Bug 785873

Summary: IPA host search base cannot be set
Product: Red Hat Enterprise Linux 6 Reporter: Stephen Gallagher <sgallagh>
Component: sssdAssignee: Stephen Gallagher <sgallagh>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3CC: dpal, grajaiya, jgalipea, jhrozek, ksiddiqu, prc
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: sssd-1.8.0-10.el6 Doc Type: Bug Fix
Doc Text:
No technical note required
 Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-20 11:54:15 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Stephen Gallagher 2012-01-30 20:11:47 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/1151

When setting IPA host search base, the provider calls `sdap_parse_search_base()` with `IPA_HOST_SEARCH_BASE`. sdap_parse_search_base only knows about SDAP_* search bases, so setting the host search base never succeeds.
Comment 2 Jenny Severance 2012-02-14 21:14:37 UTC 
Please add steps to reproduce and verify this bug
Comment 3 Jakub Hrozek 2012-02-15 09:57:45 UTC 
It turns out that this bug is only about confusing log message. When starting the IPA provider you would see a message saying:

[sdap_parse_search_base] (0x0100): Unknown search base type: [6]

But the function that parses search bases would recover and parse the search base just fine.

When we fix the log message you shouldn't see the "Unknown search base" log message anymore.
Comment 6 Stephen Gallagher 2012-04-10 16:51:27 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No technical note required
Comment 7 Kaleem 2012-05-04 12:12:06 UTC 
Verified.

SSSD version:
=============
[root@ipa63server ~]# rpm -q sssd 
sssd-1.8.0-25.el6.x86_64
[root@ipa63server ~]#

Now there is no log message "Unknown search base" in log.

Excerpts from sssd_domain.log:
=============================
[root@ipa63server sssd]# cat sssd_testrelm.com.log |grep search_base
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_hbac_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_host_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_selinux_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_user_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_group_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_service_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has value (null)
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:44 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0100): Option ipa_host_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ipa_hbac_search_base set to cn=hbac,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0100): Option ipa_selinux_search_base set to cn=selinux,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_user_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_group_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_service_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has value (null)
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_autofs_options] (0x1000): Option ldap_autofs_search_base set to cn=default,cn=automount,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [AUTOFS][cn=default,cn=automount,dc=testrelm,dc=com][SUBTREE][]
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com
(Fri May  4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com
[root@ipa63server sssd]#
Comment 9 errata-xmlrpc 2012-06-20 11:54:15 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0747.html