Hide Forgot
Description of problem: Version-Release number of selected component (if applicable): sssd-1.5.1-34.el6 How reproducible: Every time Steps to Reproduce: 1. Set the debug level to 2 or higher 2. Add a user to the filter_users option in [domain/DOMAINNAME] and restart SSSD 3. Run 'id -G <filtered_user>' Actual results: Debug message reads: (Tue May 31 14:14:47 2011) [sssd[nss]] [nss_cmd_initgroups_search] (2): User [DOMAINNAME] does not exist in [localinuxuser]! (negative cache) Expected results: (Tue May 31 14:14:47 2011) [sssd[nss]] [nss_cmd_initgroups_search] (2): User [localinuxuser] does not exist in [DOMAINNAME]! (negative cache) Additional info:
With the steps from the original comment, /var/log/sssd/sssd_nss.log now shows: (Tue Sep 27 16:36:53 2011) [sssd[nss]] [nss_cmd_initgroups_search] (2): User [kau_local] does not exist in [DOMAIN1]! (negative cache) Verified in version: # rpm -qi sssd | head Name : sssd Relocations: (not relocatable) Version : 1.5.1 Vendor: Red Hat, Inc. Release : 52.el6 Build Date: Tue 20 Sep 2011 09:11:03 PM IST Install Date: Mon 26 Sep 2011 05:56:30 PM IST Build Host: x86-010.build.bos.redhat.com Group : Applications/System Source RPM: sssd-1.5.1-52.el6.src.rpm Size : 3550647 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://fedorahosted.org/sssd/ Summary : System Security Services Daemon
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Cause: A debug message in the initgroups code had the parameters for a domain name and user name swapped Consequence: The debug message was confusing Fix: The parameters were fixed Result: The debug message is precise now
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2011-1529.html