Bug 1961215

Summary:	Invalid sssd-kcm return code if requested operation is not found
Product:	Red Hat Enterprise Linux 8	Reporter:	Pavel Březina <pbrezina>
Component:	sssd	Assignee:	Pavel Březina <pbrezina>
Status:	CLOSED ERRATA	QA Contact:	Steeve Goveas <sgoveas>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	---	CC:	atikhono, grajaiya, jhrozek, lslebodn, mzidek, pbrezina, sgoveas, tscherf
Target Milestone:	beta	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	sync-to-jira
Fixed In Version:	sssd-2.5.1-1.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-11-09 19:47:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Pavel Březina 2021-05-17 14:26:48 UTC

sssd-kcm should follow Heimdal's return codes. Heimdal returns `KRB5_FCC_INTERNAL` for cases where operation code is not known or not implemented. See:

* https://github.com/heimdal/heimdal/blob/master/kcm/protocol.c#L1785
* https://github.com/heimdal/heimdal/blob/master/kcm/protocol.c#L1792
  
SSSD currently retunrs different codes which makes Kerberos to differentiate between Heimdal and sssd implementation and this leads to errors like: https://github.com/krb5/krb5/pull/1178#issuecomment-838289703

Comment 1 Pavel Březina 2021-05-17 14:28:21 UTC

Sanity testing only.

Comment 2 Alexey Tikhonov 2021-05-18 10:20:42 UTC

Pushed PR: https://github.com/SSSD/sssd/pull/5629

* `master`
    * 9b017dbc80cf09b3a2d7e09f771faf70d4538b4f - KCM: return KRB5_FCC_INTERNAL for unknown or not implemented operation

Comment 10 errata-xmlrpc 2021-11-09 19:47:29 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (sssd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4435