Bug 2066535
| Summary: | Error restoring authselect backup | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Sunny Wu <suwu> | |
| Component: | authselect | Assignee: | Pavel Březina <pbrezina> | |
| Status: | CLOSED ERRATA | QA Contact: | Dan Lavu <dlavu> | |
| Severity: | medium | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 8.5 | CC: | dlavu, lmiksik, pbrezina, pmcdaid, sgadekar | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | --- | |||
| Hardware: | All | |||
| OS: | All | |||
| Whiteboard: | ||||
| Fixed In Version: | authselect-1.2.5-1.el8 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2070541 (view as bug list) | Environment: | ||
| Last Closed: | 2022-11-08 10:51:16 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 2070541 | |||
|
Description
Sunny Wu
2022-03-22 02:06:52 UTC
Running "authselect check -trace"
shows that the files in /etc/authselect/ are not the same as /var/lib/authselect (e.g. system-auth password-auth etc)
The /etc/authselect files are correct. the /var/lib/authselect files are the old profile.
I wrote a bash script to copy all of the /etc/authselect file to /var/lib/authselect and this is a workaround to the issue:
#
# workaroundBugInRHEL8AuthselectBackupRestore
#
# Currently there is a bug in RHEL8 "authselect backup-restore" where the
# auth files are copied correctly to /etc/authselect dir. But are not copied
# to /var/lib/authselect dir. When "authselect apply-changes" is invoked
# after "authselect backup-restore" it fails as all the auth files are
# not match between /etc/authselect and /var/lib/authselect.
# The workaround is to copy all the auth files from /etc/authselect to
# /var/lib/authselect
#
function workaroundBugInRHEL8AuthselectBackupRestore() {
echo "workaroundBugInRHEL8AuthselectBackupRestore started"
for AUTHFILE in system-auth password-auth fingerprint-auth smartcard-auth postlogin nsswitch.conf dconf-db dconf-locks
do
diff /etc/authselect/$AUTHFILE /var/lib/authselect/$AUTHFILE > /dev/null 2>&1
if [ $? -ne 0 ] ; then
echo "/etc/authselect/$AUTHFILE differs from /var/lib/authselect/$AUTHFILE. Copy /etc/ file to /var dir"
\cp -f /etc/authselect/$AUTHFILE /var/lib/authselect/$AUTHFILE
fi
done
echo "Call authselect apply-changes"
authselect apply-changes
echo "workaroundBugInRHEL8AuthselectBackupRestore finished"
}
workaroundBugInRHEL8AuthselectBackupRestore
Thank you for the bug report. Can you please attach contents of the backup? I.e. `tar -cvzf backup.tgz /var/lib/authselect/backups/sssd.original`? A test rpm (authselect, authselect-compat and authselect-libs) was provided by RedHat. I have verified that this patch resolves the issue. RedHat have commented that this fix will be delivered in RHEL 8.7. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (authselect bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:7738 |