On Fri, Mar 04, 2016 at 02:00:57PM +0100, Pavel Březina wrote:
>
https://fedorahosted.org/sssd/ticket/2969
I'm sorry, but I still can't use sudo with IPA 3.x server:
(Fri Mar 11 10:01:02 2016) [sssd[be[obsolete.test]]] [ipa_sudo_fetch_cmds] (0x0400):
About to fetch sudo commands
(Fri Mar 11 10:01:16 2016) [sssd[be[obsolete.test]]] [build_filter] (0x0020): Unable to
get member sudocmd=/usr/bin/less,cn=sudocmds,cn=sudo,dc=obsolete,dc=test [2]: No such file
or directory
(Fri Mar 11 10:01:21 2016) [sssd[be[obsolete.test]]] [ipa_sudo_fetch_cmds] (0x0020):
Unable to build filter
(Fri Mar 11 10:01:21 2016) [sssd[be[obsolete.test]]] [sdap_id_op_done] (0x4000):
releasing operation connection
(Fri Mar 11 10:01:21 2016) [sssd[be[obsolete.test]]] [be_ptask_done] (0x0040): Task [SUDO
Full Refresh]: failed with [12]: Cannot allocate memory
This is the backtrace:
Breakpoint 1, _ipa_get_rdn (mem_ctx=0x0, sysdb=0x19c8120, obj_dn=
0x1a155b0 "sudocmd=/usr/bin/less,cn=sudocmds,cn=sudo,dc=obsolete,dc=test",
_rdn_val=0x0, rdn_attr=
0x19f7cf0 "cn") at /sssd/src/providers/ipa/ipa_dn.c:108
108 dn = ldb_dn_new(mem_ctx, sysdb_ctx_get_ldb(sysdb), obj_dn);
(gdb) bt
#0 _ipa_get_rdn (mem_ctx=0x0, sysdb=0x19c8120, obj_dn=
0x1a155b0 "sudocmd=/usr/bin/less,cn=sudocmds,cn=sudo,dc=obsolete,dc=test",
_rdn_val=0x0, rdn_attr=
0x19f7cf0 "cn") at /sssd/src/providers/ipa/ipa_dn.c:108
#1 0x00007fe5c7bd17f4 in is_ipacmdgroup (conv=0x1a16730, dn=
0x1a155b0
"sudocmd=/usr/bin/less,cn=sudocmds,cn=sudo,dc=obsolete,dc=test")
at /sssd/src/providers/ipa/ipa_sudo_conversion.c:192
#2 0x00007fe5c7bd19bf in process_rulemember (mem_ctx=0x1a13c60, conv=0x1a16730,
rulemember=0x1a13c68,
rule=0x1a29c60, attr=0x7fe5c7bf39e2 "memberAllowCmd")
at /sssd/src/providers/ipa/ipa_sudo_conversion.c:242
#3 0x00007fe5c7bd1c69 in process_allowcmd (conv=0x1a16730, rule=0x1a13c60)
at /sssd/src/providers/ipa/ipa_sudo_conversion.c:278
#4 0x00007fe5c7bd2375 in ipa_sudo_conv_rules (conv=0x1a16730, rules=0x1a2af80,
num_rules=1)
at /sssd/src/providers/ipa/ipa_sudo_conversion.c:432
#5 0x00007fe5c7bd5ce0 in ipa_sudo_fetch_rules_done (subreq=0x0)
at /sssd/src/providers/ipa/ipa_sudo_async.c:614
#6 0x00007fe5c72d6e11 in sdap_search_bases_done (subreq=0x0)
at /sssd/src/providers/ldap/sdap_ops.c:210
#7 0x00007fe5c729ce8b in sdap_get_generic_done (subreq=0x1a2b220)
at /sssd/src/providers/ldap/sdap_async.c:1851
#8 0x00007fe5c729c867 in generic_ext_search_handler (subreq=0x0, opts=0x19ec370)
at /sssd/src/providers/ldap/sdap_async.c:1668
#9 0x00007fe5c729cbf7 in sdap_get_and_parse_generic_done (subreq=0x1a2b3a0)
at /sssd/src/providers/ldap/sdap_async.c:1776
#10 0x00007fe5c729c554 in sdap_get_generic_op_finished (op=0x1a2aec0, reply=0x1a1e090,
error=0, pvt=
0x1a2b3a0) at /sssd/src/providers/ldap/sdap_async.c:1603
#11 0x00007fe5c7298688 in sdap_process_message (ev=0x19c0590, sh=0x1a06af0,
msg=0x1a15610)
at /sssd/src/providers/ldap/sdap_async.c:352
---Type <return> to continue, or q <return> to quit---
#12 0x00007fe5c72981f4 in sdap_process_result (ev=0x19c0590, pvt=0x1a06af0)
at /sssd/src/providers/ldap/sdap_async.c:196
#13 0x00007fe5c7297eb2 in sdap_ldap_next_result (ev=0x19c0590, te=0x1a436e0, tv=...,
pvt=0x1a06af0)
at /sssd/src/providers/ldap/sdap_async.c:144
#14 0x00007fe5d08a3c91 in tevent_common_loop_timer_delay () from
/usr/lib64/libtevent.so.0
#15 0x00007fe5d08a4cbb in ?? () from /usr/lib64/libtevent.so.0
#16 0x00007fe5d08a32e6 in ?? () from /usr/lib64/libtevent.so.0
#17 0x00007fe5d089f49d in _tevent_loop_once () from /usr/lib64/libtevent.so.0
#18 0x00007fe5d089f51b in tevent_common_loop_wait () from /usr/lib64/libtevent.so.0
#19 0x00007fe5d08a3256 in ?? () from /usr/lib64/libtevent.so.0
#20 0x00007fe5d43bdee6 in server_loop (main_ctx=0x19c1900) at
/sssd/src/util/server.c:673
#21 0x000000000040e3b8 in main (argc=8, argv=0x7ffca1affb68)
at /sssd/src/providers/data_provider_be.c:2829
(gdb) n
109 if (dn == NULL) {
(gdb)
113 va_start(ap, rdn_attr);
(gdb)
114 bret = check_dn(dn, rdn_attr, ap);
(gdb)
116 if (bret == false) {
(gdb)
117 ret = ENOENT;
(gdb) n
118 goto done;
Please let me know if you want access to a IPA 3.x server so you can test
the patch yourself..
Should have read the logs to the end, sorry about that. See the new patches.