sssd-devel April 2024

sssd-devel@lists.fedorahosted.org

2 participants
2 discussions

SSSD: fix for CVE-2023-3758
by Alexey Tikhonov 19 Apr '24

19 Apr '24

Hi SSSD maintainers, a fix for CVE-2023-3758 was made available upstream via https://github.com/SSSD/sssd/pull/7302#issuecomment-2063480554

1 0

2.9.{2,4} test failure on armhf: responder_cache_req-tests and pam-srv-tests
by Andreas Hasenack 05 Apr '24

05 Apr '24

Hi, I'm troubleshooting a set of test failures[1][2] in sssd 2.9.2 and 2.9.4. They are only failing in armhf, so the usual culprits are 32bits, slowness of the arch/infrastructure, and now we also have a time_t change[3] to a 64bit type. I don't know yet which, if any, are related to the failures. The current failures are: [ RUN ] test_user_by_recent_filter_valid [ ERROR ] --- 0x2 != 0x1 [ LINE ] --- ../src/tests/cmocka/test_responder_cache_req.c:2505: error: Failure! [ FAILED ] test_user_by_recent_filter_valid [ RUN ] test_users_by_recent_filter_valid [ OK ] test_users_by_recent_filter_valid [ RUN ] test_group_by_recent_filter_valid [ ERROR ] --- 0x2 != 0x1 [ LINE ] --- ../src/tests/cmocka/test_responder_cache_req.c:2868: error: Failure! [ FAILED ] test_group_by_recent_filter_valid [ RUN ] test_groups_by_recent_filter_valid [ OK ] test_groups_by_recent_filter_valid [ RUN ] test_users_by_filter_filter_old [ ERROR ] --- 0x2 != 0x1 [ LINE ] --- ../src/tests/cmocka/test_responder_cache_req.c:2613: error: Failure! [ FAILED ] test_users_by_filter_filter_old And [ ERROR ] --- No entries for symbol sss_dp_get_account_recv. ../src/tests/cmocka/common_mock_resp_dp.c:52: error: Could not get value to mock function sss_dp_get_account_recv ../src/tests/cmocka/test_pam_srv.c:802: note: Previously returned mock value was declared here [ FAILED ] test_pam_preauth_expired_crl_file ... [ ERROR ] --- No entries for symbol sss_dp_get_account_recv. ../src/tests/cmocka/common_mock_resp_dp.c:52: error: Could not get value to mock function sss_dp_get_account_recv ../src/tests/cmocka/test_pam_srv.c:802: note: Previously returned mock value was declared here [ FAILED ] test_pam_preauth_crl_another_ca_crl_invalid_files [ RUN ] test_pam_preauth_crl_invalid_crl_another_ca_files [ ERROR ] --- No entries for symbol sss_dp_get_account_recv. ../src/tests/cmocka/common_mock_resp_dp.c:52: error: Could not get value to mock function sss_dp_get_account_recv ../src/tests/cmocka/test_pam_srv.c:802: note: Previously returned mock value was declared here [ FAILED ] test_pam_preauth_crl_invalid_crl_another_ca_files At first, I've been trying to understand test_user_by_recent_filter_valid()[4], and it seems to be the reason for all 3 failures in that test group. The failure is that it expects just one user to be returned, but in the end there are two. The test seems to prepare two users, but in the end only one should be returned by the filter. I have not yet understood what is being expected here. What's "recent" in this context? Is it related to the "one second ago" (time(NULL) -1) in prepare_user()? 1. https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/2058576 2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1068063 3. https://wiki.debian.org/ReleaseGoals/64bit-time 4. https://github.com/SSSD/sssd/blob/1c2aa825062dcf2da2e886c3211be90c22db1750/…

2 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel April 2024