#2630 Overrides with --login work in second attempt
Closed: Fixed Opened by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1213822

Description of problem:
With an empty cache idoverride for a ad user with --login works on second
attempt
Version-Release number of selected component (if applicable):
[root@ibm-x3250m4-04 ~]# rpm -q sssd ipa-client
sssd-1.12.4-29.el6.x86_64
ipa-client-3.0.0-46.el6.x86_64
How reproducible:
always
Steps to Reproduce:
On Server
[root@sideswipe ~]# ipa idoverrideuser-add 'default trust view'
aduser07@adtest.qe  --login syncuser07
-------------------------------------------
Added User ID override "aduser07@adtest.qe"
-------------------------------------------
  Anchor to override: aduser07@adtest.qe
  User login: syncuser07
[root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service
sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service
On Client1
[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*;
service sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0
On Client2
[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service
sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0
Additional info:
If a different view is applied to one of the clients getent works as expected
On Server
[root@sideswipe ~]# ipa idview-show hostview --show-hosts
  ID View Name: hostview
  User object overrides: aduser2@adtest.qe
  Group object overrides: grp1
[root@sideswipe ~]# ipa idview-apply hostview --hosts vm-idm-018.ipaviews.test
--------------------------
Applied ID View "hostview"
--------------------------
  hosts: vm-idm-018.ipaviews.test
---------------------------------------------
Number of hosts the ID View was applied to: 1
---------------------------------------------
[root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service
sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service
On Client1
[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*;
service sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0
Works on Client2
[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service
sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1214337 (Red Hat Enterprise Linux 7)

rhbz: [https://bugzilla.redhat.com/show_bug.cgi?id=1213822 1213822] => [https://bugzilla.redhat.com/show_bug.cgi?id=1213822 1213822], [https://bugzilla.redhat.com/show_bug.cgi?id=1214337 1214337]

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
patch: 0 => 1
review: True => 0
selected: =>
testsupdated: => 0

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12.5

  • master: 2ab9a4538eb2e1a255e645f7efdcfd6bb722d265
  • sssd-1-12: 3453e4734d2f7738034af61edb7d33c0c7095d8a

resolution: => fixed
status: new => closed

Please note that it was reported in https://bugzilla.redhat.com/show_bug.cgi?id=1211830#c18 that the patch is incomplete and might cause a segfault.

resolution: fixed =>
status: closed => reopened

Segfault fix:
- master: c520f40d1a2d77cf1d413451b5682297733521ed
- sssd-1-12: e31d5babfd036cf64c9179dc60bbd79f541ef89b

resolution: => fixed
status: reopened => closed

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.12.5

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3671

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata