Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1456531

Summary:	Option name typos are not detected with validator function of sssctl config-check command in domain sections
Product:	Red Hat Enterprise Linux 7	Reporter:	Madhuri <mupadhye>
Component:	sssd	Assignee:	SSSD Maintainers <sssd-maint>
Status:	CLOSED ERRATA	QA Contact:	Madhuri <mupadhye>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.4	CC:	grajaiya, jhrozek, lslebodn, mkosek, mzidek, pbrezina, sgoveas, tscherf
Target Milestone:	rc	Keywords:	Regression
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:	sssd-1.15.2-38.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-08-01 09:06:23 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Madhuri 2017-05-29 14:14:39 UTC

Description of problem:
Not giving any error message when there is typo in option name in any INI files.

Version-Release number of selected component (if applicable):
sssd-1.15.2-37

How reproducible:
Always

Steps to Reproduce:
1. Install sssd package.
2. Create sssd.conf or any snippet file with typo in option name.
3. Run #sssctl config-check

Actual results:
Not showing any error message

Expected results:
Should give proper error message.

Additional info:

Comment 3 Lukas Slebodnik 2017-05-29 16:01:02 UTC

*** Bug 1456557 has been marked as a duplicate of this bug. ***

Comment 4 Lukas Slebodnik 2017-05-30 08:41:27 UTC

Upstream ticket:
https://pagure.io/SSSD/sssd/issue/3356

Comment 5 Lukas Slebodnik 2017-05-31 14:45:02 UTC

master:
* 39c5aee02fa36ba1cb78fe7669f272fec5277018
* 0bfc49133ab1a5f912b8cedef3f690318df7c50f
* 88d723396c674ed5e5d03e859e9f7ce1779a927b
* 537103f296b7112d9fd505af941a6d83d7902eb1
* a6a750d981a7a9088daa823ed3894b94e156a763
* f433e4dc4d80bef398ed8d9aac123963015bd2f0
* 0ab730850171c125cd4ce578c123656dd88eb484

Comment 6 Lukas Slebodnik 2017-06-01 10:56:56 UTC

master:
* 291b6bfd499fd64416b75c05c8846a5102600f3c
* 5919e884d3f71456f50b92236e002d98747be017

Comment 8 Madhuri 2017-06-02 13:05:14 UTC

Tested with:
sssd-1.15.2-39.el7.x86_64
sssd-tools-1.15.2-39.el7.x86_64

Steps followed during verification:
1) Install sssd and sssd-tools package on client
2) Set up configuration file with typos in options and add one misplaced option.

# cat /etc/sssd/sssd.conf
[sssd]
config_file_version = 2
domains = AD

[nss]
filter_groups = root
filter_users = root

[pam]

[domain/AD]
idprovider = ldap
services = nss, pam
ldap_uri = ldap://pluto.sssdad.com
ldap_schema = ad
ldap%_search_base = dc=sssdad,dc=com
ldap_force_upper_case_realm = True
auth_provider = krb5
krb5_server = pluto.sssdad.com
krb5_realm = SSSDAD.COM
ldap_sasl_mech = GSSAPI
ldap_referrals = false
debug_level = 9

3) Run # sssctl config-check.

# sssctl config-check
Issues identified by validators: 3
[rule/allowed_domain_options]: Attribute 'idprovider' is not allowed in section 'domain/AD'. Check for typos.
[rule/allowed_domain_options]: Attribute 'services' is not allowed in section 'domain/AD'. Check for typos.
[rule/allowed_domain_options]: Attribute 'ldap%_search_base' is not allowed in section 'domain/AD'. Check for typos.

Messages generated during configuration merging: 0

Used configuration snippet files: 0

Comment 9 errata-xmlrpc 2017-08-01 09:06:23 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2017:2294