freeipa

#8044 Extdom plugin should not return LDAP_NO_SUCH_OBJECT if there are timeout or other errors
Closed: fixed by abbra. Opened by sbose.

Closed: fixed
Reopen Issue

If there is a timeout during a request to SSSD the extdom plugin might return LDAP_NO_SUCH_OBJECT because in some code paths this is the default error code.

If SSSD on the client receives LDAP_NO_SUCH_OBJECT is will remove the related object (if any) from the local cache. If due to a timeout on the server LDAP_NO_SUCH_OBJECT is received and the existing user is removed from the cache this might cause authentication failures or other unexpected behavior on the client.

See https://bugzilla.redhat.com/show_bug.cgi?id=1717008 for additional details.

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1717008

Metadata Update from @abbra:
- Issue set to the milestone: FreeIPA 4.6.7

master:

  • 9fe984fed7a7091bd1366be95fdfa2f56f777bb8 extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
  • c78cb9404e4fad9a8f4f778cee59c1c2b9038a49 ipa-extdom-extop: test timed out getgrgid_r

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

ipa-4-8:

  • 3bb72545fc337564e0843b0c72906a9a1e3f6a06 extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
  • 0ead6f59732e8b3370c5d8d05acd29f2d56c52bb ipa-extdom-extop: test timed out getgrgid_r

ipa-4-6:

  • 574a615e61ca74b08e2bd7e1e820757f88150418 extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
  • 387ed98e59ba4df8d3fd435cfc84f055970c064e ipa-extdom-extop: test timed out getgrgid_r

ipa-4-7:

  • a0a16df8a9a171c6508a04970ba3b5321d43ddfa extdom: unify error code handling especially LDAP_NO_SUCH_OBJECT
  • f87ee14da5c734e6c6d2455da6272712c567c091 ipa-extdom-extop: test timed out getgrgid_r

master:

  • e5e0693aa27c1002c4b57ea33533047fc0aafef8 Extdom plugin should not return error (32)/'No such object'

ipa-4-8:

  • 1b1e7196e405f4e37a4e89a949af2b5b43d0a1ab Extdom plugin should not return error (32)/'No such object'

ipa-4-7:

  • 83e3f5d105a8d52328fbd966bf82404760c51668 Extdom plugin should not return error (32)/'No such object'

ipa-4-6:

  • 17536af58b5a2d1ae1adf7e741dade7b3f84179a Extdom plugin should not return error (32)/'No such object'
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.