Bug 2008829

Summary:	sssd_be segfault due to empty forest root name
Product:	Red Hat Enterprise Linux 8	Reporter:	Alexey Tikhonov <atikhono>
Component:	sssd	Assignee:	Sumit Bose <sbose>
Status:	CLOSED ERRATA	QA Contact:	Dan Lavu <dlavu>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	8.5	CC:	dlavu, grajaiya, jhrozek, lslebodn, mzidek, pbrezina, tscherf
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	sync-to-jira
Fixed In Version:	sssd-2.6.2-1.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-05-10 15:26:38 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Alexey Tikhonov 2021-09-29 09:36:04 UTC

This bug was initially created as a copy of Bug #2006866

I am copying this bug because: to track fix to RHEL8



Description of problem:

SSSD is unable to start with error:

    Sep 16 07:59:50 hostname sssd[be[example.net]]: Starting up
    Sep 16 07:59:50 hostname kernel: sssd_be[16795]: segfault at 0 ip 00007f452f9122a5 sp 00007ffe68725418 error 4 in libc-2.17.so[7f452f7cb000+1c4000]
    Sep 16 07:59:50 hostname abrt-hook-ccpp: Process 16795 (sssd_be) of user 0 killed by SIGSEGV - ignoring (repeated crash)
    Sep 16 07:59:54 hostname sssd[be[example.net]]: Starting up

__________________________________________________________________
[root@hostname ~]# sssctl config-check
Issues identified by validators: 0

Messages generated during configuration merging: 0

Used configuration snippet files: 0


==================================================================
Version-Release number of selected component (if applicable):

System was RHEL7.5, then updated to RHEL7.9 and issue persist.
__________________________________________________________________
kernel-3.10.0-862.9.1.el7.x86_64                            Wed Jul 25 11:54:43 2018
kernel-3.10.0-1160.36.2.el7.x86_64                          Fri Aug 20 13:38:45 2021
kernel-3.10.0-1160.42.2.el7.x86_64                          Tue Sep 14 16:53:43 2021
kernel-headers-3.10.0-1160.42.2.el7.x86_64                  Tue Sep 14 16:54:23 2021
kernel-tools-3.10.0-1160.42.2.el7.x86_64                    Tue Sep 14 16:54:09 2021
kernel-tools-libs-3.10.0-1160.42.2.el7.x86_64               Tue Sep 14 16:53:39 2021
krb5-devel-1.15.1-50.el7.x86_64                             Fri Aug 20 13:36:37 2021
krb5-libs-1.15.1-50.el7.x86_64                              Fri Aug 20 13:35:38 2021
krb5-workstation-1.15.1-50.el7.x86_64                       Fri Aug 20 13:39:09 2021
openldap-2.4.44-24.el7_9.x86_64                             Tue Sep 14 16:53:04 2021
realmd-0.16.1-12.el7_9.1.x86_64                             Tue Sep 14 16:53:05 2021
samba-4.10.16-15.el7_9.x86_64                               Fri Aug 20 13:38:59 2021
samba-client-libs-4.10.16-15.el7_9.x86_64                   Fri Aug 20 13:36:15 2021
samba-common-4.10.16-15.el7_9.noarch                        Fri Aug 20 13:36:14 2021
samba-common-libs-4.10.16-15.el7_9.x86_64                   Fri Aug 20 13:36:14 2021
samba-common-tools-4.10.16-15.el7_9.x86_64                  Fri Aug 20 13:36:34 2021
samba-libs-4.10.16-15.el7_9.x86_64                          Fri Aug 20 13:36:34 2021
sssd-1.16.5-10.el7_9.10.x86_64                              Mon Sep  6 08:14:42 2021
sssd-ad-1.16.5-10.el7_9.10.x86_64                           Mon Sep  6 08:14:41 2021
sssd-client-1.16.5-10.el7_9.10.x86_64                       Mon Sep  6 08:14:41 2021
sssd-common-1.16.5-10.el7_9.10.x86_64                       Mon Sep  6 08:14:41 2021
sssd-common-pac-1.16.5-10.el7_9.10.x86_64                   Mon Sep  6 08:14:41 2021
sssd-dbus-1.16.5-10.el7_9.10.x86_64                         Mon Sep  6 08:14:42 2021
sssd-ipa-1.16.5-10.el7_9.10.x86_64                          Mon Sep  6 08:14:41 2021
sssd-krb5-1.16.5-10.el7_9.10.x86_64                         Mon Sep  6 08:14:42 2021
sssd-krb5-common-1.16.5-10.el7_9.10.x86_64                  Mon Sep  6 08:14:41 2021
sssd-ldap-1.16.5-10.el7_9.10.x86_64                         Mon Sep  6 08:14:42 2021
sssd-libwbclient-1.16.5-10.el7_9.10.x86_64                  Mon Sep  6 08:14:41 2021
sssd-proxy-1.16.5-10.el7_9.10.x86_64                        Mon Sep  6 08:14:42 2021
sssd-tools-1.16.5-10.el7_9.10.x86_64                        Mon Sep  6 08:14:42 2021

==================================================================
How reproducible:

    SSSD is failing at start.

==================================================================
Actual results:

    SSSD is failing at start.

==================================================================
Expected results:

    SSSD start and working.

==================================================================
Additional info:

abrt directory was shared. Let me know what files do you need since
file is larger than allowed.

Comment 1 Alexey Tikhonov 2021-11-19 11:57:46 UTC

Upstream PR: https://github.com/SSSD/sssd/pull/5883

Comment 2 Alexey Tikhonov 2021-12-10 17:16:05 UTC

Pushed PR: https://github.com/SSSD/sssd/pull/5883

* `master`
    * c0941810fc3c3d74a00697349723f14e2f6bbdd2 - cldap: use dns_resolver_server_timeout timeout for cldap ping
    * 724293d0873ee3229866ae4c13e1c8829375146f - ad: only send cldap-ping to our local domain
    * 918abaf37d7f13d72b29863933e133bcbd24d87c - ad: make ad_srv_plugin_ctx_switch_site() public
    * 99c4161910e542dd40c740032196d268c4163d07 - ad: use already discovered forest name
    * 4508ef5f7183c640191393605ea163044d9ac267 - ad: move current site and forest name to a more global context
    * b37e2713a9b86936f5b82a17e47757562900b911 - ad: require name when looking up root domain

Comment 9 errata-xmlrpc 2022-05-10 15:26:38 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (sssd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:2070