#2841 sssd stores and returns incorrect information about empty netgroup (ldap-server: 389-ds)
Closed: Fixed None Opened 7 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1271280

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

We seem to have a bug where if an empty netgroup is requested, we display an existing triplet.

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
owner: somebody => pbrezina
review: True => 0
selected: =>
testsupdated: => 0

Since there is a downstream bugzilla, we should fix this in 1.14

priority: major => critical

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.14 alpha

Fields changed

milestone: SSSD 1.14 alpha => SSSD 1.14

Wrong milestone, sorry about the churn..

milestone: SSSD 1.14 => SSSD 1.14 beta

This is a bugfix, not an enhancement so this ticket is not critical to block the 1.14 beta release.

milestone: SSSD 1.14 beta => SSSD 1.14.0

1.14.0 should be released no later than Wednesday next week, this ticket should not block the 1.14.0 release.

milestone: SSSD 1.14.0 => SSSD 1.14.1

Fields changed

owner: pbrezina => pcech
status: new => assigned

It is a problem of an invalidation of cache. If you have netgroup with two items and remove only one then everything works right. But if you have only one member in your netgroup and if you remove this one member it is not saved correctly.


It occurs there:

[sssd[be[ldap.cygnus.dev]]] [sysdb_remove_attrs] (0x2000): >>> Removing attribute [originalMemberNisNetgroup] from [void_group]
[sssd[be[ldap.cygnus.dev]]] [sysdb_remove_attrs] (0x0080): >>> ldb_modify :: [No such attribute](16)[attribute 'originalMemberNisNetgroup': no such attribute for delete on 'name=void_group,cn=Netgroups,cn=ldap.cygnus.dev,cn=sysdb']


There is maybe plus one bug in ts_cache. It reports:

>>> ldb_modify failed: [No such object](32)[ldb_wait: No such object (32)]

The missing attribute is 'originalDN'.

Fields changed

patch: 0 => 1

There is a patch on the list, but we also need tests, demoting to 1.14.2 because we need to release 1.14.1. soon.

milestone: SSSD 1.14.1 => SSSD 1.14.2


resolution: => fixed
status: assigned => closed

Metadata Update from @jhrozek:
- Issue assigned to pcech
- Issue set to the milestone: SSSD 1.14.2

5 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/3882

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.