SSSD 2.6.1 Release Notes
Highlights
New features
- New infopipe method
FindByValidCertificate()
which accepts the certificate as input, validates it against configured CAs, and outputs the user path on success. This is similar to the existing FindByCertificate()
, but that does not do any trust validation.
Packaging changes
subid ranges
support was enabled by default.
Configuration changes
- Default value of
ssh_hash_known_hosts
setting was changed to false for the sake of consistency with OpenSSH that does not hash host names by default.
See full release notes here.