| 2022-03-09 14:37:50 |
Brian Turek |
description |
Notice
ipa-client-install
creates /etc/sssd/sssd.conf
but changes in the sssd process's socket approach calls for that file to change
/etc/sssd.conf from
...
[sssd]
services = nss, pam, ssh, sud
...
to
[sssd]
#services = nss, pam, ssh, sud
otherwise the sssd service either won't start or complains.
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: freeipa-client 4.8.6-1ubuntu2
ProcVersionSignature: Ubuntu 5.4.0-29.33-generic 5.4.30
Uname: Linux 5.4.0-29-generic x86_64
ApportVersion: 2.20.11-0ubuntu27
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: MATE
Date: Sat May 16 12:51:21 2020
InstallationDate: Installed on 2020-05-13 (2 days ago)
InstallationMedia: Ubuntu-MATE 20.04 LTS "Focal Fossa" - Release amd64 (20200423)
SourcePackage: freeipa
UpgradeStatus: No upgrade log present (probably fresh install) |
[Impact]
Users of FreeIPA on 20.04 currently experience broken SSSD child-service sockets resulting in systemd labeling the system as degraded.
Original bug report:
Notice
ipa-client-install
creates /etc/sssd/sssd.conf
but changes in the sssd process's socket approach calls for that file to change
/etc/sssd.conf from
...
[sssd]
services = nss, pam, ssh, sud
...
to
[sssd]
#services = nss, pam, ssh, sud
otherwise the sssd service either won't start or complains.
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: freeipa-client 4.8.6-1ubuntu2
ProcVersionSignature: Ubuntu 5.4.0-29.33-generic 5.4.30
Uname: Linux 5.4.0-29-generic x86_64
ApportVersion: 2.20.11-0ubuntu27
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: MATE
Date: Sat May 16 12:51:21 2020
InstallationDate: Installed on 2020-05-13 (2 days ago)
InstallationMedia: Ubuntu-MATE 20.04 LTS "Focal Fossa" - Release amd64 (20200423)
SourcePackage: freeipa
UpgradeStatus: No upgrade log present (probably fresh install)
[Test Plan]
Run the unpatched ipa-client-install, reboot the host, and observe numerous sssd child-service socket errors.
Once the patch is applied, run the patched ipa-client install, reboot the host, and ensure there are no sssd-related service failures.
[Where problems could occur]
The potential problems here are low given that this patch has now been applied for about 17 months. The affected services are currently crashing today so no one is depending on the (broken) present behavior.
[Other Info]
This bug was fixed in groovy at this patch: https://git.launchpad.net/ubuntu/+source/freeipa/commit/?h=applied/ubuntu/groovy&id=2711b62a915961c8f76903846953828c2e6c7bb1 |
|
