Bug 1298975

Summary:	[RFE] Backport the groups merging feature
Product:	Red Hat Enterprise Linux 7	Reporter:	Jakub Hrozek <jhrozek>
Component:	glibc	Assignee:	Martin Sebor <msebor>
Status:	CLOSED ERRATA	QA Contact:	Sergey Kolosov <skolosov>
Severity:	medium	Docs Contact:	Vladimír Slávik <vslavik>
Priority:	high
Version:	7.3	CC:	ashankar, bgollahe, brubisch, codonell, cww, dzhukous, fweimer, lslebodn, mcermak, mkosek, mnewsome, msebor, pfrankli, redhat, ricardo.arguello, rsawhill, sgallagh, skolosov, sreber, stefw, troels
Target Milestone:	rc	Keywords:	FutureFeature, Patch
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:	glibc now supports group merging The ability to merge group members from different Name Service modules has been added to glibc. As a result, management of centralized user access control and group membership across multiple hosts is now easier.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-08-01 18:06:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1292074, 1298243, 1390370

Description Jakub Hrozek 2016-01-15 15:06:51 UTC

Description of problem:
Upstream libc recently gained the possibility to merge group members from different Name Service modules. We should backport this feature to RHEL.

This would mainly enable deployments that depend on centralized directories to define members of well-known local groups (like wheel) in the centralized directory in addition to local files

Version-Release number of selected component (if applicable):
Whatever will be in RHEL-7.3

How reproducible:
always

Steps to Reproduce
1. set "group: files [SUCCESS=merge] sss" in nsswitch.con
2. define a group wheel in IPA or AD
3. getgrnam(wheel)

Actual results:
only local members are returned

Expected results:
getgrnam returns both members of the local wheel group as well as the members defined in the remote directory are returned


Additional info:
The related upstream bugzilla is https://sourceware.org/bugzilla/show_bug.cgi?id=19072

Comment 1 Jakub Hrozek 2016-01-15 15:08:26 UTC

Cockpit would also benefit from this feature.

Comment 3 Florian Weimer 2016-01-26 14:42:28 UTC

*** Bug 1204503 has been marked as a duplicate of this bug. ***

Comment 4 Florian Weimer 2016-01-26 14:43:51 UTC

To clarify, the patch has not been accepted yet upstream.

Comment 25 errata-xmlrpc 2017-08-01 18:06:55 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:1916