Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-1313

[sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check.

XMLWordPrintable

    • None
    • None
    • rhel-sst-security-compliance
    • ssg_security
    • 26
    • None
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • Hide

      TEST_PARAM:RULE=sssd_certificate_verification sssd_enable_pam_services sssd_enable_smartcards sssd_memcache_timeout sssd_offline_cred_expiration sssd_run_as_sssd_user sssd_ssh_known_hosts_timeout

      Show
      TEST_PARAM:RULE=sssd_certificate_verification sssd_enable_pam_services sssd_enable_smartcards sssd_memcache_timeout sssd_offline_cred_expiration sssd_run_as_sssd_user sssd_ssh_known_hosts_timeout
    • Pass
    • None
    • None

      Description of problem: [sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check.

      Version-Release number of selected component (if applicable):
      ipa-server-4.9.12-2.module+el8.9.0+18921+013c0de2.x86_64
      sssd-common-2.9.0-4.el8.x86_64

      How reproducible: Always

      Steps to Reproduce:
      1. Install IPA server in STIG env.
      2. Check the dmesg log

      Actual results:
      Jul 6 07:51:46 master systemd[1]: Starting SSSD Kerberos Cache Manager...
      Jul 6 07:51:46 master sssd[20838]: [sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check. Skipping.
      Jul 6 07:51:46 master systemd[1]: Started SSSD Kerberos Cache Manager.

      Expected results:
      Fix the merge error.

      Additional info:

              vpolasek@redhat.com Vojtech Polasek
              sumenon@redhat.com Sudhir Menon
              Vojtech Polasek Vojtech Polasek
              Milan Lysonek Milan Lysonek
              Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: