Bug 1596292
| Summary: | home dir disappear in sssd cache on the IPA master for AD users [rhel-7.5.z] | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Oneata Mircea Teodor <toneata> |
| Component: | sssd | Assignee: | SSSD Maintainers <sssd-maint> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 7.5 | CC: | grajaiya, jhrozek, ksiddiqu, lmanasko, lslebodn, mkosek, mzidek, ndehadra, pbrezina, saime, sbose, sgoveas, tscherf |
| Target Milestone: | rc | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | sssd-1.16.0-19.el7_5.7 | Doc Type: | Bug Fix |
| Doc Text: |
Previously, when searching for a per-user group, the SSSD service used the Global Catalog (GC) connection instead of the LDAP connection. As a consequence, some attributes have been removed from the sssd cache because GC does not contain all of them, for example the home directory value. With this update, SSSD now uses the LDAP connection when searching user-private groups. As a result, the described problem no longer occurs.
|
Story Points: | --- |
| Clone Of: | 1583251 | Environment: | |
| Last Closed: | 2018-09-25 19:05:39 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1583251 | ||
| Bug Blocks: | |||
|
Description
Oneata Mircea Teodor
2018-06-28 14:25:26 UTC
Verified using version:
sssd-1.16.0-19.el7_5.8.x86_64
ipa-server-4.5.4-10.el7_5.4.3.x86_64
389-ds-base-1.3.7.5-27.el7_5.x86_64
krb5-server-1.15.1-19.el7.x86_64
Verified the bug for FIPS mode and NON_FIPS mode
Console:
------------
:: [ 06:40:59 ] :: [ BEGIN ] :: Running 'service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start'
Redirecting to /bin/systemctl stop sssd.service
Redirecting to /bin/systemctl start sssd.service
:: [ 06:41:02 ] :: [ PASS ] :: Command 'service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service sssd start' (Expected 0, got 0)
:: [ 06:41:02 ] :: [ BEGIN ] :: Running 'sleep 60'
:: [ 06:42:02 ] :: [ PASS ] :: Command 'sleep 60' (Expected 0, got 0)
:: [ 06:42:02 ] :: [ BEGIN ] :: Running 'getent passwd 'IPAAD2016\Administrator' > /tmp/tmpout.ipa_trust_func_bug_1034920 2>&1'
:: [ 06:42:02 ] :: [ PASS ] :: Command 'getent passwd 'IPAAD2016\Administrator' > /tmp/tmpout.ipa_trust_func_bug_1034920 2>&1' (Expected 0, got 0)
:: [ 06:42:02 ] :: [ BEGIN ] :: Running 'sleep 30'
:: [ 06:42:32 ] :: [ PASS ] :: Command 'sleep 30' (Expected 0, got 0)
:: [ 06:42:33 ] :: [ BEGIN ] :: Running 'cat /tmp/tmpout.ipa_trust_func_bug_1034920'
administrator:*:1577600500:1577600500:Administrator:/home/ipaad2016.test/administrator:
:: [ 06:42:33 ] :: [ PASS ] :: Command 'cat /tmp/tmpout.ipa_trust_func_bug_1034920' (Expected 0, got 0)
:: [ 06:42:33 ] :: [ LOG ] :: HOMEDIR /home/ipaad2016.test/administrator expected
With the above observation, marking bz as verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:2756 |