[sssd PR#257][opened] LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
URL: https://github.com/SSSD/sssd/pull/257 Author: fidencio Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT Action: opened
PR body: """ Commit 25699846 introduced a regression seen when an initgroup lookup is done and there's no nested groups involved.
In this scenario the whole lookup fails due to an ENOENT returned by rfc2307bis_nested_groups_recv(), which leads to the user removal from sysdb causing some authentication issues.
The problem was caught by the "Allow only single user from domain1" test, part of ad_access_filter tests (present in "client-ad_provider-ad_forest" package) ran and reported by Lukáš Slebodnik.
Resolves: https://pagure.io/SSSD/sssd/issue/3331
Signed-off-by: Fabiano Fidêncio fidencio@redhat.com """
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/257/head:pr257 git checkout pr257
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
fidencio commented: """ CI passed: http://sssd-ci.duckdns.org/logs/job/68/96/summary.html """
See the full comment at https://github.com/SSSD/sssd/pull/257#issuecomment-298571104
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
lslebodn commented: """ Functional ACK (In another words, test passed :-) I let @sumit-bose to give final ACK. He knows better what his commit 2569984 should do; or whether other places should be touched as well. """
See the full comment at https://github.com/SSSD/sssd/pull/257#issuecomment-298846616
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
sumit-bose commented: """ ACK, ENOENT should not be treated as error here because it just indicates that there are no groups. """
See the full comment at https://github.com/SSSD/sssd/pull/257#issuecomment-298855476
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
Label: +Accepted
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
lslebodn commented: """ master: * df4b24bed15f45bf286fb0102fd397218fdd4186 """
See the full comment at https://github.com/SSSD/sssd/pull/257#issuecomment-298887180
URL: https://github.com/SSSD/sssd/pull/257 Author: fidencio Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT Action: closed
To pull the PR as Git branch: git remote add ghsssd https://github.com/SSSD/sssd git fetch ghsssd pull/257/head:pr257 git checkout pr257
URL: https://github.com/SSSD/sssd/pull/257 Title: #257: LDAP/AD: Do not fail in case rfc2307bis_nested_groups_recv() returns ENOENT
Label: +Pushed
sssd-devel@lists.fedorahosted.org
-
fidencio -
lslebodn
-
sumit-bose