SSSD / sssd

#803 Check for removed group memberships at login time while using IPA schema
Closed: Fixed Opened by sbose.

Closed: Fixed
Reopen Issue

If a user is removed from a group on a LDAP server with RFC2307bis, this group membership is not removed from the cache when the user logs in.

Adjusting the summary. This was only happening when using the IPA schema (with memberOf). Normal RFC2307bis was behaving fine.

milestone: NEEDS_TRIAGE => SSSD 1.5.2
owner: somebody => sgallagh
status: new => assigned
summary: Check for removed group memberships at login time while using RFC2307bis => Check for removed group memberships at login time while using IPA schema

Fixed by b11bf49b6719c6f8025e9f51f626f8a49887de25

Fields changed

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @sbose:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.2

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1845

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
LDAP Provider
1.5.1
None
0
None
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.