#2598 sssd_nss segfaults if initgroups request is by UPN and doesn't find anything
Closed: Fixed Opened by jhrozek.

If a client requests initgroups by UPN for a user that doesn't exist, sssd_nss crashes.

Please note it's not sufficient to test using "id" as "id" does "getpwnam" first which finds the user doesn't exist before running initgroups.


Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1200093

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1200093 1200093]

Fields changed

owner: somebody => jhrozek
patch: 0 => 1
status: new => assigned

  • master:
    • aa648535f445e7a95bf6dedc7c43bb5f94ab7354
    • ff19b24a93a50c8a62b5c2621e45d101e3a00781
    • 84a4c4fcc93b3dcc70604817a05f7943606ff596
    • 9cc2223e0bc0478c1b47a47fd71bba7e7129492d
  • sssd-1-12:
    • d8006abd55f2ce0698e09213b8374e9071e70016 (only the fix without unit tests)

milestone: NEEDS_TRIAGE => SSSD 1.12.5

Fields changed

resolution: => fixed
status: assigned => closed

Metadata Update from @jhrozek:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.12.5

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3639

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata