Description of problem:


Version-Release number of selected component (if applicable):
sssd-1.5.1-66.el6_2.1.x86_64.rpm

How reproducible:
100%

Steps to Reproduce:
1. Disable allow_all hbacrule as "ipa hbacrule-disable allow_all"
2. Create a hostgroup with UTF characters.
3. Add the client as member to the hostgroup in step 2.
4. Create a hbacrule and add the hostgroup in step 2 as "Source Host Groups"
5. Create a ipa user.
6. From client try to login as the user.

Actual results:
sssd_be crash detected.

Expected results:
Login is successful with no crash detected.

Additional info:

[root@bumblebee ~]# ipa hbacrule-find
--------------------
2 HBAC rules matched
--------------------
  Rule name: allow_all
  User category: all
  Host category: all
  Source host category: all
  Service category: all
  Description: Allow all users to access any host from any host
  Enabled: FALSE

  Rule name: ??
  Enabled: TRUE
  Users: shanks
  Hosts: hp-dl360g5-01.rhts.eng.bos.redhat.com,
bumblebee.lab.eng.pnq.redhat.com
  Source Hosts: hp-dl360g5-01.rhts.eng.bos.redhat.com
  Source Host Groups: ??
  Services: sshd
----------------------------
Number of entries returned 2
----------------------------
[root@bumblebee ~]#


[root@bumblebee ~]# ipa hostgroup-find ??
-------------------
1 hostgroup matched
-------------------
  Host-group: ??
  Description: ??
----------------------------
Number of entries returned 1
----------------------------
[root@bumblebee ~]#


relevant server sssd.conf:

[domain/lab.eng.pnq.redhat.com]
timeout = 30000
cache_credentials = True
krb5_store_password_if_offline = True
ipa_domain = lab.eng.pnq.redhat.com
id_provider = ipa
auth_provider = ipa
access_provider = ipa
ipa_hostname = bumblebee.lab.eng.pnq.redhat.com
chpass_provider = ipa
ipa_server = bumblebee.lab.eng.pnq.redhat.com
ldap_tls_cacert = /etc/ipa/ca.crt
debug_level = 9



[root@bumblebee ~]# gdb
--core=/var/spool/abrt/ccpp-2012-01-03-12\:33\:59-22761/coredump
/usr/libexec/sssd/sssd_be --quiet -ex "thread apply all bt full" -ex "quit"
Reading symbols from /usr/libexec/sssd/sssd_be...Reading symbols from
/usr/lib/debug/usr/libexec/sssd/sssd_be.debug...done.
done.
[New Thread 22761]
Missing separate debuginfo for
Try: yum --disablerepo='*' --enablerepo='*-debuginfo' install
/usr/lib/debug/.build-id/0a/c87124da6b3667e15d65262886e136d5682803
Reading symbols from /lib64/libpam.so.0.82.2...Reading symbols from
/usr/lib/debug/lib64/libpam.so.0.82.2.debug...done.
done.
Loaded symbols for /lib64/libpam.so.0.82.2
Reading symbols from /usr/lib64/libtevent.so.0.9.8...Reading symbols from
/usr/lib/debug/usr/lib64/libtevent.so.0.9.8.debug...done.
done.
Loaded symbols for /usr/lib64/libtevent.so.0.9.8
Reading symbols from /usr/lib64/libtalloc.so.2.0.1...Reading symbols from
/usr/lib/debug/usr/lib64/libtalloc.so.2.0.1.debug...done.
done.
Loaded symbols for /usr/lib64/libtalloc.so.2.0.1
Reading symbols from /lib64/libpopt.so.0.0.0...Reading symbols from
/usr/lib/debug/lib64/libpopt.so.0.0.0.debug...done.
done.
Loaded symbols for /lib64/libpopt.so.0.0.0
Reading symbols from /usr/lib64/libldb.so.0.9.10...Reading symbols from
/usr/lib/debug/usr/lib64/libldb.so.0.9.10.debug...done.
done.
Loaded symbols for /usr/lib64/libldb.so.0.9.10
Reading symbols from /lib64/libdbus-1.so.3.4.0...Reading symbols from
/usr/lib/debug/lib64/libdbus-1.so.3.4.0.debug...done.
done.
Loaded symbols for /lib64/libdbus-1.so.3.4.0
Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib64/librt.so.1
Reading symbols from /lib64/libpcre.so.0.0.1...Reading symbols from
/usr/lib/debug/lib64/libpcre.so.0.0.1.debug...done.
done.
Loaded symbols for /lib64/libpcre.so.0.0.1
Reading symbols from /usr/lib64/libini_config.so.2.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libini_config.so.2.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libini_config.so.2.0.0
Reading symbols from /usr/lib64/libcollection.so.2.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libcollection.so.2.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libcollection.so.2.0.0
Reading symbols from /usr/lib64/libdhash.so.1.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libdhash.so.1.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libdhash.so.1.0.0
Reading symbols from /lib64/liblber-2.4.so.2.5.6...Reading symbols from
/usr/lib/debug/lib64/liblber-2.4.so.2.5.6.debug...done.
done.
Loaded symbols for /lib64/liblber-2.4.so.2.5.6
Reading symbols from /lib64/libldap-2.4.so.2.5.6...Reading symbols from
/usr/lib/debug/lib64/libldap-2.4.so.2.5.6.debug...done.
done.
Loaded symbols for /lib64/libldap-2.4.so.2.5.6
Reading symbols from /usr/lib64/libtdb.so.1.2.1...Reading symbols from
/usr/lib/debug/usr/lib64/libtdb.so.1.2.1.debug...done.
done.
Loaded symbols for /usr/lib64/libtdb.so.1.2.1
Reading symbols from /usr/lib64/libssl3.so...
warning: the debug information found in
"/usr/lib/debug//usr/lib64/libssl3.so.debug" does not match
"/usr/lib64/libssl3.so" (CRC mismatch).


warning: the debug information found in
"/usr/lib/debug/usr/lib64/libssl3.so.debug" does not match
"/usr/lib64/libssl3.so" (CRC mismatch).

(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libssl3.so
Reading symbols from /usr/lib64/libsmime3.so...
warning: the debug information found in
"/usr/lib/debug//usr/lib64/libsmime3.so.debug" does not match
"/usr/lib64/libsmime3.so" (CRC mismatch).


warning: the debug information found in
"/usr/lib/debug/usr/lib64/libsmime3.so.debug" does not match
"/usr/lib64/libsmime3.so" (CRC mismatch).

(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libsmime3.so
Reading symbols from /usr/lib64/libnss3.so...
warning: the debug information found in
"/usr/lib/debug//usr/lib64/libnss3.so.debug" does not match
"/usr/lib64/libnss3.so" (CRC mismatch).


warning: the debug information found in
"/usr/lib/debug/usr/lib64/libnss3.so.debug" does not match
"/usr/lib64/libnss3.so" (CRC mismatch).

(no debugging symbols found)...done.
Loaded symbols for /usr/lib64/libnss3.so
Reading symbols from /usr/lib64/libnssutil3.so...Reading symbols from
/usr/lib/debug/usr/lib64/libnssutil3.so.debug...done.
done.
Loaded symbols for /usr/lib64/libnssutil3.so
Reading symbols from /lib64/libplds4.so...Reading symbols from
/usr/lib/debug/lib64/libplds4.so.debug...done.
done.
Loaded symbols for /lib64/libplds4.so
Reading symbols from /lib64/libplc4.so...Reading symbols from
/usr/lib/debug/lib64/libplc4.so.debug...done.
done.
Loaded symbols for /lib64/libplc4.so
Reading symbols from /lib64/libnspr4.so...Reading symbols from
/usr/lib/debug/lib64/libnspr4.so.debug...done.
done.
Loaded symbols for /lib64/libnspr4.so
Reading symbols from /lib64/libpthread.so.0...(no debugging symbols
found)...done.
[Thread debugging using libthread_db enabled]
Loaded symbols for /lib64/libpthread.so.0
Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib64/libdl.so.2
Reading symbols from /usr/lib64/libcares.so.2.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libcares.so.2.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libcares.so.2.0.0
Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib64/libc.so.6
Reading symbols from /lib64/libaudit.so.1...
warning: the debug information found in
"/usr/lib/debug//lib64/libaudit.so.1.0.0.debug" does not match
"/lib64/libaudit.so.1" (CRC mismatch).


warning: the debug information found in
"/usr/lib/debug/lib64/libaudit.so.1.0.0.debug" does not match
"/lib64/libaudit.so.1" (CRC mismatch).

(no debugging symbols found)...done.
Loaded symbols for /lib64/libaudit.so.1
Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libcrypt.so.1
Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/ld-linux-x86-64.so.2
Reading symbols from /usr/lib64/libpath_utils.so.1.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libpath_utils.so.1.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libpath_utils.so.1.0.0
Reading symbols from /usr/lib64/libref_array.so.1.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libref_array.so.1.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libref_array.so.1.0.0
Reading symbols from /lib64/libresolv.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libresolv.so.2
Reading symbols from /usr/lib64/libsasl2.so.2.0.23...Reading symbols from
/usr/lib/debug/usr/lib64/libsasl2.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/libsasl2.so.2.0.23
Reading symbols from /lib64/libz.so.1.2.3...Reading symbols from
/usr/lib/debug/lib64/libz.so.1.2.3.debug...done.
done.
Loaded symbols for /lib64/libz.so.1.2.3
Reading symbols from /lib64/libfreebl3.so...Reading symbols from
/usr/lib/debug/lib64/libfreebl3.so.debug...done.
done.
Loaded symbols for /lib64/libfreebl3.so
Reading symbols from /usr/lib64/ldb/memberof.so...Reading symbols from
/usr/lib/debug/usr/lib64/ldb/memberof.so.debug...done.
done.
Loaded symbols for /usr/lib64/ldb/memberof.so
Reading symbols from /usr/lib64/sssd/libsss_ipa.so.1.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/sssd/libsss_ipa.so.1.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/sssd/libsss_ipa.so.1.0.0
Reading symbols from /lib64/libkeyutils.so.1.3...Reading symbols from
/usr/lib/debug/lib64/libkeyutils.so.1.3.debug...done.
done.
Loaded symbols for /lib64/libkeyutils.so.1.3
Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done.
Loaded symbols for /lib64/libkrb5.so.3
Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libk5crypto.so.3
Reading symbols from /lib64/libcom_err.so.2.1...Reading symbols from
/usr/lib/debug/lib64/libcom_err.so.2.1.debug...done.
done.
Loaded symbols for /lib64/libcom_err.so.2.1
Reading symbols from /usr/lib64/libipa_hbac.so.0.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libipa_hbac.so.0.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libipa_hbac.so.0.0.0
Reading symbols from /usr/lib64/libunistring.so.0.1.2...Reading symbols from
/usr/lib/debug/usr/lib64/libunistring.so.0.1.2.debug...done.
done.
Loaded symbols for /usr/lib64/libunistring.so.0.1.2
Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libkrb5support.so.0
Reading symbols from /lib64/libselinux.so.1...Reading symbols from
/usr/lib/debug/lib64/libselinux.so.1.debug...done.
done.
Loaded symbols for /lib64/libselinux.so.1
Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libnss_files.so.2
Reading symbols from /lib64/libnss_sss.so.2...Reading symbols from
/usr/lib/debug/lib64/libnss_sss.so.2.debug...done.
done.
Loaded symbols for /lib64/libnss_sss.so.2
Reading symbols from /usr/lib64/sasl2/libgssapiv2.so.2.0.23...Reading symbols
from /usr/lib/debug/usr/lib64/sasl2/libgssapiv2.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libgssapiv2.so.2.0.23
Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging symbols
found)...done.
Loaded symbols for /lib64/libgssapi_krb5.so.2
Reading symbols from /usr/lib64/sasl2/libplain.so.2.0.23...Reading symbols from
/usr/lib/debug/usr/lib64/sasl2/libplain.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libplain.so.2.0.23
Reading symbols from /usr/lib64/sasl2/libcrammd5.so.2.0.23...Reading symbols
from /usr/lib/debug/usr/lib64/sasl2/libcrammd5.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libcrammd5.so.2.0.23
Reading symbols from /usr/lib64/sasl2/libsasldb.so.2.0.23...Reading symbols
from /usr/lib/debug/usr/lib64/sasl2/libsasldb.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libsasldb.so.2.0.23
Reading symbols from /lib64/libdb-4.7.so...Reading symbols from
/usr/lib/debug/lib64/libdb-4.7.so.debug...done.
done.
Loaded symbols for /lib64/libdb-4.7.so
Reading symbols from /usr/lib64/sasl2/libanonymous.so.2.0.23...Reading symbols
from /usr/lib/debug/usr/lib64/sasl2/libanonymous.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libanonymous.so.2.0.23
Reading symbols from /usr/lib64/sasl2/libdigestmd5.so.2.0.23...Reading symbols
from /usr/lib/debug/usr/lib64/sasl2/libdigestmd5.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/libdigestmd5.so.2.0.23
Reading symbols from /usr/lib64/libcrypto.so.1.0.0...Reading symbols from
/usr/lib/debug/usr/lib64/libcrypto.so.1.0.0.debug...done.
done.
Loaded symbols for /usr/lib64/libcrypto.so.1.0.0
Reading symbols from /usr/lib64/sasl2/liblogin.so.2.0.23...Reading symbols from
/usr/lib/debug/usr/lib64/sasl2/liblogin.so.2.0.23.debug...done.
done.
Loaded symbols for /usr/lib64/sasl2/liblogin.so.2.0.23
Reading symbols from
/usr/lib64/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so...Reading symbols
from /usr/lib/debug/usr/lib64/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so.
debug...done.
done.
Loaded symbols for /usr/lib64/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so
Reading symbols from /usr/lib64/libsoftokn3.so...Reading symbols from
/usr/lib/debug/usr/lib64/libsoftokn3.so.debug...done.
done.
Loaded symbols for /usr/lib64/libsoftokn3.so
Reading symbols from /usr/lib64/libsqlite3.so.0.8.6...Reading symbols from
/usr/lib/debug/usr/lib64/libsqlite3.so.0.8.6.debug...done.
done.
Loaded symbols for /usr/lib64/libsqlite3.so.0.8.6
Core was generated by `/usr/libexec/sssd/sssd_be -d 0 --debug-to-files --domain
lab.eng.pnq.redhat.com'.
Program terminated with signal 11, Segmentation fault.
#0  hbac_evaluate_element (rule_el=0x268e5d0, req_el=0x267c9a0,
matched=0x7fff4485a38f) at src/providers/ipa/hbac_evaluator.c:287
287                 for (j = 0; req_el->groups[j]; j++) {

Thread 1 (Thread 0x7f33f0d75700 (LWP 22761)):
#0  hbac_evaluate_element (rule_el=0x268e5d0, req_el=0x267c9a0,
matched=0x7fff4485a38f) at src/providers/ipa/hbac_evaluator.c:287
        i = <value optimized out>
        j = 0
        rule_name = <value optimized out>
        req_name = <value optimized out>
        result = 1
        ret = <value optimized out>
#1  0x00007f33e9e8bd2e in hbac_evaluate_rule (rule=0x267c130,
hbac_req=0x267c1f0, error=0x7fff4485a3cc)
    at src/providers/ipa/hbac_evaluator.c:224
        ret = <value optimized out>
        matched = true
#2  0x00007f33e9e8bdd8 in hbac_evaluate (rules=0x265ea10, hbac_req=0x267c1f0,
info=0x7fff4485a4b8)
    at src/providers/ipa/hbac_evaluator.c:129
        ret = <value optimized out>
        result = HBAC_EVAL_DENY
        intermediate_result = <value optimized out>
        i = <value optimized out>
#3  0x00007f33ea9b66fd in ipa_hbac_evaluate_rules (hbac_ctx=0x26af120) at
src/providers/ipa/ipa_access.c:578
        ret = <value optimized out>
        hbac_rules = 0x265ea10
        eval_req = 0x267c1f0
        result = <value optimized out>
        info = <value optimized out>
        __FUNCTION__ = "ipa_hbac_evaluate_rules"
#4  0x00007f33ea9b864c in hbac_sysdb_save (req=0x0) at
src/providers/ipa/ipa_access.c:534
        ret = <value optimized out>
        in_transaction = true
        hbac_ctx = 0x26af120
        domain = <value optimized out>
        sysdb = <value optimized out>
Missing separate debuginfos, use: debuginfo-install
audit-libs-2.1.3-3.el6.x86_64 glibc-2.12-1.47.el6.x86_64
krb5-libs-1.9-22.el6.x86_64 nss-3.12.10-16.el6.x86_64
---Type <return> to continue, or q <return> to quit---
        base_dn = <value optimized out>
        be_ctx = <value optimized out>
        access_ctx = 0x2667e30
        tmp_ctx = <value optimized out>
        __FUNCTION__ = "hbac_sysdb_save"
#5  0x00007f33ea9bd5e7 in ipa_hbac_rule_info_done (subreq=<value optimized
out>) at src/providers/ipa/ipa_hbac_rules.c:213
        ret = 0
        req = 0x26a5180
        state = 0x267d8c0
        __FUNCTION__ = "ipa_hbac_rule_info_done"
#6  0x00007f33ea9d35f6 in sdap_get_generic_done (op=<value optimized out>,
reply=<value optimized out>, error=<value optimized out>,
    pvt=<value optimized out>) at src/providers/ldap/sdap_async.c:1031
        req = 0x26a3c90
        state = 0x26723f0
        attrs = <value optimized out>
        errmsg = 0x0
        result = 0
        ret = <value optimized out>
        lret = 0
        total_count = 0
        cookie = {bv_len = 0, bv_val = 0x26a80d0 "P\350g\002"}
        returned_controls = 0x2688140
        page_control = <value optimized out>
        __FUNCTION__ = "sdap_get_generic_done"
#7  0x00007f33ea9d51a5 in sdap_process_message (ev=<value optimized out>,
pvt=<value optimized out>)
    at src/providers/ldap/sdap_async.c:307
        msgtype = <value optimized out>
        ret = 0
        reply = 0x268ce80
        op = 0x267dfe0
        msgid = 13
#8  sdap_process_result (ev=<value optimized out>, pvt=<value optimized out>)
at src/providers/ldap/sdap_async.c:207
        sh = <value optimized out>
        no_timeout = {tv_sec = 0, tv_usec = 0}
        te = <value optimized out>
        msg = 0x26a6220
---Type <return> to continue, or q <return> to quit---
        ret = <value optimized out>
        __FUNCTION__ = "sdap_process_result"
#9  0x0000003e3d6034e5 in tevent_common_loop_timer_delay (ev=0x263f490) at
tevent_timed.c:254
        current_time = {tv_sec = 0, tv_usec = 0}
        te = 0x26729c0
#10 0x0000003e3d60531b in std_event_loop_once (ev=<value optimized out>,
location=<value optimized out>) at tevent_standard.c:537
        std_ev = 0x263f550
        tval = {tv_sec = 60, tv_usec = 497754}
#11 0x0000003e3d6026d0 in _tevent_loop_once (ev=0x263f490, location=0x4446b5
"src/util/server.c:526") at tevent.c:490
        ret = <value optimized out>
        nesting_stack_ptr = 0x0
#12 0x0000003e3d60273b in tevent_common_loop_wait (ev=0x263f490,
location=0x4446b5 "src/util/server.c:526") at tevent.c:591
        ret = <value optimized out>
#13 0x0000000000436111 in server_loop (main_ctx=0x2640600) at
src/util/server.c:526
No locals.
#14 0x000000000040eeab in main (argc=6, argv=<value optimized out>) at
src/providers/data_provider_be.c:1333
        opt = <value optimized out>
        pc = <value optimized out>
        be_domain = 0x263e490 "lab.eng.pnq.redhat.com"
        srv_name = <value optimized out>
        conf_entry = <value optimized out>
        main_ctx = 0x2640600
        ret = 0
        long_options = {{longName = 0x0, shortName = 0 '\000', argInfo = 4, arg
= 0x64ae40, val = 0, descrip = 0x43b132 "Help options:",
            argDescrip = 0x0}, {longName = 0x43b140 "debug-level", shortName =
100 'd', argInfo = 2, arg = 0x64af20, val = 0,
            descrip = 0x43b111 "Debug level", argDescrip = 0x0}, {longName =
0x43b14c "debug-to-files", shortName = 102 'f', argInfo = 0,
            arg = 0x64af24, val = 0, descrip = 0x43bda8 "Send the debug output
to files instead of stderr", argDescrip = 0x0}, {
            longName = 0x43b15b "debug-timestamps", shortName = 0 '\000',
argInfo = 2, arg = 0x64ae00, val = 0,
            descrip = 0x43b11d "Add debug timestamps", argDescrip = 0x0},
{longName = 0x43c720 "domain", shortName = 0 '\000',
            argInfo = 1, arg = 0x7fff4485a9d8, val = 0, descrip = 0x43bde0
"Domain of the information provider (mandatory)",
            argDescrip = 0x0}, {longName = 0x0, shortName = 0 '\000', argInfo =
0, arg = 0x0, val = 0, descrip = 0x0, argDescrip = 0x0}}
        __FUNCTION__ = "main"
[root@bumblebee ~]#