SSSD 2.4.2 Release Notes
Highlights
General information
- Default value of 'user' config option was fixed into accordance with man page, i.e. default is 'root'
- Example systemd service configs now makes use of CapabilityBoundingSet option as a security hardening measure.
New features
pam_sss_gss
now support authentication indicators to further harden the authentication
Configuration changes
- Added
pam_gssapi_indicators_map
to configure authentication indicators requirements
See full release notes here.