freeipa team mailing list archive

[Brian Turek <1879083@xxxxxxxxxxxxxxxxxx>]

This is still affecting Ubuntu 20.04(.4), would it be possible to get
this patch backported to Focal as a SRU?

** Description changed:

- Notice 
+ 
+ [Impact] 
+ 
+ Users of FreeIPA on 20.04 currently experience broken SSSD child-service
+ sockets resulting in systemd labeling the system as degraded.
+ 
+ Original bug report:
+ 
+ Notice
  ipa-client-install
  creates /etc/sssd/sssd.conf
  but changes in the sssd process's socket approach calls for that file to change
  /etc/sssd.conf from
  ...
  [sssd]
  services = nss, pam, ssh, sud
  ...
  to
  [sssd]
  #services = nss, pam, ssh, sud
  otherwise the sssd service either won't start or complains.
  
  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: freeipa-client 4.8.6-1ubuntu2
  ProcVersionSignature: Ubuntu 5.4.0-29.33-generic 5.4.30
  Uname: Linux 5.4.0-29-generic x86_64
  ApportVersion: 2.20.11-0ubuntu27
  Architecture: amd64
  CasperMD5CheckResult: skip
  CurrentDesktop: MATE
  Date: Sat May 16 12:51:21 2020
  InstallationDate: Installed on 2020-05-13 (2 days ago)
  InstallationMedia: Ubuntu-MATE 20.04 LTS "Focal Fossa" - Release amd64 (20200423)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)
+ 
+ 
+ [Test Plan]
+ 
+ Run the unpatched ipa-client-install, reboot the host, and observe
+ numerous sssd child-service socket errors.
+ 
+ Once the patch is applied, run the patched ipa-client install, reboot
+ the host, and ensure there are no sssd-related service failures.
+ 
+ [Where problems could occur]
+ The potential problems here are low given that this patch has now been applied for about 17 months. The affected services are currently crashing today so no one is depending on the (broken) present behavior.
+ 
+ 
+ [Other Info]
+ 
+ This bug was fixed in groovy at this patch:
+ https://git.launchpad.net/ubuntu/+source/freeipa/commit/?h=applied/ubuntu/groovy&id=2711b62a915961c8f76903846953828c2e6c7bb1

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to freeipa in Ubuntu.
https://bugs.launchpad.net/bugs/1879083

Title:
  [SRU] default sssd.conf after ipa-client-install crashes sssd

Status in freeipa package in Ubuntu:
  Fix Released

Bug description:
  
  [Impact] 

  Users of FreeIPA on 20.04 currently experience broken SSSD child-
  service sockets resulting in systemd labeling the system as degraded.

  Original bug report:

  Notice
  ipa-client-install
  creates /etc/sssd/sssd.conf
  but changes in the sssd process's socket approach calls for that file to change
  /etc/sssd.conf from
  ...
  [sssd]
  services = nss, pam, ssh, sud
  ...
  to
  [sssd]
  #services = nss, pam, ssh, sud
  otherwise the sssd service either won't start or complains.

  ProblemType: Bug
  DistroRelease: Ubuntu 20.04
  Package: freeipa-client 4.8.6-1ubuntu2
  ProcVersionSignature: Ubuntu 5.4.0-29.33-generic 5.4.30
  Uname: Linux 5.4.0-29-generic x86_64
  ApportVersion: 2.20.11-0ubuntu27
  Architecture: amd64
  CasperMD5CheckResult: skip
  CurrentDesktop: MATE
  Date: Sat May 16 12:51:21 2020
  InstallationDate: Installed on 2020-05-13 (2 days ago)
  InstallationMedia: Ubuntu-MATE 20.04 LTS "Focal Fossa" - Release amd64 (20200423)
  SourcePackage: freeipa
  UpgradeStatus: No upgrade log present (probably fresh install)

  
  [Test Plan]

  Run the unpatched ipa-client-install, reboot the host, and observe
  numerous sssd child-service socket errors.

  Once the patch is applied, run the patched ipa-client install, reboot
  the host, and ensure there are no sssd-related service failures.

  [Where problems could occur]
  The potential problems here are low given that this patch has now been applied for about 17 months. The affected services are currently crashing today so no one is depending on the (broken) present behavior.

  
  [Other Info]

  This bug was fixed in groovy at this patch:
  https://git.launchpad.net/ubuntu/+source/freeipa/commit/?h=applied/ubuntu/groovy&id=2711b62a915961c8f76903846953828c2e6c7bb1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/freeipa/+bug/1879083/+subscriptions