SSSD / sssd

#247 Implement 2 pass method to retrieve groups also for the initgroups call
Closed: Fixed Opened by simo.

Closed: Fixed
Reopen Issue

This allows to make sure all group membeships are correct when someone performs "id username" and enumeration is not in use.

Fixed in:
b520654440b8162c886bde0270b2b7fe9e191125

resolution: => fixed
status: new => closed

Fields changed

fixedin: => 1.0.0rc
tests: 0 => 1

right now this is working with ldap users and their group memberships, but not local users.[[BR]]
Group memberships

[root@localhost ~]# ldbsearch -H /var/lib/sss/db/sssd.ldb objectclass=group
asq: Unable to register control with rootdse!
# record 1
dn: name=test1,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: test1
createTimestamp: 1257864777
gidNumber: 1001
lastUpdate: 1257864777
dataExpireTimestamp: 1257864857
member: name=test,cn=users,cn=LOCAL,cn=sysdb
distinguishedName: name=test1,cn=groups,cn=LOCAL,cn=sysdb
# record 2
dn: name=test2,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: test2
createTimestamp: 1257864779
gidNumber: 1002
lastUpdate: 1257864779
dataExpireTimestamp: 1257864859
member: name=test,cn=users,cn=LOCAL,cn=sysdb
distinguishedName: name=test2,cn=groups,cn=LOCAL,cn=sysdb
# record 3
dn: name=test3,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: test3
createTimestamp: 1257864781
gidNumber: 1003
lastUpdate: 1257864781
dataExpireTimestamp: 1257864861
member: name=test,cn=users,cn=LOCAL,cn=sysdb
distinguishedName: name=test3,cn=groups,cn=LOCAL,cn=sysdb

id command results[[BR]]

[root@localhost ~]# id -G test
1000
[root@localhost ~]# id test
uid=1000(test) gid=1000(test) groups=1000(test)

resolution: fixed =>
status: closed => reopened

Closing as this bug was to address "ldap" back ends only. Opening new bug for local domain.

resolution: => fixed
status: reopened => closed

Fields changed

tests: 1 => 0
testsupdated: 0 => 1

Fields changed

rhbz: => 0

Metadata Update from @simo:
- Issue assigned to simo
- Issue set to the milestone: SSSD 1.0 RC

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1289

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Low
defect
SSSD
master
1
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.