#3866 sssctl user-checks does not show custom IFP user_attributes
Closed: Fixed 2 years ago by jhrozek. Opened 2 years ago by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1638295

Description of problem:

"sssctl user-checks" also query the IFP interface of sssd. The problem is, that
this command only displays POSIX user attrs, no matter if we configured the
InfoPipe for additional user attributes.

for example, if I have the following configuration snippet:
        debug_level = 9
        allowed_uids = ondrejv, root
        user_attributes = +mail, +telephoneNumber, +givenname, +sn

I would expect the "sssctl user-checks" command will
- also return the value of "mail, telephoneNumber, givenname, sn" attributes
- ideally, we could make the "sssctl user-checks" also available for non-root
users (ondrejv in the example above), but I guess I am asking too much :-)

I know I could get the results with dbus-send or the Python dbus module, but
parsing the output of sssctl is better parseable for a simple bash script.

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1638295

2 years ago

There seems to be ifp_users_user_get_extra_attributes in the generated sbus code, maybe we can use that?

Metadata Update from @jhrozek:
- Issue tagged with: RFE

2 years ago

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.1
- Issue tagged with: easyfix

2 years ago

Metadata Update from @thalman:
- Issue assigned to thalman

2 years ago

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4856

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.