Bug 790554

Summary:	secondary group memberships not picked up when using nss db backend
Product:	[Fedora] Fedora	Reporter:	Robert Kennedy <rt>
Component:	glibc	Assignee:	Jeff Law <law>
Status:	CLOSED RAWHIDE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	16	CC:	aoliva, fweimer, jakub, law, schwab
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-17 05:16:22 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Robert Kennedy 2012-02-14 20:20:39 UTC

Description of problem:

The secondary group memberships are not computed correctly when using the db backend in nss.

Version-Release number of selected component (if applicable):
glibc-2.14.90-24.fc16.4.x86_64

How reproducible:
Always


Steps to Reproduce:
cd /var/db; make
Edit /etc/nsswitch.conf to force group and initgroups to use db backend with no files fallback.
  
Actual results:

# getent group wheel
wheel:x:10:robertk
# groups robertk
robertk : robertk

Expected results:

# getent group wheel
wheel:x:10:robertk
# groups robertk
robertk : robertk wheel

Comment 1 Alexandre Oliva 2012-02-17 02:46:32 UTC

This is caused by a typo in the group.db rule in /var/db/Makefile.  It's fixed in glibc commit 98591e582047b308de2ed0621088edad5d3cdf8a.  The printf format string ":%s $s %s\n" near the end of the rule should have another % instead of the $.

Comment 2 Jeff Law 2012-02-17 05:16:22 UTC

This is fixed in rawhide & f17.  I'm not planning to backport to F16.  I realize it's a small change, but my focus is shifting to issues affecting F17.