SSSD / sssd

#153 provider = files not returning users in valid defined range - no minId and maxId configured
Closed: Invalid Opened by jgalipea.

Closed: Invalid
Reopen Issue

Description[[BR]]
provider = files as back end is not returning users in valid defined range with no minId set.[[BR]]

Configuration[[BR]]

[services]
description =  Local Service Configuration
activeServices = nss, pam
reconnection_retries = 3
[services/nss]
description = NSS Responder Configuration
filterGroups = root
filterUsers = root
debug-level = 4
[services/dp]
description = Data Provider Configuration
debug-level = 4
[services/pam]
description = PAM Responder Configuration
[services/monitor]
description = Service Monitor Configuration
[domains]
description = Domains served by SSSD
domains = FILES
[domains/FILES]
description = Local Files Users and groups domain
enumerate = TRUE
maxId = 1999
provider = files

Debug[[BR]]

[sssd[be[files]]] [sysdb_search_entry_done] (6): Error: Entry not Found!
[sssd[be[files]]] [sysdb_add_user_send] (2): Supplied uid [1] is not in the allowed range [1000-1999].
[sssd[be[files]]] [sysdb_add_user_send] (6): Error: 34 (Numerical result out of range)
[sssd[be[files]]] [sysdb_store_user_add_done] (6): Error: 34 (Numerical result out of range)
[sssd[be[files]]] [sysdb_search_entry_done] (6): Error: Entry not Found!
[sssd[be[files]]] [sysdb_add_user_send] (2): Supplied uid [2] is not in the allowed range [1000-1999].
[sssd[be[files]]] [sysdb_add_user_send] (6): Error: 34 (Numerical result out of range)
[sssd[be[files]]] [sysdb_store_user_add_done] (6): Error: 34 (Numerical result out of range)
[sssd[be[files]]] [sysdb_search_entry_done] (6): Error: Entry not Found!

/etc/passwd[[BR]]

root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
avahi-autoipd:x:499:499:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin
oprofile:x:498:498:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
polkituser:x:87:87:PolicyKit:/:/sbin/nologin
avahi:x:497:497:avahi-daemon:/var/run/avahi-daemon:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
rpc:x:32:32:Rpcbind Daemon:/var/lib/rpcbind:/sbin/nologin
pulse:x:496:496:PulseAudio System Daemon:/var/run/pulse:/sbin/nologin
apache:x:48:48:Apache:/var/www:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
smolt:x:495:490:Smolt:/usr/share/smolt:/sbin/nologin
torrent:x:494:489:BitTorrent Seed/Tracker:/var/lib/bittorrent:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
gdm:x:42:42::/var/lib/gdm:/sbin/nologin
jenny:x:500:500::/home/jenny:/bin/bash
jimi:x:501:501::/home/jimi:/bin/bash

EXPECTED: [[BR]]
all users returned by getent -s sss passwd

ACTUAL:[[BR]]
no users returned

Fields changed

summary: provider = files not returning users in valid defined range => provider = files not returning users in valid defined range - no minId and maxId configured

Jenny the default min ID for any backend is 1000
So I'd say this behavior is expected.

Fields changed

doc: 0 => 1
tests: 0 => 1

If minId is unset, it defaults to 1000. This is expected behavior.

resolution: => invalid
status: new => closed

Fields changed

tests: 1 => 0
testsupdated: 0 => 1

Jenny, what were you expecting in the way of doc updates here? Or, if this is expected behaviour as Simo says, can I ignore it (and set doc = 0)?

thanks

The docs should reflect that if min_id is unspecified, it defaults to 1000 for any backend. This is currently noted in the manpages, but since it may be unexpected to users of the SSSD (since traditionally Red Hat has used UID 500 as the lower bound), we should at least mention it in passing in the documentation.

Thanks sgallagh. Couldn't have said it better.

Fields changed

doc: 1 => 0
docupdated: 0 => 1

Fields changed

rhbz: => 0

Metadata Update from @jgalipea:
- Issue set to the milestone: SSSD 0.6.0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1195

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
Normal
defect
SSSD
master
1
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.