libnfsidmap2 fails to obtain username which results in failed translation
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
libnfsidmap (Debian) |
New
|
Unknown
|
|||
libnfsidmap (Ubuntu) |
Confirmed
|
Medium
|
Unassigned |
Bug Description
[Impact]
* In a multi-domain environment setup with LDAP or IPA, the username is not parsed correctly, resulting in id mapping issues.
* As a result, NFSv4 cannot be used in a multi-domain environment at all if the username is of the form user@authentica
* The attached patch fixes an almost 10 year old bug in the libnfsidmap library. The patch is included already in a similar form in current RHEL releases.
* Affects at least libnfsidmap2 0.25-5 on Ubuntu 16.04, 16.10, 17.04, 17.10.
[Test Case]
* IPA with 2 different user domains. For example: user1@domain1 and user2@domain2.
* NFSv4 server enrolled into IPA.
* NFS client enrolled into IPA. User and group names coming from IPA have an '@' in them.
[Regression Potential]
* The attached patch has been in production in a major organisation with more than 500 Ubuntu clients for more than a year now and has not shown any issues.
[Other Info]
Environment: IPA + NFSv4 (sec=krb5)
nss.c uses wrong '@' sign to detect the NFS domain resulting in "nobody" ownerships and the following error messages in an IPA environment:
Oct 25 16:49:42 ubuntu-
Oct 25 16:49:42 ubuntu-
Oct 25 16:49:42 ubuntu-
Oct 25 16:49:42 ubuntu-
Oct 25 16:49:42 ubuntu-
Oct 25 16:49:42 ubuntu-
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in autofs (Debian): | |
status: | Unknown → New |
affects: | autofs (Ubuntu) → libnfsidmap (Ubuntu) |
affects: | autofs (Debian) → libnfsidmap (Debian) |
Changed in libnfsidmap (Ubuntu): | |
importance: | Undecided → Medium |
description: | updated |
The attachment "03-nss.c.patch" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]