Bug 674172 - Group members are not sanitized in nested group processing
Summary: Group members are not sanitized in nested group processing
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: sssd
Version: 6.0
Hardware: All
OS: Linux
unspecified
high
Target Milestone: rc
: ---
Assignee: Stephen Gallagher
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-01-31 20:48 UTC by Stephen Gallagher
Modified: 2015-01-04 23:46 UTC (History)
6 users (show)

Fixed In Version: sssd-1.5.1-4.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-05-19 11:38:29 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2011:0560 0 normal SHIPPED_LIVE Low: sssd security, bug fix, and enhancement update 2011-05-19 11:38:17 UTC

Description Stephen Gallagher 2011-01-31 20:48:21 UTC
Description of problem:

rfc2307bis_nested_groups_update_sysdb() and save_rfc2307bis_user_memberships() both call sysdb_search_groups() with a non-sanitized member_dn.

Version-Release number of selected component (if applicable):
sssd-1.5.1-3.el6

How reproducible:
Every time

Steps to Reproduce:
1. Create a series of groups in RFC2307bis whose names include parentheses. e.g. "Group (Group with parens)"
2. Create a user whose memberships indirectly include a group from above (not direct members, only parent groups of direct members)
3. Attempt to run "id username"
  
Actual results:
The user is missing several groups from the results

Expected results:
All groups should be represented correctly.

Additional info:
Tracked upstream at
https://fedorahosted.org/sssd/ticket/785

Comment 3 Gowrishankar Rajaiyan 2011-04-11 06:48:23 UTC
# id rfc2307bis_user1
uid=99999(rfc2307bis_user1) gid=99999(rfc2307bis_group1)
groups=99999(rfc2307bis_group1),100000(rfc2307bis(group2),100003(rfc2307bis)(group5),100002(rfc2307bis()group4),100001(rfc2307bis)group3)

Groups with parenthesis displayed as expected.

# rpm -qi sssd | head
Name        : sssd                         Relocations: (not relocatable)
Version     : 1.5.1                             Vendor: Red Hat, Inc.
Release     : 25.el6                        Build Date: Fri 08 Apr 2011 10:53:31 PM IST
Install Date: Mon 11 Apr 2011 11:27:08 AM IST      Build Host: x86-003.build.bos.redhat.com
Group       : Applications/System           Source RPM: sssd-1.5.1-25.el6.src.rpm
Size        : 3462773                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://fedorahosted.org/sssd/
Summary     : System Security Services Daemon

Comment 4 errata-xmlrpc 2011-05-19 11:38:29 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html

Comment 5 errata-xmlrpc 2011-05-19 13:09:25 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0560.html


Note You need to log in before you can comment on or make changes to this bug.