SSSD 2.7.1 Release Notes
Highlights
General information
- SSSD can now handle multi-valued RDNs if a unique name must be determined with the help of the RDN.
Important fixes
- A regression in
pam_sss_gss
module causing a failure if KRB5CCNAME
environment variable was not set was fixed.
Packaging changes
sssd-ipa
doesn't require sssd-idp
anymore
Configuration changes
- New option
implicit_pac_responder
to control if the PAC responder is started for the IPA and AD providers, default is true
.
- New option
krb5_check_pac
to control the PAC validation behavior.
- multiple
crl_file
arguments can be used in the certificate_verification
option.
See full release notes here.