sssd-1.5.1-34.AXS4.3

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy services for projects like FreeIPA.
Security issues fixed with this release:
CVE-2010-4341
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
Fixed bugs:
- If the first DNS entry in the /etc/resolv.conf file was unreachable, the sssd utility failed to try to connect to any subsequent DNS server, causing sssd to function in offline mode. This has been fixed.
- If the ldap_default_authtok_type option was not configured, the sssd client terminated. It is now fixed and defaults to "password".
- Previously, if the inotify kernel subsystem returned an error, SSSD terminated unexpectedly and network logins no longer worked. This has been fixed and sssd falls back to the 5-second polling.
- Fixed a segmentation fault that happened when SSSD communicated with an OpenLDAP server supporting server-side password policies but did not have them listed in the "supportedControl" attribute of the server's rootDSE entry.