Bug 1388638

Summary:	glibc: default nsswitch.conf should not set initgroups
Product:	Red Hat Enterprise Linux 7	Reporter:	Marcel Kolaja <mkolaja>
Component:	glibc	Assignee:	Carlos O'Donell <codonell>
Status:	CLOSED ERRATA	QA Contact:	Michael Petlan <mpetlan>
Severity:	high	Docs Contact:
Priority:	high
Version:	7.3	CC:	abokovoy, ashankar, chwood, codonell, cww, fweimer, jhrozek, lslebodn, mcermak, mnewsome, mpetlan, pfrankli, pkis, sgoveas, sumenon, tmraz, troels
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	glibc-2.17-157.el7_3.1	Doc Type:	Bug Fix
Doc Text:	Previously, installing an Identity Management (IdM) server or client did notadd the "sss" option to the "initgroups" lookup entry in the /etc/nsswitch.conffile. As a consequence, looking up secondary groups for users managed by theSystem Security Services Daemon (SSSD) did not work as expected. With theupdate, looking up secondary groups works correctly.	Story Points:	---
Clone Of:	1366569	Environment:
Last Closed:	2016-12-06 17:05:49 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1366569
Bug Blocks:

Description Marcel Kolaja 2016-10-25 19:38:24 UTC

This bug has been copied from bug #1366569 and has been proposed
to be backported to 7.3 z-stream (EUS).

Comment 5 Michael Petlan 2016-11-08 19:01:23 UTC

Reproduced with: glibc-2.17-157.el7
Verified with:   glibc-2.17-157.el7_3.1

VERIFIED.

Comment 7 errata-xmlrpc 2016-12-06 17:05:49 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2861.html