What's Changed
- [autobackport: sssd-2-9] Config rules: allow 'ldap_subuid_*' attrs by @sssd-bot in #8404
- CHILD HELPERS: use less severe debug level -- sssd-2.9 backport by @alexey-tikhonov in #8433
- [autobackport: sssd-2-9] man: add details about 'an2ln' by @sssd-bot in #8434
- [autobackport: sssd-2-9] Test: Update misc ipa tests to work correctly on stig by @sssd-bot in #8424
- [autobackport: sssd-2-9] sdap: do not require GID for non-POSIX group by @sssd-bot in #8455
- [autobackport: sssd-2-9] Bunch of assorted perf improvements of hot path functions by @sssd-bot in #8458
- [autobackport: sssd-2-9] Fix compilation errors by @sssd-bot in #8476
- [autobackport: sssd-2-9] tests: Fix test_sudo__case_sensitive_false: use /bin/ls and /bin/cat instead of less/more by @sssd-bot in #8478
- [autobackport: sssd-2-9] sdap: eliminate O(N^2) loop in
sdap_add_incomplete_groups()by @sssd-bot in #8477 - [autobackport: sssd-2-9] LDAP: free tmp var within the loop by @sssd-bot in #8488
- [autobackport: sssd-2-9] ci: bump actions/upload-artifact from 6 to 7 by @sssd-bot in #8499
- [autobackport: sssd-2-9] memberOf plugin :: mbof_add_operation() optimizations by @sssd-bot in #8507
- [autobackport: sssd-2-9] Use macro rather than shell expansion for string processing in spec file by @sssd-bot in #8520
- [autobackport: sssd-2-9] KRB5: fix mem leak in
authenticate_stored_users()by @sssd-bot in #8537 - [autobackport: sssd-2-9] SDAP: reduce logger load in the hot paths by @sssd-bot in #8549
- [autobackport: sssd-2-9] KRB5: log level adjusted by @sssd-bot in #8550
- [autobackport: sssd-2-9] adding subid test by @sssd-bot in #8294
- [autobackport: sssd-2-9] Generalize combined user and group lookup by @sssd-bot in #8526
- [autobackport: sssd-2-9] memberOf plugin:
mbof_append_muop()optimization by @sssd-bot in #8560 - [autobackport: sssd-2-9] memberOf plugin: avoid
ldb_dn_compare()inmbof_append_addop()by @sssd-bot in #8559 - [autobackport: sssd-2-9] ci: bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by @sssd-bot in #8576
- [autobackport: sssd-2-9] KCM: fix use-after-free in
kcm_read_options()by @sssd-bot in #8594 - [autobackport: sssd-2-9] Fix contents of release tarball by @sssd-bot in #8593
- Tests: Add sleep time in multihost test by @madhuriupadhye in #8597
- [autobackport: sssd-2-9] Fix spelling in AD provider code comments by @sssd-bot in #8589
- [autobackport: sssd-2-9] Improve the performance when using enumeration by @sssd-bot in #8558
- [autobackport: sssd-2-9] Add missing include by @sssd-bot in #8603
- [autobackport: sssd-2-9] Automatically generate release notes when creating new release by @sssd-bot in #8598
- [backport] Tests: Housekeeping and Clean Sweep of Sevice/Logging suite by @jakub-vavra-cz in #8609
- [autobackport: sssd-2-9] pam: apply SIDs from PAC to authentication indicators by @sssd-bot in #8618
- [autobackport: sssd-2-9] dp_target_id.c: Fix typo "lenght" -> "length" by @sssd-bot in #8627
- [autobackport: sssd-2-9] pam: fix out-of-bounds read in pam_passkey_child_read_data by @sssd-bot in #8623
- [autobackport: sssd-2-9] pam: gate PAC indicator code on BUILD_SAMBA by @sssd-bot in #8628
- [autobackport: sssd-2-9] More trivial spelling/grammatical fixes by @sssd-bot in #8600
- [autobackport: sssd-2-9] IPA: memory leak fixed by @sssd-bot in #8637
- [autobackport: sssd-2-9] tests: mark KCM TGT renewal test as flaky by @sssd-bot in #8642
- [autobackport: sssd-2-9] tests: reorganize infopipe tests by interface by @sssd-bot in #8460
- [autobackport: sssd-2-9] tests: poll for KCM TGT renewal instead of fixed sleep by @sssd-bot in #8656
- Translations update from Fedora Weblate by @weblate in #8539
Full Changelog: 2.9.8...2.9.9