ehlo,
attached patch fixes regression introduced by commit:
commit c86904baad32fbf9e66bf1cdc667aa5e683b48ba
NSS: Don't use printf(3) on user provided strings.
Fortunatelly, it was not backported into 1-11 branch.
sh$ git tag --contains c86904baad32fbf9e66bf1cdc667aa5e683b48ba
sssd-1_11_90
sssd-1_11_91
sssd-1_12_0
sssd-1_12_0_beta1
sssd-1_12_0_beta2
How to reproduce:
a) you need to have 2 AD domains with trust.
b) group from subdomain should contain mixed members (from all 2 domains)
c) have emty sssd cache.
d) getent group subdomain_group_fqname
In my case:
* without this patch:
sh# getent group group2_dom2(a)sssdad_tree.com
group2_dom2@sssdad_tree.com:*:525402171:user2_dom3@child1.sssdad.com,user1_dom2@sssdad_tree.com
* with this patch:
sh# getent group group2_dom2(a)sssdad_tree.com
group2_dom2@sssdad_tree.com:*:525402171:user2_dom1@sssdad.com,user2_dom3@child1.sssdad.com,user1_dom2@sssdad_tree.com
You can also test with unit test.
a) apply attached patch
b) revert changes in file src/responder/nss/nsssrv_cmd.c
sh$ git checkout HEAD~ src/responder/nss/nsssrv_cmd.c
c) run test
-- nss-srv-tests will fail and will contain error
[ RUN ] test_nss_getgrnam_mix_subdom
0x2 != 0x3
../sssd/src/tests/cmocka/test_nss_srv.c:1429: error: Failure!
[ FAILED ] test_nss_getgrnam_mix_subdom
LS