Bug 1298975 - [RFE] Backport the groups merging feature
[RFE] Backport the groups merging feature
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: glibc (Show other bugs)
Unspecified Unspecified
high Severity medium
: rc
: ---
Assigned To: Martin Sebor
Sergey Kolosov
Vladimír Slávik
: FutureFeature, Patch
: 1204503 (view as bug list)
Depends On:
Blocks: 1292074 1298243 1390370
  Show dependency treegraph
Reported: 2016-01-15 10:06 EST by Jakub Hrozek
Modified: 2017-08-01 14:06 EDT (History)
21 users (show)

See Also:
Fixed In Version:
Doc Type: Enhancement
Doc Text:
*glibc* now supports group merging The ability to merge group members from different Name Service modules has been added to *glibc*. As a result, management of centralized user access control and group membership across multiple hosts is now easier.
Story Points: ---
Clone Of:
Last Closed: 2017-08-01 14:06:55 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

External Trackers
Tracker ID Priority Status Summary Last Updated
Sourceware 19072 None None None 2016-01-26 09:44 EST

  None (edit)
Description Jakub Hrozek 2016-01-15 10:06:51 EST
Description of problem:
Upstream libc recently gained the possibility to merge group members from different Name Service modules. We should backport this feature to RHEL.

This would mainly enable deployments that depend on centralized directories to define members of well-known local groups (like wheel) in the centralized directory in addition to local files

Version-Release number of selected component (if applicable):
Whatever will be in RHEL-7.3

How reproducible:

Steps to Reproduce
1. set "group: files [SUCCESS=merge] sss" in nsswitch.con
2. define a group wheel in IPA or AD
3. getgrnam(wheel)

Actual results:
only local members are returned

Expected results:
getgrnam returns both members of the local wheel group as well as the members defined in the remote directory are returned

Additional info:
The related upstream bugzilla is https://sourceware.org/bugzilla/show_bug.cgi?id=19072
Comment 1 Jakub Hrozek 2016-01-15 10:08:26 EST
Cockpit would also benefit from this feature.
Comment 3 Florian Weimer 2016-01-26 09:42:28 EST
*** Bug 1204503 has been marked as a duplicate of this bug. ***
Comment 4 Florian Weimer 2016-01-26 09:43:51 EST
To clarify, the patch has not been accepted yet upstream.
Comment 25 errata-xmlrpc 2017-08-01 14:06:55 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.