#3184 sss_groupshow <user> fails with error "No such group in local domain. Printing groups only allowed in local domain"
Closed: Fixed None Opened 2 years ago by mzidek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1375299

Description of problem:

sss_groupshow <user> fails with error "No such group in local domain. Printing
groups only allowed in local domain"


Version-Release number of selected component (if applicable):
sssd-client-1.14.0-38.el7.x86_64
sssd-dbus-1.14.0-38.el7.x86_64
sssd-common-pac-1.14.0-38.el7.x86_64
python-sss-1.14.0-38.el7.x86_64
python-sss-murmur-1.14.0-36.el7.x86_64
python-sssdconfig-1.14.0-38.el7.noarch
sssd-krb5-common-1.14.0-38.el7.x86_64
sssd-krb5-1.14.0-38.el7.x86_64
sssd-proxy-1.14.0-38.el7.x86_64
libsss_autofs-1.14.0-30.el7.x86_64
libsss_idmap-1.14.0-38.el7.x86_64
sssd-common-1.14.0-38.el7.x86_64
sssd-ipa-1.14.0-38.el7.x86_64
libsss_simpleifp-1.14.0-38.el7.x86_64
sssd-1.14.0-38.el7.x86_64
libsss_nss_idmap-1.14.0-30.el7.x86_64
sssd-debuginfo-1.14.0-30.el7.x86_64
sssd-ad-1.14.0-38.el7.x86_64
sssd-tools-1.14.0-38.el7.x86_64
sssd-ldap-1.14.0-38.el7.x86_64


How reproducible:


Steps to Reproduce:
1.Configure sssd.conf as below:
[domain/LOCAL]
id_provider = local
debug_level = 0x0080


[sssd]
services = nss,pam
config_file_version = 2
domains = LOCAL

[nss]
filter_groups = root
filter_users = root

2. Add few groups as shown below:

[root@client1 ~]# sss_groupadd Company
[root@client1 ~]# sss_groupadd Engineers
[root@client1 ~]# sss_groupadd Sales
[root@client1 ~]# sss_groupadd Quality_Engineering
[root@client1 ~]# sss_groupadd Development_Engineering

3. Add few users as show below:

[root@client1 home]# sss_useradd president
[root@client1 home]# sss_useradd devdirector
[root@client1 home]# sss_useradd salesenguser
[root@client1 home]# sss_useradd qeuser
[root@client1 home]# sss_useradd devuser1
[root@client1 home]# sss_useradd devuser2
[root@client1 home]# sss_usermod -a Company president
[root@client1 home]# sss_usermod -a Engineers devdirector
[root@client1 home]# sss_usermod -a Sales salesenguser
[root@client1 home]# sss_usermod -a Quality_Engineering qeuser
[root@client1 home]# sss_usermod -a Development_Engineering devuser1
[root@client1 home]# sss_usermod -a Development_Engineering devuser2
[root@client1 home]# sss_groupmod -a Company Engineers
[root@client1 home]# sss_groupmod -a Company Sales
[root@client1 home]# sss_groupmod -a Engineers Quality_Engineering
[root@client1 home]# sss_groupmod -a Engineers Development_Engineering

4. Run sss_groupshow <user>

[root@client1 home]# sss_groupshow president
No such group in local domain. Printing groups only allowed in local domain.


Actual results:

sss_groupshow <user> fails

Expected results:
sss_groupshow <user> should succeed.

Additional info:

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
owner: somebody => mzidek
patch: 0 => 1
review: True => 0
selected: =>
testsupdated: => 0

master:

milestone: NEEDS_TRIAGE => SSSD 1.14.2
resolution: => fixed
status: new => closed
version: => 1.14.0

Metadata Update from @mzidek:
- Issue assigned to mzidek
- Issue set to the milestone: SSSD 1.14.2

2 years ago

Login to comment on this ticket.

Metadata