Merge sssd from Debian unstable for kinetic

[Sergio Durigan Junior]

Debian released a new minor update to sssd; this bug is meant to track the Ubuntu merge of the package.

[Sergio Durigan Junior (sergiodj)]

Hm, the dep8 tests are failing with the new version of sssd from Debian unstable. I will reassess this merge tomorrow and decide whether it makes sense to proceed with it.

[Andreas Hasenack (ahasenack)]

The LDAP user is known to the system via getent
+ getent passwd testuser1
+ output=

My guess is the new debhelper that manipulates /etc/nsswitch.conf

[Sergio Durigan Junior (sergiodj)]

Filed https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018001 with the reason behind the failure. IMHO the new dh-nss change should be reverted meanwhile, but I don't know if nor when Timo will work on this.

I know we're approaching Feature Freeze, but I will keep this bug open for now. sssd 2.7.3 introduces a change that I believe is useful for our users; maybe an FFe will be justified:

All SSSD client libraries (nss, pam, etc) won’t serialize requests anymore by default, i.e. requests from multiple threads can be executed in parallel. Old behavior (serialization) can be enabled by setting environment variable “SSS_LOCKFREE” to “NO”.

https://sssd.io/release-notes/sssd-2.7.3.html

[Timo Aaltonen (tjaalton)]

feel free to revert it when merging, but I fear it could cause more issues for Debian to revert at this point

[Launchpad Janitor (janitor)]

This bug was fixed in the package sssd - 2.7.3-2ubuntu1

---------------
sssd (2.7.3-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian unstable (LP: #1987348, #1988615). Remaining changes:
    - d/control: Drop libgdm-dev Build-Depend on i386.
    - d/control: Don't build sssd-tools on i386, now uninstallable due
      to added python3-{click,systemd} dependencies.
  * Add changes:
    - Revert dh_nss usage; the feature is still being polished.
      + d/control: Don't Build-Depend on dh-sequence-installnss.
      + d/libnss-sss.nss: Remove file.
      + d/libnss-sss.postinst: Revert changes to use dh-nss.
      + d/libnss-sss.postrm: Likewise.

 -- Sergio Durigan Junior <email address hidden> Tue, 06 Sep 2022 13:56:06 -0400