Bug 1498175

Summary:	mod_auth_gssapi fails when a line in /etc/groups is longer than 1024
Product:	[Fedora] Fedora	Reporter:	François Cami <fcami>
Component:	mod_auth_gssapi	Assignee:	Robbie Harwood <rharwood>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	rharwood, ssorce
Target Milestone:	---	Keywords:	Reopened
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	mod_auth_gssapi-1.5.1-5.fc28 mod_auth_gssapi-1.5.1-6.fc27	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1498176 (view as bug list)		Environment:
Last Closed:	2017-11-11 03:07:39 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1498176

Description François Cami 2017-10-03 16:01:53 UTC

Description of problem:
mod_auth_gssapi fails when a line in /etc/groups is longer than 1024

when restarting the httpd server, the following error messages related to group ipaapi appear in /var/log/httpd:
[auth_gssapi:error] [pid 1627] Invalid GssapiDelegCcachePerms gid value [ipaapi]
[auth_gssapi:error] [pid 1627] Invalid GssapiDelegCcachePerms gid value [ipaapi]


How reproducible:
Always

Steps to Reproduce:
1. Add a > 1024 character line in /etc/groups
2. Restart httpd


Actual results:
See above.

In addition, files in the ccaches/ directory now belong to apache:apache not ipaapi:ipaapi.

Comment 1 Simo Sorce 2017-10-03 16:40:11 UTC

Upstream PR here: https://github.com/modauthgssapi/mod_auth_gssapi/pull/152

Comment 2 Fedora Update System 2017-10-03 21:20:08 UTC

mod_auth_gssapi-1.5.1-5.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-b1fcf9529a

Comment 3 Fedora Update System 2017-10-06 04:25:59 UTC

mod_auth_gssapi-1.5.1-5.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-b1fcf9529a

Comment 4 Fedora Update System 2017-10-27 15:22:17 UTC

mod_auth_gssapi-1.5.1-6.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e5cec58f5

Comment 5 Fedora Update System 2017-10-27 18:50:21 UTC

mod_auth_gssapi-1.5.1-6.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8e5cec58f5

Comment 6 Fedora Update System 2017-11-11 03:07:39 UTC

mod_auth_gssapi-1.5.1-6.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.