sssd 2.5.1 Release Notes

Highlights

New features

• auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer.

Important fixes

• Fix getsidbyname issues with IPA users with a user-private-group

Configuration changes

• Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration.

See full release notes here.