Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1421622

Summary: SSSD - Users/Groups are cached as mixed-case resulting in users unable to sign in
Product: Red Hat Enterprise Linux 7 Reporter: Chinmay Paradkar <cparadka>
Component: sssdAssignee: SSSD Maintainers <sssd-maint>
Status: CLOSED ERRATA QA Contact: Madhuri <mupadhye>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 7.3CC: grajaiya, jhrozek, lslebodn, mkosek, mzidek, pbrezina, sbose, sssd-qe
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: sssd-1.15.1-1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-08-01 09:02:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Chinmay Paradkar 2017-02-13 09:43:46 UTC 
Description of problem:

SSSD to map Active Directory users and groups. Sometimes, SSSD caches the active-directory group names in mixed-case (for example, DomainAdmins versus domainadmins.) When this happens, group names are still being checked as case-sensitive, and so users are unable to log in. 
To explain further, group names are sometimes cached as "DomainAdmins" but authentication is looking for "domainadmins" 

Version-Release number of selected component (if applicable):
sssd-1.14.0-43.el7_3.11.x86_64

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
The case-sensitive issue was fixed as part of the ticket https://fedorahosted.org/sssd/ticket/3235 but this bugzilla talks about the issue in SSSD.
Comment 2 Jakub Hrozek 2017-02-15 11:10:34 UTC 
Upstream ticket:
https://fedorahosted.org/sssd/ticket/3235
Comment 3 Jakub Hrozek 2017-02-15 11:11:18 UTC 
* master: 867bb85ecc8117aa8bdde9add0df8857cf87236e
Comment 10 Madhuri 2017-05-29 10:45:58 UTC 
Tested with:
sssd-1.15.2-37.el7.x86_64

Steps followed during verification:
1. Joint Ad server
2. Checked Ad group
3. Checked information about cached group

# getent group 'domain users'
domain users:*:217800513:test

# getent group 'Domain Users'
domain users:*:217800513:test

# getent group 'DOMAIN USERS'
domain users:*:217800513:test

# getent group 'domain USERS'
domain users:*:217800513:test

# getent group 'DOMAIN users'
domain users:*:217800513:test

# sssctl group-show 'domain users'
Name: domain users
Cache entry creation date: 05/29/17 07:33:52
Cache entry last update time: 05/29/17 10:21:32
Cache entry expiration time: 05/29/17 11:51:32
Cached in InfoPipe: No

# sssctl group-show 'Domain Users'
Name: domain users
Cache entry creation date: 05/29/17 07:33:52
Cache entry last update time: 05/29/17 10:21:32
Cache entry expiration time: 05/29/17 11:51:32
Cached in InfoPipe: No

# sssctl group-show 'DOMAIN USERS'
Name: domain users
Cache entry creation date: 05/29/17 07:33:52
Cache entry last update time: 05/29/17 10:21:32
Cache entry expiration time: 05/29/17 11:51:32
Cached in InfoPipe: No

# sssctl group-show 'DOMAIN users'
Name: domain users
Cache entry creation date: 05/29/17 07:33:52
Cache entry last update time: 05/29/17 10:21:32
Cache entry expiration time: 05/29/17 11:51:32
Cached in InfoPipe: No

# sssctl group-show 'domain USERS'
Name: domain users
Cache entry creation date: 05/29/17 07:33:52
Cache entry last update time: 05/29/17 10:21:32
Cache entry expiration time: 05/29/17 11:51:32
Cached in InfoPipe: No
Comment 11 errata-xmlrpc 2017-08-01 09:02:33 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:2294