SSSD 2.7.1 Release Notes

Highlights

General information

• SSSD can now handle multi-valued RDNs if a unique name must be determined with the help of the RDN.

Important fixes

• A regression in pam_sss_gss module causing a failure if KRB5CCNAME environment variable was not set was fixed.

Packaging changes

• sssd-ipa doesn't require sssd-idp anymore

Configuration changes

• New option implicit_pac_responder to control if the PAC responder is started for the IPA and AD providers, default is true.
• New option krb5_check_pac to control the PAC validation behavior.
• multiple crl_file arguments can be used in the certificate_verification option.

See full release notes here.