Releases: simp/pupmod-simp-sssd
Release of 7.1.1
- Add an override for sssd-sudo.service to start it as root:root. This aligns
with how sssd itself would start the service and the daemon cannot access
/var/lib/sss/db/config.ldb otherwise.
Release of 7.1.0
- Removed support for Puppet 5
- Ensured support for Puppet 7 in requirements and stdlib
Release of 7.0.1
- Fixed:
- sssd-sudo.socket service
Release of 7.0.0
- Fixed:
sssd::provider::ldap::ldap_pwd_policy
is based on the value in
ldap_account_expire_policy
to properly account for non-shadow systemssssd::provider::ldap::ldap_access_order
is set to the modern set- A typo in the
sssd::LdapAccountExpirePol
data type was fixed - Ported the krb5 ERB template to EPP and fixed a typo
- Removed:
sssd::manage_service
- obsoletesssd::ldap_access_order_defaults()
- obsolelte- Removed EL6-only artifacts
- Removed the
LOCAL
domain - Support for Puppet 5 was dropped
- Changed:
- Fail if a version of
sssd
is being managed < 1.16.0 - Now use the
/etc/sssd/conf.d
directory instead ofconcat
- The
sssd::service
class is now private - Moved the
/etc/sssd
directory configuration intosssd::config
- Fail if a version of
- Added:
sssd::config::entry
defined type which allows consistent management of
permissions and dependencies on config files- Users can set
sssd::custom_config
to aString
that will be placed into
/etc/sssd/conf.d/zz_puppet_custom.conf
- Allow users to optionally purge the
/etc/sssd/conf.d
directory (disabled
by default) - Trigger the
sssd-sudo.socket
service instead of including the service in
the main configuration per thesssd
documentation and error messages in
the logs - Support for puppetlabs/stdlib 7 was added
Release of 6.4.0
- Ensure that systems bound to FreeIPA, but not connected do not cause
compilation issues. - Removed EL6 from supported OSes
- Added puppet 7 support
-----BEGIN PGP SIGNATURE-----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=8mG5
-----END PGP SIGNATURE-----
Release of 6.3.1
* Thu Apr 23 2020 Trevor Vaughan <[email protected]> - 6.3.1-0 - Ensure that EL6/7+ use the 'files' or 'local' provider as is appropriate for their platform - Migrate the documentation to focus on the 'files' provider since 'local' is not recommended to be used any longer - Fixed the core acceptance tests
Release of 6.3.0
* Tue Jan 21 2020 Jeanne Greulich <[email protected]> - 6.3.0-0 - Added EL8 support - Removed requirement for sssd domain entry for el8 and SSSD V2 since using the implicit files provider is valid and even recommended for performance by some. An sssd domain is still required for el6 and el7. - Automatically include the service section if the service is included in sssd::services. - Removed deprecated variables from ldap provider for EL8. - Added new variables for providers in EL8. - Added ifp to list of services in service type - Added files to types of providers - Added support for simplib version 4.0
Release of 6.2.0
* Tue Jun 04 2019 steven.pritchard <[email protected]> - 6.2.0-0 - Add v2 compliance_markup data
Release of 6.1.6
* Thu Mar 14 2019 Trevor Vaughan <[email protected]> - 6.1.6-0 - Fix the Active Directory tests * Mon Mar 04 2019 Liz Nemsick <[email protected]> - 6.1.6-0 - Expanded the upper limit of the stdlib Puppet module version - Updated URLs in the README.md
Release of 6.1.5
* Fri Feb 22 2019 Trevor Vaughan <[email protected]> - 6.1.5-0 - Change the sssd::provider::ldap::ldap_access_order defaults to ['ppolicy','pwd_expire_policy_renew'] by default to prevent accidental system lockouts on upgrade.