Bug 2388766

Summary:	sssd-idp package is missing libsss_idp.so
Product:	[Fedora] Fedora	Reporter:	Trev <trevor>
Component:	sssd	Assignee:	sssd-maintainers <sssd-maintainers>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	42	CC:	abokovoy, atikhono, lslebodn, pbrezina, sbose, ssorce, sssd-maintainers
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2025-08-15 11:31:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Trev 2025-08-15 11:15:21 UTC

Description of problem:

sssd fails to start the idp module due to a missing libsss_idp.so library

[dp_module_open_lib] (0x1000): Loading module [idp] with path [/usr/lib64/sssd/libsss_idp.so]
[dp_module_open_lib] (0x0010): Unable to load module [idp] with path [/usr/lib64/sssd/libsss_idp.so]: /usr/lib64/sssd/libsss_idp.so: cannot open shared object file: No such file or directory
[dp_load_module] (0x0020): Unable to create DP module.
[dp_target_init] (0x0010): Unable to load module idp

Version-Release number of selected component (if applicable):

2.11.1-1.fc42

How reproducible:

install sssd-idp, configure sssd.conf to include a domain with "id_provider = idp"  and then attempt to start the sssd service. The above was captured with "debug_level = 9"

Inspecting the rpm does not list the required library.

bash-5.2# rpm -ql sssd-idp
/etc/krb5.conf.d/sssd_enable_idp
/usr/lib/.build-id
/usr/lib/.build-id/0b/747161a609b78de1a1470a76975794572f5bab
/usr/lib/.build-id/bb/a6be68aab1336de346ac8d41d083b59d25f42a
/usr/lib64/sssd/modules/sssd_krb5_idp_plugin.so
/usr/libexec/sssd/oidc_child
/usr/share/sssd/krb5-snippets/sssd_enable_idp


Steps to Reproduce:
1. dnf install sssd-idp
2. create /etc/sssd.conf per above
3. syetemctl start sssd

Actual results:

sssd fails to start

Expected results:

sssd starts

Additional info:

Comment 1 Alexey Tikhonov 2025-08-15 11:31:20 UTC

(In reply to Trev from comment #0)
> 
> sssd fails to start the idp module due to a missing libsss_idp.so library
...
> Version-Release number of selected component (if applicable):
> 
> 2.11.1-1.fc42

This feature is enabled only starting f-43 on purpose:
https://src.fedoraproject.org/rpms/sssd/blob/f43/f/sssd.spec#_5