Back to bug 1313940

Who When What Removed Added
Kaleem 2016-03-02 16:22:46 UTC Keywords Regression, TestBlocker
Lukas Slebodnik 2016-03-02 16:45:46 UTC Assignee sssd-maint pbrezina
Aneta Šteflová Petrová 2016-03-02 16:50:51 UTC Doc Text Cause:

Consequence:

Workaround (if any)

Result:
Doc Type Bug Fix Known Issue
Flags needinfo?(pbrezina)
Aneta Šteflová Petrová 2016-03-03 07:09:03 UTC Docs Contact apetrova
Pavel Březina 2016-03-04 09:44:30 UTC Status NEW ASSIGNED
Pavel Březina 2016-03-04 10:07:40 UTC Status ASSIGNED NEW
Doc Text Cause:

Consequence:

Workaround (if any)

Result:
Cause: FreeIPA versions older than 3.1 uses different format of ipasudocmd DN.

Consequence: SSSD was unable to store sudo rules correctly when id_provider = ipa.

Workaround (if any): Set ipa_sudocmd_uuid=sudoCmd in domain section of sssd.conf.

Result:
Flags needinfo?(pbrezina)
Aneta Šteflová Petrová 2016-03-04 10:20:03 UTC Doc Text Cause: FreeIPA versions older than 3.1 uses different format of ipasudocmd DN.

Consequence: SSSD was unable to store sudo rules correctly when id_provider = ipa.

Workaround (if any): Set ipa_sudocmd_uuid=sudoCmd in domain section of sssd.conf.

Result:
SSSD unable to store sudo rules correctly when id_provider = ipa is set

Identity Management versions 3.0 and previous use different format for the *ipasudocmd* distinguished name (DN). Consequently, SSSD cannot store *sudo* rules correctly when the *id_provider* option is set to *ipa* in the `/etc/sssd/sssd.conf` file. To work around this problem, add the *ipa_sudocmd_uuid=sudoCmd* setting to the `[domain]` section of `sssd.conf`.
Flags needinfo?(pbrezina)
Dalibor Pospíšil 2016-03-04 10:32:09 UTC CC dapospis
Blocks 1310769
Pavel Březina 2016-03-04 10:43:50 UTC Flags needinfo?(pbrezina)
Namita Soman 2016-03-09 16:12:30 UTC CC nsoman
Tom Lavigne 2016-03-09 17:52:19 UTC CC tlavigne
Jakub Hrozek 2016-03-14 17:08:28 UTC Status NEW POST
Jakub Hrozek 2016-03-14 20:23:01 UTC Status POST MODIFIED
Fixed In Version sssd-1.13.3-19.el6
errata-xmlrpc 2016-03-14 20:25:55 UTC Status MODIFIED ON_QA
Kaleem 2016-03-16 07:59:58 UTC Status ON_QA ASSIGNED
Martin Kosek 2016-03-17 12:40:19 UTC Status ASSIGNED MODIFIED
Fixed In Version sssd-1.13.3-19.el6 sssd-1.13.3-21.el6
errata-xmlrpc 2016-03-17 13:05:57 UTC Status MODIFIED ON_QA
Kaleem 2016-03-23 08:50:56 UTC Flags needinfo?(pbrezina)
Pavel Březina 2016-03-24 13:15:52 UTC Flags needinfo?(pbrezina)
Kaleem 2016-03-29 12:24:45 UTC Status ON_QA VERIFIED
Aneta Šteflová Petrová 2016-04-21 08:37:25 UTC Doc Text SSSD unable to store sudo rules correctly when id_provider = ipa is set

Identity Management versions 3.0 and previous use different format for the *ipasudocmd* distinguished name (DN). Consequently, SSSD cannot store *sudo* rules correctly when the *id_provider* option is set to *ipa* in the `/etc/sssd/sssd.conf` file. To work around this problem, add the *ipa_sudocmd_uuid=sudoCmd* setting to the `[domain]` section of `sssd.conf`.
SSSD stores sudo rules correctly when id_provider = ipa is set

Identity Management versions 3.0 and previous use different format for the `ipasudocmd` distinguished name (DN). Consequently, the System Security Services Daemon (SSSD) service was unable to store *sudo* rules correctly when the `id_provider` option was set to `ipa` in the `/etc/sssd/sssd.conf` file. This update fixes the problem.
Doc Type Known Issue Bug Fix
Flags needinfo?(pbrezina)
Pavel Březina 2016-04-21 09:04:16 UTC Flags needinfo?(pbrezina)
Aneta Šteflová Petrová 2016-04-22 06:57:52 UTC Doc Text SSSD stores sudo rules correctly when id_provider = ipa is set

Identity Management versions 3.0 and previous use different format for the `ipasudocmd` distinguished name (DN). Consequently, the System Security Services Daemon (SSSD) service was unable to store *sudo* rules correctly when the `id_provider` option was set to `ipa` in the `/etc/sssd/sssd.conf` file. This update fixes the problem.
SSSD stores sudo rules correctly when id_provider = ipa is set

Identity Management version 3.0 and previous use different format for the `ipasudocmd` distinguished name (DN). Consequently, the System Security Services Daemon (SSSD) service was unable to store *sudo* rules correctly when the `id_provider` option was set to `ipa` in the `/etc/sssd/sssd.conf` file. This update fixes the problem, and *sudo* rules now work as expected in the described situation.
Aneta Šteflová Petrová 2016-04-22 11:58:02 UTC Doc Text SSSD stores sudo rules correctly when id_provider = ipa is set

Identity Management version 3.0 and previous use different format for the `ipasudocmd` distinguished name (DN). Consequently, the System Security Services Daemon (SSSD) service was unable to store *sudo* rules correctly when the `id_provider` option was set to `ipa` in the `/etc/sssd/sssd.conf` file. This update fixes the problem, and *sudo* rules now work as expected in the described situation.
SSSD stores sudo rules correctly when `id_provider = ipa` is set

Identity Management version 3.0 and previous use different format for the `ipasudocmd` distinguished name (DN). Consequently, the System Security Services Daemon (SSSD) service was unable to store *sudo* rules correctly when the `id_provider` option was set to `ipa` in the `/etc/sssd/sssd.conf` file. This update fixes the problem, and *sudo* rules now work as expected in the described situation.
errata-xmlrpc 2016-05-09 18:20:32 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-05-10 20:26:51 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-05-10 16:26:51 UTC
Pavel Březina 2020-05-02 18:19:40 UTC Link ID Github SSSD/sssd/issues/4010

Back to bug 1313940