sssd fails instead of skipping when a sudo ldap filter returns entries with multiple CNs #3073

sssd-bot · 2020-05-02T12:54:44Z

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/2031

Created at 2013-07-25 21:02:54 by jhrozek
Closed as Fixed
Assigned to pbrezina
Associated bugzillas
- https://bugzilla.redhat.com/show_bug.cgi?id=988525

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 6): Bug 988525

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Description of problem:
If sssd is configured to be used as sudo provider using LDAP sources and the
entries have multiple CNs then it fails instead of skipping these entries which
result that all the entries from that provider are ignored

Version-Release number of selected component (if applicable):
sssd-1.9.2-82.7.el6_4.x86_64

How reproducible:
Everytime

Steps to Reproduce:
1. Configure sssd as sudoers provider
2. Use at least one entry in the sudoers LDAP entries with multiple CNs
3.

Actual results:
All entries from this sssd domain are ignored (domain fails)

Expected results:
Either allow multiple CNs or at least skip only the affected entries

Additional info:

Comments

Comment from pbrezina at 2013-07-26 11:07:27

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
owner: somebody => pbrezina
review: True => 0
selected: =>
status: new => assigned
testsupdated: => 0

Comment from pbrezina at 2013-07-26 12:34:57

Fields changed

patch: 0 => 1

Comment from dpal at 2013-08-01 15:08:52

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.10.2

Comment from jhrozek at 2013-08-05 16:57:05