Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1608515

Summary: sssd.conf was incorrectly marked for file ownership as sssd:sssd
Product: [oVirt] ovirt-engine-extension-aaa-misc Reporter: schandle
Component: Packaging.rpmAssignee: Martin Perina <mperina>
Status: CLOSED DUPLICATE QA Contact: meital avital <mavital>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: masterCC: bugs, michal.skrivanek
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-07-26 04:30:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description schandle 2018-07-25 16:49:16 UTC
Description of problem:
After upgrading rhvh-4.1-0.20180425.0 to rhvh-4.2.4.3-0.20180627 the host is unable to be ssh'd into by rhel idm accounts using sssd.  The owner and group were changed from root:root to sssd:sssd

Version-Release number of selected component (if applicable):
4.2-20180627.0.el7_5
sssd-1.16.0-19.el7_5.5.x86_64
sssd-ldap-1.16.0-19.el7_5.5.x86_64


How reproducible:
everytime 

Steps to Reproduce:
1.created a /etc/sssd/sssd.conf wither root:root permissions 
2.yum update


Actual results:
[root@RHVH ~]# ls -alt /etc/sssd/sssd.conf
-rw-------. 1 sssd sssd 613 Jun 12 12:59 /etc/sssd/sssd.conf

in messages
~~~
Jun 12 10:13:06 RHVH sssd: Cannot read config file /etc/sssd/sssd.conf. Please check that the file is accessible only by the owner and owned by root.root.
Jun 12 10:13:06 RHVH systemd: sssd.service: main process exited, code=exited, status=4/NOPERMISSION
Jun 12 10:13:06 RHVH systemd: Unit sssd.service entered failed state.
Jun 12 10:13:06 RHVH systemd: sssd.service failed.
~~~


Expected results:
while upgrading, the sssd.conf file should have permissions for root:root

Additional info:
As a workaround:
[root@RHVH ~]# chown root:root /etc/sssd/sssd.conf
[root@RHVH ~]# ls -alt /etc/sssd/sssd.conf
-rw-------. 1 root root 613 Jun 12 12:59 /etc/sssd/sssd.conf
[root@RHVH ~]# systemctl start sssd

Comment 1 Michal Skrivanek 2018-07-26 04:30:27 UTC

*** This bug has been marked as a duplicate of bug 1608513 ***