SSSD / sssd

#872 IPA provider fails initgroups() if user is not a member of any group
Closed: Fixed Opened by sgallagh.

Closed: Fixed
Reopen Issue

Description of problem

Attempting to perform an initgroups() lookup of a user that belongs to no
groups causes SSSD to throw an error and return no results for the user.

Version-Release number of selected component (if applicable)

sssd-1.5.1-34.el6

How reproducible

Every time

Steps to Reproduce

  1. Configure sssd using ipa-client-install to point at a FreeIPA v2 server.
  2. Add a new user to the FreeIPA v2 server (e.g. newuser)
  3. Remove this user from the ipausers group (to which they are added automatically)
  4. Verify with 'ipa user-show newuser' that the user is not a member of any groups
  5. On the client running SSSD, as root run 'su - newuser'

Actual results

id: cannot find name for user ID 115200007

Expected results

No error message

Additional info

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.6.0

Fixed by 307466d34a32324f1aebb0720f8fd98f9dfd4a9d

resolution: => fixed
status: new => closed

Backported to sssd-1-5

0a25d94f5cb78797f086031e91777c91244fdc67

milestone: SSSD 1.6.0 => SSSD 1.5.8
rhbz: =>

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.8

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1914

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
Normal
defect
IPA Provider
1.5.7
0
1
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.