Resolute verification succeeded. Details below.
# apt-cache policy sssd
sssd:
Installed: 2.12.0-1ubuntu5.1
Candidate: 2.12.0-1ubuntu5.1
Version table:
*** 2.12.0-1ubuntu5.1 500
500 http://br.archive.ubuntu.com/ubuntu resolute-updates/main amd64
Packages
500 http://br.archive.ubuntu.com/ubuntu resolute-security/main amd64
Packages
100 /var/lib/dpkg/status
2.12.0-1ubuntu5 500
500 http://br.archive.ubuntu.com/ubuntu resolute/main amd64 Packages
Joined to example.fake
# id [email protected]
uid=1170201107([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
Reinstalling same sssd to trigger the bug:
# apt install --reinstall sssd-common sssd-krb5-common
Summary:
Upgrading: 0, Installing: 0, Reinstalling: 2, Removing: 0, Not Upgrading: 0
Download size: 1231 kB
Space needed: 0 B / 149 GB available
Get:1 http://br.archive.ubuntu.com/ubuntu resolute-updates/main amd64
sssd-common amd64 2.12.0-1ubuntu5.1 [1138 kB]
Get:2 http://br.archive.ubuntu.com/ubuntu resolute-updates/main amd64
sssd-krb5-common amd64 2.12.0-1ubuntu5.1 [92.9 kB]
Fetched 1231 kB in 0s (17.5 MB/s)
(Reading database ... 43044 files and directories currently installed.)
Preparing to unpack .../sssd-common_2.12.0-1ubuntu5.1_amd64.deb ...
Unpacking sssd-common (2.12.0-1ubuntu5.1) over (2.12.0-1ubuntu5.1) ...
Preparing to unpack .../sssd-krb5-common_2.12.0-1ubuntu5.1_amd64.deb ...
Unpacking sssd-krb5-common (2.12.0-1ubuntu5.1) over (2.12.0-1ubuntu5.1) ...
Setting up sssd-common (2.12.0-1ubuntu5.1) ...
Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing
complain mode
Warning from /etc/apparmor.d/usr.sbin.sssd (/etc/apparmor.d/usr.sbin.sssd line
69): Caching disabled for: 'usr.sbin.sssd' due to force complain
sssd-autofs.service is a disabled or a static unit not running, not starting it.
sssd-nss.service is a disabled or a static unit not running, not starting it.
sssd-pam.service is a disabled or a static unit not running, not starting it.
sssd-ssh.service is a disabled or a static unit not running, not starting it.
sssd-sudo.service is a disabled or a static unit not running, not starting it.
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 148.
Setting up sssd-krb5-common (2.12.0-1ubuntu5.1) ...
Processing triggers for man-db (2.13.1-1build1) ...
Log full of errors:
tail -f /var/log/sssd/sssd_example.fake.log | grep -iE "(internal|corrupted)"
* (2026-07-25 19:07:55): [be[example.fake]] [sysdb_domain_init_internal]
(0x0200): DB File for example.fake: /var/lib/sss/db/cache_example.fake.ldb
* (2026-07-25 19:07:55): [be[example.fake]] [sysdb_domain_init_internal]
(0x0200): Timestamp file for example.fake:
/var/lib/sss/db/timestamps_example.fake.ldb
(2026-07-25 19:07:55): [be[example.fake]] [dp_load_targets] (0x0020): Unable to
load target [id] [80]: Accessing a corrupted shared library.
* (2026-07-25 19:07:55): [be[example.fake]] [dp_load_targets] (0x0020):
Unable to load target [id] [80]: Accessing a corrupted shared library.
(2026-07-25 19:07:55): [be[example.fake]] [dp_init] (0x0020): Unable to
initialize DP targets [1432158209]: Internal Error
Trying to resolve another user fails:
# id [email protected]
id: '[email protected]': no such user
Previous user still works due to caching:
# id [email protected]
uid=1170201107([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
Installing packages from proposed:
# apt-cache policy sssd
sssd:
Installed: 2.12.0-1ubuntu5.2
Candidate: 2.12.0-1ubuntu5.2
Version table:
*** 2.12.0-1ubuntu5.2 100
100 http://br.archive.ubuntu.com/ubuntu resolute-proposed/main amd64
Packages
100 /var/lib/dpkg/status
2.12.0-1ubuntu5.1 500
500 http://br.archive.ubuntu.com/ubuntu resolute-updates/main amd64
Packages
500 http://br.archive.ubuntu.com/ubuntu resolute-security/main amd64
Packages
2.12.0-1ubuntu5 500
500 http://br.archive.ubuntu.com/ubuntu resolute/main amd64 Packages
Trying to resolve the same two users from before works:
# id [email protected]
uid=1170201107([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
and
# id [email protected]
uid=1170201110([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
And a new user we never tried before also works:
# id [email protected]
uid=1170201117([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
The logs do not have any new error messages.
Now we try to trigger the bug again by reinstalling the same packages:
# apt install --reinstall sssd-common sssd-krb5-common
Summary:
Upgrading: 0, Installing: 0, Reinstalling: 2, Removing: 0, Not Upgrading: 0
Download size: 1231 kB
Space needed: 0 B / 149 GB available
Get:1 http://br.archive.ubuntu.com/ubuntu resolute-proposed/main amd64
sssd-common amd64 2.12.0-1ubuntu5.2 [1138 kB]
Get:2 http://br.archive.ubuntu.com/ubuntu resolute-proposed/main amd64
sssd-krb5-common amd64 2.12.0-1ubuntu5.2 [92.9 kB]
Fetched 1231 kB in 0s (5242 kB/s)
(Reading database ... 43044 files and directories currently installed.)
Preparing to unpack .../sssd-common_2.12.0-1ubuntu5.2_amd64.deb ...
Unpacking sssd-common (2.12.0-1ubuntu5.2) over (2.12.0-1ubuntu5.2) ...
Preparing to unpack .../sssd-krb5-common_2.12.0-1ubuntu5.2_amd64.deb ...
Unpacking sssd-krb5-common (2.12.0-1ubuntu5.2) over (2.12.0-1ubuntu5.2) ...
Setting up sssd-common (2.12.0-1ubuntu5.2) ...
Warning: found usr.sbin.sssd in /etc/apparmor.d/force-complain, forcing
complain mode
Warning from /etc/apparmor.d/usr.sbin.sssd (/etc/apparmor.d/usr.sbin.sssd line
69): Caching disabled for: 'usr.sbin.sssd' due to force complain
sssd-autofs.service is a disabled or a static unit not running, not starting it.
sssd-nss.service is a disabled or a static unit not running, not starting it.
sssd-pam.service is a disabled or a static unit not running, not starting it.
sssd-ssh.service is a disabled or a static unit not running, not starting it.
sssd-sudo.service is a disabled or a static unit not running, not starting it.
Could not execute systemctl: at /usr/bin/deb-systemd-invoke line 148.
Setting up sssd-krb5-common (2.12.0-1ubuntu5.2) ...
Processing triggers for man-db (2.13.1-1build1) ...
The terminal grepping for errors in the logs remained quiet.
And rechecking the 3 users from above works:
# id [email protected]
uid=1170201107([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
# id [email protected]
uid=1170201110([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
# id [email protected]
uid=1170201117([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
root@r-sssd:~#
As does a completely new users we never checked before:
# id [email protected]
uid=1170201119([email protected]) gid=1170200513(domain [email protected])
groups=1170200513(domain [email protected])
Resolute verification succeeded.
** Tags removed: verification-needed-resolute
** Tags added: verification-done-resolute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155002
Title:
Update to SSSD 2.12.0-1ubuntu5 breaks AD join due to SSSD inability to
read keytab
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/2155002/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs