Project

General

Profile

Actions

action #132128

closed

[security] test fails in sssd_openldap_functional: missing sudo.schema config file?

Added by FSzekely 11 months ago. Updated 11 months ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2023-06-29
Due date:
% Done:

100%

Estimated time:
24.00 h
Difficulty:
Tags:

Description

Observation

openQA test in scenario sle-15-SP2-Server-DVD-Updates-aarch64-sssd_openldap_functional@aarch64-virtio fails in
sssd_openldap_functional

Could be a product issue? -> not, because continuation from ticket #130919 and something not working well with 15-SP4 container like it did with 15-SP3.

Step 16/18 : RUN slapadd -b dc=sssdtest,dc=com -l /tmp/user.ldif
 ---> Running in 9bd2f343fdcc
649ce3ae could not stat config file "/etc/openldap/schema/sudo.schema": No such file or directory (2)
slapadd: bad configuration file!
The command '/bin/sh -c slapadd -b dc=sssdtest,dc=com -l /tmp/user.ldif' returned a non-zero code: 1
t1CLe-1-

Idea: Try docker build -t openldap2_image --build-arg tag="registry.suse.com/suse/sle15:15.4" --build-arg pkgs="openldap2 sudo" . etc locally and see how that sudo.schema should be fulfilled in such a container that the slapadd command would finish successfully?

Actions #2

Updated by tjyrinki_suse 11 months ago

  • Priority changed from Normal to High
Actions #3

Updated by tjyrinki_suse 11 months ago

  • Tags set to fail
  • Description updated (diff)
  • Status changed from New to Workable
  • Estimated time set to 24.00 h
Actions #4

Updated by FSzekely 11 months ago

  • Assignee set to FSzekely
Actions #5

Updated by tjyrinki_suse 11 months ago

  • Description updated (diff)

Note: copy from git data/sssd/openldap/* to eg local 15-SP4 installation, then run the docker creation command.

Actions #6

Updated by msmeissn 11 months ago

main problem is that the LDAP server parts from openldap2 are now completely gone from SLES 15 SP4 onwards.

you will need to port this to use 389-ds.

You can actually pull the suse/389-ds app container perhaps and configure that?

Actions #7

Updated by pstivanin 11 months ago

  • Status changed from Workable to Resolved
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF