Bug 1214716

Summary: idoverridegroup for ipa group with --group-name does not work
Product: Red Hat Enterprise Linux 7 Reporter: Martin Kosek <mkosek>
Component: sssdAssignee: SSSD Maintainers <sssd-maint>
Status: CLOSED ERRATA QA Contact: Kaushik Banerjee <kbanerje>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 7.1CC: grajaiya, jgalipea, jhrozek, kbanerje, lslebodn, mkosek, mzidek, nsoman, pbrezina, preichl, sbose, sgoveas, sumenon
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: sssd-1.13.0-0.1.alpha.el7 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1213716 Environment:
Last Closed: 2015-11-19 11:38:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1213716    
Bug Blocks:    

Comment 1 Jakub Hrozek 2015-04-24 14:23:20 UTC
Upstream ticket:
https://fedorahosted.org/sssd/ticket/2631

Comment 2 Jakub Hrozek 2015-04-27 13:54:15 UTC
Fixed upstream:
    master: 605dc7fcc848dffb7c9d270c864c70e6dff1242e
    sssd-1-12: 1b2119aab14a4ea3ca6de0d29a661b2825bfec8d

Comment 6 Sudhir Menon 2015-09-29 14:02:29 UTC
Added members to the group and they are listed in getent output.

[root@ipa02 sssd]# ipa idview-add
ID View Name: hostview
------------------------
Added ID View "hostview"
------------------------
  ID View Name: hostview
[root@ipa02 sssd]# ipa idoverridegroup-add
ID View Name: hostview
Anchor to override: ipagrp2@test.in
-----------------------------------------
Added Group ID override "ipagrp2@test.in"
-----------------------------------------
  Anchor to override: ipagrp2@test.in
[root@ipa02 sssd]# ipa idview-apply hostview --hosts ipaclient02.labs02.test
--------------------------
Applied ID View "hostview"
--------------------------
  hosts: ipaclient02.labs02.test
---------------------------------------------
Number of hosts the ID View was applied to: 1
---------------------------------------------
[root@ipa02 sssd]# ipa idoverridegroup-add hostview grp2@test.in --group-name ipagrp2
--------------------------------------
Added Group ID override "grp2@test.in"
--------------------------------------
  Anchor to override: grp2@test.in
  Group name: ipagrp2


[root@ipaclient02 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service

[root@ipaclient02 ~]# getent group ipagrp2@test.in ; echo $?
ipagrp2@test.in:*:30012:test2@test.in,test1@test.in
0

[root@ipaclient02 ~]# getent group ipagrp2@test.in
ipagrp2@test.in:*:30012:test2@test.in,test1@test.in

[root@ipaclient02 ~]# id test1@test.in
uid=10017(test1@test.in) gid=30012(ipagrp2@test.in) groups=30012(ipagrp2@test.in),10010(domain users@test.in)

[root@ipaclient02 ~]# id test2@test.in
uid=10018(test2@test.in) gid=30012(ipagrp2@test.in) groups=30012(ipagrp2@test.in),10010(domain users@test.in)

Comment 7 errata-xmlrpc 2015-11-19 11:38:16 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-2355.html