# SSSD 2.7.1

The SSSD team is proud to announce the release of version 2.7.0 of the System Security Services Daemon. The tarball can be downloaded from: https://github.com/SSSD/sssd/releases/tag/2.7.1

See the full release notes at: https://sssd.io/release-notes/sssd-2.7.1.html

RPM packages will be made available for Fedora shortly.

## Feedback

Please provide comments, bugs and other feedback via the sssd-devel or sssd-users mailing lists: https://lists.fedorahosted.org/mailman/listinfo/sssd-devel https://lists.fedorahosted.org/mailman/listinfo/sssd-users

## Highlights

### General information

* SSSD can now handle multi-valued RDNs if a unique name must be determined with the help of the RDN.

### Important fixes

* A regression in `pam_sss_gss` module causing a failure if `KRB5CCNAME` environment variable was not set was fixed.

### Packaging changes

* `sssd-ipa` doesn't require `sssd-idp` anymore

### Configuration changes

* New option `implicit_pac_responder` to control if the PAC responder is started for the IPA and AD providers, default is `true`. * New option `krb5_check_pac` to control the PAC validation behavior. * multiple `crl_file` arguments can be used in the `certificate_verification` option.