Comment 7 for bug 1728310

Revision history for this message
Uli (ulrich-felzmann) wrote :

[Impact]

 * In a multi-domain environment setup with LDAP or IPA, the username is not parsed correctly, resulting in id mapping issues.

 * As a result, NFSv4 cannot be used in a multi-domain environment at all if the username is of the form user@authentication_domain@idmap_domain

 * The attached patch fixes an almost 10 year old bug in the libnfsidmap library. The patch is included already in a similar form in current RHEL releases.

[Test Case]

 * IPA with 2 different user domains. For example: user1@domain1 and user2@domain2.

 * NFSv4 server enrolled into IPA

 * NFS client enrolled into IPA. User and group names coming from IPA have an '@' in them.

[Regression Potential]

 * The attached patch has been in production in a major organisation with more than 500 Ubuntu clients for more than a year now and has not shown any issues.