URL: https://github.com/SSSD/sssd/pull/858
Author: pbrezina
 Title: #858: ldap: do not store empty attribute with 
ldap_rfc2307_fallback_to_local_users = true
Action: edited

 Changed field: body
Original value:
"""
This caused an error when saving local user as a fallback:

```
[sdap_save_user] (0x0400): Storing info for user testu...@ldap.vm
[sysdb_ldb_msg_difference] (0x2000): Added attr [gecos] to entry 
[name=testu...@ldap.vm,cn=users,cn=ldap.vm,cn=sysdb]
[sysdb_set_cache_entry_attr] (0x0080): ldb_modify failed: [Invalid attribute 
syntax](21)[Element gecos has empty attribute in ldb message 
(name=testu...@ldap.vm,cn=users,cn=ldap.vm,cn=sysdb)!]
[sysdb_set_cache_entry_attr] (0x0040): Error: 22 (Invalid argument)
[sysdb_set_entry_attr] (0x0080): Cannot set attrs for 
name=testu...@ldap.vm,cn=users,cn=ldap.vm,cn=sysdb, 22 [Invalid argument]
[sysdb_store_user] (0x0040): Cache update failed: 22
[sysdb_store_user] (0x0400): Error: 22 (Invalid argument)
[sdap_save_user] (0x0020): Failed to save user [testu...@ldap.vm]
```

Steps to reproduce:
1. create local user `testuser`
2. add it to LDAP group memberUid
3. set `passwd: sss files`, `group: sss files` (sss must be before files)
4. set enable_files_domain = false and ldap_rfc2307_fallback_to_local_users = 
true
5. run sssd
6. id testuser
-> it does not contain the LDAP group without the patch

Resolves:
https://pagure.io/SSSD/sssd/issue/4013

Note: this fix only the case when the nsswitch order is `sss files` but no 
files domain is available.
"""

_______________________________________________
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org

Reply via email to