Bug 1631826
| Summary: | Create a warning that SSSD needs restart after idrange-mod | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Dave <dsimes> |
| Component: | ipa | Assignee: | IPA Maintainers <ipa-maint> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | Tomas Capek <tcapek> |
| Priority: | unspecified | ||
| Version: | 7.5 | CC: | abokovoy, fhanzelk, frenaud, gswami, ksiddiqu, mvarun, pcech, pvoborni, rcritten, tscherf, twoerner |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-4.6.5-2.el7 | Doc Type: | Known Issue |
| Doc Text: |
.Inconsistent warning message when applying an ID range change
In RHEL Identity Management (IdM), you can define multiple identity ranges (ID ranges) associated with a local IdM domain or a trusted Active Directory domain. The information about ID ranges is retrieved by the SSSD daemon on all enrolled systems.
A change to ID range properties requires restart of SSSD. Previously, there was no warning about the need to restart SSSD. RHEL 7.7 adds a warning that is displayed when ID range properties are modified in a way that requires restart of SSSD.
The warning message currently uses inconsistent wording. The purpose of the warning message is to ask for a restart of SSSD on any IdM system that consumes the ID range. To learn more about ID ranges, see https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/linux_domain_identity_authentication_and_policy_guide/managing-unique_uid_and_gid_attributes
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-08-06 13:09:16 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Dave
2018-09-21 16:04:49 UTC
Upstream ticket: https://pagure.io/freeipa/issue/7708 Fixed upstream:
master:
5b337a5 Show a notification that sssd needs restarting after idrange-mod
Fixed upstream
ipa-4-7:
ca42f2f Show a notification that sssd needs restarting after idrange-mod
ipa-4-6:
9284341 Show a notification that sssd needs restarting after idrange-mod
Verified ipa-server-4.6.5-9.el7.x86_64 [root@bender ~]# ipa idrange-mod --rid-base=300000 Range name: IPAAD2016.TEST_id_range ipa: WARNING: Service sssd.service requires restart on IPA server IPAAD2016.TEST_id_range to apply configuration changes. ------------------------------------------- Modified ID range "IPAAD2016.TEST_id_range" ------------------------------------------- Range name: IPAAD2016.TEST_id_range First Posix ID of the range: 1577600000 Number of IDs in the range: 200000 First RID of the corresponding RID range: 300000 Domain SID of the trusted domain: S-1-5-21-813110839-3732285123-1597101681 Range type: Active Directory domain range Now we can observe ipa warning for sssd service restart. Based on the above observation, marking the bug VERIFIED Alexander, Who will add text for release notes. I have asked Filip to provide + to require_doc_text flag. I added a proposed release note. Filip, please correct it as you see fitting. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2241 |