Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/2142

• Created at 2013-11-04 14:08:17 by jhrozek
• Closed as Fixed
• Assigned to jhrozek
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1028039

We have a bad inconsistency when performing lookups. When enumerating users and groups, we connect to LDAP port automatically, while when doing regular lookups, we connect to GC.

This can have very confusing consequences if POSIX attributes are requested but not replicated to GC -- the users that are enumerated will show up with POSIX attributes, but since initgroups are performed against GC, the attributes not present in GC but present in LDAP are deleted from sysdb.

Comments

Comment from dpal at 2013-11-07 15:19:08

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11.3

Comment from dpal at 2013-11-07 15:20:08

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1028039

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1028039 1028039]

Comment from jhrozek at 2013-11-28 15:00:58

Fields changed

owner: somebody => jhrozek

Comment from jhrozek at 2013-12-17 21:00:38

Fields changed

patch: 0 => 1

Comment from jhrozek at 2013-12-19 15:48:11

Fields changed

milestone: SSSD 1.11.3 => SSSD 1.11.4

Comment from jhrozek at 2014-01-29 20:31:31

• master:
  • b4ffa4d
  • 37171a9
  • 12213ca
  • dde2f0b
  • 19fd860
  • f8407fa
  • 21767bb
• sssd-1-11:
  • 580221e
  • 407a7e0
  • ff4ca56
  • 8c12702
  • c5ae054
  • e0502a6
  • 02abb93

resolution: => fixed
status: new => closed

Comment from jhrozek at 2014-02-17 20:22:43

Fields changed

changelog: => Regular user lookups and enumeration task that runs in the background used a different Active Directory server port for the lookups which might have resulted in inconsistent results when requesting user and/or group information.

Comment from jhrozek at 2017-02-24 14:26:21

Metadata Update from @jhrozek:

• Issue assigned to jhrozek
• Issue set to the milestone: SSSD 1.11.4