FS#56723 - [sssd] SSSD's idmap_sss Backend for Winbind broken

Attached to Project: Community Packages
Opened by Thomas Reim (rdratlos) - Thursday, 14 December 2017, 15:57 GMT
Last edited by Massimiliano Torromeo (mtorromeo) - Friday, 15 December 2017, 22:07 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Massimiliano Torromeo (mtorromeo)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

After upgrade of samba package from 4.6.7-1 to 4.7.x winbindd daemon Fails to load the idmap_sss backend of sssd if configured.
Loading stops with error notification:

Failed to register idmap module.
The module was compiled against SMB_IDMAP_INTERFACE_VERSION 5,
current SMB_IDMAP_INTERFACE_VERSION is 6.
Please recompile against the current version of samba!


Users get NT_STATUS_ACCESS denied, as winbindd cannot map users anymore by using sssd.

Starting with Version 4.7.x the samba Team has updated the idmap Interface to version 6. The implemented changes do not harm the idmap_sss backend. But sssd has hard-coded the idmap Interface version to indicate in file src/lib/winbind_idmap_sss/winbind_idmap_sss.h. With a simple patch I changed the Version to 6 and winbindd loads the backend again. sssd is stable and I could not identify any side-effects.

Proposed solution options:
(1) Provide a new package sssd-winbind-idmap which only contains the library files and man pages. Patch the above mentioned header file to contain the required Interface version. Correctly set dependencies in PKGBUILD
(2) Patch the correct Interface version into this package and set correct dependencies.

If requested, I can provide the required patch file.
(2)

This task depends upon

Closed by  Massimiliano Torromeo (mtorromeo)
Friday, 15 December 2017, 22:07 GMT
Reason for closing:  Fixed
Additional comments about closing:  sssd-1.16.0-2
Comment by Thomas Reim (rdratlos) - Friday, 15 December 2017, 01:01 GMT
Required patch

Loading...