Bug 1213822
| Summary: | Overrides with --login work in second attempt | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Steeve Goveas <sgoveas> | |
| Component: | sssd | Assignee: | Sumit Bose <sbose> | |
| Status: | CLOSED ERRATA | QA Contact: | Kaushik Banerjee <kbanerje> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | medium | |||
| Version: | 6.7 | CC: | drieden, grajaiya, jgalipea, jhrozek, lslebodn, mkosek, mzidek, nsoman, pbrezina, preichl, sbose | |
| Target Milestone: | rc | |||
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | sssd-1.12.4-38.el6 | Doc Type: | Bug Fix | |
| Doc Text: |
Do not document
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 1214337 1214717 (view as bug list) | Environment: | ||
| Last Closed: | 2015-07-22 06:44:14 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 1214337, 1214717 | |||
Upstream ticket: https://fedorahosted.org/sssd/ticket/2630 Fixed upstream:
master: 2ab9a4538eb2e1a255e645f7efdcfd6bb722d265
sssd-1-12: 3453e4734d2f7738034af61edb7d33c0c7095d8a
A segfault caused by the patch was found. resetting the status to ASSIGNED. Additional patch landed upstream
master: c520f40d1a2d77cf1d413451b5682297733521ed
sssd-1-12: e31d5babfd036cf64c9179dc60bbd79f541ef89b
Verified in version
[root@ibm-x3250m4-04 ~]# rpm -q sssd ipa-client
sssd-1.12.4-38.el6.x86_64
ipa-client-3.0.0-46.el6.x86_64
On server
[root@sideswipe ~]# ipa idoverrideuser-add 'default trust view' aduser07 --login syncuser07
-------------------------------------------
Added User ID override "aduser07"
-------------------------------------------
Anchor to override: aduser07
User login: syncuser07
[root@sideswipe ~]# ipa idoverrideuser-add 'default trust view' aduser1.qe --login puser1
-----------------------------------------------
Added User ID override "aduser1.qe"
-----------------------------------------------
Anchor to override: aduser1.qe
User login: puser1
[root@sideswipe ~]# ipa idview-show hostview --show-hosts
ID View Name: hostview
Hosts the view applies to: vm-idm-018.ipaviews.test
[root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service sssd start
Redirecting to /bin/systemctl stop sssd.service
Redirecting to /bin/systemctl start sssd.service
On client 1 with default trust view
[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07
syncuser07:*:1148405487:1148405487:ads07 user:/home/adtest.qe/aduser07:
[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@ibm-x3250m4-04 ~]# id syncuser07
uid=1148405487(syncuser07) gid=1148405487(syncuser07) groups=1148405487(syncuser07),1902400021(hbacgroup),1148400513(domain users)
[root@ibm-x3250m4-04 ~]# id puser1.qe
uid=839001130(puser1.qe) gid=839001130(puser1.qe) groups=839001130(puser1.qe),1148402424(adunigroup1),839000513(domain users.qe)
[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@ibm-x3250m4-04 ~]# getent passwd puser1.qe
puser1.qe:*:839001130:839001130:ads1 user:/home/pune.adtest.qe/aduser1:
On client 2 with empty non-default trust view
[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@vm-idm-018 ~]# id syncuser07
uid=1148405487(syncuser07) gid=1148405487(syncuser07) groups=1148405487(syncuser07),1902400021(hbacgroup),1148400513(domain users)
[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@vm-idm-018 ~]# id puser1.qe
uid=839001130(puser1.qe) gid=839001130(puser1.qe) groups=839001130(puser1.qe),839000513(domain users.qe)
[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Stopping sssd: [ OK ]
Starting sssd: [ OK ]
[root@vm-idm-018 ~]# getent passwd puser1.qe
puser1.qe:*:839001130:839001130:ads1 user:/home/pune.adtest.qe/aduser1:
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-1448.html |
Description of problem: With an empty cache idoverride for a ad user with --login works on second attempt Version-Release number of selected component (if applicable): [root@ibm-x3250m4-04 ~]# rpm -q sssd ipa-client sssd-1.12.4-29.el6.x86_64 ipa-client-3.0.0-46.el6.x86_64 How reproducible: always Steps to Reproduce: On Server [root@sideswipe ~]# ipa idoverrideuser-add 'default trust view' aduser07 --login syncuser07 ------------------------------------------- Added User ID override "aduser07" ------------------------------------------- Anchor to override: aduser07 User login: syncuser07 [root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service sssd start Redirecting to /bin/systemctl stop sssd.service Redirecting to /bin/systemctl start sssd.service On Client1 [root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start Stopping sssd: [ OK ] Starting sssd: [ OK ] [root@ibm-x3250m4-04 ~]# getent passwd syncuser07 ; echo $? 2 [root@ibm-x3250m4-04 ~]# getent passwd syncuser07 ; echo $? syncuser07:*:1148405487:1148405487:ads07 user:/home/adtest.qe/aduser07: 0 On Client2 [root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start Stopping sssd: [ OK ] Starting sssd: [ OK ] [root@vm-idm-018 ~]# getent passwd syncuser07 ; echo $? 2 [root@vm-idm-018 ~]# getent passwd syncuser07 ; echo $? syncuser07:*:1148405487:1148405487:ads07 user:/home/adtest.qe/aduser07: 0 Additional info: If a different view is applied to one of the clients getent works as expected On Server [root@sideswipe ~]# ipa idview-show hostview --show-hosts ID View Name: hostview User object overrides: aduser2 Group object overrides: grp1 [root@sideswipe ~]# ipa idview-apply hostview --hosts vm-idm-018.ipaviews.test -------------------------- Applied ID View "hostview" -------------------------- hosts: vm-idm-018.ipaviews.test --------------------------------------------- Number of hosts the ID View was applied to: 1 --------------------------------------------- [root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service sssd start Redirecting to /bin/systemctl stop sssd.service Redirecting to /bin/systemctl start sssd.service On Client1 [root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start Stopping sssd: [ OK ] Starting sssd: [ OK ] [root@ibm-x3250m4-04 ~]# getent passwd syncuser07 ; echo $? 2 [root@ibm-x3250m4-04 ~]# getent passwd syncuser07 ; echo $? syncuser07:*:1148405487:1148405487:ads07 user:/home/adtest.qe/aduser07: 0 Works on Client2 [root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start Stopping sssd: [ OK ] Starting sssd: [ OK ] [root@vm-idm-018 ~]# getent passwd syncuser07 ; echo $? syncuser07:*:1148405487:1148405487:ads07 user:/home/adtest.qe/aduser07: 0