Bug 1214718
| Summary: | Overridde with --login fails trusted adusers group membership resolution | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Martin Kosek <mkosek> |
| Component: | sssd | Assignee: | SSSD Maintainers <sssd-maint> |
| Status: | CLOSED ERRATA | QA Contact: | Kaushik Banerjee <kbanerje> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.1 | CC: | grajaiya, jgalipea, jhrozek, kbanerje, lslebodn, mkosek, mzidek, nsoman, pbrezina, preichl, sbose, sgoveas, sumenon |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | sssd-1.13.0-0.1.alpha.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1213940 | Environment: | |
| Last Closed: | 2015-11-19 11:38:16 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1213940 | ||
| Bug Blocks: | 1214673 | ||
|
Comment 1
Jakub Hrozek
2015-04-24 14:24:51 UTC
*** Bug 1214673 has been marked as a duplicate of this bug. *** * master: 3453e4734d2f7738034af61edb7d33c0c7095d8a * sssd-1-12: 85287a6b897d818d279171a83aa3c8a0de66f13b Verified on RHEL7.2 and Windows 2012 R2.
sssd-1.13.0-35.el7.x86_64
Obseravtions:
On Client group resolve doesn't fail prior to login. Group membership are resolved even if user login hasn't been done.
1. [root@ipa02 sssd]# ipa idoverrideuser-find 'default trust view' test11
---------------------------
0 User ID overrides matched
---------------------------
----------------------------
Number of entries returned 0
----------------------------
2. [root@ipa02 sssd]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service sssd start
Redirecting to /bin/systemctl stop sssd.service
Redirecting to /bin/systemctl start sssd.service
3. [root@ipaclient02 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start
Redirecting to /bin/systemctl stop sssd.service
Redirecting to /bin/systemctl start sssd.service
4. [root@ipaclient02 ~]# id test11
uid=10010(test11) gid=10000(grp2) groups=10000(grp2),10010(domain users)
===================================================
1. [root@ipa02 sssd]# ipa idoverrideuser-add 'default trust view' test11 --login puser1
---------------------------------------
Added User ID override "test11"
---------------------------------------
Anchor to override: test11
User login: puser1
2. [root@ipaclient02 ~]# id test11
uid=10010(puser1) gid=10000(grp2) groups=10000(grp2),10010(domain users)
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-2355.html |