#990 sssd crashes during auth while there exists multiple external hosts along with managed host.
Closed: Fixed None Opened 12 years ago by sgallagh.

https://bugzilla.redhat.com/show_bug.cgi?id=736314

Description of problem:


Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show  rule2 --all --raw
  dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  cn: rule2
  ipaenabledflag: TRUE
  externalhost: external.lab.eng.pnq.redhat.com
  externalhost: ironhide.lab.eng.pnq.redhat.com
  sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  accessruletype: allow
  ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
  memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
  objectclass: ipaassociation
  objectclass: ipahbacrule

2. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com


Actual results:
ssh auth session hangs and sssd crashes.

Expected results:
Auth should be successful without any crash.

Additional info:

Fields changed

coverity: =>
description: https://bugzilla.redhat.com/show_bug.cgi?id=736314

{{{
Description of problem:

Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show rule2 --all --raw
dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
cn: rule2
ipaenabledflag: TRUE
externalhost: external.lab.eng.pnq.redhat.com
externalhost: ironhide.lab.eng.pnq.redhat.com
sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
accessruletype: allow
ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
objectclass: ipaassociation
objectclass: ipahbacrule

  1. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com

Actual results:
ssh auth session hangs and sssd crashes.

Expected results:
Auth should be successful without any crash.

Additional info:
}}}
=> https://bugzilla.redhat.com/show_bug.cgi?id=736314

{{{
Description of problem:

Version-Release number of selected component (if applicable):
sssd-1.5.1-49.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. Configure a hbacrule on the server as (make sure to have multiple external hosts and one managed host)
[root@bumblebee ~]# ipa hbacrule-show rule2 --all --raw
dn: ipauniqueid=bcc94bbe-d91d-11e0-aafb-525400deab7b,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
cn: rule2
ipaenabledflag: TRUE
externalhost: external.lab.eng.pnq.redhat.com
externalhost: ironhide.lab.eng.pnq.redhat.com
sourcehost: fqdn=mudflap.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberhost: fqdn=bumblebee.lab.eng.pnq.redhat.com,cn=computers,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberuser: uid=shanks,cn=users,cn=accounts,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
accessruletype: allow
ipauniqueid: bcc94bbe-d91d-11e0-aafb-525400deab7b
memberservice: cn=vsftpd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
memberservice: cn=sshd,cn=hbacservices,cn=hbac,dc=lab,dc=eng,dc=pnq,dc=redhat,dc=com
objectclass: ipaassociation
objectclass: ipahbacrule

  1. Try ssh from the external host ironhide.lab.eng.pnq.redhat.com to the target host bumblebee.lab.eng.pnq.redhat.com

Actual results:
ssh auth session hangs and sssd crashes.

Expected results:
Auth should be successful without any crash.

Additional info:
}}}

milestone: NEEDS_TRIAGE => SSSD 1.5.14
owner: somebody => sgallagh
patch: => 1
rhbz: => 736314
status: new => assigned
tests: => 0
testsupdated: => 0
upgrade: => 0

Fixed by:
- c216056 (master)
- af91dbe (sssd-1-6)
- a2a954c (sssd-1-5)

resolution: => fixed
status: assigned => closed

Metadata Update from @sgallagh:
- Issue assigned to sgallagh
- Issue set to the milestone: SSSD 1.5.14

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/2032

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata