IPA provider crashes if a netgroup from a trusted domain is requested

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/3007

• Created at 2016-05-06 15:00:26 by jhrozek
• Closed as Fixed
• Assigned to jhrozek
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1334159

---

In ipa_account_info_handler we first check if the request is for a user from a trusted domain and go that way for all request types. In contrast, in the ipa_account_info_done we first check if the requested object is a netgroup. If both are true, we first start a subdomain lookup send but then call netgroup lookup recv, which results in talloc type mismatch and crashes sssd_be.

Comments

---

Comment from jhrozek at 2016-05-06 15:04:59

Fields changed

owner: somebody => jhrozek
patch: 0 => 1
status: new => assigned

---

Comment from jhrozek at 2016-05-09 09:44:56

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1334159 (Red Hat Enterprise Linux 7)

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=1334159 1334159]

---

Comment from jhrozek at 2016-05-18 16:55:47

There is a patch on the list and this is a crasher bug, therefore filing into 1.13.5. For the master branch, we should first merge Pavel's refactoring commits.

milestone: NEEDS_TRIAGE => SSSD 1.13.5

---

Comment from lslebodn at 2016-07-01 11:15:03

On Wed, May 11, 2016 at 01:59:42PM +0200, Jakub Hrozek wrote:
> Bump, the bug is no longer present in master after the DP refactoring,
> but I would still like to push this patch to sssd-1-13.

sssd-1-13:

• d68d2b8

resolution: => fixed
status: assigned => closed

---

Comment from jhrozek at 2017-02-24 14:21:25

Metadata Update from @jhrozek:

• Issue assigned to jhrozek
• Issue set to the milestone: SSSD 1.13.5