bugfix update in Fedora 27 for sssd

Status: stable a year ago

Resolves: upstream#3618 - selinux_child segfaults in a docker container

How to install

sudo dnf upgrade --advisory=FEDORA-2018-2dd926e471

Comments 14

This update has been submitted for testing by lslebodn.

This update has been pushed to testing.

works for me

karma: +1

works for me

karma: +1

This update has been submitted for batched by bodhi.

After applying this update I could no longer login to my system via ssh. Also, I started getting errors with sudo. I've backed out via: dnf downgrade sssd* and things are once again working properly. This change should not be pushed to stable.

karma: -1 critpath: -1

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

@gbcox, I'm sorry for problems. sssd-1.16.0-6.fc27 contains only one bug-fix which fixes problems with authentication for IPA users in containers (SELinux disabled). It cannot affect anything else.

Please file fedora ticket with more details. It's complicated to discuss about it in bodhi. https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html

@lslebodn - well I find it difficult to believe that the problems weren't the result of your update. You need to investigate further. Immediately after applying your update I stopped getting a ssh prompt to my remote machine. It would just time out. I had a friend reboot the machine several times to no avail. Immediately after removing your updates: dnf downgrade sssd*; followed by 1 reboot the problem immediately disappeared. That isn't just a coincidence. I'm not in a situation to play around with the remote server. I'm travelling internationally and am dependant on being about to access the remote machine via SSH. Apparently the above testers don't use ssh or sudo.

@gbcox, we did an intensive testing of this patch. Authentication works with ldap, IPA and AD. Sudo works with ldap and IPA (we d not have test for sudo + AD_

But it seems that our tests does not cover your use-case. Please file a fedora bug + attach log files. I would really like to help https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html

Fortunately, this update is still in only updates-testing.

Thank you very much for testing and one more time sorry for issues.

@lslebodn Ok, I'll file a bug, etc... but will take a bit of time since I'm on travel.

I re-installed and the problem disappeared - not sure if something went wrong with the dnf process first time around or what - need to trudge through all the logs - but in the meantime changing the feedback.

karma: +1 critpath: +1

This update has been submitted for stable by lslebodn.

This update has been pushed to stable.

Add Comment & Feedback
Toggle Preview

Comment fields support Fedora-Flavored Markdown. Comments are governed under this privacy policy.

-1 0 +1 Feedback Guidelines

Is the update generally functional? (karma)

You need to be logged in to add karma!

Does the system's basic functionality continue to work after this update?
Content Type
Test Gating
Submitted by
Update Type
Update Severity
stable threshold: 1
unstable threshold: -3
submitted a year ago
in testing a year ago
in stable a year ago

Automated Test Results