Red Hat Bugzilla – Bug 678606
User information not updated on login for secondary domains
Last modified: 2015-01-04 18:46:35 EST
+++ This bug was initially created as a clone of Bug #678593 +++ Description of problem: At any PAM action occurring online, SSSD is supposed to perform an initgroups() request to the backend to ensure that user and group memberships are accurate for the login. However, there is a bug identified in 1.5.1 where this lookup is not happening except on the first domain in the list. Version-Release number of selected component (if applicable): sssd-1.5.1-8.el5 How reproducible: Every time Steps to Reproduce: 1. Set up an SSSD configuration with two domains with debug_level = 4 or higher in the [pam] section 3. Log in as a user in the second domain 4. Examine /var/log/sssd/sssd_pam.log Actual results: Only domain1 is checked for user updates. You will see debug message: (Fri Feb 18 09:32:22 2011) [sssd[pam]] [pam_check_user_search] (4): Requesting info for [domain2user@domain1] but not: (Fri Feb 18 09:32:22 2011) [sssd[pam]] [pam_check_user_search] (4): Requesting info for [domain2user@domain2] Expected results: You should see debug messages: (Fri Feb 18 09:32:22 2011) [sssd[pam]] [pam_check_user_search] (4): Requesting info for [domain2user@domain1] (Fri Feb 18 09:32:22 2011) [sssd[pam]] [pam_check_user_search] (4): Requesting info for [domain2user@domain2] Additional info:
Verified in version: # rpm -qi sssd | head Name : sssd Relocations: (not relocatable) Version : 1.5.1 Vendor: Red Hat, Inc. Release : 34.el5 Build Date: Tue 03 May 2011 10:46:07 PM IST Install Date: Tue 10 May 2011 01:20:13 AM IST Build Host: x86-003.build.bos.redhat.com Group : Applications/System Source RPM: sssd-1.5.1-34.el5.src.rpm Size : 3486753 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on therefore solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2011-0975.html