Bug 709094

Summary: nslcd lookups for 2-character long group names now failing
Product: Red Hat Enterprise Linux 6 Reporter: Luke Reeves <luke>
Component: nss-pam-ldapdAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.1CC: prc
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-05-31 14:10:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Luke Reeves 2011-05-30 15:18:42 UTC
Description of problem:
We've upgraded a bunch of OpenLDAP based systems to Redhat 6.1. It seems now that nslcd is no longer passing lookups for 2-character long groups to the backend LDAP server, which breaks some things in our environment.

Version-Release number of selected component (if applicable):


How reproducible:
nss-pam-ldapd-0.7.5-7.el6.x86_64

Steps to Reproduce:
1. Create a two character group in an LDAP server ("qa" in my environment")
2. Query for the group from any Redhat 6.1 client using "getent group qa"
  
Actual results:
Nothing is returned, and the backend server is not queried

Expected results:
-bash-3.2$ getent group qa
qa:*:5678:username1,username2

Additional info:

Comment 2 Nalin Dahyabhai 2011-05-31 14:10:15 UTC

*** This bug has been marked as a duplicate of bug 706860 ***