Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-1313

[sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check.

    • sst_security_compliance
    • ssg_security
    • 26
    • None
    • False
    • Hide

      None

      Show
      None
    • No
    • None
    • Hide

      TEST_PARAM:RULE=sssd_certificate_verification sssd_enable_pam_services sssd_enable_smartcards sssd_memcache_timeout sssd_offline_cred_expiration sssd_run_as_sssd_user sssd_ssh_known_hosts_timeout

      Show
      TEST_PARAM:RULE=sssd_certificate_verification sssd_enable_pam_services sssd_enable_smartcards sssd_memcache_timeout sssd_offline_cred_expiration sssd_run_as_sssd_user sssd_ssh_known_hosts_timeout
    • Pass
    • None
    • None

      Description of problem: [sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check.

      Version-Release number of selected component (if applicable):
      ipa-server-4.9.12-2.module+el8.9.0+18921+013c0de2.x86_64
      sssd-common-2.9.0-4.el8.x86_64

      How reproducible: Always

      Steps to Reproduce:
      1. Install IPA server in STIG env.
      2. Check the dmesg log

      Actual results:
      Jul 6 07:51:46 master systemd[1]: Starting SSSD Kerberos Cache Manager...
      Jul 6 07:51:46 master sssd[20838]: [sssd] [sss_ini_add_snippets] (0x0020): Config merge error: File /etc/sssd/conf.d/certificate_verification.conf did not pass access check. Skipping.
      Jul 6 07:51:46 master systemd[1]: Started SSSD Kerberos Cache Manager.

      Expected results:
      Fix the merge error.

      Additional info:

            vpolasek@redhat.com Vojtech Polasek
            sumenon@redhat.com Sudhir Menon
            Vojtech Polasek Vojtech Polasek
            Milan Lysonek Milan Lysonek
            Votes:
            0 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved: