SSSD / sssd

#3491 pysss_nss_idmap: py3 constants defined as strings or bytes
Closed: Fixed Opened by frenaud.

Closed: Fixed
Reopen Issue

Using python3-libsss_nss_idmap 1.15.3-1.fc26 from copr freeipa/freeipa-master

pysss_nss_idmap.SID_KEY, pysss_nss_idmap.TYPE_KEY and pysss_nss_idmap.NAME_KEY are defined as strings ('sid', 'type' and 'name') but cannot be used as keys in the results returned by pysss_nss_idmap.getsidbyname or pysss_nss_idmap.getnamebysid.

For instance, the output of getnamebysid looks like: {b'name': 'userlogin@domain.com', b'type': 3}
and result.get(pysss_nss_idmap.TYPE_KEY) or result.get(pysss_nss_idmap.NAME_KEY) fail.

The output of getsidbyname looks like: {'userlogin@domain.com': {b'sid': 'S-1-5-21-4185955025-1922848022-3738247038-1116', b'type': 3}}.

There is a mismatch between the constant types and the key types.

In order to reproduce the issue:
install ipa server, create a winsync replication agreement, then add a trust to AD and use ipa-winsync-migrate with python3 -bbE. The tool displays for each user entry to migrate:
Migration failed: userlogin@domain.com (Comparison between bytes and string)

I've provided a simple test build for flo and I'll assign the bug to myself and propose a proper fix in case my test build works for her.

Otherwise, someone else can feel free to take it over (as the solution wasn't as simple as I thought) :-)

Metadata Update from @fidencio:
- Issue assigned to fidencio

@frenaud Can you help me with assessing the impact? Is this something to backport to RHEL before the next release in an asynchronous update?

https://github.com/SSSD/sssd/pull/365

Metadata Update from @fidencio:
- Custom field patch adjusted to on

Metadata Update from @jhrozek:
- Issue tagged with: PR
  • master: 9375eae59550437c85ada9212be430a4242b25a4

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue set to the milestone: SSSD 1.15.4
- Issue status updated to: Closed (was: Open)

@frenaud Can you help me with assessing the impact? Is this something to backport to RHEL before the next release in an asynchronous update?

rhel does not have python3-libipa_hbac
Edited by lslebodn

master:

  • e7fd33642a16cbb2cd814d3578c28affcf16f68c
  • cc4d6435ef49738a02ddfc6072f1197d7f8f7319
  • 53f74f54209120060cd020d65646b3a471d90988

sssd-1-14:

  • 0d5e92b3ce507f8c46d3605729abc69d8310ff93
  • 76d0f9091c43676957ae8f62f1c84fb3c25ce563

sssd-1-13:

  • 0d5e92b3ce507f8c46d3605729abc69d8310ff93
  • 76d0f9091c43676957ae8f62f1c84fb3c25ce563

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 1.16.0 (was: SSSD 1.15.4)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4517

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata

PR

None
None
None
on
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.