Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-65663

dsconf incorrectly setting up Pass-Through Authentication

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • rhel-9.6
    • None
    • 389-ds-base
    • No
    • None
    • rhel-sst-idm-ds
    • 0
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None

      Description of problem:
      dsconf incorrectly setting up Pass-Through Authentication

      Version-Release number of selected component (if applicable):
      389-ds-base.x86_64 (1.4.3.34-1.module+el8.7.0+18367+58a49cb0

      How reproducible:
      Always

      Steps to Reproduce:
      1. dsconf corpldap plugin pam-pass-through-auth config 'IPA PAM PTA Config' add --exclude-suffix='cn=config' --id_map_method='ENTRY' --id-attr='uid' --filter="(&(Unable to render embedded object: File ((uid=newrelicmon))() not found.(uid=bugzilla))(!(uid=applmgr)))" --fallback='TRUE' --secure='TRUE' --service='ldapserver' --missing-suffix='ALLOW' --include-suffix='ou=Users,dc=redhat,dc=com'
      Successfully created the cn=IPA PAM PTA Config,cn=PAM Pass Through Auth,cn=plugins,cn=config

      Actual results:
      fallback, id_map_method and id_attr being incorrectly set

      Expected results:
      correctly set

      Additional info:

      1. dsconf corpldap plugin pam-pass-through-auth config 'IPA PAM PTA Config' add --exclude-suffix='cn=config' --id_map_method='ENTRY' --id-attr='uid' --filter="(&(Unable to render embedded object: File ((uid=newrelicmon))() not found.(uid=bugzilla))(!(uid=applmgr)))" --fallback='TRUE' --secure='TRUE' --service='ldapserver' --missing-suffix='ALLOW' --include-suffix='ou=Users,dc=redhat,dc=com'
        Successfully created the cn=IPA PAM PTA Config,cn=PAM Pass Through Auth,cn=plugins,cn=config

      It created successfully, but showing the output results in fallback, id_map_method and id_attr being incorrectly set:

      1. dsconf corpldap plugin pam-pass-through-auth show
        dn: cn=PAM Pass Through Auth,cn=plugins,cn=config
        cn: PAM Pass Through Auth
        nsslapd-plugin-depends-on-type: database
        nsslapd-pluginDescription: PAM pass through authentication plugin
        nsslapd-pluginEnabled: on
        nsslapd-pluginId: pam_passthruauth
        nsslapd-pluginInitfunc: pam_passthruauth_init
        nsslapd-pluginPath: libpam-passthru-plugin
        nsslapd-pluginType: betxnpreoperation
        nsslapd-pluginVendor: 389 Project
        nsslapd-pluginVersion: 1.4.3.34
        nsslapd-pluginloadglobal: true
        objectClass: top
        objectClass: nsSlapdPlugin
        objectClass: extensibleObject
        objectClass: pamConfig
        pamExcludeSuffix: cn=config
        pamFallback: FALSE
        pamFilter: (&(Unable to render embedded object: File ((uid=newrelicmon))() not found.(uid=bugzilla))(!(uid=applmgr)))
        pamIDAttr: notUsedWithRDNMethod
        pamIDMapMethod: RDN
        pamIncludeSuffix: ou=Users,dc=redhat,dc=com
        pamMissingSuffix: ALLOW
        pamSecure: TRUE
        pamService: ldapserver
        pamthreadsafe: TRUE

      And attempts to fix the incorrect settings are also producing errors:

      1. dsconf corpldap plugin pam-pass-through-auth config 'PAM Pass Through Auth' set --fallback='true'
        Error: No object exists given the filter criteria: PAM Pass Through Auth (&(&(objectclass=top)(objectclass=extensibleObject)(objectclass=nsslapdplugin)(objectclass=pamConfig))(|(cn=PAM Pass Through Auth)))
      1. dsconf corpldap plugin pam-pass-through-auth config 'IPA PAM PTA Config,cn=PAM Pass Through Auth,cn=plugins,cn=config' set --fallback='true'
        Error: No object exists given the filter criteria: IPA PAM PTA Config,cn=PAM Pass Through Auth,cn=plugins,cn=config (&(&(objectclass=top)(objectclass=extensibleObject)(objectclass=nsslapdplugin)(objectclass=pamConfig))(|(cn=IPA PAM PTA Config,cn=PAM Pass Through Auth,cn=plugins,cn=config)))

              rhn-engineering-mareynol Mark Reynolds
              rhn-support-ekeck Eugene Keck
              IdM DS Dev IdM DS Dev
              IdM DS QE IdM DS QE
              Evgenia Martyniuk Evgenia Martyniuk
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: