#2630 Overrides with --login work in second attempt
Closed: Fixed None Opened 5 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 1213822

Description of problem:
With an empty cache idoverride for a ad user with --login works on second
attempt

Version-Release number of selected component (if applicable):
[root@ibm-x3250m4-04 ~]# rpm -q sssd ipa-client
sssd-1.12.4-29.el6.x86_64
ipa-client-3.0.0-46.el6.x86_64

How reproducible:
always

Steps to Reproduce:
On Server

[root@sideswipe ~]# ipa idoverrideuser-add 'default trust view'
aduser07@adtest.qe  --login syncuser07
-------------------------------------------
Added User ID override "aduser07@adtest.qe"
-------------------------------------------
  Anchor to override: aduser07@adtest.qe
  User login: syncuser07
[root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service
sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service

On Client1

[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*;
service sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0

On Client2

[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service
sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0

Additional info:
If a different view is applied to one of the clients getent works as expected

On Server

[root@sideswipe ~]# ipa idview-show hostview --show-hosts
  ID View Name: hostview
  User object overrides: aduser2@adtest.qe
  Group object overrides: grp1
[root@sideswipe ~]# ipa idview-apply hostview --hosts vm-idm-018.ipaviews.test
--------------------------
Applied ID View "hostview"
--------------------------
  hosts: vm-idm-018.ipaviews.test
---------------------------------------------
Number of hosts the ID View was applied to: 1
---------------------------------------------
[root@sideswipe ~]# service sssd stop ; rm -f /var/lib/sss/{db,mc}/* ; service
sssd start
Redirecting to /bin/systemctl stop  sssd.service
Redirecting to /bin/systemctl start  sssd.service


On Client1

[root@ibm-x3250m4-04 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*;
service sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
2
[root@ibm-x3250m4-04 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0

Works on Client2

[root@vm-idm-018 ~]# service sssd stop; rm -rf /var/lib/sss/{db,mc}/*; service
sssd start
Stopping sssd: [  OK  ]
Starting sssd: [  OK  ]
[root@vm-idm-018 ~]# getent passwd syncuser07@adtest.qe ; echo $?
syncuser07@adtest.qe:*:1148405487:1148405487:ads07
user:/home/adtest.qe/aduser07:
0

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
patch: 0 => 1
review: True => 0
selected: =>
testsupdated: => 0

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.12.5

resolution: => fixed
status: new => closed

Please note that it was reported in https://bugzilla.redhat.com/show_bug.cgi?id=1211830#c18 that the patch is incomplete and might cause a segfault.

resolution: fixed =>
status: closed => reopened

Segfault fix:
- master: c520f40
- sssd-1-12: e31d5ba

resolution: => fixed
status: reopened => closed

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.12.5

3 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3671

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata