Bug 1461899 – Loading enterprise principals doesn't work with a primed cache

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1461899 - Loading enterprise principals doesn't work with a primed cache

Summary:	Loading enterprise principals doesn't work with a primed cache

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 7
Classification:	Red Hat
Component:	sssd (Show other bugs)
Sub Component:
Version:	7.3
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Varun Mylaraiah
QA Contact:	ipa-qe
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-06-15 10:24 EDT by Jakub Hrozek
Modified:	2018-04-10 13:12 EDT (History)
CC List:	11 users (show)

See Also:
Fixed In Version:	sssd-1.16.0-15.el7
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2018-04-10 13:11:33 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Console output and krb5_child log (72.59 KB, text/plain) 2018-01-30 07:56 EST, Varun Mylaraiah	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHEA-2018:0929	None	None	None	2018-04-10 13:12 EDT

Groups: None (edit)

Description Jakub Hrozek 2017-06-15 10:24:13 EDT

This bug is created as a clone of upstream ticket:
https://pagure.io/SSSD/sssd/issue/3431

The IPA subdomains code only loaded the naming suffixes when the subdomains changed. As effect, just restarting sssd breaks logins with enterprise principals.

The workaround is to remove the cache.

Comment 3 Jakub Hrozek 2017-06-21 05:31:05 EDT

master: fcfc1450a846519f2c74e864a12fad65aa54189b

Comment 19 Lukas Slebodnik 2018-01-23 12:29:35 EST

master:
* a8a3fcbf6f75a7c2665e8bf503c186e07dfab333

sssd-1-14:
* 76957f07f79fb30634d2b5b4bed56cf30307c079

Comment 24 Varun Mylaraiah 2018-01-30 07:56 EST

Created attachment 1388387 [details]
Console output and krb5_child log

Verified 
sssd-1.16.0-15.el7.x86_64

Now, "enterprise principal [true]", with UPN being used.


Attaching krb5_child log and Console output

Comment 27 errata-xmlrpc 2018-04-10 13:11:33 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:0929

Note You need to log in before you can comment on or make changes to this bug.