#400 LOCAL domain: Can not deleted nested groups and user member
Closed: Fixed None Opened 9 years ago by jgalipea.

Description[[BR]]
Setting up two levels of nested groups with user membership, then deleting the top parent groups, results in not being able to delete the remaining groups and user member.[[BR]]

Error Message:[[BR]]

[root@localhost mail]# sss_groupdel Engineering
No such group in local domain. Removing groups only allowed in local domain.

[root@localhost mail]# sss_groupdel Sales
No such group in local domain. Removing groups only allowed in local domain.

[root@localhost mail]# sss_groupdel "Development Engineering"
No such group in local domain. Removing groups only allowed in local domain.

[root@localhost mail]# sss_userdel salesenguser
No such user in local domain. Removing users only allowed in local domain.

LDB users:[[BR]]

[root@localhost mail]# ldbsearch -H /var/lib/sss/db/sssd.ldb -b "cn=users,cn=LOCAL,cn=sysdb"
asq: Unable to register control with rootdse!
# record 1
dn: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
objectClass: user
name: salesenguser
fullName: salesenguser
gecos: salesenguser
homeDirectory: /home/salesenguser
loginShell: /bin/bash
createTimestamp: 1265205156
uidNumber: 1012
gidNumber: 1012
memberof: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Sales,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberof: name=Company,cn=groups,cn=LOCAL,cn=sysdb
distinguishedName: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb

# record 2
dn: cn=users,cn=LOCAL,cn=sysdb
cn: Users
distinguishedName: cn=users,cn=LOCAL,cn=sysdb

# returned 2 records
# 2 entries
# 0 referrals

LDB Groups:[[BR]]

[root@localhost mail]# ldbsearch -H /var/lib/sss/db/sssd.ldb -b "cn=groups,cn=LOCAL,cn=sysdb"
asq: Unable to register control with rootdse!
# record 1
dn: cn=groups,cn=LOCAL,cn=sysdb
cn: Groups
distinguishedName: cn=groups,cn=LOCAL,cn=sysdb

# record 2
dn: name=Sales,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Sales
createTimestamp: 1265205137
gidNumber: 1010
lastUpdate: 1265205137
dataExpireTimestamp: 0
member: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
memberuid: salesenguser
distinguishedName: name=Sales,cn=groups,cn=LOCAL,cn=sysdb

# record 3
dn: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Engineering
createTimestamp: 1265205133
gidNumber: 1009
lastUpdate: 1265205133
dataExpireTimestamp: 0
member: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
memberuid: salesenguser
distinguishedName: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb

# record 4
dn: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb
objectClass: group
name: Development Engineering
createTimestamp: 1265205146
gidNumber: 1011
lastUpdate: 1265205146
dataExpireTimestamp: 0
member: name=salesenguser,cn=users,cn=LOCAL,cn=sysdb
memberuid: salesenguser
memberof: name=Engineering,cn=groups,cn=LOCAL,cn=sysdb
distinguishedName: name=Development Engineering,cn=groups,cn=LOCAL,cn=sysdb

# returned 4 records
# 4 entries
# 0 referrals

Steps to Reproduce:

1. install SSSD and configure LOCAL domain.
2. Add groups
    sss_groupadd Company
    sss_groupadd Engineering
    sss_groupadd Sales
    sss_groupadd "Development Engineering"
3. Add user
    sss_useradd salesenguser
4. Nest Groups
    sss_groupmod -a Company Engineering
    sss_groupmod -a Company Sales
    sss_groupmod -a Engineering "Development Engineering"
5. Add user memberships
    sss_usermod -a "Development Engineering" salesenguser
    sss_usermod -a Sales salesenguser
6. Delete top parent group
    sss_groupdel Company
7. Attempt to delete the remaining.
    sss_groupdel Engineering
    sss_groupdel Sales
    sss_groupdel "Development Engineering"
    sss_userdel salesenguser

VERSION TESTED:[[BR]]

sssd-1.0.99-0.2010020113git3c401be.fc12.i686


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.1
owner: somebody => jhrozek

Fixed by 3ea37e9

fixedin: => 1.1.0
resolution: => fixed
status: new => closed
tests: 0 => 1

This is already automated. In groupshow test suite, in the trunk branch.

tests: 1 => 0
testsupdated: 0 => 1

Fields changed

rhbz: => 0

Metadata Update from @jgalipea:
- Issue assigned to jhrozek
- Issue set to the milestone: SSSD 1.1

2 years ago

Login to comment on this ticket.

Metadata