#3083 sssd crashes in offline mode(when system is NOT connected to network) if AD forest is defined in ad_access_filter
Closed: cloned-to-github 3 years ago by pbrezina. Opened 7 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1353174

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
sssd crashes in offline mode(when system is NOT connected to network) if AD
forest is defined in  ad_access_filter

Version-Release number of selected component (if applicable):
sssd-1.13.0-40.el7_2.4
sssd-common-1.13.0-40.el7_2.4

How reproducible:
Always when ad_access_filter is having FOREST defined.

Steps to Reproduce:
1. In sssd.conf define filter as shown below:
---
ad_access_filter=FOREST:EXAMPLE.COM:(&(|(memberOf=CN=GR_LINUX_USER,OU=Groups,DC
=example,DC=com)(memberOf=CN=GR_ADMIN_LINUX,OU=Groups,DC=example,DC=com)))
---

2. Then try to login as AD user when system is NOT connected to network.

3. sssd will crash.

Actual results:
sssd crashes and abrt dumps a core if system is NOT connected to network:
---
[abrt] sssd-common-1.13.0-40.el7_2.4: sssd_be killed by SIGSEGV
---

Expected results:
AD users should be able to login and sssd shouldn't crash

Additional info:
Following filer instead works perfect:
---
ad_access_filter=(&(|(memberOf=CN=GR_LINUX_USER,OU=Groups,DC=example,DC=com)(me
mberOf=CN=GR_ADMIN_LINUX,OU=Groups,DC=example,DC=com)))
---

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
milestone: NEEDS_TRIAGE => SSSD 1.16 beta
review: True => 0
selected: =>
testsupdated: => 0

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD Future releases (no date set yet)

7 years ago

Metadata Update from @thalman:
- Custom field design_review reset (from 0)
- Custom field mark reset (from 0)
- Custom field patch reset (from 0)
- Custom field review reset (from 0)
- Custom field sensitive reset (from 0)
- Custom field testsupdated reset (from 0)
- Issue close_status updated to: None
- Issue tagged with: Future milestone

4 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4116

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @pbrezina:
- Issue close_status updated to: cloned-to-github
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata