Revert reverted patch with change owner/permissions of user deskprofile path

Update to 2.6.1 stable release.
Revert "Don't change owner/permissions of user deskprofile path" patch

Update to 2.6.0 (with upstream fixes from master - 7bfdd3db8e4c).
Security issue in the sssctl command - shell command injection via the
fetch and cache-expire subcommands (fixes: CVE-2021-3621).
pam_sss: Allow offline authentication against non-ipa-desktopprofiles aware DC
Add filter for Active Directory trusted domains which are not trusted (one-way

FTBFS: disable LTO

Update to 2.5.2:

Update to 2.5.0:
provider, libwbclient, pcre1.

Apply internal, domain and service fixes from upstream.
Add compatibility support of unprivileged mode with "user = _sssd"
2.4.2 default user is set to root.

Update to 2.4.2
Add CapabilityBoundingSet option as a security hardening measure

Update authentication features:

Fixate that upstream fixed the memory leak in the
20210209-0001)

Update to 2.4.1
Add PAM module pam_sss_gss for authentication using GSSAPI

Add krb5_use_subdomain_realm=True to support upnSuffixes for trusted domains
Allow to set case_sensitive=Preserving in subdomain section
Add auto_private_groups to subdomain_inherit
Add /var/lib/sss/.cache directory for gencache.tdb using samba gpo libraries

Reapply patch with ignore GPO if SecEdit/GptTmpl.inf is missing

Update to 2.4.0

Update to 2.3.1
Remove derecated libwbclient-sssd

Rebuild with libldb-2.0.12