SSSD / sssd

#3002 [RFE] Improve libwbclient functionality wrt fully qualified names
Closed: cloned-to-github by pbrezina. Opened by stalbker.

Closed: cloned-to-github
Reopen Issue

Can't resolve names from SIDs with my current config(in attachments).

/* TODO: it would be nice to have a sss_nss_getnamebysid() call which
* return name and domain separately. */
p = strchr(fq_name, '@');
if (p == NULL) {
    wbc_status = WBC_ERR_UNKNOWN_FAILURE;
    goto done;
}

This part of the function wbcLookupSid() returns error, because var fq_name contains only user account without domain.

[root@i2367-app033 sssd]# net lookup name 2367-01-205
S-1-5-21-116022207-583602576-2121419680-1908272 1 (User) EXAMPLE\2367-01-205
[root@i2367-app033 sssd]# net lookup sid S-1-5-21-116022207-583602576-2121419680-1908272
Could not lookup name S-1-5-21-116022207-583602576-2121419680-1908272

If i uncomment default_domain_suffix in sssd.conf, wbcLookupSid() works.

[root@i2367-app033 sssd]# net lookup name 2367-01-205
S-1-5-21-116022207-583602576-2121419680-1908272 1 (User) EXAMPLE\2367-01-205
[root@i2367-app033 sssd]# net lookup sid S-1-5-21-116022207-583602576-2121419680-1908272
S-1-5-21-116022207-583602576-2121419680-1908272 1 (User) example.tax.com\2367-01-205

But returns "example.tax.com" instead of "EXAMPLE".

Is it a bug or wrong configuration?

attachment
sssd.conf

Currently if is expected that fully qualified names are used. As you can see by the comment in the code I plan to improve this to allow a more flexible configuration, but unfortunately I didn't found time to do so.

About DNS domain name vs NetBIOS domain name, if you set 'ull_name_format = %1$s@%3$s' in sssd.conf (see man sssd.conf for details, you have to remove the cache an restart SSSD if you change this option) you should always get the the NetBIOS domain name. With this 'getent passwd' will return the name with the NetBIOS domain name as well.

If you don't mind I would relabel this ticket as an RFE to remind me that improvements are needed here?

Sure.
And sorry if something is wrong. It's my first ticket.

'full_name_format = %1$s@%3$s' solved my problem. Thank you very much.

Fields changed

type: defect => enhancement

Per Sumit's request I marked this ticket as an enhancement and I propose 1.15 for now (sorry, 1.14 is already too big).

summary: libwbclient -> wbcLookupSid bug => [RFE] Improve libwbclient functionality wrt fully qualified names

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.15 beta

Fields changed

rhbz: => todo

Metadata Update from @stalbker:
- Issue set to the milestone: SSSD Future releases (no date set yet)

Metadata Update from @thalman:
- Custom field design_review reset (from 0)
- Custom field mark reset (from 0)
- Custom field patch reset (from 0)
- Custom field review reset (from 0)
- Custom field sensitive reset (from 0)
- Custom field testsupdated reset (from 0)
- Issue close_status updated to: None
- Issue tagged with: Canditate to close

Duplicate of https://pagure.io/SSSD/sssd/issue/3002?

Metadata Update from @pbrezina:
- Custom field design_review reset (from false)
- Custom field mark reset (from false)
- Custom field patch reset (from false)
- Custom field review reset (from false)
- Custom field sensitive reset (from false)
- Custom field testsupdated reset (from false)
- Issue untagged with: Canditate to close

Is not sssd-libwbclient going to be deprecated?

Metadata Update from @atikhonov:
- Custom field design_review reset (from false)
- Custom field mark reset (from false)
- Custom field patch reset (from false)
- Custom field review reset (from false)
- Custom field sensitive reset (from false)
- Custom field testsupdated reset (from false)

Is not sssd-libwbclient going to be deprecated?

Yes, I think it would make sense to open a deprecation ticket and make all sssd-libwbclient tickets a duplicate of this.

bye,
Sumit

Metadata Update from @sbose:
- Custom field design_review reset (from false)
- Custom field mark reset (from false)
- Custom field patch reset (from false)
- Custom field review reset (from false)
- Custom field sensitive reset (from false)
- Custom field testsupdated reset (from false)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4043

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
High
enhancement
SSSD
1.13.4
false
false
false
todo
false
false
false
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.