Bug 1745519 - sosreport should include kdcproxy configurations
Summary: sosreport should include kdcproxy configurations
Keywords:
Status: CLOSED DUPLICATE of bug 1688764
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: sos
Version: ---
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: 8.0
Assignee: Pavel Moravec
QA Contact: Miroslav Hradílek
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-08-26 10:11 UTC by Oliver Falk
Modified: 2023-06-26 14:58 UTC (History)
8 users (show)

Fixed In Version: sos-3.8-2.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-01-21 16:03:48 UTC
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Patch to included some KDC proxy configs (565 bytes, patch)
2019-08-26 10:13 UTC, Oliver Falk
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Github sosreport sos pull 1806 0 None closed [ipa] collect kdcproxy configs 2020-02-25 14:17:46 UTC
Red Hat Issue Tracker RHELPLAN-27864 0 None None None 2023-06-26 14:58:19 UTC

Description Oliver Falk 2019-08-26 10:11:18 UTC
Description of problem:
Upon debugging some IPA issues with my customer, I recognized that KDC proxy configurations are not included with sosreport.

Version-Release number of selected component (if applicable): any
Opening this BZ against RHEL8, since we're not adding any new features to RHEL7 any more, but I'm confident this applies to all RHEL versions / all sos versions.


How reproducible: always.


Steps to Reproduce:
1. Run sosreport on an IPA server with KDC proxy.

Actual results:
KDC proxy configuration files are missing.


Expected results:
- /etc/ipa/kdcproxy/kdcproxy.conf
- /etc/kdcproxy.conf
- /etc/ipa/kdcproxy/ipa-kdc-proxy.conf

are included in the sosreport.


Additional info:
I'll attach my patch suggestion, but feel free to extend it further to additional files.

Comment 1 Oliver Falk 2019-08-26 10:13:52 UTC
Created attachment 1608074 [details]
Patch to included some KDC proxy configs

Comment 2 Pavel Moravec 2019-09-15 20:21:31 UTC
Thanks for the suggestion and patch proposal.

Just a question - can't the collected files contain some sensitive information (like password to the proxy?)? If so, could you show an example of such line, such that we can write a reg.exp. to scrub the password?

Comment 3 Oliver Falk 2019-09-30 10:06:35 UTC
Pavel,
 sorry for not getting back to you earlier - I had some pretty busy past 2 weeks.

It's the kdc >server!< proxy. Therefore, no, there are no sensitive informations in that file.

Oliver

Comment 4 Pavel Moravec 2019-10-01 06:28:52 UTC
Thanks for feedback, upstream PR raised.

Comment 9 Pavel Moravec 2020-01-21 16:03:48 UTC
.. and in fact this is a dup (a subset of) 1688764 :).

*** This bug has been marked as a duplicate of bug 1688764 ***


Note You need to log in before you can comment on or make changes to this bug.