SSSD / sssd

#3421 Wrong search base used when SSSD is directly connected to AD child domain
Closed: Fixed Opened by lslebodn.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1457926

Description of problem:
We have following domain hierarchy - forest root and 2 direct child domains:
ad.test - root
child.ad.test - child of root
child2.ad.test - child of root
SSSD is directly connected to child.ad.test (for example 'realm join
CHILD.AD.TEST').
Users from child2.ad.test can not be resolved.
Version-Release number of selected component (if applicable):
RHEL 7.4: sssd-1.15.2.31 (or later 1.15.2.x)
Upstream: c4ddb9ccab670f9c0d0377680237b62f9f91c496 (and later)
How reproducible:
100%
Steps to Reproduce:
Create hierarchy as described above and do:
$ getent passwd administrator@child2.ad.test
Actual results:
User is not resolved.
Expected results:
User resolved.
Additional info:
The problem seem to be with SSSD using wrong search base (SSSD uses search base
from child.ad.test domain instead of child2.ad.test).

Metadata Update from @lslebodn:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1457926

Metadata Update from @lslebodn:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1457926

PR: https://github.com/SSSD/sssd/pull/313

Metadata Update from @mzidek:
- Issue set to the milestone: None
  • master:
  • 630aea13063c4b242b3433d16ca4346a1a38429b
  • b1d34059533eb50f6e5a4ac7b6fa1bb6fa60a445

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue priority set to: critical
- Issue set to the milestone: SSSD 1.15.3
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4448

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
Low
https://bugzilla.redhat.com/show_bug.cgi?id=1457926
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.