sssd-1.16.0-19.el7.8

The System Security Services Daemon (SSSD) service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch (NSS) and the Pluggable Authentication Modules (PAM) interfaces toward the system, and a pluggable back-end system to connect to multiple different account sources.

This update fixes the following bugs:

* Starting with an update in Asianux Server 7.5, OpenSSH only read public keys from a helper binary, such as sss_ssh_authorizedkeys, until the first match and then it closed the pipe towards the helper. As a consequence, unless the helper was prepared for this change, closing the pipe would generate a SIGPIPE signal, which would then cause reading the keys in OpenSSH to terminate unexpectedly. With this update, the sss_ssh_authorizedkeys helper has been enhanced to ignore the SIGPIPE signal. As a result, reading public SSH keys works again even for entries with many keys stored in the user object.

Note that this bug would only occur in setups that store many SSH public keys in a user entry. (BZ#1594178)

* Previously, when searching for a per-user group, the SSSD service used the Global Catalog (GC) connection instead of the LDAP connection. As a consequence, some attributes have been removed from the sssd cache because GC does not contain all of them, for example the home directory value. With this update, SSSD now uses the LDAP connection when searching user-private groups. As a result, the described problem no longer occurs. (BZ#1596292)

* Previously, if a Fleet Commander profile was not saved, the whole operation that saves profiles terminated unexpectedly. As a consequence, in case at least one profile was broken, no other profiles were applied. With this update, corrupted profiles are skipped. The correct profiles are saved and can be applied later. (BZ#1601360)

Users of sssd are advised to upgrade to these updated packages, which fix these bugs.