SSSD / sssd

#3508 Issues with certificate mapping rules
Closed: Fixed Opened by sbose.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1489895

Description of problem:
Two issues were found related to certificate mapping rules.
1. If <EKU> is used in the matching rule with only OIDs, e.g. <EKU>1.2.3.4, the
SSSD backend will crash. Since the rules are read during startup SSSD might
even fail to start.
2. If the rules are re-read, e.g. during an offline-online cycle with
    kill -USR1 $(pidof sssd)
    kill -USR2 $(pidof sssd)
the SSSD backend might crash if the certificate mapping rules are evaluated for
a trusted AD domain.

https://github.com/SSSD/sssd/pull/376

Metadata Update from @sbose:
- Issue set to the milestone: None

Metadata Update from @sbose:
- Custom field patch adjusted to on

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1489895

Issue linked to Bugzilla: Bug 1489895
  • master:
  • f2e70ec742cd7aab82b74d7e4b424ba3258da7aa
  • f5a8cd60c6f377af1954b58f007d16cf3f6dc846

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue set to the milestone: SSSD 1.15.4
- Issue status updated to: Closed (was: Open)

Metadata Update from @lslebodn:
- Custom field type adjusted to 1.15.3

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.16.0 (was: SSSD 1.15.4)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4534

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
None
on
https://bugzilla.redhat.com/show_bug.cgi?id=1489895
1.15.3
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.