It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash. Acknowledgements: This issue was discovered by Sumit Bose of Red Hat.
IPA upstream bug: https://fedorahosted.org/freeipa/ticket/4908
Related upstream commits: https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=8c89807b112585d85c1941d3d58b546e79ea2409 https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=50c8f0c80175c7812bb523ab2387b19a94245b59 https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=c15a407cbfaed163a933ab137eed16387efe25d2
Created freeipa tracking bugs for this issue: Affects: fedora-all [bug 1206047]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2015:0728 https://rhn.redhat.com/errata/RHSA-2015-0728.html
freeipa-4.1.4-1.fc22, slapi-nis-0.54.2-1.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
freeipa-4.1.4-1.fc21, slapi-nis-0.54.2-1.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.