#824 SSSD fails group lookups when group is missing GID
Closed: Fixed None Opened 13 years ago by sgallagh.

This is most commonly seen with ActiveDirectory. The 'group' objectClass does not have a mandatory GID attribute, and SSSD was throwing errors when trying to process groups without them (which is necessary for use on a POSIX system).

We should update the group filters so that we include "gidNumber=*" to filter out groups that are missing this information.

Related BZ: https://bugzilla.redhat.com/show_bug.cgi?id=683158


Fields changed

description: This is most commonly seen with ActiveDirectory. The 'group' objectClass does not have a mandatory GID argument, and SSSD was throwing errors when trying to process groups without them (which is necessary for use on a POSIX system).

We should update the group filters so that we include "gidNumber=*" to filter out groups that are missing this information.

Related BZ: https://bugzilla.redhat.com/show_bug.cgi?id=683158 => This is most commonly seen with ActiveDirectory. The 'group' objectClass does not have a mandatory GID attribute, and SSSD was throwing errors when trying to process groups without them (which is necessary for use on a POSIX system).

We should update the group filters so that we include "gidNumber=*" to filter out groups that are missing this information.

Related BZ: https://bugzilla.redhat.com/show_bug.cgi?id=683158
status: new => assigned

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.5.4

Our solution is to modify the search filters so that we entirely ignore users and groups that contain incomplete information (and are therefore not POSIX-compliant).

==== master ====
- b46a9e1
- 0112cf9

==== sssd-1-5 ====
- 7717e1e
- 0febc32

resolution: => fixed
status: assigned => closed

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.4

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1866

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata