SSSD / sssd

#2153 If both IPA and LDAP are set up with enumeration on, two enum tasks are running
Closed: Fixed Opened by jhrozek.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1030135

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
Customer is having a problem in that secondary groups will randomly disappear
and about 15 minutes later will reappear.
Version-Release number of selected component (if applicable):
sssd-1.9.2-82.7.el6_4.x86_64
How reproducible:
id <user>
Steps to Reproduce:
1.
2.
3.
Actual results:
secondary groups randomly disappear
Expected results:
secondary groups not disappear
Additional info:
Customer is using IPA server but is not using the default sssd.conf. It should
be mentioned again that about 15 minutes later his secondary groups will show
up when he runs the id command again.

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
milestone: NEEDS_TRIAGE => SSSD 1.11.3
review: True => 0
selected: =>
testsupdated: => 0

Fields changed

owner: somebody => lslebodn

Moving tickets that didn't make 1.11.3 to 1.11.4

milestone: SSSD 1.11.3 => SSSD 1.11.4

We're still talking to the customer who reported the issue. Currently it seems the problem was caused by a server misconfiguration, but we're still waiting on confirmation from the reporter. This ticket shouldn't block 1.11.4, so I'm moving it to 1.11.5 for the time being.

milestone: SSSD 1.11.4 => SSSD 1.11.5

We figured out what the bug was -- when both IPA (for id and auth) and LDAP backends (for sudo) are configured AND enumeration is selected, then the backend will run two concurrent enumeration tasks that might step on one another.

Fields changed

summary: sssd secondary groups will randomly disappear => If both IPA and LDAP are set up with enumeration on, two enum tasks are running

Fields changed

priority: major => critical

Fields changed

patch: 0 => 1
status: new => assigned
  • master: 057cb583f02bf47678c393cb8f1f74861c2b960b
  • sssd-1-11: b52c7b12f69c08b67e3689da98f1230f6731d691

resolution: => fixed
status: assigned => closed
  • sssd-1-9: f52d80dccb56409c178aed4fb43c1ad0195d2a0a

Metadata Update from @jhrozek:
- Issue assigned to lslebodn
- Issue set to the milestone: SSSD 1.11.5

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3195

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Low
defect
SSSD
None
0
1
https://bugzilla.redhat.com/show_bug.cgi?id=1030135
0
0
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.