Bug 1375299

Summary: sss_groupshow <user> fails with error "No such group in local domain. Printing groups only allowed in local domain"
Product: Red Hat Enterprise Linux 7 Reporter: Niranjan Mallapadi Raghavender <mniranja>
Component: sssdAssignee: SSSD Maintainers <sssd-maint>
Status: CLOSED ERRATA QA Contact: Steeve Goveas <sgoveas>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.3CC: grajaiya, jhrozek, lslebodn, mkosek, mzidek, pbrezina, tlavigne
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
Whiteboard:
Fixed In Version: sssd-1.14.0-41.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-04 07:21:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Niranjan Mallapadi Raghavender 2016-09-12 16:09:27 UTC
Description of problem:

sss_groupshow <user> fails with error "No such group in local domain. Printing groups only allowed in local domain"


Version-Release number of selected component (if applicable):
sssd-client-1.14.0-38.el7.x86_64
sssd-dbus-1.14.0-38.el7.x86_64
sssd-common-pac-1.14.0-38.el7.x86_64
python-sss-1.14.0-38.el7.x86_64
python-sss-murmur-1.14.0-36.el7.x86_64
python-sssdconfig-1.14.0-38.el7.noarch
sssd-krb5-common-1.14.0-38.el7.x86_64
sssd-krb5-1.14.0-38.el7.x86_64
sssd-proxy-1.14.0-38.el7.x86_64
libsss_autofs-1.14.0-30.el7.x86_64
libsss_idmap-1.14.0-38.el7.x86_64
sssd-common-1.14.0-38.el7.x86_64
sssd-ipa-1.14.0-38.el7.x86_64
libsss_simpleifp-1.14.0-38.el7.x86_64
sssd-1.14.0-38.el7.x86_64
libsss_nss_idmap-1.14.0-30.el7.x86_64
sssd-debuginfo-1.14.0-30.el7.x86_64
sssd-ad-1.14.0-38.el7.x86_64
sssd-tools-1.14.0-38.el7.x86_64
sssd-ldap-1.14.0-38.el7.x86_64


How reproducible:


Steps to Reproduce:
1.Configure sssd.conf as below:
[domain/LOCAL]
id_provider = local
debug_level = 0x0080


[sssd]
services = nss,pam
config_file_version = 2
domains = LOCAL

[nss]
filter_groups = root
filter_users = root

2. Add few groups as shown below:

[root@client1 ~]# sss_groupadd Company
[root@client1 ~]# sss_groupadd Engineers
[root@client1 ~]# sss_groupadd Sales
[root@client1 ~]# sss_groupadd Quality_Engineering
[root@client1 ~]# sss_groupadd Development_Engineering

3. Add few users as show below:

[root@client1 home]# sss_useradd president
[root@client1 home]# sss_useradd devdirector
[root@client1 home]# sss_useradd salesenguser
[root@client1 home]# sss_useradd qeuser
[root@client1 home]# sss_useradd devuser1
[root@client1 home]# sss_useradd devuser2
[root@client1 home]# sss_usermod -a Company president
[root@client1 home]# sss_usermod -a Engineers devdirector
[root@client1 home]# sss_usermod -a Sales salesenguser
[root@client1 home]# sss_usermod -a Quality_Engineering qeuser
[root@client1 home]# sss_usermod -a Development_Engineering devuser1
[root@client1 home]# sss_usermod -a Development_Engineering devuser2
[root@client1 home]# sss_groupmod -a Company Engineers
[root@client1 home]# sss_groupmod -a Company Sales
[root@client1 home]# sss_groupmod -a Engineers Quality_Engineering
[root@client1 home]# sss_groupmod -a Engineers Development_Engineering

4. Run sss_groupshow <user>

[root@client1 home]# sss_groupshow president
No such group in local domain. Printing groups only allowed in local domain.


Actual results:

sss_groupshow <user> fails

Expected results:
sss_groupshow <user> should succeed.

Additional info:

Comment 3 Michal Zidek 2016-09-12 17:02:09 UTC
Upstream ticket:
https://fedorahosted.org/sssd/ticket/3184

Comment 4 Michal Zidek 2016-09-12 17:10:18 UTC
Upstream ticket:
https://fedorahosted.org/sssd/ticket/3184

Comment 5 Lukas Slebodnik 2016-09-13 12:04:27 UTC
master:
* bb14556c1df503314644fc424fbbf95759791db9
* 812bed08943df8bf3fd1ff9eabcaf5bedc635c92

Comment 7 Niranjan Mallapadi Raghavender 2016-09-15 07:49:50 UTC
Versions:
========
sssd-krb5-1.14.0-41.el7.x86_64
sssd-common-1.14.0-41.el7.x86_64
python-sss-1.14.0-41.el7.x86_64
python-sss-murmur-1.14.0-36.el7.x86_64
sssd-client-1.14.0-41.el7.x86_64
sssd-ad-1.14.0-41.el7.x86_64
sssd-proxy-1.14.0-41.el7.x86_64
sssd-tools-1.14.0-41.el7.x86_64
libsss_autofs-1.14.0-30.el7.x86_64
python-sssdconfig-1.14.0-41.el7.noarch
sssd-common-pac-1.14.0-41.el7.x86_64
sssd-ldap-1.14.0-41.el7.x86_64
libsss_simpleifp-1.14.0-41.el7.x86_64
libsss_nss_idmap-1.14.0-30.el7.x86_64
sssd-debuginfo-1.14.0-30.el7.x86_64
sssd-krb5-common-1.14.0-41.el7.x86_64
sssd-dbus-1.14.0-41.el7.x86_64
libsss_idmap-1.14.0-41.el7.x86_64
sssd-ipa-1.14.0-41.el7.x86_64
sssd-1.14.0-41.el7.x86_64

sssd.conf :

[domain/LOCAL]
id_provider = local
debug_level = 0x0080


[sssd]
services = nss,pam
config_file_version = 2
domains = LOCAL

[nss]
filter_groups = root
filter_users = root


+ sss_groupadd Company_1
+ sss_groupadd Engineers_1
+ sss_groupadd Sales_1
+ sss_groupadd Quality_Engineering_1
+ sss_groupadd Development_Engineering_1
+ sss_useradd president_1
+ sss_useradd devdirector_1
+ sss_useradd salesenguser_1
+ sss_useradd qeuser_1
+ sss_useradd devuser_1
+ sss_useradd devuser_2
+ sss_usermod -a Company_1 president_1
+ sss_usermod -a Engineers_1 devdirector_1
+ sss_usermod -a Sales_1 salesenguser_1
+ sss_usermod -a Quality_Engineering_1 qeuser_1
+ sss_usermod -a Development_Engineering_1 devuser_1
+ sss_usermod -a Development_Engineering_1 devuser_2
+ sss_groupmod -a Company_1 Engineers
+ sss_groupmod -a Company_1 Sales
+ sss_groupmod -a Engineers_1 Quality_Engineering_1
+ sss_groupmod -a Engineers_1 Development_Engineering_1
+ sss_groupshow president_1
Magic Private Group: president_1@local
GID number: 1030
Member users:
Is a member of:
Member groups:

Comment 9 errata-xmlrpc 2016-11-04 07:21:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-2476.html