SSSD 2.4.2 Release Notes

Highlights

General information

• Default value of 'user' config option was fixed into accordance with man page, i.e. default is 'root'
• Example systemd service configs now makes use of CapabilityBoundingSet option as a security hardening measure.

New features

• pam_sss_gss now support authentication indicators to further harden the authentication

Configuration changes

• Added pam_gssapi_indicators_map to configure authentication indicators requirements

See full release notes here.