Hide Forgot
This bug is created as a clone of upstream ticket: https://fedorahosted.org/sssd/ticket/1151 When setting IPA host search base, the provider calls `sdap_parse_search_base()` with `IPA_HOST_SEARCH_BASE`. sdap_parse_search_base only knows about SDAP_* search bases, so setting the host search base never succeeds.
Please add steps to reproduce and verify this bug
It turns out that this bug is only about confusing log message. When starting the IPA provider you would see a message saying: [sdap_parse_search_base] (0x0100): Unknown search base type: [6] But the function that parses search bases would recover and parse the search base just fine. When we fix the log message you shouldn't see the "Unknown search base" log message anymore.
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: No technical note required
Verified. SSSD version: ============= [root@ipa63server ~]# rpm -q sssd sssd-1.8.0-25.el6.x86_64 [root@ipa63server ~]# Now there is no log message "Unknown search base" in log. Excerpts from sssd_domain.log: ============================= [root@ipa63server sssd]# cat sssd_testrelm.com.log |grep search_base (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_hbac_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_host_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ipa_selinux_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_user_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_group_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_service_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has value (null) (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:44 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0100): Option ipa_host_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ipa_hbac_search_base set to cn=hbac,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0100): Option ipa_selinux_search_base set to cn=selinux,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_user_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_group_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_service_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_sudo_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_autofs_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [dp_get_options] (0x0400): Option ldap_netgroup_search_base has value (null) (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:45 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [DEFAULT][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_user_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [USER][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [GROUP][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_sudo_search_base set to ou=SUDOers,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SUDO][ou=SUDOers,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_netgroup_search_base set to cn=ng,cn=alt,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [NETGROUP][cn=ng,cn=alt,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HOST][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_HBAC][cn=hbac,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [IPA_SELINUX][cn=selinux,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_id_options] (0x0400): Option ldap_group_search_base set to cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [SERVICE][cn=accounts,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [ipa_get_autofs_options] (0x1000): Option ldap_autofs_search_base set to cn=default,cn=automount,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [common_parse_search_base] (0x0100): Search base added: [AUTOFS][cn=default,cn=automount,dc=testrelm,dc=com][SUBTREE][] (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_hbac_search_base has value cn=hbac,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_host_search_base has value cn=accounts,dc=testrelm,dc=com (Fri May 4 17:32:46 2012) [sssd[be[testrelm.com]]] [dp_copy_options] (0x0400): Option ipa_selinux_search_base has value cn=selinux,dc=testrelm,dc=com [root@ipa63server sssd]#
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0747.html