Red Hat Bugzilla – Bug 1259512
sss_override : The local override user is not found
Last modified: 2015-11-19 06:40:16 EST
Description of problem: When using sss_override the local override user is not found Version-Release number of selected component (if applicable): sssd-client-1.13.0-24.el7.x86_64 How reproducible: Always Steps to Reproduce: 1. Add AD user to override [root@rhel72 ~]# sss_override user-add dlavu@sssd2012.com -n dlavu1@sssd2012.com SSSD needs to be restarted for the changes to take effect. 2. restart sssd 3. get entry on user Actual results: root@rhel72 ~]# getent passwd dlavu1@sssd2012.com no results Expected results: User is found *NOTE* Searching by the original name, the user is found and the override is viewed correctly [root@rhel72 ~]# getent passwd dlavu@sssd2012.com dlavu1@sssd2012.com@sssd2012.com:*:349001105:349000513:Dan Lavu:/home/dlavu1@sssd2012.com:/bin/bash Additional info: Logs are attached.
Created attachment 1069589 [details] sssd_logs
You should not use fqn in --name. The correct command is: sss_override user-add dlavu@sssd2012.com -n dlavu1 The question is, is it something we want to change?
Okay, that does work but it is confusing. Either we document it better or we change it to accept the same format.
Upstream ticket: https://fedorahosted.org/sssd/ticket/2782
Marking as exception? Rationale - the fix for this issue would be easy and low-risk. At the same time, this bug deviates sssd's behaviour from the proprietary tool we'd like to displace. Please ack for 7.2 exception. Thank you!
Patch is awaiting review.
* master: 4649f19ea4b11c428ca75803beda8d495a0c9335
Verified against sssd-ad-1.13.0-33.el7.x86_64. [root@sssd1-13-0-29 ~]# sss_override user-add -n dlavu123@sssdad2012r2.com dlavu@sssdad2012r2.com SSSD needs to be restarted for the changes to take effect. [root@sssd1-13-0-29 ~]# service sssd restart Redirecting to /bin/systemctl restart sssd.service [root@sssd1-13-0-29 ~]# getent passwd dlavu123@sssdad2012r2.com dlavu123@sssdad2012r2.com:*:768001104:768000513:Dan Lavu:/home/dlavu123@sssdad2012r2.com:/bin/bash
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-2355.html