This bug was fixed in the package sssd - 1.13.4-1ubuntu1.13
---
sssd (1.13.4-1ubuntu1.13) xenial; urgency=medium
[Orion Poplawski]
* Add upstream HBAC patch. Closes LP: #1722936.
[Andreas Hasenack]
* d/t/{common-tests,control,ldap-user-group-*-auth,login.exp,util}: add DEP8
** Tags removed: verification-needed-xenial
** Tags added: verification-done-xenial
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsisten
Hi @orion-cora, if everything is still fine, would you mind adjusting
the tags in this bug according to comment #16? Thanks
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rul
** Changed in: sssd (Ubuntu Xenial)
Importance: Undecided => Low
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage not
Hmm, perhaps I was just missing all the different -proposed repositories
- as after adding universe and multiverse I don't seem to have the
problem any more
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bug
What kind of conflict?
Are all your packages from ubuntu xenial?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage notif
Sorry - freeipa-client
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage notifications about this bug go to:
https://bugs
Actually, there seems to be a conflict with freeaip-client (+python-
ipaclient python-ipalib python-libipa-hba) and this version of sssd.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
I've installed the version from -proposed now. So far so good.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage notific
This update will soon be removed from proposed if there is no testing
done.
@orion-cora, I know you submitted this mp a long time ago, we lost it,
then you submitted again, and we thank you for that. Do you think you
could try out the packages from -proposed?
--
You received this bug notificatio
should be fixed bionic and up
** Also affects: sssd (Ubuntu Xenial)
Importance: Undecided
Status: New
** Changed in: sssd (Ubuntu)
Status: Triaged => Fix Released
** Changed in: sssd (Ubuntu Xenial)
Status: New => Fix Committed
** Tags added: verification-needed verifica
** Description changed:
[Impact]
+ From the upstream bug at https://pagure.io/SSSD/sssd/issue/3382:
+ """
+ In IPA-AD trust environment, sssd is intermittently failing to map AD user
+ group with IPA POSIX group hence getting access denied due to HBAC rules. The
issue gets resolved automaticall
** Description changed:
+ [Impact]
+
+ * An explanation of the effects of the bug on users and
+
+ * justification for backporting the fix to the stable release.
+
+ * In addition, it is helpful, but not required, to include an
+explanation of how the upload fixes this bug.
+
+ [Test Ca
I also chose to bring in the DEP8 tests we added to the package in later
ubuntu releases, to give more confidence in this and upcoming SRUs.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title
Thank you. I'll probably have another one after this to deal with
issues with sssh key lookup fixed by
https://pagure.io/SSSD/sssd/c/cf89f552f06b95bd69d8c61aaa55a330a5d9f6e6?branch=master
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu
Thank you. This fell through last time, apologies for that. I'm taking a
look today.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsiste
** Tags added: server-next
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage notifications about this bug go to:
https://
** Merge proposal linked:
https://code.launchpad.net/~orion-cora/ubuntu/+source/sssd/+git/sssd/+merge/362837
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicato
I've tried again: https://code.launchpad.net/~orion-
cora/ubuntu/+source/sssd/+git/sssd/+merge/362837
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD us
Thanks Timo, will do.
On Wed, Jan 3, 2018 at 6:50 AM, Timo Aaltonen
wrote:
> please file bugs for RH'isms you find in freeipa, I have no AD to test
> against
>
> that said, 4.6.2 will soon hit bionic
>
> --
> You received this bug notification because you are subscribed to sssd in
> Ubuntu.
> ht
please file bugs for RH'isms you find in freeipa, I have no AD to test
against
that said, 4.6.2 will soon hit bionic
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule appl
Server is EL 7.4.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsistent
To manage notifications about this bug go to:
https://bugs.laun
Your freeipa server, is that on ubuntu or redhat/centos/fedora?
I deployed ubuntu's latest freeipa package (in bionic), but ran into
some issues that I think come from some rh'isms that do not apply to
debian systems and couldn't add a trust relationship to my test AD
server. My next step would be
Proposed merge - https://code.launchpad.net/~orion-
cora/ubuntu/+source/sssd/+git/sssd/+merge/334317 hope I got that right.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac ru
** Merge proposal linked:
https://code.launchpad.net/~orion-cora/ubuntu/+source/sssd/+git/sssd/+merge/334317
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicato
I beg your pardon as it is great to see people participate.
Of course in that cases all kind of usual teething troubles hit :-/
I took the importer from beta and ran it test-wise - it imported it just fine.
So I ran it again including a push to the repo.
A subsequent git ubuntu clone had the most
we restarted the importer and it's catching up. Should be up-to-date
soon, later today.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1722936
Title:
sssd hbac rule applicaton for AD users is inconsi
Hm, you are right, something must have happened with the importer. I'll
email ubuntu-server@ requesting for that branch to be updated and the
importer checked.
Thanks
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launch
I just started to try to do this - but it looks like the pkg/ubuntu
/xenial-devel branch is at 1.13.4-1ubuntu1.8, but 1.13.4-1ubuntu1.9 has
been released. Can that branch be updated?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
htt
Thanks for filing this bug in Ubuntu.
It looks like you are familiar with Ubuntu/Debian development. Do you
think you would be able to make a merge proposal against this git branch
for xenial?
https://code.launchpad.net/~usd-import-
team/ubuntu/+source/sssd/+git/sssd/+ref/ubuntu/xenial-devel
If
30 matches
Mail list logo
