On Thu, Jul 23, 2015 at 10:30:54AM +0100, John Beranek wrote:
So, RHEL 6.7 has been released, but I was surprised at the version
contained in it:
1.12.4-47.el6
That's a relict of how RHEL works. You can only put a new tarball until
a certain point, then you're only allowed to add patches that address a
specific problem or RFE. That guarantees a certain level of stability.
The -47 is "patch number", which means 47 bugs addressed atop 1.12.4. (I
normally use a patch number per bugzilla..)
Does this version have the important fixes in it? I thought 1.12.5 was
required...
1.12.4-47 in RHEL ~= 1.12.5 upstream
Actually here is a diff between my git branch that tracks rhel-6.7 and
the upstream sssd-1-12 branch:
< d119324 Updating version for the 1.12.6 release
< 40f1824 Updating translations for the 1.12.5 release
< 45429eb PROXY: Do not register signal with SA_SIGINFO
< d3ff187 PROXY: proxy_child should work in non-root mode
< c494e10 krb5: new option krb5_map_user
< d788ec2 libwbclient-sssd: update interface to version 0.12
< 1590f8d LDAP: warn about lockout option being deprecated
< 39e33e3 SDAP: use DN to update entry
< fec528a LDAP: return after tevent_req_error
< 79d0c56 SPEC: Fix cyclic dependencies between sssd-{krb5,}-common
< 21d34cf sss_nss_idmap-tests: Use different prepared buffers for big endian
dbb263d simple-access-provider: make user grp res more robust
< 45a089a simple-access-provider: make user grp res more robust
< c61b3f0 sysdb: Add cache_expire to the default sysdb_search_object_by_str_attr
set
< bdb7e7f tests: Use cmocka-1.0+ API in test_sysdb_utils
1d12fff AD GPO: Always look up GPOs from machine domain
< b025f8a AD GPO: Always look up GPOs from machine domain
< 2fb2a26 sudo: sanitize filter values
< 5a4e7bf GPO: Check return value of ad_gpo_store_policy_settings
< 9e030a2 CLIENT: Clear errno with enabled sss-default-nss-plugin
< 010c1c6 IPA: Deprecate the ipa_hbac_treat_deny_as option
< 4df4754 IPA: Only treat malformed HBAC rules as fatal if deny rules
are enabled
< a7c2e66 IPA: Drop useless sysdb parameter
< 319f971 IPA: Use custom error codes when validating HBAC rules
< 2bbf29b RPM: BuildRequire libcmocka >= 1.0
< c37e85b Updating the version for the 1.12.5 release
"left" is upstream and "right" is RHEL. In case a single patch is
included in both branches, git got confused because the patches differ.