Red Hat Bugzilla – Bug 1090653
segfault in sssd_be when second domain tree users are queried while joined to child domain
Last modified: 2015-03-29 23:51:56 EDT
Created attachment 889093 [details] sssd and abrt logs Description of problem: When joined to domain in one part of the forest, segfaults are observed when querying users from a different tree in the forest. This users are still resolved. Version-Release number of selected component (if applicable): Using version: sssd-1.11.2-65.el7 How reproducible: intermittent Steps to Reproduce: Using our stock QE AD forest layout: Primary: sssdad.com Child: child1.sssdad.com Second tree: sssdad_tree.com testing phase ad_other_dc_01 joins the child domain under the root domain. This test phase checks to make sure users for the root domain and the child resolve. The ad_other_dc_02 phase of the automation checks to make sure users for the second tree are resolved. The users properly resolve and this test phase happens at Wed Apr 23 16:07:12 EDT 2014 in the logs. A segfault is observed after this in dmesg and message log. Apr 23 16:07:13 longdhcp-13-129-86 kernel: sssd_be[32229]: segfault at 0 ip 00007ffad03655e8 sp 00007fffd0c4b340 error 4 in libsss_ad.so[7ffad0339000+38000] The phase ad_other_dc_03 joins the second tree domain and make sure users for the root domain and the second tree domain users resolve. The ad_other_dc_04 phase of the automation checks to make sure users for the child domain resolve. These users properly resolve and this test phase happens at Wed Apr 23 16:07:45 EDT 2014 in the logs. A segfault is observed after this in dmesg and message log. Apr 23 16:07:46 longdhcp-13-129-86 kernel: sssd_be[961]: segfault at 0 ip 00007fa6c62205e8 sp 00007fffdb2521f0 error 4 in libsss_ad.so[7fa6c61f4000+38000] Attached the abrt and sssd debug logs.
Upstream ticket: https://fedorahosted.org/sssd/ticket/2322
tested sssd-1.11.2-67.el7.x86_64 on RTT build RHEL-7.0-20140507.0 and passed. https://beaker.engineering.redhat.com/jobs/651619 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_02: bz 1077328 1090653 1097323 forest user lookup when joined to child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Running 'id administrator@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Running 'id user1_dom2@sssdad_tree.com' (Expected 0, got 0) :: [ PASS ] :: Running 'su_success user1_dom2@sssdad_tree.com Secret123' (Expected 0, got 0) :: [ PASS ] :: File '/var/log/messages' should not contain 'sssd_be\[[0-9]*\]: segfault' :: [ LOG ] :: Duration: 19s :: [ LOG ] :: Assertions: 4 good, 0 bad :: [ PASS ] :: RESULT: ad_other_dc_02: bz 1077328 1090653 1097323 forest user lookup when joined to child domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ad_other_dc_04: bz 1077328 1090653 1097323 forest user lookup when joined to second tree domain :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Running 'id administrator@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Running 'id user1_dom3@child1.sssdad.com' (Expected 0, got 0) :: [ PASS ] :: Running 'su_success user1_dom3@child1.sssdad.com Secret123' (Expected 0, got 0) :: [ PASS ] :: File '/var/log/messages' should not contain 'sssd_be\[[0-9]*\]: segfault' :: [ LOG ] :: Duration: 19s :: [ LOG ] :: Assertions: 4 good, 0 bad :: [ PASS ] :: RESULT: ad_other_dc_04: bz 1077328 1090653 1097323 forest user lookup when joined to second tree domain
Verified with sssd-1.12.2-16.el7 . No crashes are seen in the automation test run and all tests passes.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2015-0441.html