#990 sssd crashes during auth while there exists multiple external hosts along with managed host.
Closed: Fixed Opened by sgallagh.

https://bugzilla.redhat.com/show_bug.cgi?id=736314

Description of problem:
Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64
How reproducible:
Always
Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show  rule2 --all --raw
  dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  cn: rule2
  ipaenabledflag: TRUE
  externalhost: external.lab.eng.pnq.redhat.com
  externalhost: ironhide.lab.eng.pnq.redhat.com
  sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  accessruletype: allow
  ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
  memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  objectclass: ipaassociation
  objectclass: ipahbacrule
2. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com
Actual results:
ssh auth session hangs and sssd crashes.
Expected results:
Auth should be successful without any crash.
Additional info:

Fields changed

coverity: =>
description: https://bugzilla.redhat.com/show_bug.cgi?id=736314

{{{
Description of problem:

Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show rule2 --all --raw
dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
cn: rule2
ipaenabledflag: TRUE
externalhost: external.lab.eng.pnq.redhat.com
externalhost: ironhide.lab.eng.pnq.redhat.com
sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
accessruletype: allow
ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
objectclass: ipaassociation
objectclass: ipahbacrule

  1. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com

Actual results:
ssh auth session hangs and sssd crashes.

Expected results:
Auth should be successful without any crash.

Additional info:
}}}
=> https://bugzilla.redhat.com/show_bug.cgi?id=736314

{{{
Description of problem:

Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show rule2 --all --raw
dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
cn: rule2
ipaenabledflag: TRUE
externalhost: external.lab.eng.pnq.redhat.com
externalhost: ironhide.lab.eng.pnq.redhat.com
sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
accessruletype: allow
ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
objectclass: ipaassociation
objectclass: ipahbacrule

  1. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com

Actual results:
ssh auth session hangs and sssd crashes.

Expected results:
Auth should be successful without any crash.

Additional info:
}}}

milestone: NEEDS_TRIAGE => SSSD 1.5.14
owner: somebody => sgallagh
patch: => 1
rhbz: => 736314
status: new => assigned
tests: => 0
testsupdated: => 0
upgrade: => 0

Fixed by:
- c2160564b280be4c44453e04f62220b97504fc91 (master)
- af91dbe002bc1c939c60374b9c42c3ce0343032a (sssd-1-6)
- a2a954c4186aaa9e9dd027aebb986062fc5670e7 (sssd-1-5)

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: 736314 => [https://bugzilla.redhat.com/show_bug.cgi?id=736314 736314]

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.14

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2032

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata