** Description changed:
+ [Impact]
+
+ * When cups has set the "SystemGroup" directive to an external group
+ provided through sss and cups starts before sssd has finished booting,
+ cups will crash because the group does not exist.
+
+ * The patch adds an "After=sssd.service" clause to the service unit
+ file.
+
+ [Test Case]
+
+ * Configure an external authentication service (LDAP, AD...) and create
+ a group, for instance "lpadmins@tests.local"
+
+ * Set SystemGroup to match that group (SystemGroup =
+ "lpadmins@tests.local")
+
+ * Reboot
+
+ * If cups has started before sssd has finished booting, cups will crash:
+ Mar 27 10:10:33 cups-sssd cupsd[21463]: Unknown SystemGroup
"lpadmins@tests.local" on line 19 of /etc/cups/cups-files.conf.
+
+ * If cups starts after sssd, it will work fine.
+
+ [Regression Potential]
+
+ * Minimal: this patch affects just the ordering of the service unit
+ file.
+
+ [Other Info]
+
+ * Upstream:
https://github.com/apple/cups/commit/4d0f1959a3f46973caec2cd41828c59674fe195d
+
+ [Original description]
+
When cups has set the "SystemGroup" directive to an external group
provided through sss and cups starts before sssd has finished booting,
cups will crash because the group does not exist. For instance, with a
group named lpadmins@tests.local served from Active Directory through
sssd, if the sssd service hasn't booted before cups:
Mar 27 10:10:33 cups-sssd systemd[1]: Started CUPS Scheduler.
Mar 27 10:10:33 cups-sssd systemd[1]: Started CUPS Scheduler.
Mar 27 10:10:33 cups-sssd systemd[1]: Started Make remote CUPS printers
available locally.
Mar 27 10:10:33 cups-sssd cupsd[21463]: Unknown SystemGroup
"lpadmins@tests.local" on line 19 of /etc/cups/cups-files.conf.
Mar 27 10:10:33 cups-sssd cupsd[21463]: Unable to read
"/etc/cups/cups-files.conf" due to errors.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Main process exited,
code=exited, status=1/FAILURE
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Failed with result
'exit-code'.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Service hold-off time
over, scheduling restart.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Scheduled restart job,
restart counter is at 2.
Mar 27 10:10:33 cups-sssd systemd[1]: Stopping Make remote CUPS printers
available locally...
Mar 27 10:10:33 cups-sssd systemd[1]: Stopped Make remote CUPS printers
available locally.
Mar 27 10:10:33 cups-sssd systemd[1]: Stopped CUPS Scheduler.
If sssd is running before cups starts, everything works as expected.
** Also affects: cups (Ubuntu Eoan)
Importance: Undecided
Status: New
** Also affects: cups (Ubuntu Xenial)
Importance: Undecided
Status: New
** Also affects: cups (Ubuntu Bionic)
Importance: Undecided
Status: New
** Also affects: cups (Ubuntu Disco)
Importance: Undecided
Status: New
** Also affects: cups (Ubuntu Cosmic)
Importance: Undecided
Status: New
** Description changed:
[Impact]
- * When cups has set the "SystemGroup" directive to an external group
+ * When cups has set the "SystemGroup" directive to an external group
provided through sss and cups starts before sssd has finished booting,
cups will crash because the group does not exist.
- * The patch adds an "After=sssd.service" clause to the service unit
+ * The patch adds an "After=sssd.service" clause to the service unit
file.
[Test Case]
- * Configure an external authentication service (LDAP, AD...) and create
+ * Configure an external authentication service (LDAP, AD...) and create
a group, for instance "lpadmins@tests.local"
- * Set SystemGroup to match that group (SystemGroup =
- "lpadmins@tests.local")
+ * Set SystemGroup to match that group in /etc/cups/cups-files.conf:
+ SystemGroup lpadmins@tests.local
- * Reboot
+ * Reboot
- * If cups has started before sssd has finished booting, cups will crash:
+ * If cups has started before sssd has finished booting, cups will crash:
Mar 27 10:10:33 cups-sssd cupsd[21463]: Unknown SystemGroup
"lpadmins@tests.local" on line 19 of /etc/cups/cups-files.conf.
- * If cups starts after sssd, it will work fine.
+ * If cups starts after sssd, it will work fine.
[Regression Potential]
- * Minimal: this patch affects just the ordering of the service unit
+ * Minimal: this patch affects just the ordering of the service unit
file.
[Other Info]
-
- * Upstream:
https://github.com/apple/cups/commit/4d0f1959a3f46973caec2cd41828c59674fe195d
+
+ * Upstream:
+ https://github.com/apple/cups/commit/4d0f1959a3f46973caec2cd41828c59674fe195d
[Original description]
When cups has set the "SystemGroup" directive to an external group
provided through sss and cups starts before sssd has finished booting,
cups will crash because the group does not exist. For instance, with a
group named lpadmins@tests.local served from Active Directory through
sssd, if the sssd service hasn't booted before cups:
Mar 27 10:10:33 cups-sssd systemd[1]: Started CUPS Scheduler.
Mar 27 10:10:33 cups-sssd systemd[1]: Started CUPS Scheduler.
Mar 27 10:10:33 cups-sssd systemd[1]: Started Make remote CUPS printers
available locally.
Mar 27 10:10:33 cups-sssd cupsd[21463]: Unknown SystemGroup
"lpadmins@tests.local" on line 19 of /etc/cups/cups-files.conf.
Mar 27 10:10:33 cups-sssd cupsd[21463]: Unable to read
"/etc/cups/cups-files.conf" due to errors.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Main process exited,
code=exited, status=1/FAILURE
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Failed with result
'exit-code'.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Service hold-off time
over, scheduling restart.
Mar 27 10:10:33 cups-sssd systemd[1]: cups.service: Scheduled restart job,
restart counter is at 2.
Mar 27 10:10:33 cups-sssd systemd[1]: Stopping Make remote CUPS printers
available locally...
Mar 27 10:10:33 cups-sssd systemd[1]: Stopped Make remote CUPS printers
available locally.
Mar 27 10:10:33 cups-sssd systemd[1]: Stopped CUPS Scheduler.
If sssd is running before cups starts, everything works as expected.
** Patch added: "eoan-cups.debdiff"
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1822062/+attachment/5258666/+files/eoan-cups.debdiff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1822062
Title:
Race condition on boot between cups and sssd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cups/+bug/1822062/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
