Skip to content

sdap: let callers mark SSSD as offline if kinit fails#8675

Merged
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
pbrezina:offline
May 13, 2026
Merged

sdap: let callers mark SSSD as offline if kinit fails#8675
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
pbrezina:offline

Conversation

@pbrezina

@pbrezina pbrezina commented May 6, 2026

Copy link
Copy Markdown
Member

The callers expected that ret == EIO and can_retry == false to bring
SSSD to an offline state.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request modifies the error handling logic in sdap_cli_resolve_and_connect_kinit_done within src/providers/ldap/sdap_async_connection.c. When a TGT cannot be obtained, the implementation now explicitly sets state->can_retry to false and returns EIO instead of EACCES. I have no feedback to provide as there were no review comments to evaluate.

@pbrezina
pbrezina force-pushed the offline branch 3 times, most recently from 4a6429d to 1849606 Compare May 6, 2026 17:44
@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label May 6, 2026
@alexey-tikhonov
alexey-tikhonov self-requested a review May 7, 2026 12:41
@alexey-tikhonov
alexey-tikhonov requested a review from sumit-bose May 7, 2026 12:41
@alexey-tikhonov alexey-tikhonov added backport-to-sssd-2-13 coverity Trigger a coverity scan and removed no-backport This should go to target branch only. labels May 7, 2026
@pbrezina

Copy link
Copy Markdown
Member Author

User confirmed the patch solves the issue.

@alexey-tikhonov

Copy link
Copy Markdown
Member

Note: Covscan is clean.

@alexey-tikhonov alexey-tikhonov removed the coverity Trigger a coverity scan label May 11, 2026
@alexey-tikhonov

Copy link
Copy Markdown
Member

@pbrezina, any idea why it fails tons of tests on F45 and C10S?

@alexey-tikhonov

Copy link
Copy Markdown
Member

ACK

@sumit-bose sumit-bose left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

thank you for the fix and adding the tests, ACK.

bye,
Sumit

The callers expected that ret == EIO and can_retry == false to bring
SSSD to an offline state.

Reviewed-by: Alexey Tikhonov <[email protected]>
Reviewed-by: Sumit Bose <[email protected]>
@sssd-bot

Copy link
Copy Markdown
Contributor

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 CodeQL (success)
🟢 osh-diff-scan:fedora-rawhide-x86_64:upstream (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-44-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 Analyze (target) / cppcheck (success)
🟢 Build / freebsd (success)
🟢 Build / make-distcheck (success)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-42) (success)
🟢 ci / intgcheck (fedora-43) (success)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / intgcheck (fedora-45) (success)
🟢 ci / prepare (success)
🔴 ci / system (centos-10) (failure)
🟢 ci / system (fedora-42) (success)
🟢 ci / system (fedora-43) (success)
🔴 ci / system (fedora-44) (failure)
🔴 ci / system (fedora-45) (failure)
➖ Coverity scan / coverity (skipped)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@alexey-tikhonov
alexey-tikhonov merged commit c5b631e into SSSD:master May 13, 2026
10 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants