Bug 646781

Summary: id only returns primary group membership
Product: [Fedora] Fedora Reporter: Marcus Moeller <marcus.moeller>
Component: sssdAssignee: Stephen Gallagher <sgallagh>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: jhrozek, sbose, sgallagh, ssorce
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: sssd-1.5.0-1.fc14 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-01-10 21:30:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
sssd log while running id
none
sssd log without min_uid set
none
sssd.conf none

Description Marcus Moeller 2010-10-26 08:05:36 UTC
Description of problem:

With latest sssd (1.4) an 'id $USERNAME' only returns the primary group whilst groups are returned correctly with getent group (enumerate on).

Comment 1 Jakub Hrozek 2010-10-26 09:29:20 UTC
What is the schema you are using? RFC2307 or RFC2307bis?

Would you mind pasting your sanitized config file along with logfiles?

Comment 2 Marcus Moeller 2010-10-26 13:13:02 UTC
Created attachment 455764 [details]
sssd log while running id

Comment 3 Marcus Moeller 2010-10-26 13:13:34 UTC
We are using RFC2307bis

Comment 4 Stephen Gallagher 2010-10-26 13:18:23 UTC
Your users and groups are being filtered out. Please try removing the 'min_id' and 'max_id' options from sssd.conf and then retry your tests.

Also, please include your config file.

Comment 5 Marcus Moeller 2010-10-26 14:06:23 UTC
Created attachment 455775 [details]
sssd log without min_uid set

Comment 6 Marcus Moeller 2010-10-26 14:06:54 UTC
Created attachment 455776 [details]
sssd.conf

Comment 7 Marcus Moeller 2010-10-26 14:07:18 UTC
removing min_uid leads to exactly the same result

Comment 8 Marcus Moeller 2010-10-26 14:08:38 UTC
Tests without min_id result in exactly the same

Comment 9 Stephen Gallagher 2010-10-26 14:18:06 UTC
Ah, reading through that log, I see that the problem is that with entries that contain parentheses in the distinguished name. We're not properly escaping the search filter, so it's failing because it's not parseable.

We are already tracking this issue upstream: https://fedorahosted.org/sssd/ticket/639

Comment 10 Fedora Update System 2010-12-23 18:45:17 UTC
sssd-1.5.0-1.fc14 has been submitted as an update for Fedora 14.
https://admin.fedoraproject.org/updates/sssd-1.5.0-1.fc14

Comment 11 Fedora Update System 2010-12-25 00:22:25 UTC
sssd-1.5.0-1.fc14 has been pushed to the Fedora 14 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sssd'.  You can provide feedback for this update here: https://admin.fedoraproject.org/updates/sssd-1.5.0-1.fc14

Comment 12 Fedora Update System 2011-01-10 21:29:49 UTC
sssd-1.5.0-1.fc14 has been pushed to the Fedora 14 stable repository.  If problems still persist, please make note of it in this bug report.