Bug 2098615

Summary: Regression "Missing internal domain data." when setting ad_domain to incorrect
Product: Red Hat Enterprise Linux 8 Reporter: Alexey Tikhonov <atikhono>
Component: sssdAssignee: Sumit Bose <sbose>
Status: CLOSED ERRATA QA Contact: Jakub Vavra <jvavra>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.6CC: grajaiya, jhrozek, lslebodn, mzidek, pbrezina, sgadekar, tscherf
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: sssd-2.7.2-1.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-11-08 10:51:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alexey Tikhonov 2022-06-20 08:13:16 UTC
This bug was initially created as a copy of Bug #2087581

I am copying this bug because: to track fix for RHEL8



Description of problem:
When running a regression test for bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1091957
The test fails. 
It seems to that with incorrect (junk) settings of ad_domain in sssd.conf the sssd is no longer able to recover needed "internal domain data" and without it it does not find the AD user when running getent passwd <aduser>.

Version-Release number of selected component (if applicable):
sssd-2.7.0-2.el9

How reproducible:
always

Steps to Reproduce:
1. Join to the AD using:
realm join --user-principal=host/fqdn

2. Configure sssd.conf domain section as:
[domain/ADTEST]
debug_level = 0xFFF0
id_provider = ad
ad_domain = junk
ad_server=<adserver>

3. Run getent passwd <user on ad server>

Actual results:
User is not found, sssd domain log contains "Missing internal domain data."

Expected results:
User is found.

Additional info:

Comment 1 Alexey Tikhonov 2022-06-20 08:18:11 UTC
Pushed PR: https://github.com/SSSD/sssd/pull/6171

* `master`
    * 71b14474bec82a0c57065ad45915ebfeb9e3d03e - ad: add fallback in ad_domain_info_send()
* `sssd-1-16`
    * 410a3faa8cf1e358e53728fae7440a81763ab743 - ad: add fallback in ad_domain_info_send()
* `sssd-2-7`
    * 80ffa314c669feaaffe487d8ea5004c149d948c8 - ad: add fallback in ad_domain_info_send()

Comment 12 errata-xmlrpc 2022-11-08 10:51:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (sssd bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:7739