Bug 798317
Summary: | sssd crashes when ipa_hbac_support_srchost is set to true. | ||||||
---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Gowrishankar Rajaiyan <grajaiya> | ||||
Component: | sssd | Assignee: | Stephen Gallagher <sgallagh> | ||||
Status: | CLOSED ERRATA | QA Contact: | IDM QE LIST <seceng-idm-qe-list> | ||||
Severity: | unspecified | Docs Contact: | |||||
Priority: | unspecified | ||||||
Version: | 6.3 | CC: | grajaiya, jgalipea, prc | ||||
Target Milestone: | rc | ||||||
Target Release: | --- | ||||||
Hardware: | Unspecified | ||||||
OS: | Unspecified | ||||||
Whiteboard: | |||||||
Fixed In Version: | sssd-1.8.0-12.el6 | Doc Type: | Bug Fix | ||||
Doc Text: |
No technical note required
|
Story Points: | --- | ||||
Clone Of: | Environment: | ||||||
Last Closed: | 2012-06-20 11:55:14 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Gowrishankar Rajaiyan
2012-02-28 15:57:15 UTC
Created attachment 566329 [details]
sssd_lab.eng.pnq.redhat.com.log
Upstream ticket: https://fedorahosted.org/sssd/ticket/1215 Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: No technical note required verified as part of ipa automation:: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipa-hbacsvc-client-bug766876_2: ipa_hbac_support_srchost is set to true - Case 2 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: kinit as admin with password Secret123 was successful. :: [ PASS ] :: Kinit as admin user :: [ PASS ] :: Running 'cat /etc/sssd/sssd.conf' :: [ PASS ] :: Running 'cat /etc/sssd/sssd.conf' :: [ PASS ] :: Clearing cache :: [ PASS ] :: Running 'service sssd restart' :: [ LOG ] :: Verifies https://bugzilla.redhat.com/show_bug.cgi?id=798317 :: [ PASS ] :: Authentication successful for user766876, as expected :: [ PASS ] :: Running 'ssh_auth_success user766876 testpw123 beast.testrelm.com' :: [ PASS ] :: Running 'sed -i 's/ipa_hbac_support_srchost = true/ipa_hbac_support_srchost = false/g' /etc/sssd/sssd.conf' :: [ PASS ] :: Running 'service sssd restart' :: [ LOG ] :: Duration: 28s :: [ LOG ] :: Assertions: 9 good, 0 bad :: [ PASS ] :: RESULT: ipa-hbacsvc-client-bug766876_2: ipa_hbac_support_srchost is set to true - Case 2 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Manual verification: [root@primenova ~]# ipa hbacrule-add-service rule1 [member HBAC service]: sshd [member HBAC service group]: Rule name: rule1 Enabled: TRUE Users: shanks Hosts: primenova.lab.eng.pnq.redhat.com Source Hosts: rodimus.lab.eng.pnq.redhat.com Services: sshd ------------------------- Number of members added 1 ------------------------- [root@primenova ~]# [root@primenova ~]# egrep -v ^# /etc/sssd/sssd.conf [domain/lab.eng.pnq.redhat.com] ipa_hbac_support_srchost = True cache_credentials = True krb5_store_password_if_offline = True ipa_domain = lab.eng.pnq.redhat.com id_provider = ipa auth_provider = ipa access_provider = ipa ipa_hostname = primenova.lab.eng.pnq.redhat.com chpass_provider = ipa ipa_server = primenova.lab.eng.pnq.redhat.com ldap_tls_cacert = /etc/ipa/ca.crt [sssd] services = nss, pam, ssh config_file_version = 2 domains = lab.eng.pnq.redhat.com [nss] [pam] [sudo] [autofs] [ssh] [root@primenova ~]# [root@primenova ~]# ssh -l shanks $HOSTNAME shanks.eng.pnq.redhat.com's password: Connection closed by 10.65.201.100 [root@primenova ~]# Verified: sssd-1.8.0-31.el6.x86_64 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0747.html |