Project

General

Profile

Actions

action #132128

closed

[security] test fails in sssd_openldap_functional: missing sudo.schema config file?

Added by FSzekely about 1 year ago. Updated 12 months ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2023-06-29
Due date:
% Done:

100%

Estimated time:
24.00 h
Difficulty:
Tags:

Description

Observation

openQA test in scenario sle-15-SP2-Server-DVD-Updates-aarch64-sssd_openldap_functional@aarch64-virtio fails in
sssd_openldap_functional

Could be a product issue? -> not, because continuation from ticket #130919 and something not working well with 15-SP4 container like it did with 15-SP3.

Step 16/18 : RUN slapadd -b dc=sssdtest,dc=com -l /tmp/user.ldif
 ---> Running in 9bd2f343fdcc
649ce3ae could not stat config file "/etc/openldap/schema/sudo.schema": No such file or directory (2)
slapadd: bad configuration file!
The command '/bin/sh -c slapadd -b dc=sssdtest,dc=com -l /tmp/user.ldif' returned a non-zero code: 1
t1CLe-1-

Idea: Try docker build -t openldap2_image --build-arg tag="registry.suse.com/suse/sle15:15.4" --build-arg pkgs="openldap2 sudo" . etc locally and see how that sudo.schema should be fulfilled in such a container that the slapadd command would finish successfully?

Actions #2

Updated by tjyrinki_suse about 1 year ago

  • Priority changed from Normal to High
Actions #3

Updated by tjyrinki_suse about 1 year ago

  • Tags set to fail
  • Description updated (diff)
  • Status changed from New to Workable
  • Estimated time set to 24.00 h
Actions #4

Updated by FSzekely about 1 year ago

  • Assignee set to FSzekely
Actions #5

Updated by tjyrinki_suse about 1 year ago

  • Description updated (diff)

Note: copy from git data/sssd/openldap/* to eg local 15-SP4 installation, then run the docker creation command.

Actions #6

Updated by msmeissn almost 1 year ago

main problem is that the LDAP server parts from openldap2 are now completely gone from SLES 15 SP4 onwards.

you will need to port this to use 389-ds.

You can actually pull the suse/389-ds app container perhaps and configure that?

Actions #7

Updated by pstivanin 12 months ago

  • Status changed from Workable to Resolved
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF