Description of problem:
background refresh task does not refresh updated netgroup entries. When
refresh_expired_interval is specified in sssd.conf and netgroup entries are
updated in ldap server. the refresh task doesn't update fetch the latest
netgroup entries.
Version-Release number of selected component (if applicable):
sssd-2.2.0-19.el8.x86_64
How reproducible:
Steps to Reproduce:
1. Install sssd-2.2.0-19.el8.x86_64
2. cat /etc/sssd/sssd.conf
[sssd]
config_file_version = 2
services = nss, pam
domains = example1
[domain/example1]
ldap_search_base = dc=example,dc=test
id_provider = ldap
auth_provider = ldap
ldap_user_home_directory = /home/%u
ldap_uri = ldaps://idm-qe-01.lab.eng.rdu2.redhat.com
ldap_tls_cacert = /etc/openldap/cacerts/cacert.pem
use_fully_qualified_names = True
debug_level = 9
entry_cache_timeout=30
refresh_expired_interval=22
debug_level = 0xfff0
2. Setup ldap server with netgroup entries. as shown below:
dn: cn=netgroup_1137010,ou=Netgroups,dc=example,dc=test
objectClass: top
objectClass: nisNetgroup
cn: netgroup_1137010
nisNetgroupTriple: (host1,user1,example1.com)
3. Run getent netgroup netgroup_1137010
[root@idm-qe-01 db]# getent netgroup netgroup_1137010
netgroup_1137010      (host1,user1,example1.com)
4. Modify netgroup entry
dn: cn=netgroup_1137010,ou=Netgroups,dc=example,dc=test
changetype: modify
replace: nisNetgroupTriple
nisNetgroupTriple: (host1137011,user1137011,example.com)
[root@idm-qe-01 db]# ldapmodify -x  -D "cn=Directory Manager" -w Secret123 -h
localhost -f /tmp/net2.ldif
modifying entry "cn=netgroup_1137010,ou=Netgroups,dc=example,dc=test"
5. After 22 seconds the netgroup entry should be updated in sssd cache.
<snip from sssd_example1.log>
(Tue Dec  3 23:08:00 2019) [sssd[be[example1]]] [be_refresh_step] (0x0400):
Refreshing 0 netgroups in domain example1
(Tue Dec  3 23:08:00 2019) [sssd[be[example1]]] [be_refresh_batch_step]
(0x0200): The batch is done
(Tue Dec  3 23:08:00 2019) [sssd[be[example1]]] [be_ptask_done] (0x0400): Task
[Refresh Records]: finished successfully
(Tue Dec  3 23:08:00 2019) [sssd[be[example1]]] [be_ptask_schedule] (0x0400):
Task [Refresh Records]: scheduling task 22 seconds from now [1575432502]
6. Run ldbsearch to check the cache.
# record 7
dn: name=netgroup_1137010,cn=Netgroups,cn=example1,cn=sysdb
createTimestamp: 1575432366
name: netgroup_1137010
objectClass: netgroup
originalDN: cn=netgroup_1137010,ou=Netgroups,dc=example,dc=test
originalModifyTimestamp: 20191204040527Z
netgroupTriple: (host1,user1,example1.com)
lastUpdate: 1575432366
dataExpireTimestamp: 1575432396
distinguishedName: name=netgroup_1137010,cn=Netgroups,cn=example1,cn=sysdb
Actual results:
Netgroup entries are not fetch the updated netgroup entries from server and
update the cache.
Expected results:
netgroup entries should fetch updated netgroup entries from server and update
the cache.
Additional info: