Bug 2148989
| Summary: | UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z] | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | RHEL Program Management Team <pgm-rhel-tools> |
| Component: | sssd | Assignee: | Sumit Bose <sbose> |
| Status: | CLOSED ERRATA | QA Contact: | Jakub Vavra <jvavra> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 8.7 | CC: | atikhono, dshaikh, jvavra, pbrezina, r_f, sbose, sgadekar, tscherf |
| Target Milestone: | rc | Keywords: | Triaged, ZStream |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | sync-to-jira | ||
| Fixed In Version: | sssd-2.7.3-4.el8_7.2 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 2144491 | Environment: | |
| Last Closed: | 2023-01-12 09:26:17 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2144491 | ||
| Bug Blocks: | |||
|
Comment 1
Alexey Tikhonov
2022-11-28 18:55:33 UTC
Pushed PR: https://github.com/SSSD/sssd/pull/6466 * `sssd-2-7` * 0e618c36ed74c240f7acd071ccb7bfd405b2d827 - pac: relax default check * 29aa434816ce6ae2aaf3b0bcf24b89f05f426d1b - ipa: do not add guessed principal to the cache * a86d1740167031bf6444ff821a201164c11ba09c - PAC: allow to disable UPN check Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (sssd bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:0124 |