Bug 867820

Summary: realm crashes when realmd.conf contains empty computer-ou
Product: [Fedora] Fedora Reporter: Miroslav Vadkerti <mvadkert>
Component: realmdAssignee: Stef Walter <stefw>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: high    
Version: 18CC: stefw, yaneti
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-20 16:11:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
grep realmd /var/log/audit/audit.log > audit.log none

Description Miroslav Vadkerti 2012-10-18 11:13:20 UTC 
Description of problem:
The realm crashes if blank computer-out used

# cat /etc/realmd.conf
[radi08.segad.lab.sjc.redhat.com]
computer-ou = 

# realm --verbose join --user=Zoidberg radi08.segad.lab.sjc.redhat.com
 * Searching for kerberos SRV records for domain: _kerberos._udp.radi08.segad.lab.sjc.redhat.com
 * Searching for MSDCS SRV records on domain: _kerberos._tcp.dc._msdcs.radi08.segad.lab.sjc.redhat.com
 * ad1.radi08.segad.lab.sjc.redhat.com:88 
 * Found kerberos DNS records for: radi08.segad.lab.sjc.redhat.com
 * Found AD style DNS records for: radi08.segad.lab.sjc.redhat.com
 * Successfully discovered: radi08.segad.lab.sjc.redhat.com
Password for Zoidberg: 
 * Required files present: /usr/sbin/sss_cache, /usr/sbin/sssd, /usr/bin/net
realm: Couldn't join realm: Message did not receive a reply (timeout by message bus)

Version-Release number of selected component (if applicable):
realmd-0.9-1.fc18

How reproducible:
100% on my virtual machine

Steps to Reproduce:
1. install realmd
2. have an AD handy
3. set realmd.conf with blank computer-ou
  
Actual results:
realm: Couldn't join realm: Message did not receive a reply (timeout by message bus)
That seems to be a crash as abrt detected it

Expected results:
No crash

Additional info:
Comment 1 Petr Sklenar 2012-10-18 13:33:37 UTC 
Created attachment 629380 [details]
grep realmd /var/log/audit/audit.log > audit.log

I could see many of the selinux denials during similar cmd:
realm join --user=Administrator X.Y.Z

machine was freshly installed f18 with:
# rpm -q realmd selinux-policy
realmd-0.9-1.fc18.x86_64
selinux-policy-3.11.1-35.fc18.noarch
Comment 2 Fedora Update System 2012-10-20 06:44:43 UTC 
realmd-0.10-1.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/realmd-0.10-1.fc18
Comment 3 Fedora Update System 2012-10-21 05:57:34 UTC 
Package realmd-0.10-1.fc18:
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing realmd-0.10-1.fc18'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-16542/realmd-0.10-1.fc18
then log in and leave karma (feedback).
Comment 4 Fedora Update System 2012-10-30 18:51:21 UTC 
realmd-0.11-1.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/realmd-0.11-1.fc18
Comment 5 Fedora Update System 2012-12-20 16:11:06 UTC 
realmd-0.11-1.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.