Bug 738621
| Summary: | Lookup fails for non-primary usernames with multi-valued uid. | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Kaushik Banerjee <kbanerje> | |
| Component: | sssd | Assignee: | Stephen Gallagher <sgallagh> | |
| Status: | CLOSED ERRATA | QA Contact: | Chandrasekar Kannan <ckannan> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 6.2 | CC: | benl, dpal, grajaiya, jgalipea, jhrozek, jzeleny, prc | |
| Target Milestone: | rc | |||
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | sssd-1.5.1-55.el6 | Doc Type: | Bug Fix | |
| Doc Text: |
Cause: SSSD didn't store alternative entry names in case the entry had them.
Consequence: Entries with multiple names stored in SSSD cache weren't returned by SSSD to NSS client in case they were stored with different name than what NSS client asked for.
Fix: SSSD stores name aliases in cache in addition to the primary name
Result: SSSD is able to return users when queried for either primary or secondary names. SSSD however always return the primary name, even when queried for the secondary name.
|
Story Points: | --- | |
| Clone Of: | ||||
| : | 748878 (view as bug list) | Environment: | ||
| Last Closed: | 2011-12-06 16:40:05 UTC | Type: | --- | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | ||||
| Bug Blocks: | 733382, 748554, 748875, 748878 | |||
|
Description
Kaushik Banerjee
2011-09-15 12:12:38 UTC
Lookup of the non-primary username works now: # getent -s sss passwd kau23 kau23_1:*:232323:232323:kau23:/home/kau23: sssd_LDAP.log shows: (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_parse_entry] (9): OriginalDN: [cn=kau23,ou=Users,dc=example,dc=com]. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_process_result] (8): Trace: sh[0x21e77a0], connected[1], ops[0x2284ec0], ldap[0x21e7db0] (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_get_generic_done] (6): Search result: Success(0), (null) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_get_generic_done] (7): Total count [0] (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_get_users_process] (6): Search for users, returned 1 results. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): start ldb transaction (nesting: 0) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (9): Save user (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_attrs_primary_name] (8): Comparing attribute names [cn] and [uid] (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_attrs_primary_name] (3): The entry has multiple names and the RDN attribute does not match. Will use the first value as fallback. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (7): Adding original DN [cn=kau23,ou=Users,dc=example,dc=com] to attributes of [kau23_1]. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (7): Original memberOf is not available for [kau23_1]. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (7): Original USN value is not available for [kau23_1]. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (7): User principal is not available for [kau23_1]. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_user] (6): Storing info for user kau23_1 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): start ldb transaction (nesting: 1) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_callback": 0x22a06b0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_timeout": 0x22a07d0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Destroying timer event 0x22a07d0 "ltdb_timeout" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Ending timer event 0x22a06b0 "ltdb_callback" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_search_user_by_name] (6): Error: 2 (No such file or directory) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): start ldb transaction (nesting: 2) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_callback": 0x22a06b0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_timeout": 0x22a0330 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Destroying timer event 0x22a0330 "ltdb_timeout" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Ending timer event 0x22a06b0 "ltdb_callback" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_search_user_by_uid] (6): Error: 2 (No such file or directory) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): start ldb transaction (nesting: 3) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_callback": 0x22a2cb0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_timeout": 0x22a2dd0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Destroying timer event 0x22a2dd0 "ltdb_timeout" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Ending timer event 0x22a2cb0 "ltdb_callback" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): commit ldb transaction (nesting: 3) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): start ldb transaction (nesting: 3) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_callback": 0x22a36a0 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_timeout": 0x2279970 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Destroying timer event 0x2279970 "ltdb_timeout" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Ending timer event 0x22a36a0 "ltdb_callback" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): commit ldb transaction (nesting: 3) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): commit ldb transaction (nesting: 2) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): commit ldb transaction (nesting: 1) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_save_users] (9): User 0 processed! (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_attrs_primary_name] (8): Comparing attribute names [cn] and [uid] (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_attrs_primary_name] (3): The entry has multiple names and the RDN attribute does not match. Will use the first value as fallback. (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_callback": 0x22a3560 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Added timed event "ltdb_timeout": 0x2279970 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Destroying timer event 0x2279970 "ltdb_timeout" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): tevent: Ending timer event 0x22a3560 "ltdb_callback" (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sysdb_search_user_by_name] (6): Error: 2 (No such file or directory) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_check_aliases] (9): No user with primary name same as alias kau23 (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [ldb] (9): commit ldb transaction (nesting: 0) (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_get_users_process] (9): Saving 1 Users - Done (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [sdap_id_op_done] (9): releasing operation connection (Thu Oct 13 06:08:54 2011) [sssd[be[LDAP]]] [acctinfo_callback] (4): Request processed. Returned 0,0,Success Verified in version: # rpm -qi sssd | head Name : sssd Relocations: (not relocatable) Version : 1.5.1 Vendor: Red Hat, Inc. Release : 55.el6 Build Date: Thu 06 Oct 2011 08:55:50 PM IST Install Date: Wed 12 Oct 2011 04:55:20 PM IST Build Host: x86-001.build.bos.redhat.com Group : Applications/System Source RPM: sssd-1.5.1-55.el6.src.rpm Size : 3576801 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
Cause: SSSD didn't store alternative entry names in case the entry had them.
Consequence: Entries with multiple names stored in SSSD cache weren't returned by SSSD to NSS client in case they were stored with different name than what NSS client asked for.
Fix: SSSD stores all name aliases in cache. When asked, it matches given name against primary name as well as all aliases.
Result: When asking for entry stored in SSSD cache with different name, that entry is correctly returned.
Technical note updated. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
Diffed Contents:
@@ -1,4 +1,4 @@
Cause: SSSD didn't store alternative entry names in case the entry had them.
Consequence: Entries with multiple names stored in SSSD cache weren't returned by SSSD to NSS client in case they were stored with different name than what NSS client asked for.
-Fix: SSSD stores all name aliases in cache. When asked, it matches given name against primary name as well as all aliases.
+Fix: SSSD stores name aliases in cache in addition to the primary name
-Result: When asking for entry stored in SSSD cache with different name, that entry is correctly returned.+Result: SSSD is able to return users when queried for either primary or secondary names. SSSD however always return the primary name, even when queried for the secondary name.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2011-1529.html |