Bug 2000947

Summary: subid: subid-match displays the DN of the owner, not its UID.
Product: Red Hat Enterprise Linux 9 Reporter: François Cami <fcami>
Component: ipaAssignee: François Cami <fcami>
Status: CLOSED CURRENTRELEASE QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0CC: frenaud, ksiddiqu, mpolovka, myusuf, pvlasin, rcritten, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.9.6-7.el9_b Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2003003 (view as bug list) Environment:
Last Closed: 2021-12-07 21:33:05 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2003003    

Description François Cami 2021-09-03 11:23:02 UTC
Current output:

$ ipa subid-match --subuid=2147614720
------------------------
1 subordinate id matched
------------------------
  Unique ID: 34f9f100-3605-45e3-8f79-39f0bf6b9da0
  Owner: uid=admin,cn=users,cn=accounts,dc=laptop,dc=example,dc=org


Desired output:

# ipa subid-match --subuid=2147614720
------------------------
1 subordinate id matched
------------------------
  Unique ID: 34f9f100-3605-45e3-8f79-39f0bf6b9da0
  Owner: admin

Comment 2 François Cami 2021-09-03 11:33:17 UTC
Tracked for RHEL8 in https://bugzilla.redhat.com/show_bug.cgi?id=1981322

Comment 11 Michal Polovka 2021-09-20 13:51:05 UTC
Pre-verified - tested using RHEL9 Beta machine with ipa-server-4.9.6-7.el9_b.x86_64.

# ipa subid-generate
-----------------------------------------------------------
Added subordinate id "9ab0ee19-a968-476c-bbde-c5d3a84dfb34"
-----------------------------------------------------------
  Unique ID: 9ab0ee19-a968-476c-bbde-c5d3a84dfb34
  Description: auto-assigned subid
  Owner: admin

# ipa subid-match --subuid=2147483648
------------------------
1 subordinate id matched
------------------------
  Unique ID: 9ab0ee19-a968-476c-bbde-c5d3a84dfb34
  Owner: admin

Therefore marking as pre-verified: tested.

Comment 15 Michal Polovka 2021-09-23 14:37:00 UTC
Verified manually using RHEL9 Beta machine

Old version: ipa-server-4.9.6-6.el9.x86_64

# ipa subid-generate
-----------------------------------------------------------
Added subordinate id "76a60f4f-0994-4c34-9677-97602c526400"
-----------------------------------------------------------
  Unique ID: 76a60f4f-0994-4c34-9677-97602c526400
  Description: auto-assigned subid
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536

 # ipa subid-match --subuid=2147483648
------------------------
1 subordinate id matched
------------------------
  Unique ID: 76a60f4f-0994-4c34-9677-97602c526400
  Owner: uid=admin,cn=users,cn=accounts,dc=ipa,dc=test
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536
----------------------------
Number of entries returned 1


Fixed version: ipa-server-4.9.6-8.el9_b.x86_64 
# ipa subid-match --subuid=2147483648
------------------------
1 subordinate id matched
------------------------
  Unique ID: 76a60f4f-0994-4c34-9677-97602c526400
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536
----------------------------
Number of entries returned 1
----------------------------

Hence marking as verified. Automation will be provided upstream.