Bug 2003003

Summary: subid: subid-match displays the DN of the owner, not its UID. [rhel-9.0.0]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: ipaAssignee: François Cami <fcami>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0CC: frenaud, ksiddiqu, mpolovka, pvlasin, rcritten, ssidhaye, tscherf
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-4.9.6-9.el9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2000947 Environment:
Last Closed: 2022-05-17 12:44:18 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2000947    
Bug Blocks:    

Comment 1 Florence Blanc-Renaud 2021-09-13 06:21:14 UTC
Fixed upstream
master:
https://pagure.io/freeipa/c/b624179cb18d445c27abef067540fa9e914eacc5

Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/4785a90946ec694ccc082f062b2181b23c7099e3

Comment 3 Michal Polovka 2021-10-13 13:06:19 UTC
Pre-verified using RHEL9 machine with ipa-server-4.9.6-6.el9

# ipa subid-generate
-----------------------------------------------------------
Added subordinate id "509d89cd-8ab2-4bd3-a6c4-ef7f6a756a30"
-----------------------------------------------------------
  Unique ID: xyz
  Description: auto-assigned subid
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536

 # ipa subid-match --subuid=2147483648
------------------------
1 subordinate id matched
------------------------
  Unique ID: xyz
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536
----------------------------
Number of entries returned 1
----------------------------


Therefore marking as verified: tested

Comment 6 Michal Polovka 2021-10-18 12:21:21 UTC
Verified using RHEL9 machine with the package ipa-server-4.9.6-9.el9.x86_64

# ipa subid-generate
-----------------------------------------------------------
Added subordinate id "CENSORED"
-----------------------------------------------------------
  Unique ID: CENSORED
  Description: auto-assigned subid
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536


# ipa subid-match --subuid=2147483648
------------------------
1 subordinate id matched
------------------------
  Unique ID: CENSORED
  Owner: admin
  SubUID range start: 2147483648
  SubUID range size: 65536
  SubGID range start: 2147483648
  SubGID range size: 65536
----------------------------
Number of entries returned 1
----------------------------

Therefore marking as verified. Automation will be added to upstream.

Comment 8 errata-xmlrpc 2022-05-17 12:44:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: ipa), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:2387