SSSD / sssd

#3963 Responders: processing of `filter_users`/`filter_groups` should avoid calling blocking NSS API
Closed: Fixed by jhrozek. Opened by atikhonov.

Closed: Fixed
Reopen Issue

Current implementation of sss_ncache_prepopulate() might call NSS API for users and groups in filter_* lists. This call might block (for example due to fail of external module) and thus result in termination of responder by own watchdog.
For details see https://bugzilla.redhat.com/show_bug.cgi?id=1666819
This also might be related with #3813

Users and groups from filter_* lists should be added to ncache unconditionally, without redundant is_user_local_by_name() check (thus not involving getpw*()).

Metadata Update from @atikhonov:
- Issue assigned to atikhonov

Metadata Update from @atikhonov:
- Custom field rhbz adjusted to 1666819
- Issue priority set to: major (was: minor)

Metadata Update from @atikhonov:
- Issue tagged with: bug

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to 1666819, https://bugzilla.redhat.com/show_bug.cgi?id=1666819 (was: 1666819)

Issue linked to Bugzilla: Bug 1666819

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.2

PR: https://github.com/SSSD/sssd/pull/779

Metadata Update from @atikhonov:
- Issue tagged with: PR

Commit ddc49401 fixes this issue
  • master: ddc49401bed931f48c8658b8e3a53555206466b1
  • sssd-1-16: 6ff01196fe5cf43bae1fa635c04dc1dc3e097912

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4936

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata

PR bug

None
None
Normal
1666819, https://bugzilla.redhat.com/show_bug.cgi?id=1666819
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.