Project

General

Profile

Actions

Bug #4695

open

nss_ad is inconsistent for some well-known SIDs

Added by Marcel Telka about 8 years ago. Updated about 8 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
cmd - userland programs
Start date:
2014-03-21
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:
needs-triage
Gerrit CR:

Description

nss_ad is inconsistent for some well-know SIDs:

# svcadm enable idmap
# gsed -i -e 's/^group:\\(.*\\)$/group:\\1 ad/' /etc/nsswitch.conf
# idmap show -c gsid:S-1-5-10
gsid:S-1-5-10 -> gid:2147483652
# getent group 2147483652
Self@BUILTIN::2147483652:
# getent group Self@BUILTIN
# getent group Self@
Self@::2147483652:
#

This is very likely caused by this code in update_buffer():

29static int
30update_buffer(ad_backend_ptr be, nss_XbyY_args_t *argp,
31        const char *name, const char *domain, gid_t gid)
32{
33    int    buflen;
34    char    *buffer;
35
36    if (domain == NULL)
37        domain = WK_DOMAIN;

No data to display

Actions

Also available in: Atom PDF