[Freeipa-users] sssd/pam login issues after upgrade to 2.2.1 on Fedora 17

[Anthony Messina]

On Wednesday, November 14, 2012 09:06:20 AM Martin Kosek wrote:
> >> See https://fedorahosted.org/freeipa/ticket/3253
> >
> > 
> >
> > Thanks Anthony for this bug report! I added some info to the Trac ticket,
> > but>
> > I will rather repeat here:
> > 
> >
> > This is indeed a bug in a code processing index updates. Index task is
> > supposed to be created automatically for every new or updated index (i.e.
> > the referred patch is OK), but it is unfortunately only processed in the
> > update code path.
> >
> > 
> >
> > To workaround the issue, one can either fire the index task manually as
> > you
> > did or simply run the FreeIPA LDAP upgrade procedure manually after
> >
> > freeipa-server package update. This will fire an index task too:
> > 
> >
> > # ipa-ldap-updater --upgrade
> > # grep "Creating task to index" /var/log/ipaupgrade.log
> > 2012-11-13T12:17:23Z INFO Creating task to index attribute: memberuid
> > 2012-11-13T12:17:29Z INFO Creating task to index attribute: memberOf
> > 2012-11-13T12:17:35Z INFO Creating task to index attribute: memberHost
> > 2012-11-13T12:17:41Z INFO Creating task to index attribute: memberUser
> > 2012-11-13T12:17:47Z INFO Creating task to index attribute:
> > fqdn         <<<< 2012-11-13T12:17:53Z INFO Creating task to index
> > attribute: ntUniqueId 2012-11-13T12:17:59Z INFO Creating task to index
> > attribute: ntUserDomainId>
> > 
> >
> > After this command is run, the issue will be fixed.
> >
> > 
> >
> > Martin
> >
> > 
> 
> I just released FreeIPA with a fix for this issue to Fedora 17:
> 
> https://admin.fedoraproject.org/updates/freeipa-2.2.1-2.fc17
> 
> The build should hit updates-testing repo soon. Upgrading 2.2.0 (or 2.2.1-1)
> to 2.2.1-2 should be now flawless.
> 
> Martin

Thanks again, Martin, for the speedy work on this.  -A

-- 
Anthony - http://messinet.com - http://messinet.com/~amessina/gallery
8F89 5E72 8DF0 BCF0 10BE 9967 92DC 35DC B001 4A4E
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20121114/1aee7366/attachment.sig>