Resolves: upstream#3618 - selinux_child segfaults in a docker container
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2018-2dd926e471
Please login to add feedback.
This update has been submitted for testing by lslebodn.
This update has been pushed to testing.
works for me
works for me
This update has been submitted for batched by bodhi.
After applying this update I could no longer login to my system via ssh. Also, I started getting errors with sudo. I've backed out via: dnf downgrade sssd* and things are once again working properly. This change should not be pushed to stable.
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
@gbcox, I'm sorry for problems. sssd-1.16.0-6.fc27 contains only one bug-fix which fixes problems with authentication for IPA users in containers (SELinux disabled). It cannot affect anything else.
Please file fedora ticket with more details. It's complicated to discuss about it in bodhi. https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html
@lslebodn - well I find it difficult to believe that the problems weren't the result of your update. You need to investigate further. Immediately after applying your update I stopped getting a ssh prompt to my remote machine. It would just time out. I had a friend reboot the machine several times to no avail. Immediately after removing your updates: dnf downgrade sssd*; followed by 1 reboot the problem immediately disappeared. That isn't just a coincidence. I'm not in a situation to play around with the remote server. I'm travelling internationally and am dependant on being about to access the remote machine via SSH. Apparently the above testers don't use ssh or sudo.
@gbcox, we did an intensive testing of this patch. Authentication works with ldap, IPA and AD. Sudo works with ldap and IPA (we d not have test for sudo + AD_
But it seems that our tests does not cover your use-case. Please file a fedora bug + attach log files. I would really like to help https://docs.pagure.org/SSSD.sssd/users/troubleshooting.html
Fortunately, this update is still in only updates-testing.
Thank you very much for testing and one more time sorry for issues.
@lslebodn Ok, I'll file a bug, etc... but will take a bit of time since I'm on travel.
I re-installed and the problem disappeared - not sure if something went wrong with the dnf process first time around or what - need to trudge through all the logs - but in the meantime changing the feedback.
This update has been submitted for stable by lslebodn.
This update has been pushed to stable.