#4173 SSSD doesn't honour the customized ID view created in IPA
Closed: Fixed 3 years ago by pbrezina. Opened 4 years ago by pbrezina.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1786341

```text
Description of problem:
SSSD doesn't honour the customized ID view created in IPA.
The trust AD users lose their AD domains roughly 5minutes later, which cause
problem with sudorule as the sudorule is defined for the <ad accountname>@<AD domain>.

Version-Release number of selected component (if applicable):
sssd-1.16.4-21.el7_7.1.x86_64
sssd-client-1.16.4-21.el7_7.1.x86_64
sssd-ipa-1.16.4-21.el7_7.1.x86_64
sssd-ad-1.16.4-21.el7_7.1.x86_64

How reproducible:
The issue can easily be reproduced.

Steps to Reproduce:
1. Establish AD trust with IPA
2. Create a customized ID view on the IPA server
3. Override the uid, gid and home directory for a trust AD user on the IPA
4. Stop the SSSD, clear the old SSSD cache and restart SSSD on a IPA client

date; rm -rf /var/log/sssd/ /var/lib/sss/{mc,db}/

Tue 24 Dec 11:27:51 GMT 2019

date; systemctl start sssd

Tue 24 Dec 11:28:40 GMT 2019

-sh-4.2$ while true;

do date; getent passwd 10001; sleep 30; done | tee -a /var/tmp/b.txt
Tue 24 Dec 11:30:23 GMT 2019
user@ad.testdomain.com::10001:10000:Test User:/home/user:
Tue 24 Dec 11:30:53 GMT 2019
user@ad.testdomain.com:
:10001:10000:Test User:/home/user:
Tue 24 Dec 11:31:23 GMT 2019
user@ad.testdomain.com::10001:10000:Test User:/home/user:
Tue 24 Dec 11:31:53 GMT 2019
user@ad.testdomain.com:
:10001:10000:Test User:/home/user:
Tue 24 Dec 11:32:23 GMT 2019
user@ad.testdomain.com::10001:10000:Test User:/home/user:
Tue 24 Dec 11:32:53 GMT 2019
user@ad.testdomain.com:
:10001:10000:Test User:/home/user:
Tue 24 Dec 11:33:23 GMT 2019
user@ad.testdomain.com::10001:10000:Test User:/home/user:
Tue 24 Dec 11:33:53 GMT 2019
user:
:10001:10000:Test User:/home/user: <<<<<<<<<<<<<<<<<<<<Roughly five minutes later>>>>>>>>>>>>>>>>>>>>>>>>
Tue 24 Dec 11:34:23 GMT 2019
user::10001:10000:Test User:/home/user:
Tue 24 Dec 11:34:53 GMT 2019
user:
:10001:10000:Test User:/home/user:
Tue 24 Dec 11:35:23 GMT 2019
user:*:10001:10000:Test User:/home/user:


Metadata Update from @pbrezina:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1786341

4 years ago

Metadata Update from @pbrezina:
- Issue assigned to pbrezina

4 years ago

Metadata Update from @pbrezina:
- Issue tagged with: bugzilla

4 years ago

Metadata Update from @atikhonov:
- Issue tagged with: PR, bug

4 years ago
  • master
    • 1b84c3a - sysdb: check if the id override belongs to requested domain
  • sssd-1-16
    • a63e00f - sysdb: check if the id override belongs to requested domain

Metadata Update from @pbrezina:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5128

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata