#2385 ad: group membership is empty when id mapping is off and tokengroups are enabled
Closed: Fixed Opened by pbrezina.

When id_provider=ad, id mapping is off but tokengroups are used the first initgroups attempt yields empty membership (only primary group is shown). The successive initgroups works correctly.

  • SIDs are acquired correctly from tokengroups
  • if SID is already in the cache the membership is updated
  • missing SIDs are downloaded but membership is not updated

Reported by jhodrien on IRC.


Fields changed

description: When id_provider=ad, id mapping is off but tokengroups are used the first initgroups attempt yields empty membership (only primary group is shown). The successive initgroups works correctly.

  • SIDs are acquired correctly from tokengroups
  • if SID is already in the cache the membership is updated
  • missing SIDs are downloaded but membership is not updated
    => When id_provider=ad, id mapping is off but tokengroups are used the first initgroups attempt yields empty membership (only primary group is shown). The successive initgroups works correctly.

  • SIDs are acquired correctly from tokengroups

  • if SID is already in the cache the membership is updated
  • missing SIDs are downloaded but membership is not updated

Reported by jhodrien on IRC.

Fields changed

owner: somebody => pbrezina
status: new => assigned

Fields changed

patch: 0 => 1

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1122158

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1122158 1122158]

  • master:
    • ed346bcc84b8a326996e5550771773d8e63f17c2
    • e6fa71b990d7068d66b98015ae54aae399cc84f1
  • sssd-1-11:
    • e00a71a43980963adf9b9f5e3d2f356f175498e9
    • c123f5352ac406b5d02acab88642a9564fe31381

resolution: => fixed
status: assigned => closed

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11.7

Metadata Update from @pbrezina:
- Issue assigned to pbrezina
- Issue set to the milestone: SSSD 1.11.7

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3427

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata