Bug 2075542

Summary: Enabling session recording configuration does not work due to RHEL9 SSSD files provider default [rhel-9.0.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: cockpit-session-recordingAssignee: jstephen
Status: CLOSED ERRATA QA Contact: sssd-qe <sssd-qe>
Severity: high Docs Contact:
Priority: high    
Version: 9.0CC: aboscatt, briasmit, pvlasin, spoore
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: ---Flags: pm-rhel: mirror+
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2071801 Environment:
Last Closed: 2022-05-17 23:34:12 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2071801    
Bug Blocks:    

Comment 1 jstephen 2022-04-18 13:48:23 UTC
@

Comment 2 jstephen 2022-04-18 13:49:09 UTC
@spoore Can you give QE ack?

Comment 3 Scott Poore 2022-04-18 17:32:48 UTC
Yep, done.

Comment 8 Scott Poore 2022-04-27 18:00:45 UTC
Verified.

Version ::

cockpit-session-recording-11.1-1.el9_0.noarch

Result ::

Before setting scope to all in cockpit UI.

[root@rhel9 ~]# find /etc/sssd
/etc/sssd
/etc/sssd/conf.d
/etc/sssd/pki

[root@rhel9 ~]# grep "^passwd" /etc/nsswitch.conf
passwd:     files sss systemd


After setting scope to all in cockpit UI:

[root@rhel9 ~]# find /etc/sssd
/etc/sssd
/etc/sssd/conf.d
/etc/sssd/conf.d/sssd-session-recording.conf
/etc/sssd/pki

[root@rhel9 ~]# cat /etc/sssd/conf.d/sssd-session-recording.conf
[sssd]
enable_files_domain=true
services=nss

[session_recording]
scope=all
exclude_users=
exclude_groups=

[root@rhel9 ~]# grep "^passwd" /etc/nsswitch.conf
passwd:     sss files systemd

Comment 14 errata-xmlrpc 2022-05-17 23:34:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (cockpit-session-recording bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:4577