Bug 875740
| Summary: | "defaults" entry ignored | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Nikolai Kondrashov <nikolai.kondrashov> | ||||||
| Component: | sssd | Assignee: | Jakub Hrozek <jhrozek> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Kaushik Banerjee <kbanerje> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 6.4 | CC: | grajaiya, jgalipea, okos, pbrezina | ||||||
| Target Milestone: | rc | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | sssd-1.9.2-17.el6 | Doc Type: | Bug Fix | ||||||
| Doc Text: |
No documentation needed.
|
Story Points: | --- | ||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2013-02-21 09:40:08 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | |||||||||
| Bug Blocks: | 881827 | ||||||||
| Attachments: |
|
||||||||
Created attachment 643543 [details]
sssd.conf
Pavel, can you triage this bug before/if we clone it to Trac? Upstream ticket: https://fedorahosted.org/sssd/ticket/1640 Verified fixed in 1.9.2-21.el6. Relevant sudo suite tests pass: :: [ PASS ] :: defaults_without :: [ PASS ] :: defaults_with Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0508.html |
Created attachment 643542 [details] The LDAP directory contents Description of problem: SSSD ignores options from "defaults" entry in LDAP Version-Release number of selected component (if applicable): libsss_autofs-1.9.2-7.el6.x86_64 sssd-1.9.2-7.el6.x86_64 libsss_sudo-1.9.2-7.el6.x86_64 libsss_idmap-1.9.2-7.el6.x86_64 sssd-client-1.9.2-7.el6.x86_64 sudo-1.8.6p3-5.el6.x86_64 How reproducible: always Steps to Reproduce: 1. Use the attached LDIF file to fill LDAP directory 2. Use the attached sssd.conf as the base for client configuration 3. Execute "su -c 'sudo -u user2 whoami' user1" as root Actual results: sudo: no tty present and no askpass program specified Expected results: user2 Additional info: If the sudoOption attributes are moved to the cn=test entry instead, sudo behaves as documented.