Bug 1855320
| Summary: | [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains. | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Pierre Amadio <pamadio> |
| Component: | sssd | Assignee: | Pavel Březina <pbrezina> |
| Status: | CLOSED ERRATA | QA Contact: | Dan Lavu <dlavu> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 8.3 | CC: | atikhono, dlavu, grajaiya, jhrozek, lslebodn, mzidek, pbrezina, sgoveas, thalman, tscherf |
| Target Milestone: | rc | Keywords: | FutureFeature, Triaged |
| Target Release: | 8.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | sync-to-jira | ||
| Fixed In Version: | sssd-2.5.0-1.el8 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-11-09 19:46:34 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Comment 2
Pavel Březina
2020-07-20 13:16:27 UTC
(In reply to Pavel Březina from comment #2) > Is this for AD provider or IPA provider? id_provider = ad access_provider = ad Upstream ticket: https://github.com/SSSD/sssd/issues/5250 Upstream PR: https://github.com/SSSD/sssd/pull/5251 Pushed PR: https://github.com/SSSD/sssd/pull/5251 * `master` * 944c47e27c4e5a01816bb897efb33c1825a64078 - man: update case_sensitive documentation to reflect changes for subdomains * f6bb31af5b5c6605f33377f0750c85d0ff722385 - subdomains: allow to inherit case_sensitive=Preserving for IPA * f2655950430a25abc6b74761b2872004e3258893 - subdomains: allow to set case_sensitive=Preserving in subdomain section * 12eb04b2fd698245d653c9166af29949d337b3be - subdomains: allow to inherit case_sensitive=Preserving * 0eb0281c9620086cda0e814532398e5a9a4b7092 - man: add auto_private_groups to subdomain_inherit Tested against sssd-2.5.0-1.el8.x86_64 #### sssd.conf ##### [sssd] domains = domain.com config_file_version = 2 services = nss, pam [domain/domain.com] ad_domain = domain.com krb5_realm = DOMAIN.COM realmd_tags = manages-system joined-with-adcli cache_credentials = True id_provider = ad krb5_store_password_if_offline = True default_shell = /bin/bash ldap_id_mapping = True use_fully_qualified_names = True fallback_homedir = /home/%u@%d access_provider = ad subdomain_inherit = case_sensitive case_sensitive = Preserving | False #### case_sensitive = False ##### [root@ci-vm-10-0-99-216 sssd]# id UpperUser uid=933601115(upperuser) gid=933600513(domain users) groups=933600513(domain users) [root@ci-vm-10-0-99-216 sssd]# id Upper_Child.com uid=132201107(upper_child.com) gid=132201107(upper_child.com) groups=132201107(upper_child.com),132200513(domain users.com) #### case_sensitive = Preserving ##### [root@ci-vm-10-0-99-216 sssd]# id UpperUser uid=933601115(UpperUser) gid=933600513(Domain Users) groups=933600513(Domain Users) [root@ci-vm-10-0-99-216 sssd]# id Upper_Child.com uid=132201107(Upper_Child.com) gid=132201107(Upper_Child.com) groups=132201107(Upper_Child.com),132200513(Domain Users.com) Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:4435 |