[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
Xenial has entered ESM, therefore I am marking this bug as Won't Fix for
it.
** Changed in: sssd (Ubuntu Xenial)
Status: Triaged => Won't Fix
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Released
Status in ding-libs source package in Xenial:
Won't Fix
Status in sssd source package in Xenial:
Won't Fix
Status in ding-libs source package in Yakkety:
Won't Fix
Status in sssd source package in Yakkety:
Won't Fix
Bug description:
[Impact]
This bug hits users who is joined to a domain server (probably MS Active
Directory) where there is a GPO line that doesn't contain an equal sign (=).
See more info in the upstreams bug report linked below. This could be rather
common in corporate environments and normally nothing you "fix" on the domain
controller side to be able to use SSSD clients. This means all clients that
upgrades to 16.04 using SSSD with a GPO containing a line without equal sign
will be affected.
[Test Case]
Steps to reproduce (you'll need a domain server with GPO containing a line
withouth equal sign!):
- Install:
apt install krb5-user samba sssd ntp
- Make sure the default realm is setup properly (FQDN in uppercase):
dpkg-reconfigure krb5-config
- Set up /etc/samba/smb.conf like this: https://paste.ubuntu.com/24407627/
- Set up /etc/sssd/sssd.conf like this: https://paste.ubuntu.com/24407643/
- File permissions:
sudo chown root:root /etc/sssd/sssd.conf
sudo chmod 600 /etc/sssd/sssd.conf
- Restart services:
sudo service ntp restart
sudo service smbd restart
sudo service nmbd restart
- Join domain with:
sudo net ads join -U "administra...@domain.com"
"createcomputer=Servers/Virtual" osName=Ubuntu osVer=16.04
- Start SSSD:
sudo service sssd start
- Verify:
getent passwd administra...@qrtech.se
- Add creation of home directories on login (check the unchecked box):
sudo pam-auth-update
- Now try to login to the server with a domain user:
arune@d152:~$ ssh ar...@domain.com@server.domain.com
- This should fail and you'll find in the logs:
grep "ad_gpo_store_policy_settings" /var/log/sssd/*
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/DOMAIN.COM/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on
line 20: Equal sign is missing.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error
encountered: 5.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_cse_done] (0x0040): ad_gpo_store_policy_settings
failed: [5](Input/output error)
[Regression Potential]
The current state of SSSD in Xenial is broken for _some_ users (where the GPO
has a line without equal sign) it's _not known_ how many users are affected. A
potential regression could mean even more users are affected by a new unknown
bug.
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ding-libs/+bug/1641203/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
** Changed in: ding-libs (Ubuntu Xenial)
Status: Fix Committed => Won't Fix
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Released
Status in ding-libs source package in Xenial:
Won't Fix
Status in sssd source package in Xenial:
Triaged
Status in ding-libs source package in Yakkety:
Won't Fix
Status in sssd source package in Yakkety:
Won't Fix
Bug description:
[Impact]
This bug hits users who is joined to a domain server (probably MS Active
Directory) where there is a GPO line that doesn't contain an equal sign (=).
See more info in the upstreams bug report linked below. This could be rather
common in corporate environments and normally nothing you "fix" on the domain
controller side to be able to use SSSD clients. This means all clients that
upgrades to 16.04 using SSSD with a GPO containing a line without equal sign
will be affected.
[Test Case]
Steps to reproduce (you'll need a domain server with GPO containing a line
withouth equal sign!):
- Install:
apt install krb5-user samba sssd ntp
- Make sure the default realm is setup properly (FQDN in uppercase):
dpkg-reconfigure krb5-config
- Set up /etc/samba/smb.conf like this: https://paste.ubuntu.com/24407627/
- Set up /etc/sssd/sssd.conf like this: https://paste.ubuntu.com/24407643/
- File permissions:
sudo chown root:root /etc/sssd/sssd.conf
sudo chmod 600 /etc/sssd/sssd.conf
- Restart services:
sudo service ntp restart
sudo service smbd restart
sudo service nmbd restart
- Join domain with:
sudo net ads join -U "administra...@domain.com"
"createcomputer=Servers/Virtual" osName=Ubuntu osVer=16.04
- Start SSSD:
sudo service sssd start
- Verify:
getent passwd administra...@qrtech.se
- Add creation of home directories on login (check the unchecked box):
sudo pam-auth-update
- Now try to login to the server with a domain user:
arune@d152:~$ ssh ar...@domain.com@server.domain.com
- This should fail and you'll find in the logs:
grep "ad_gpo_store_policy_settings" /var/log/sssd/*
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/DOMAIN.COM/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on
line 20: Equal sign is missing.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error
encountered: 5.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_cse_done] (0x0040): ad_gpo_store_policy_settings
failed: [5](Input/output error)
[Regression Potential]
The current state of SSSD in Xenial is broken for _some_ users (where the GPO
has a line without equal sign) it's _not known_ how many users are affected. A
potential regression could mean even more users are affected by a new unknown
bug.
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ding-libs/+bug/1641203/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
** Changed in: ding-libs (Ubuntu Yakkety)
Status: Triaged => Won't Fix
** Changed in: sssd (Ubuntu Yakkety)
Status: Triaged => Won't Fix
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Released
Status in ding-libs source package in Xenial:
Fix Committed
Status in sssd source package in Xenial:
Triaged
Status in ding-libs source package in Yakkety:
Won't Fix
Status in sssd source package in Yakkety:
Won't Fix
Bug description:
[Impact]
This bug hits users who is joined to a domain server (probably MS Active
Directory) where there is a GPO line that doesn't contain an equal sign (=).
See more info in the upstreams bug report linked below. This could be rather
common in corporate environments and normally nothing you "fix" on the domain
controller side to be able to use SSSD clients. This means all clients that
upgrades to 16.04 using SSSD with a GPO containing a line without equal sign
will be affected.
[Test Case]
Steps to reproduce (you'll need a domain server with GPO containing a line
withouth equal sign!):
- Install:
apt install krb5-user samba sssd ntp
- Make sure the default realm is setup properly (FQDN in uppercase):
dpkg-reconfigure krb5-config
- Set up /etc/samba/smb.conf like this: https://paste.ubuntu.com/24407627/
- Set up /etc/sssd/sssd.conf like this: https://paste.ubuntu.com/24407643/
- File permissions:
sudo chown root:root /etc/sssd/sssd.conf
sudo chmod 600 /etc/sssd/sssd.conf
- Restart services:
sudo service ntp restart
sudo service smbd restart
sudo service nmbd restart
- Join domain with:
sudo net ads join -U "administra...@domain.com"
"createcomputer=Servers/Virtual" osName=Ubuntu osVer=16.04
- Start SSSD:
sudo service sssd start
- Verify:
getent passwd administra...@qrtech.se
- Add creation of home directories on login (check the unchecked box):
sudo pam-auth-update
- Now try to login to the server with a domain user:
arune@d152:~$ ssh ar...@domain.com@server.domain.com
- This should fail and you'll find in the logs:
grep "ad_gpo_store_policy_settings" /var/log/sssd/*
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/DOMAIN.COM/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on
line 20: Equal sign is missing.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error
encountered: 5.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_cse_done] (0x0040): ad_gpo_store_policy_settings
failed: [5](Input/output error)
[Regression Potential]
The current state of SSSD in Xenial is broken for _some_ users (where the GPO
has a line without equal sign) it's _not known_ how many users are affected. A
potential regression could mean even more users are affected by a new unknown
bug.
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ding-libs/+bug/1641203/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
Hello Anders, or anyone else affected,
Accepted ding-libs into xenial-proposed. The package will build now and
be available at https://launchpad.net/ubuntu/+source/ding-
libs/0.5.0-1ubuntu0.16.04.1 in a few hours, and then in the -proposed
repository.
Please help us by testing this new package. See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.Your feedback will aid us getting this
update out to other Ubuntu users.
If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed. In either case, details of your testing will help
us make a better decision.
Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in
advance!
** Changed in: ding-libs (Ubuntu Xenial)
Status: In Progress => Fix Committed
** Tags added: verification-needed
** Also affects: sssd (Ubuntu Yakkety)
Importance: Undecided
Status: New
** Also affects: ding-libs (Ubuntu Yakkety)
Importance: Undecided
Status: New
** Changed in: ding-libs (Ubuntu Yakkety)
Status: New => Triaged
** Changed in: sssd (Ubuntu Yakkety)
Status: New => Triaged
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Released
Status in ding-libs source package in Xenial:
Fix Committed
Status in sssd source package in Xenial:
Triaged
Status in ding-libs source package in Yakkety:
Triaged
Status in sssd source package in Yakkety:
Triaged
Bug description:
[Impact]
This bug hits users who is joined to a domain server (probably MS Active
Directory) where there is a GPO line that doesn't contain an equal sign (=).
See more info in the upstreams bug report linked below. This could be rather
common in corporate environments and normally nothing you "fix" on the domain
controller side to be able to use SSSD clients. This means all clients that
upgrades to 16.04 using SSSD with a GPO containing a line without equal sign
will be affected.
[Test Case]
Steps to reproduce (you'll need a domain server with GPO containing a line
withouth equal sign!):
- Install:
apt install krb5-user samba sssd ntp
- Make sure the default realm is setup properly (FQDN in uppercase):
dpkg-reconfigure krb5-config
- Set up /etc/samba/smb.conf like this: https://paste.ubuntu.com/24407627/
- Set up /etc/sssd/sssd.conf like this: https://paste.ubuntu.com/24407643/
- File permissions:
sudo chown root:root /etc/sssd/sssd.conf
sudo chmod 600 /etc/sssd/sssd.conf
- Restart services:
sudo service ntp restart
sudo service smbd restart
sudo service nmbd restart
- Join domain with:
sudo net ads join -U "administra...@domain.com"
"createcomputer=Servers/Virtual" osName=Ubuntu osVer=16.04
- Start SSSD:
sudo service sssd start
- Verify:
getent passwd administra...@qrtech.se
- Add creation of home directories on login (check the unchecked box):
sudo pam-auth-update
- Now try to login to the server with a domain user:
arune@d152:~$ ssh ar...@domain.com@server.domain.com
- This should fail and you'll find in the logs:
grep "ad_gpo_store_policy_settings" /var/log/sssd/*
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/DOMAIN.COM/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on
line 20: Equal sign is missing.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error
encountered: 5.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_cse_done] (0x0040): ad_gpo_store_policy_settings
failed: [5](Input/output error)
[Regression Potential]
The current state of SSSD in Xenial is broken for _some_ users (where the GPO
has a line without equal sign) it's _not known_ how many users are affected. A
potential regression could mean even more users are affected by a new unknown
bug.
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this
[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
sssd in 17.04 works
** Changed in: sssd (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Released
Status in ding-libs source package in Xenial:
Triaged
Status in sssd source package in Xenial:
Triaged
Bug description:
[Impact]
This bug hits users who is joined to a domain server (probably MS Active
Directory) where there is a GPO line that doesn't contain an equal sign (=).
See more info in the upstreams bug report linked below. This could be rather
common in corporate environments and normally nothing you "fix" on the domain
controller side to be able to use SSSD clients. This means all clients that
upgrades to 16.04 using SSSD with a GPO containing a line without equal sign
will be affected.
[Test Case]
Steps to reproduce (you'll need a domain server with GPO containing a line
withouth equal sign!):
- Install:
apt install krb5-user samba sssd ntp
- Make sure the default realm is setup properly (FQDN in uppercase):
dpkg-reconfigure krb5-config
- Set up /etc/samba/smb.conf like this: https://paste.ubuntu.com/24407627/
- Set up /etc/sssd/sssd.conf like this: https://paste.ubuntu.com/24407643/
- File permissions:
sudo chown root:root /etc/sssd/sssd.conf
sudo chmod 600 /etc/sssd/sssd.conf
- Restart services:
sudo service ntp restart
sudo service smbd restart
sudo service nmbd restart
- Join domain with:
sudo net ads join -U "administra...@domain.com"
"createcomputer=Servers/Virtual" osName=Ubuntu osVer=16.04
- Start SSSD:
sudo service sssd start
- Verify:
getent passwd administra...@qrtech.se
- Add creation of home directories on login (check the unchecked box):
sudo pam-auth-update
- Now try to login to the server with a domain user:
arune@d152:~$ ssh ar...@domain.com@server.domain.com
- This should fail and you'll find in the logs:
grep "ad_gpo_store_policy_settings" /var/log/sssd/*
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/DOMAIN.COM/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error (5) on
line 20: Equal sign is missing.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_store_policy_settings] (0x0020): Error
encountered: 5.
/var/log/sssd/sssd_DOMAIN.COM.log:(Tue Apr 18 15:13:28 2017)
[sssd[be[DOMAIN.COM]]] [ad_gpo_cse_done] (0x0040): ad_gpo_store_policy_settings
failed: [5](Input/output error)
[Regression Potential]
The current state of SSSD in Xenial is broken for _some_ users (where the GPO
has a line without equal sign) it's _not known_ how many users are affected. A
potential regression could mean even more users are affected by a new unknown
bug.
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ding-libs/+bug/1641203/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1641203] Re: SSSD can't process GPO from Active Directory when it contains lines with no equal sign
Thank you for taking the time to report this bug and helping to make
Ubuntu better.
Looks like the commit wanted is 21a28c in sssd, which is present in
1.14.2 but not 1.13.4. So this is Fix Committed as 1.14.2 is in zesty-
proposed.
Additionally it looks like backports of fbaaf4, 9591b1 and 8481bb are
needed to ding-libs. These are present in 0.6.0 in Zesty but not 0.5.0
in Xenial and Yakkety. So this is Fix Released for Zesty, and open in
Xenial.
For a fix for an existing stable release, please comment with a
justification against https://wiki.ubuntu.com/StableReleaseUpdates#When
and complete steps 1 through 4 in
https://wiki.ubuntu.com/StableReleaseUpdates#Procedure - and go ahead
with all the steps if you can. This needs to be for both ding-libs and
sssd. If you could prepare the backports, that would be ideal. Note that
that SRU team would need to make a final decision but I think it seems
likely that it would be OK in this case.
** Also affects: ding-libs (Ubuntu)
Importance: Undecided
Status: New
** Also affects: sssd (Ubuntu Xenial)
Importance: Undecided
Status: New
** Also affects: ding-libs (Ubuntu Xenial)
Importance: Undecided
Status: New
** Changed in: ding-libs (Ubuntu)
Status: New => Fix Released
** Changed in: ding-libs (Ubuntu Xenial)
Status: New => Triaged
** Changed in: sssd (Ubuntu)
Status: New => Fix Committed
** Changed in: sssd (Ubuntu Xenial)
Status: New => Triaged
** Changed in: sssd (Ubuntu Xenial)
Importance: Undecided => Medium
** Changed in: sssd (Ubuntu)
Importance: Undecided => Medium
** Changed in: ding-libs (Ubuntu Xenial)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1641203
Title:
SSSD can't process GPO from Active Directory when it contains lines
with no equal sign
Status in ding-libs package in Ubuntu:
Fix Released
Status in sssd package in Ubuntu:
Fix Committed
Status in ding-libs source package in Xenial:
Triaged
Status in sssd source package in Xenial:
Triaged
Bug description:
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]]
[ad_gpo_store_policy_settings] (0x0020):
[/var/lib/sss/gpo_cache/mydomain.com/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/Machine/Microsoft/Windows
NT/SecEdit/GptTmpl.inf]: ini_config_parse failed [5][Input/output error]
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]]
[ad_gpo_store_policy_settings] (0x0020): Error (5) on line 20: Equal sign is
missing.
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]]
[ad_gpo_store_policy_settings] (0x0020): Error encountered: 5.
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]] [ad_gpo_cse_done]
(0x0040): ad_gpo_store_policy_settings failed: [5](Input/output error)
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]] [ad_gpo_access_done]
(0x0040): GPO-based access control failed.
(Fri Nov 11 14:55:52 2016) [sssd[be[MYDOMAIN.COM]]] [be_pam_handler_callback]
(0x0100): Backend returned: (3, 4, Input/output error) [Internal Error]
Upstreams bugreport and patch:
https://fedorahosted.org/sssd/ticket/2751
Please backport to xenial.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ding-libs/+bug/1641203/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
