Recommended update for sssd

SUSE Recommended Update: Recommended update for sssd
Announcement ID: SUSE-RU-2018:3086-1
Rating: moderate
References: #1082568 #1109291 #990288
Affected Products:
  • SUSE Linux Enterprise Software Development Kit 11-SP4
  • SUSE Linux Enterprise Server 11-SP4
  • SUSE Linux Enterprise Server 11-SECURITY
  • SUSE Linux Enterprise Debuginfo 11-SP4

An update that has three recommended fixes can now be installed.

Description:

This update for provides the following fixes:

  • Fix a problem with the caching of groups that could cause lookups to return an incomplete set of groups for some particular users when connecting to a Active Directory domain. (bsc#1082568)

This updates also brings an additional sssd-openssl1 variant for the SLE11 Security Module.
This allows using sssd in TLS 1.2 environments. (FATE#321222 bsc#990288 bsc#1109291)
To enable it, install the "sssd-openssl1" package instead of "sssd".

Patch Instructions:

To install this SUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Software Development Kit 11-SP4:
    zypper in -t patch sdksp4-sssd-13811=1
  • SUSE Linux Enterprise Server 11-SP4:
    zypper in -t patch slessp4-sssd-13811=1
  • SUSE Linux Enterprise Server 11-SECURITY:
    zypper in -t patch secsp3-sssd-13811=1
  • SUSE Linux Enterprise Debuginfo 11-SP4:
    zypper in -t patch dbgsp4-sssd-13811=1

Package List:

  • SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • libsss_idmap-devel-1.9.4-0.34.12.1
    • libsss_sudo-devel-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • libsss_idmap0-1.9.4-0.34.12.1
    • python-sssd-config-1.9.4-0.34.12.1
    • sssd-1.9.4-0.34.12.1
    • sssd-tools-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64):
    • sssd-32bit-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11-SECURITY (i586 ia64 ppc64 s390x x86_64):
    • python-sssd-config-openssl1-1.9.4-0.34.12.1
    • sssd-openssl1-1.9.4-0.34.12.1
    • sssd-openssl1-tools-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11-SECURITY (ppc64 s390x x86_64):
    • sssd-openssl1-32bit-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Server 11-SECURITY (ia64):
    • sssd-openssl1-x86-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64):
    • sssd-debuginfo-1.9.4-0.34.12.1
    • sssd-debugsource-1.9.4-0.34.12.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64 s390x x86_64):
    • sssd-debuginfo-32bit-1.9.4-0.34.12.1

References: