Skip to content

sdap: let callers mark SSSD as offline if kinit fails#8675

Merged
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
pbrezina:offline
May 13, 2026
Merged

sdap: let callers mark SSSD as offline if kinit fails#8675
alexey-tikhonov merged 1 commit into
SSSD:masterfrom
pbrezina:offline

Conversation

@pbrezina
Copy link
Copy Markdown
Member

@pbrezina pbrezina commented May 6, 2026

The callers expected that ret == EIO and can_retry == false to bring
SSSD to an offline state.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request modifies the error handling logic in sdap_cli_resolve_and_connect_kinit_done within src/providers/ldap/sdap_async_connection.c. When a TGT cannot be obtained, the implementation now explicitly sets state->can_retry to false and returns EIO instead of EACCES. I have no feedback to provide as there were no review comments to evaluate.

@pbrezina pbrezina force-pushed the offline branch 3 times, most recently from 4a6429d to 1849606 Compare May 6, 2026 17:44
@alexey-tikhonov alexey-tikhonov added the no-backport This should go to target branch only. label May 6, 2026
@alexey-tikhonov alexey-tikhonov self-requested a review May 7, 2026 12:41
@alexey-tikhonov alexey-tikhonov requested a review from sumit-bose May 7, 2026 12:41
@alexey-tikhonov alexey-tikhonov added backport-to-sssd-2-13 coverity Trigger a coverity scan and removed no-backport This should go to target branch only. labels May 7, 2026
@pbrezina
Copy link
Copy Markdown
Member Author

User confirmed the patch solves the issue.

@alexey-tikhonov
Copy link
Copy Markdown
Member

Note: Covscan is clean.

@alexey-tikhonov alexey-tikhonov removed the coverity Trigger a coverity scan label May 11, 2026
@alexey-tikhonov
Copy link
Copy Markdown
Member

@pbrezina, any idea why it fails tons of tests on F45 and C10S?

@alexey-tikhonov
Copy link
Copy Markdown
Member

ACK

Copy link
Copy Markdown
Contributor

@sumit-bose sumit-bose left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi,

thank you for the fix and adding the tests, ACK.

bye,
Sumit

The callers expected that ret == EIO and can_retry == false to bring
SSSD to an offline state.

Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Sumit Bose <sbose@redhat.com>
@sssd-bot
Copy link
Copy Markdown
Contributor

The pull request was accepted by @alexey-tikhonov with the following PR CI status:


🟢 CodeQL (success)
🟢 osh-diff-scan:fedora-rawhide-x86_64:upstream (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-44-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 Analyze (target) / cppcheck (success)
🟢 Build / freebsd (success)
🟢 Build / make-distcheck (success)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-42) (success)
🟢 ci / intgcheck (fedora-43) (success)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / intgcheck (fedora-45) (success)
🟢 ci / prepare (success)
🔴 ci / system (centos-10) (failure)
🟢 ci / system (fedora-42) (success)
🟢 ci / system (fedora-43) (success)
🔴 ci / system (fedora-44) (failure)
🔴 ci / system (fedora-45) (failure)
➖ Coverity scan / coverity (skipped)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@alexey-tikhonov alexey-tikhonov merged commit c5b631e into SSSD:master May 13, 2026
10 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants