Bug 1791892
| Summary: | sssctl config-check reports errors when auto_private_groups is disabled/enabled in child domains | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Niranjan Mallapadi Raghavender <mniranja> |
| Component: | sssd | Assignee: | Iker Pedrosa <ipedrosa> |
| Status: | CLOSED ERRATA | QA Contact: | sssd-qe <sssd-qe> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.2 | CC: | atikhono, grajaiya, jhrozek, lslebodn, mupadhye, mzidek, pbrezina, sgadekar, sgoveas, thalman, tscherf |
| Target Milestone: | rc | Keywords: | Triaged |
| Target Release: | 8.0 | Flags: | pm-rhel:
mirror+
|
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | sync-to-jira | ||
| Fixed In Version: | sssd-2.3.0-1.el8 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-11-04 02:04:28 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1546740 | ||
|
Description
Niranjan Mallapadi Raghavender
2020-01-16 16:37:58 UTC
* `master`
* 746d4ff34acbb17f291b02a66311c27cfb44a005 - config: allowed auto_private_groups in child domains
*** Bug 1546740 has been marked as a duplicate of this bug. *** Reproduce with [root@ci-vm-10-0-98-99 ~]# rpm -qa sssd sssd-tools sssd-tools-2.2.0-19.el8.x86_64 sssd-2.2.0-19.el8.x86_64 [root@ci-vm-10-0-98-99 ~]# sssctl config-check Issues identified by validators: 2 [rule/allowed_subdomain_options]: Attribute 'auto_private_groups' is not allowed in section 'domain/td5f4f77.com/two5f4f77.td5f4f77.com'. Check for typos. [rule/allowed_subdomain_options]: Attribute 'private_groups' is not allowed in section 'domain/td5f4f77.com/one5f4f77.td5f4f77.com'. Check for typos. Messages generated during configuration merging: 0 Used configuration snippet files: 0 Verified with: [root@ci-vm-10-0-105-137 ~]# rpm -qa sssd sssd-tools sssd-2.3.0-5.el8.x86_64 sssd-tools-2.3.0-5.el8.x86_64 [root@ci-vm-10-0-105-137 ~]# sssctl config-check Issues identified by validators: 0 Messages generated during configuration merging: 0 Used configuration snippet files: 0 [root@ci-vm-10-0-105-137 ~]# cat /etc/sssd/sssd.conf [sssd] domains = td5f4f77.com config_file_version = 2 services = nss, pam, ifp [domain/td5f4f77.com/two5f4f77.td5f4f77.com] auto_private_groups = True [domain/td5f4f77.com/one5f4f77.td5f4f77.com] auto_private_groups = True [pam] debug_level = 9 [domain/td5f4f77.com] ad_domain = td5f4f77.com krb5_realm = TD5F4F77.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%u@%d access_provider = ad auto_private_groups = False [nss] debug_level = 9 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:4569 |