FEDORA-2018-2dd926e471

bugfix update in Fedora 27 for sssd

Status: stable 3 months ago

Resolves: upstream#3618 - selinux_child segfaults in a docker container

Comments 14

This update has been submitted for testing by lslebodn.

This update has been pushed to testing.

works for me

karma: +1

works for me

karma: +1

This update has been submitted for batched by bodhi.

After applying this update I could no longer login to my system via ssh. Also, I started getting errors with sudo. I've backed out via: dnf downgrade sssd* and things are once again working properly. This change should not be pushed to stable.

karma: -1 critpath: -1

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

@gbcox, I'm sorry for problems. sssd-1.16.0-6.fc27 contains only one bug-fix which fixes problems with authentication for IPA users in containers (SELinux disabled). It cannot affect anything else.

Please file fedora ticket with more details. It's complicated to discuss about it in bodhi. https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html

@lslebodn - well I find it difficult to believe that the problems weren't the result of your update. You need to investigate further. Immediately after applying your update I stopped getting a ssh prompt to my remote machine. It would just time out. I had a friend reboot the machine several times to no avail. Immediately after removing your updates: dnf downgrade sssd*; followed by 1 reboot the problem immediately disappeared. That isn't just a coincidence. I'm not in a situation to play around with the remote server. I'm travelling internationally and am dependant on being about to access the remote machine via SSH. Apparently the above testers don't use ssh or sudo.

@gbcox, we did an intensive testing of this patch. Authentication works with ldap, IPA and AD. Sudo works with ldap and IPA (we d not have test for sudo + AD_

But it seems that our tests does not cover your use-case. Please file a fedora bug + attach log files. I would really like to help https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html

Fortunately, this update is still in only updates-testing.

Thank you very much for testing and one more time sorry for issues.

@lslebodn Ok, I'll file a bug, etc... but will take a bit of time since I'm on travel.

I re-installed and the problem disappeared - not sure if something went wrong with the dnf process first time around or what - need to trudge through all the logs - but in the meantime changing the feedback.

karma: +1 critpath: +1

This update has been submitted for stable by lslebodn.

This update has been pushed to stable.


Add Comment & Feedback
Toggle Preview

Comment fields support Fedora-Flavored Markdown. Comments are governed under this privacy policy.

-1 0 +1 Feedback Guidelines
Does the system's basic functionality continue to work after this update?
Is the update generally functional?
Content Type
RPM
Status
stable
Submitted by
Update Type
bugfix
Karma
+3
stable threshold: 1
unstable threshold: -3
Autopush
Disabled
Dates
submitted 3 months ago
in testing 3 months ago
in stable 3 months ago

Automated Test Results

Test results and gating status may sometimes conflict as the gating status is retrieved periodically by Bodhi's backend server, while the test results presented here are retrieved upon page load. If your update is marked as gated while all the tests show green/passed, the next check of gating status should open the gate.