[Freeipa-users] HBAC access denied, all AD groups not detected

[Alexander Bokovoy]

On Wed, 18 May 2016, Jakub Hrozek wrote:
>On Wed, May 18, 2016 at 08:35:14AM +1000, Lachlan Musicman wrote:
>> Hmmm, I also now see
>>
>> https://fedorahosted.org/sssd/ticket/2642
>> and
>> https://bugzilla.redhat.com/show_bug.cgi?id=1217127
>>
>> Versions being run:
>>
>> sssd-client-1.13.0-40.el7_2.4.x86_64
>> sssd-ad-1.13.0-40.el7_2.4.x86_64
>> sssd-proxy-1.13.0-40.el7_2.4.x86_64
>> sssd-1.13.0-40.el7_2.4.x86_64
>> sssd-common-1.13.0-40.el7_2.4.x86_64
>> sssd-common-pac-1.13.0-40.el7_2.4.x86_64
>> sssd-ipa-1.13.0-40.el7_2.4.x86_64
>> sssd-ldap-1.13.0-40.el7_2.4.x86_64
>> python-sssdconfig-1.13.0-40.el7_2.4.noarch
>> sssd-krb5-common-1.13.0-40.el7_2.4.x86_64
>> sssd-krb5-1.13.0-40.el7_2.4.x86_64
>>
>> ipa-server-trust-ad-4.2.0-15.0.1.el7.centos.6.1.x86_64
>
>The reason I asked about the server versions is
>https://bugzilla.redhat.com/show_bug.cgi?id=1304333
>
>I'm not too familiar with how the centos versioning works, can you check
>if that bug is mentioned in the rpm changelog?
No, these packages are not at the level where all known membership bugs
were fixed.

RHEL 7.2 build should be ipa-4.2.0-15.el7_2.15. A corresponding CentOS
build is already available in updates and it is ipa-4.2.0-15.el7.centos.15

-- 
/ Alexander Bokovoy