Comment 10 for bug 1919563

Revision history for this message
Robie Basak (racb) wrote : Re: [Bug 1919563] Re: updated sssd with smart cards now brick systems without full cert chain

On Thu, Mar 18, 2021 at 02:14:23AM -0000, Karl Grindley wrote:
> I'll also comment, (and perhaps a bit of scope creap, but...) we've
> found a number of unfixed issues with sssd, specifically with PKINIT and
> LDAP optimizations. We're working with the upstream maintainers to help
> address these. We would like to see these brought into 20.04 LTS, as
> all directory users can benefit here. Are you or Marco the best to help
> us bring these into a general release down the road?

Your assistance in getting fixes landed would be most welcome!

We do have to take great care to minimise risk of regression to existing
users of course, as you've very well demonstrated in this bug :)

Our process for getting fixes in is documented at
https://wiki.ubuntu.com/StableReleaseUpdates. Assuming that based on
that policy and the specifics of the fixes, cherry-picks are most
appropriate, the main steps would be to have a bug for each issue, get
the Ubuntu development release fixed, and then prepare an update for
20.04. https://wiki.ubuntu.com/StableReleaseUpdates#Procedure has the
details. You can do most of this yourself, and we'd be happy to help
with sponsorship and any rough edges in the process.

You can reach us on the ubuntu-devel@ mailing list
(https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel) or
#ubuntu-devel on Freenode on IRC.