SSSD / sssd

#400 LOCAL domain: Can not deleted nested groups and user member
Closed: Fixed Opened by jgalipea.

Closed: Fixed
Reopen Issue

Description[[BR]]
Setting up two levels of nested groups with user membership, then deleting the top parent groups, results in not being able to delete the remaining groups and user member.[[BR]]

Error Message:[[BR]]

[root@localhost mail]# sss_groupdel Engineering
No such group in local domain. Removing groups only allowed in local domain.
[root@localhost mail]# sss_groupdel Sales
No such group in local domain. Removing groups only allowed in local domain.
[root@localhost mail]# sss_groupdel "Development Engineering"
No such group in local domain. Removing groups only allowed in local domain.
[root@localhost mail]# sss_userdel salesenguser
No such user in local domain. Removing users only allowed in local domain.

LDB users:[[BR]]

[root@localhost mail]# ldbsearch -H /var/lib/sss/db/sssd.ldb -b "cn=users,cn=LOCAL,cn=sysdb"
asq: Unable to register control with rootdse!
# record 1
dn: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
objectClass: user
name: salesenguser
fullName: salesenguser
gecos: salesenguser
homeDirectory: /home/salesenguser
loginShell: /bin/bash
createTimestamp: 1265205156
uidNumber: 1012
gidNumber: 1012
memberof: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Sales,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Company,cn=groups,cn=LOCAL,cn=sysdb
distinguishedName: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
# record 2
dn: cn=users,cn=LOCAL,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=LOCAL,cn=sysdb
# returned 2 records
# 2 entries
# 0 referrals

LDB Groups:[[BR]]

[root@localhost mail]# ldbsearch -H /var/lib/sss/db/sssd.ldb -b "cn=groups,cn=LOCAL,cn=sysdb"
asq: Unable to register control with rootdse!
# record 1
dn: cn=groups,cn=LOCAL,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=LOCAL,cn=sysdb
# record 2
dn: name=Sales,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Sales
createTimestamp: 1265205137
gidNumber: 1010
lastUpdate: 1265205137
dataExpireTimestamp: 0
member: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
memberuid: salesenguser
distinguishedName: name=Sales,cn=groups,cn=LOCAL,cn=sysdb
# record 3
dn: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Engineering
createTimestamp: 1265205133
gidNumber: 1009
lastUpdate: 1265205133
dataExpireTimestamp: 0
member: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberuid: salesenguser
distinguishedName: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
# record 4
dn: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Development Engineering
createTimestamp: 1265205146
gidNumber: 1011
lastUpdate: 1265205146
dataExpireTimestamp: 0
member: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
memberuid: salesenguser
memberof: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
distinguishedName: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
# returned 4 records
# 4 entries
# 0 referrals

Steps to Reproduce:

1. install SSSD and configure LOCAL domain.
2. Add groups
    sss_groupadd Company
    sss_groupadd Engineering
    sss_groupadd Sales
    sss_groupadd "Development Engineering"
3. Add user
    sss_useradd salesenguser
4. Nest Groups
    sss_groupmod -a Company Engineering
    sss_groupmod -a Company Sales
    sss_groupmod -a Engineering "Development Engineering"
5. Add user memberships
    sss_usermod -a "Development Engineering" salesenguser
    sss_usermod -a Sales salesenguser
6. Delete top parent group
    sss_groupdel Company
7. Attempt to delete the remaining.
    sss_groupdel Engineering
    sss_groupdel Sales
    sss_groupdel "Development Engineering"
    sss_userdel salesenguser

VERSION TESTED:[[BR]]

sssd-1.0.99-0.2010020113git3c401be.fc12.i686

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.1
owner: somebody => jhrozek

Fixed by 3ea37e96974387d57593dfb1010ee6974c7d9e1e

fixedin: => 1.1.0
resolution: => fixed
status: new => closed
tests: 0 => 1

This is already automated. In groupshow test suite, in the trunk branch.

tests: 1 => 0
testsupdated: 0 => 1

Fields changed

rhbz: => 0

Metadata Update from @jgalipea:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.1

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1442

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
SSSD
master
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.