| 2023-05-26 02:43:09 |
Matthew Ruffell |
bug |
|
|
added bug |
| 2023-05-26 02:43:22 |
Matthew Ruffell |
tags |
|
sts |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
nominated for series |
|
Ubuntu Kinetic |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
bug task added |
|
adsys (Ubuntu Kinetic) |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
nominated for series |
|
Ubuntu Focal |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
bug task added |
|
adsys (Ubuntu Focal) |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
nominated for series |
|
Ubuntu Jammy |
|
| 2023-05-26 02:43:33 |
Matthew Ruffell |
bug task added |
|
adsys (Ubuntu Jammy) |
|
| 2023-05-26 02:43:37 |
Matthew Ruffell |
adsys (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-05-26 02:43:39 |
Matthew Ruffell |
adsys (Ubuntu Jammy): status |
New |
In Progress |
|
| 2023-05-26 02:43:41 |
Matthew Ruffell |
adsys (Ubuntu Kinetic): status |
New |
In Progress |
|
| 2023-05-26 02:43:43 |
Matthew Ruffell |
adsys (Ubuntu): status |
New |
Fix Released |
|
| 2023-05-26 02:43:46 |
Matthew Ruffell |
adsys (Ubuntu Focal): importance |
Undecided |
High |
|
| 2023-05-26 02:43:47 |
Matthew Ruffell |
adsys (Ubuntu Jammy): importance |
Undecided |
High |
|
| 2023-05-26 02:43:49 |
Matthew Ruffell |
adsys (Ubuntu Kinetic): importance |
Undecided |
High |
|
| 2023-05-26 02:43:51 |
Matthew Ruffell |
adsys (Ubuntu Focal): assignee |
|
Matthew Ruffell (mruffell) |
|
| 2023-05-26 02:43:53 |
Matthew Ruffell |
adsys (Ubuntu Jammy): assignee |
|
Matthew Ruffell (mruffell) |
|
| 2023-05-26 02:43:55 |
Matthew Ruffell |
adsys (Ubuntu Kinetic): assignee |
|
Matthew Ruffell (mruffell) |
|
| 2023-05-26 02:46:30 |
Matthew Ruffell |
description |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.11.0 back to at least Jammy, documented in bug 2020682 which depends on goland 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.11.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.11.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.11.0 back to at least Jammy, documented in bug 2020682 which depends on goland 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.11.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.11.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
|
| 2023-05-26 02:47:04 |
Matthew Ruffell |
description |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.11.0 back to at least Jammy, documented in bug 2020682 which depends on goland 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.11.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.11.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.11.0 back to at least Jammy, documented in bug 2020682 which depends on golang 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.11.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.11.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
|
| 2023-05-26 04:18:29 |
Matthew Ruffell |
attachment added |
|
Debdiff for adsys on Kinetic https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2020834/+attachment/5675739/+files/lp2020834_kinetic.debdiff |
|
| 2023-05-26 04:19:03 |
Matthew Ruffell |
attachment added |
|
Debdiff for adsys on Jammy https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2020834/+attachment/5675740/+files/lp2020834_jammy.debdiff |
|
| 2023-05-26 04:19:27 |
Matthew Ruffell |
attachment added |
|
Debdiff for adsys on Focal https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2020834/+attachment/5675741/+files/lp2020834_focal.debdiff |
|
| 2023-05-29 12:53:17 |
Fabio Augusto Miranda Martins |
bug |
|
|
added subscriber Fabio Augusto Miranda Martins |
| 2023-05-30 05:12:32 |
Matthew Ruffell |
tags |
sts |
sts sts-sponsor |
|
| 2023-06-01 13:19:13 |
Heitor Alves de Siqueira |
tags |
sts sts-sponsor |
se-sponsor-halves sts |
|
| 2023-06-01 13:19:20 |
Heitor Alves de Siqueira |
bug |
|
|
added subscriber Heitor Alves de Siqueira |
| 2023-06-28 03:10:06 |
Matthew Ruffell |
description |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.11.0 back to at least Jammy, documented in bug 2020682 which depends on golang 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.11.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.11.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.12.0 back to at least Jammy, documented in bug 2020682 which depends on golang 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.12.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.12.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
|
| 2023-06-28 03:10:41 |
Matthew Ruffell |
description |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.12.0 back to at least Jammy, documented in bug 2020682 which depends on golang 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.12.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.12.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.11.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
[Impact]
It is common that domain names contain the '-' character, as in "test-example.com", and adsys versions 0.9.2 and below cannot parse these correctly, leading to the error:
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
when attempting to run adsys on a system attached to "test-example.com" Active Directory.
Currently, 0.9.2 only changes '.' into '_2e', and this would change all special characters to use their hexadecimal representations, notably '-' becomes '_2d'.
There is plans from Foundations + Desktop to SRU 0.12.0 back to at least Jammy, documented in bug 2020682 which depends on golang 1.20 to be included in the jammy archive, documented in bug 2020658. However, this fixup is required with high priority while the 0.12.0 release is being prepared, and the SRU will hopefully bridge a few weeks between SRU release to release of 0.12.0.
[Testcase]
Start a Windows Server VM, 2022 will be fine, and create an Active Directory with the domain "test-example.com".
Launch a Focal, or Jammy, or Kinetic VM, and use SSSD to join the domain.
Try to enable adsys:
$ sudo apt install adsys
$ adsysctl update
ERRORgithub.com/ubuntu/adsys/cmd/adsysd/main.go:50 main.run() Error from server: error while updating policy: can't get policies for "test-example.com": failed to retrieve offline state from SSSD: dbus: invalid message: invalid path name
There are test packages in the below ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf360012-test
If you install the test package and retry to join the domain, it will succeed.
[Where problems could occur]
We are changing how domain names are being parsed and converted to valid dbus object path names. Domain names can only contain [0-9], [A-Z], [a-z], [.], and [-], so by adding '-' to being processed to its hexadecimal representation of '_2d', there should be limited scope of regressions.
However, if a regression were to occur, then users may not be able to use adsys to apply group policy restrictions, and could run into issues accessing files, shares and networks.
As mentioned in the impact section, this will be a temporary fix to 0.9.2 while 0.12.0 is being prepared to be released into the archive, which contains the full fix and testsuite coverage. This SRU should hopefully be short lived.
[Other Info]
The upstream merge request is:
https://github.com/ubuntu/adsys/pull/498
This was fixed in 0.10.0 by the commit:
commit 5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:10:51 2022 +0100
Subject: Fix special characters in domain conversion to dbus object path
Link: https://github.com/ubuntu/adsys/commit/5752ba87347d7813dd56bc6a9ec6369ec56e5dc4
Now, there were some additional commits that added testsuite coverage:
commit cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:13:03 2022 +0100
Subject: Refresh golden file now that we properly handle the path.
Link: https://github.com/ubuntu/adsys/commit/cd79b3f81441a3d9ab50f11bc8c3b5c7bf722540
commit 4571e39cd724a973270a586d2b18f653f0007de9
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:14:35 2022 +0100
Subject: Use a better case to assert on ServerURL() failure being ignored.
Link: https://github.com/ubuntu/adsys/commit/4571e39cd724a973270a586d2b18f653f0007de9
commit fdca6e462c26e1cbecdb8386f43515c1947d423d
Author: Didier Roche <didier.roche@canonical.com>
Date: Tue Nov 15 11:16:21 2022 +0100
Subject: Add a separate case for special characters in domain name.
Link: https://github.com/ubuntu/adsys/commit/fdca6e462c26e1cbecdb8386f43515c1947d423d
These commits are not compatible with 0.9.2 due to testsuite harnesses and frameworks and test data files not being added until 0.10.0, and adding such commits is numerous, and contains too many changes for a SRU. Regrettably, the testsuite commits must be omitted. |
|
| 2023-07-05 02:13:08 |
Chris Halse Rogers |
adsys (Ubuntu Kinetic): status |
In Progress |
Fix Committed |
|
| 2023-07-05 02:13:09 |
Chris Halse Rogers |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2023-07-05 02:13:11 |
Chris Halse Rogers |
bug |
|
|
added subscriber SRU Verification |
| 2023-07-05 02:13:16 |
Chris Halse Rogers |
tags |
se-sponsor-halves sts |
se-sponsor-halves sts verification-needed verification-needed-kinetic |
|
| 2023-07-05 02:18:38 |
Chris Halse Rogers |
adsys (Ubuntu Jammy): status |
In Progress |
Fix Committed |
|
| 2023-07-05 02:18:45 |
Chris Halse Rogers |
tags |
se-sponsor-halves sts verification-needed verification-needed-kinetic |
se-sponsor-halves sts verification-needed verification-needed-jammy verification-needed-kinetic |
|
| 2023-07-05 02:20:33 |
Chris Halse Rogers |
adsys (Ubuntu Focal): status |
In Progress |
Fix Committed |
|
| 2023-07-05 02:20:39 |
Chris Halse Rogers |
tags |
se-sponsor-halves sts verification-needed verification-needed-jammy verification-needed-kinetic |
se-sponsor-halves sts verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic |
|
| 2023-07-06 12:46:22 |
Heitor Alves de Siqueira |
tags |
se-sponsor-halves sts verification-needed verification-needed-focal verification-needed-jammy verification-needed-kinetic |
se-sponsor-halves sts verification-done-focal verification-done-jammy verification-needed verification-needed-kinetic |
|
| 2023-07-12 10:30:20 |
Robie Basak |
tags |
se-sponsor-halves sts verification-done-focal verification-done-jammy verification-needed verification-needed-kinetic |
regression-proposed se-sponsor-halves sts verification-done-focal verification-done-jammy verification-needed verification-needed-kinetic |
|
| 2023-07-12 10:30:38 |
Robie Basak |
bug |
|
|
added subscriber Robie Basak |
| 2023-07-13 12:17:59 |
Robie Basak |
tags |
regression-proposed se-sponsor-halves sts verification-done-focal verification-done-jammy verification-needed verification-needed-kinetic |
regression-proposed se-sponsor-halves sts verification-failed-kinetic verification-needed verification-needed-focal verification-needed-jammy |
|
| 2023-07-21 08:14:56 |
Łukasz Zemczak |
adsys (Ubuntu Kinetic): status |
Fix Committed |
Confirmed |
|
| 2023-08-03 14:40:14 |
Juarez Prates |
adsys (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
| 2023-08-08 23:38:10 |
Launchpad Janitor |
adsys (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2023-08-10 17:57:18 |
Utkarsh Gupta |
adsys (Ubuntu Kinetic): status |
Confirmed |
Won't Fix |
|
