Bug 1745519

Summary: sosreport should include kdcproxy configurations
Product: Red Hat Enterprise Linux 8 Reporter: Oliver Falk <ofalk>
Component: sosAssignee: Pavel Moravec <pmoravec>
Status: CLOSED DUPLICATE QA Contact: Miroslav Hradílek <mhradile>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: ---CC: agk, bmr, gavin, kludhwan, mhradile, plambri, pmoravec, sbradley
Target Milestone: rcKeywords: EasyFix
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: sos-3.8-2.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-01-21 16:03:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Patch to included some KDC proxy configs none

Description Oliver Falk 2019-08-26 10:11:18 UTC 
Description of problem:
Upon debugging some IPA issues with my customer, I recognized that KDC proxy configurations are not included with sosreport.

Version-Release number of selected component (if applicable): any
Opening this BZ against RHEL8, since we're not adding any new features to RHEL7 any more, but I'm confident this applies to all RHEL versions / all sos versions.


How reproducible: always.


Steps to Reproduce:
1. Run sosreport on an IPA server with KDC proxy.

Actual results:
KDC proxy configuration files are missing.


Expected results:
- /etc/ipa/kdcproxy/kdcproxy.conf
- /etc/kdcproxy.conf
- /etc/ipa/kdcproxy/ipa-kdc-proxy.conf

are included in the sosreport.


Additional info:
I'll attach my patch suggestion, but feel free to extend it further to additional files.
Comment 1 Oliver Falk 2019-08-26 10:13:52 UTC 
Created attachment 1608074 [details]
Patch to included some KDC proxy configs
Comment 2 Pavel Moravec 2019-09-15 20:21:31 UTC 
Thanks for the suggestion and patch proposal.

Just a question - can't the collected files contain some sensitive information (like password to the proxy?)? If so, could you show an example of such line, such that we can write a reg.exp. to scrub the password?
Comment 3 Oliver Falk 2019-09-30 10:06:35 UTC 
Pavel,
 sorry for not getting back to you earlier - I had some pretty busy past 2 weeks.

It's the kdc >server!< proxy. Therefore, no, there are no sensitive informations in that file.

Oliver
Comment 4 Pavel Moravec 2019-10-01 06:28:52 UTC 
Thanks for feedback, upstream PR raised.
Comment 9 Pavel Moravec 2020-01-21 16:03:48 UTC 
.. and in fact this is a dup (a subset of) 1688764 :).

*** This bug has been marked as a duplicate of bug 1688764 ***