Bug 2101489

Summary: [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
Product: Red Hat Enterprise Linux 8 Reporter: Cesar Goslawski <cetravas>
Component: sssdAssignee: Sumit Bose <sbose>
Status: VERIFIED --- QA Contact: Dan Lavu <dlavu>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 8.6CC: aboscatt, abroy, atikhono, bthekkep, dcamilof, dlavu, grajaiya, lslebodn, mzidek, pbrezina, sbose, sgadekar, tscherf
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: sssd-2.9.0-2.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 19 Alexey Tikhonov 2023-03-02 17:01:38 UTC
Upstream PR: https://github.com/SSSD/sssd/pull/6604

Comment 22 Alexey Tikhonov 2023-04-19 13:43:24 UTC
Pushed PR: https://github.com/SSSD/sssd/pull/6604

* `master`
    * ebc1e460efcf4101459248a22253f0c52b9c39ab - krb5: add joined/parent domain to [domain_realm]
* `sssd-2-7`
    * 28ca00b8144b0d84785bdeeafad9929a573ab3d3 - krb5: add joined/parent domain to [domain_realm]
* `sssd-2-8`
    * 02068a074af48be2ef086cb1261fa9ecbc254395 - krb5: add joined/parent domain to [domain_realm]