#819 sudo/ldap lookup via sssd gets stuck for 5min waiting on netgroup
Closed: Fixed None Opened 13 years ago by sbose.

If sssd fails to parse a broken netgroup entry from the LDAP server a new request for the same group gets stuck and returns only after the client timeout of 5 minutes is exceeded.

To reproduce this issue I had to (mis)use the description attribute, because OpenLDAP does not allow broken entries in nisNetgroupTriple. So I put '(test)' into the description attribute of a netgroup entry and add 'ldap_netgroup_triple = description' to sssd.conf

The first 'getent netgroup broken_netgroup' returns nothing and the next call does not return at all.


Fixed by:
- 17c440c (master)
- 58bccb8 (sssd-1-5)

milestone: NEEDS_TRIAGE => SSSD 1.5.2
resolution: => fixed
status: new => closed

Fields changed

rhbz: => 0

Metadata Update from @sbose:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.5.2

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1861

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata