#3931 proxy provider is not working with enumerate=true when trying to fetch all groups
Closed: Fixed by jhrozek. Opened by atikhonov.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1665867

Description of problem:
The proxy provider is not working with enumerate=true when trying to fetch all
groups
Version-Release number of selected component (if applicable):
sssd-2.0.0-36.el8.x86_64
How reproducible:
always
Steps to Reproduce:
1. Configure sssd with a proxy provider
2. Fetch all groups using '# getent group'
Actual results:
Fetching all groups take too much time(approx 80 to 90 seconds)
Expected results:
Should not take that much time to fetch all groups.
Additional info:
# cat /etc/sssd/sssd.conf
[sssd]
config_file_version = 2
domains = proxy, ldap
sbus_timeout = 30
services = nss, pam
[domain/proxy]
auth_provider = proxy
cache_credentials = True
enumerate = TRUE
id_provider = proxy
debug_level = 0xFFF0
proxy_lib_name = ldap
proxy_pam_target = sssdproxyldap
filter_users = puser10
use_fully_qualified_names = True
[domain/ldap]
id_provider = ldap
auth_provider = ldap
cache_credentials = FALSE
ldap_search_base = dc=bos,dc=redhat,dc=com
chpass_provider = ldap
ldap_id_use_start_tls = True
debug_level = 0xFFF0
min_id  = 1000
enumerate = TRUE
ldap_uri = ldaps://server.example.com:636
ldap_tls_cacert = /etc/openldap/certs/cacert2.pem
[nss]
filter_groups = root
filter_users = root
debug_level = 9
[pam]

Metadata Update from @atikhonov:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1665867

Metadata Update from @atikhonov:
- Issue assigned to atikhonov

PR: https://github.com/SSSD/sssd/pull/737

Metadata Update from @atikhonov:
- Issue tagged with: bug

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.1

Metadata Update from @jhrozek:
- Issue tagged with: PR

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.2 (was: SSSD 2.1)

Commit cd1538bc fixes this issue

  • 8efa20204e0a24d0fc2c4135aa35524ae32dbbbb
  • cd1538bc92a319a19915d3a19efd9d5e013f7e75
  • 29ac739ee186bab2e3a0111fcc8f43cb70401b42
  • cc9f0f419b4c6bcd7f1a4d9f6ed45c89a33de9dc
  • 0f62cc9fbe27887462f322540abde3b8279c6b2f
  • feb08323cc80cd8a487f991c04e99c3c2d4c5da

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4911

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata