgency=medium

  * No-change rebuild with new samba 4.15.5

 -- Andreas Hasenack <email address hidden> Thu, 24 Feb 2022 08:55:08 -0300

sssd (2.6.3-1ubuntu2) jammy; urgency=medium

  * No-change rebuild with new libnfsidmap from src:nfs-utils

 -- Andreas Hasenack <email address hidden> Thu, 17 Feb 2022 10:57:41 -0300

sssd (2.6.3-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946904). Remaining changes:
    - d/rules: Disable lto, not ready upstream.
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/control: Don't build sssd-tools on i386, now uninstallable due
      to added python3-{click,systemd} dependencies.
  * Dropped changes, picked by Debian:
    - Remove RANDFILE from the config template. It's no longer necessary and
      breaks with openssl 3.0.

 -- Sergio Durigan Junior <email address hidden> Mon, 14 Feb 2022 16:21:21 -0500

[Bryce Harrington (bryce)]

There is an upstream fix for LP: #1934997 that sounds like it will be included in sssd 2.7:

  https://github.com/SSSD/sssd/pull/6051

If version 2.7+ is merged in kinetic, please include LP: #1934997 as fixed with that merge. Also evaluate if SRU should be considered for the PR 6051 fix, and target LP: #1934997 accordingly.

[Andreas Hasenack (ahasenack)]

Keep an eye on https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012502, someone reported an auth breakage after the upgrade in debian

[Launchpad Janitor (janitor)]

This bug was fixed in the package sssd - 2.7.1-2ubuntu1

---------------
sssd (2.7.1-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1971327, #1934997). Remaining changes:
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/control: Don't build sssd-tools on i386, now uninstallable due
      to added python3-{click,systemd} dependencies.
  * Dropped changes:
    - d/rules: Disable lto, not ready upstream.
    [ Incorporated by Debian ]

 -- Sergio Durigan Junior <email address hidden> Tue, 14 Jun 2022 16:59:20 -0400