Sssd-maintainers March 2024

sssd-maintainers@lists.fedoraproject.org

4 discussions

[Bug 2247777] New: SSSD will not boot up after restart
by bugzilla＠redhat.com 31 May '24

31 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2247777 Bug ID: 2247777 Summary: SSSD will not boot up after restart Product: Fedora Version: 38 Hardware: x86_64 URL: https://github.com/Scribery/cockpit-session-recording/ issues/157 OS: Linux Status: NEW Component: sssd Severity: medium Assignee: sssd-maintainers(a)lists.fedoraproject.org Reporter: lzap(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: abokovoy(a)redhat.com, atikhono(a)redhat.com, lslebodn(a)redhat.com, luk.claes(a)gmail.com, mzidek(a)redhat.com, pbrezina(a)redhat.com, sbose(a)redhat.com, ssorce(a)redhat.com, sssd-maintainers(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora I installed a fresh Fedora 38, installed Session Recording in Cockpit, enabled All recording and SSSD does not start anymore. The error is: Condition ConditionPathExists=/etc/sssd/sssd.conf was not met. I think previously it was booting up properly. I reported to Cockpit guys via Slack, I was told to create a bug for the Session Recording plugin so I did: https://github.com/Scribery/cockpit-session-recording/issues/157 It looks like this might be a bug in the systemd unit file: "The SSSD unit file should also have ConditionDirectoryNotEmpty=|/etc/sssd/conf.d/" So leaving a bugreport for you guys. Reproducible: Always Steps to Reproduce: 1. Enable Session Recording via plugin as described 2. Sssd will not start anymore 3. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2247777 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 9

[Bug 2244284] New: [abrt] sssd-common: sasl_gss_encode(): sssd_be killed by SIGSEGV
by bugzilla＠redhat.com 31 May '24

31 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2244284 Bug ID: 2244284 Summary: [abrt] sssd-common: sasl_gss_encode(): sssd_be killed by SIGSEGV Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:167ab957ac30bea411e21fbfdfd50afe732488b8;VAR IANT_ID=; Component: sssd Assignee: sssd-maintainers(a)lists.fedoraproject.org Reporter: brian(a)interlinx.bc.ca QA Contact: extras-qa(a)fedoraproject.org CC: abokovoy(a)redhat.com, atikhono(a)redhat.com, lslebodn(a)redhat.com, luk.claes(a)gmail.com, mzidek(a)redhat.com, pbrezina(a)redhat.com, sbose(a)redhat.com, ssorce(a)redhat.com, sssd-maintainers(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: Don't know why this happened. Version-Release number of selected component: sssd-common-2.9.1-1.fc38 Additional info: reporter: libreport-2.17.11 rootdir: / executable: /usr/libexec/sssd/sssd_be cmdline: /usr/libexec/sssd/sssd_be --domain interlinx.bc.ca --uid 0 --gid 0 --logger=files cgroup: 0::/system.slice/sssd.service journald_cursor: s=95d88e9521104634b5954ce8c2ca364c;i=1f78a94;b=04369d90e8d5440f8d4e37b41ad3728d;m=43205770ddc;t=607af55d9be18;x=1f1c6f3eef831d7f package: sssd-common-2.9.1-1.fc38 uid: 0 runlevel: N 5 crash_function: sasl_gss_encode comment: Don't know why this happened. backtrace_rating: 4 type: CCpp kernel: 6.4.11-200.fc38.x86_64 reason: sssd_be killed by SIGSEGV Truncated backtrace: Thread no. 1 (37 frames) #0 sasl_gss_encode at /usr/src/debug/cyrus-sasl-2.1.28-9.fc38.x86_64/plugins/gssapi.c:370 #1 _sasl_encodev at /usr/src/debug/cyrus-sasl-2.1.28-9.fc38.x86_64/lib/common.c:359 #2 sasl_encodev at /usr/src/debug/cyrus-sasl-2.1.28-9.fc38.x86_64/lib/common.c:582 #3 sasl_encode at /usr/src/debug/cyrus-sasl-2.1.28-9.fc38.x86_64/lib/common.c:304 #4 sb_sasl_cyrus_encode at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/cyrus.c:157 #5 sb_sasl_generic_write at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/sasl.c:783 #6 sb_debug_write at /usr/src/debug/openldap-2.6.6-1.fc38.x86_64/openldap-2.6.6/libraries/liblber/sockbuf.c:854 #8 ber_int_sb_write at /usr/src/debug/openldap-2.6.6-1.fc38.x86_64/openldap-2.6.6/libraries/liblber/sockbuf.c:445 #9 ber_flush2 at /usr/src/debug/openldap-2.6.6-1.fc38.x86_64/openldap-2.6.6/libraries/liblber/io.c:249 #10 ldap_int_flush_request at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/request.c:186 #11 ldap_send_server_request at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/request.c:412 #12 ldap_send_initial_request at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/request.c:169 #13 ldap_pvt_search at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/search.c:128 #14 ldap_search_ext at /usr/src/debug/openldap-2.6.4-1.fc38.x86_64/openldap-2.6.4/libraries/libldap/search.c:69 #15 sdap_get_generic_ext_step at src/providers/ldap/sdap_async.c:1664 #16 sdap_get_generic_ext_send at src/providers/ldap/sdap_async.c:1602 #17 sdap_get_and_parse_generic_send at src/providers/ldap/sdap_async.c:2055 #18 sdap_get_generic_send at src/providers/ldap/sdap_async.c:2156 #19 ipa_get_config_send at src/providers/ipa/ipa_config.c:93 #20 ipa_subdomains_passkey_send at src/providers/ipa/ipa_subdomains_passkey.c:64 #21 ipa_subdomains_refresh_certmap_done at src/providers/ipa/ipa_subdomains.c:2765 #22 _tevent_req_error at ../../tevent_req.c:221 #23 ipa_subdomains_certmap_done at src/providers/ipa/ipa_subdomains.c:1168 #24 _tevent_req_error at ../../tevent_req.c:221 #26 generic_ext_search_handler.isra.0 at src/providers/ldap/sdap_async.c:1983 #27 _tevent_req_error at ../../tevent_req.c:221 #28 sdap_get_generic_op_finished at src/providers/ldap/sdap_async.c:1774 #29 sdap_handle_release at src/providers/ldap/sdap_async.c:143 #30 sdap_process_result at src/providers/ldap/sdap_async.c:245 #31 tevent_common_invoke_fd_handler at ../../tevent_fd.c:142 #32 epoll_event_loop at ../../tevent_epoll.c:737 #33 epoll_event_loop_once at ../../tevent_epoll.c:938 #34 std_event_loop_once at ../../tevent_standard.c:110 #35 _tevent_loop_once at ../../tevent.c:823 #36 tevent_common_loop_wait at ../../tevent.c:949 #37 std_event_loop_wait at ../../tevent_standard.c:141 #38 server_loop at src/util/server.c:787 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2244284 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2214534] New: [abrt] sssd-common: __strcmp_avx2(): sssd_be killed by SIGSEGV
by bugzilla＠redhat.com 22 May '24

22 May '24

https://bugzilla.redhat.com/show_bug.cgi?id=2214534 Bug ID: 2214534 Summary: [abrt] sssd-common: __strcmp_avx2(): sssd_be killed by SIGSEGV Product: Fedora Version: 38 Hardware: x86_64 Status: NEW Whiteboard: abrt_hash:a07038fd78acc47fd66b266203cafebd50509e00;VAR IANT_ID=workstation; Component: sssd Assignee: sssd-maintainers(a)lists.fedoraproject.org Reporter: jortialc(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: abokovoy(a)redhat.com, atikhono(a)redhat.com, jhrozek(a)redhat.com, lslebodn(a)redhat.com, luk.claes(a)gmail.com, mzidek(a)redhat.com, pbrezina(a)redhat.com, sbose(a)redhat.com, ssorce(a)redhat.com, sssd-maintainers(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Description of problem: This happens when doing some privilege escalation like using sudo or the authentication required dialog in Gnome Version-Release number of selected component: sssd-common-2.9.0-1.fc38 Additional info: reporter: libreport-2.17.10 type: CCpp reason: sssd_be killed by SIGSEGV journald_cursor: s=025af2782fd445c2a5eb791571c74138;i=250aa;b=61468fbb4dd141e9b488d260f287c4ef;m=69ee27e2a;t=5fd9e17d98e50;x=b86133abd50e6842 executable: /usr/libexec/sssd/sssd_be cmdline: /usr/libexec/sssd/sssd_be --domain ipa.redhat.com --uid 0 --gid 0 --logger=files cgroup: 0::/system.slice/sssd.service rootdir: / uid: 0 kernel: 6.3.5-200.fc38.x86_64 package: sssd-common-2.9.0-1.fc38 runlevel: N 5 backtrace_rating: 4 crash_function: __strcmp_avx2 comment: This happens when doing some privilege escalation like using sudo or the authentication required dialog in Gnome Truncated backtrace: Thread no. 1 (21 frames) #0 __strcmp_avx2 at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:283 #1 be_resolve_server_process at src/providers/data_provider_fo.c:691 #2 be_resolve_server_done at src/providers/data_provider_fo.c:557 #3 fo_resolve_service_server at src/providers/fail_over.c:1169 #4 _tevent_req_error at ../../tevent_req.c:221 #5 resolve_srv_done at src/providers/fail_over.c:1480 #6 fo_discover_srv_done at src/providers/fail_over_srv.c:141 #7 resolv_getsrv_done at src/resolv/async_resolv.c:1877 #8 qcallback at /usr/src/debug/c-ares-1.19.1-1.fc38.x86_64/src/lib/ares_query.c:143 #9 end_query at /usr/src/debug/c-ares-1.19.1-1.fc38.x86_64/src/lib/ares_process.c:1525 #10 process_answer at /usr/src/debug/c-ares-1.19.1-1.fc38.x86_64/src/lib/ares_process.c:598 #11 read_udp_packets at /usr/src/debug/c-ares-1.19.1-1.fc38.x86_64/src/lib/ares_process.c:548 #12 processfds at /usr/src/debug/c-ares-1.19.1-1.fc38.x86_64/src/lib/ares_process.c:126 #13 tevent_common_invoke_fd_handler at ../../tevent_fd.c:142 #14 epoll_event_loop at ../../tevent_epoll.c:737 #15 epoll_event_loop_once at ../../tevent_epoll.c:938 #16 std_event_loop_once at ../../tevent_standard.c:110 #17 _tevent_loop_once at ../../tevent.c:823 #18 tevent_common_loop_wait at ../../tevent.c:949 #19 std_event_loop_wait at ../../tevent_standard.c:141 #20 server_loop at src/util/server.c:787 Potential duplicate: bug 1773488 -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2214534 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 15

[Bug 2264610] New: FTBFS: sssd intermediate CA tests fail with OpenSSL 3.2
by bugzilla＠redhat.com 03 Apr '24

03 Apr '24

https://bugzilla.redhat.com/show_bug.cgi?id=2264610 Bug ID: 2264610 Summary: FTBFS: sssd intermediate CA tests fail with OpenSSL 3.2 Product: Fedora Version: rawhide OS: Linux Status: NEW Component: sssd Severity: medium Assignee: sssd-maintainers(a)lists.fedoraproject.org Reporter: sgallagh(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: abokovoy(a)redhat.com, atikhono(a)redhat.com, lslebodn(a)redhat.com, mzidek(a)redhat.com, pbrezina(a)redhat.com, sbose(a)redhat.com, ssorce(a)redhat.com, sssd-maintainers(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora $ /usr/bin/make -C src/tests/test_CA/intermediate_CA ca_all make: Entering directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA' test -z "index.txt index.txt.attr index.txt.attr.old index.txt.old SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile SSSD_test_intermediate_CA_cert_x509_0001.pem SSSD_test_intermediate_CA_cert_x509_0001.h SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub SSSD_test_intermediate_CA_cert_pubsshkey_0001.h SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf " || rm -f index.txt index.txt.attr index.txt.attr.old index.txt.old SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile SSSD_test_intermediate_CA_cert_x509_0001.pem SSSD_test_intermediate_CA_cert_x509_0001.h SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub SSSD_test_intermediate_CA_cert_pubsshkey_0001.h SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf rm -rf .libs _libs rm -rf newcerts rm -rf softhsm* rm -rf serial* rm -f *.lo /usr/bin/make -C ./.. SSSD_test_CA.pem make[1]: Entering directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA' /usr/bin/openssl req -batch -config ./SSSD_test_CA.config -x509 -new -nodes -key SSSD_test_CA_key.pem -sha256 -days 1024 -set_serial 0 -extensions v3_ca -out SSSD_test_CA.pem make[1]: Leaving directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA' ln -s ./../SSSD_test_CA.pem /usr/bin/openssl req -batch -config ./SSSD_test_intermediate_CA.config -new -nodes -key /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_key.pem -sha256 -out SSSD_test_intermediate_CA_req.pem cd .. && /usr/bin/openssl ca -config /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config -batch -notext -keyfile /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA_key.pem -in /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_req.pem -days 200 -extensions v3_intermediate_ca -out /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA.pem Using configuration from /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config Check that the request matches the signature Signature ok ERROR:There is already a certificate for /O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA The matching entry has the following details Type :Valid Expires on :240903175906Z Serial Number :08 File name :unknown Subject Name :/O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA make: *** [Makefile:756: SSSD_test_intermediate_CA.pem] Error 1 make: Leaving directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA' Reproducible: Always Steps to Reproduce: 1.Build SSSD and run the intermediate CA tests 2. 3. Actual Results: $ /usr/bin/make -C src/tests/test_CA/intermediate_CA ca_all make: Entering directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA' test -z "index.txt index.txt.attr index.txt.attr.old index.txt.old SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile SSSD_test_intermediate_CA_cert_x509_0001.pem SSSD_test_intermediate_CA_cert_x509_0001.h SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub SSSD_test_intermediate_CA_cert_pubsshkey_0001.h SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf " || rm -f index.txt index.txt.attr index.txt.attr.old index.txt.old SSSD_test_intermediate_CA.pem SSSD_test_intermediate_CA_req.pem SSSD_test_intermediate_CA_full_db.pem SSSD_test_CA.pem pwdfile SSSD_test_intermediate_CA_cert_x509_0001.pem SSSD_test_intermediate_CA_cert_x509_0001.h SSSD_test_intermediate_CA_cert_pubsshkey_0001.pub SSSD_test_intermediate_CA_cert_pubsshkey_0001.h SSSD_test_intermediate_CA_cert_pkcs12_0001.pem softhsm2_*.conf rm -rf .libs _libs rm -rf newcerts rm -rf softhsm* rm -rf serial* rm -f *.lo /usr/bin/make -C ./.. SSSD_test_CA.pem make[1]: Entering directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA' /usr/bin/openssl req -batch -config ./SSSD_test_CA.config -x509 -new -nodes -key SSSD_test_CA_key.pem -sha256 -days 1024 -set_serial 0 -extensions v3_ca -out SSSD_test_CA.pem make[1]: Leaving directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA' ln -s ./../SSSD_test_CA.pem /usr/bin/openssl req -batch -config ./SSSD_test_intermediate_CA.config -new -nodes -key /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_key.pem -sha256 -out SSSD_test_intermediate_CA_req.pem cd .. && /usr/bin/openssl ca -config /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config -batch -notext -keyfile /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA_key.pem -in /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA_req.pem -days 200 -extensions v3_intermediate_ca -out /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/SSSD_test_intermediate_CA.pem Using configuration from /home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA/../SSSD_test_CA.config Check that the request matches the signature Signature ok ERROR:There is already a certificate for /O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA The matching entry has the following details Type :Valid Expires on :240903175906Z Serial Number :08 File name :unknown Subject Name :/O=SSSD/OU=SSSD test/CN=SSSD test intermediate CA make: *** [Makefile:756: SSSD_test_intermediate_CA.pem] Error 1 make: Leaving directory '/home/sgallagh/localworkspace/sssd/src/tests/test_CA/intermediate_CA' Expected Results: Successful test run. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2264610 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 5

2024

2023

2022

2021

2020

Sssd-maintainers March 2024