Bug 689886

Summary:	group memberships are not populated correctly during IPA provider initgroups
Product:	Red Hat Enterprise Linux 6	Reporter:	Jakub Hrozek <jhrozek>
Component:	sssd	Assignee:	Stephen Gallagher <sgallagh>
Status:	CLOSED ERRATA	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.0	CC:	benl, dpal, grajaiya, jgalipea, nsoman, prc
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	sssd-1.5.1-16.el6	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	689887 (view as bug list)		Environment:
Last Closed:	2011-05-19 11:39:11 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	689887

Description Jakub Hrozek 2011-03-22 17:58:55 UTC

Description of problem:
when performing initgroups in the IPA provider, only the user we are performing initgroups for is stored in cache.

Version-Release number of selected component (if applicable):
sssd-1.5.1-14.el6.x86_64

How reproducible:
always

Steps to Reproduce:
0. start with clear cache
1. log in as user who is a member of a group that contains at least one other user
2. run id to get the list of the groups
3. getent passwd <group> only shows the user you are logged in as
  
Actual results:
getent group does not show all users

Expected results:
all users are reported

Additional info:
The root cause is storing the group as not expired even when not all the members are present in the cache. Next time getgrnam/getgrgid is called, the group is not refreshed with the other members and just returned.

Comment 1 Jakub Hrozek 2011-03-22 17:59:21 UTC

Upstream ticket - https://fedorahosted.org/sssd/ticket/822

Comment 4 Namita Soman 2011-04-07 15:39:33 UTC

sgallagh stopped by...and i realized i hadn't started with step 0 - clean cache. With a clean cache, verified successfully that the group listed all its users

Comment 5 errata-xmlrpc 2011-05-19 11:39:11 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html

Comment 6 errata-xmlrpc 2011-05-19 13:10:07 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html