Skip to content

[autobackport: sssd-2-9] test: check is an2ln plugin is disabled or not#8204

Merged
alexey-tikhonov merged 1 commit intoSSSD:sssd-2-9from
sssd-bot:SSSD-sssd-backport-pr8145-to-sssd-2-9
Jan 6, 2026
Merged

[autobackport: sssd-2-9] test: check is an2ln plugin is disabled or not#8204
alexey-tikhonov merged 1 commit intoSSSD:sssd-2-9from
sssd-bot:SSSD-sssd-backport-pr8145-to-sssd-2-9

Conversation

@sssd-bot
Copy link
Contributor

@sssd-bot sssd-bot commented Nov 18, 2025

This is an automatic backport of PR#8145 test: check is an2ln plugin is disabled or not to branch sssd-2-9, created by @sumit-bose.

Caution

@sumit-bose The patches did not apply cleanly. It is necessary to resolve conflicts before merging this pull request. Commits that introduced conflict are marked with CONFLICT!.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8145-to-sssd-2-9
git checkout SSSD-sssd-backport-pr8145-to-sssd-2-9
git push sssd-bot SSSD-sssd-backport-pr8145-to-sssd-2-9 --force

Original commits
e95d3fe - test: check is an2ln plugin is disabled or not

Backported commits

  • 23f9603 - CONFLICT! test: check is an2ln plugin is disabled or not

Original Pull Request Body

The Kerberos 'an2ln' localauth plugin should be disabled in AD and IPA environments where SSSD's localauth plugin can handle the mapping. In a plain Kerberos environment libkrb5 defaults should be used.

Please note, this test is expected to fail until #8136 is commited.

github-advanced-security[bot]
github-advanced-security bot found potential problems Nov 18, 2025
View reviewed changes
@sumit-bose sumit-bose force-pushed the SSSD-sssd-backport-pr8145-to-sssd-2-9 branch 2 times, most recently from 0f90cbb to c57fc32 Compare November 18, 2025 11:46
@alexey-tikhonov alexey-tikhonov removed the request for review from aplopez November 18, 2025 12:01
@alexey-tikhonov alexey-tikhonov marked this pull request as ready for review November 18, 2025 12:01
@alexey-tikhonov
Copy link
Member

alexey-tikhonov commented Nov 18, 2025

@sumit-bose, hm:

FAILED tests/test_authentication.py::test_disable_an2ln (ipa) - AssertionError: Content of plugin config file does not match
assert None
...
FAILED tests/test_authentication.py::test_disable_an2ln (samba) - AssertionError: Content of plugin config file does not match assert None

@alexey-tikhonov alexey-tikhonov mentioned this pull request Nov 18, 2025
Closed
@alexey-tikhonov alexey-tikhonov added the backport-to-sssd-2-9-4 Corresponds to C8S label Nov 18, 2025
@sumit-bose
Copy link
Contributor

sumit-bose commented Nov 19, 2025

@sumit-bose, hm:

FAILED tests/test_authentication.py::test_disable_an2ln (ipa) - AssertionError: Content of plugin config file does not match
assert None
...
FAILED tests/test_authentication.py::test_disable_an2ln (samba) - AssertionError: Content of plugin config file does not match assert None

Hi,

on the client the oroginal RPMs and not the ones build from the PR are installed when the test is run:

INFO     2025-11-19 10:37:31,479      client.test Executing command #203
                                                  Host: client.test
                                                  User: root
                                                  Shell: /usr/bin/env bash -c
                                                  Command: rpm -qf /usr/lib64/sssd/libsss_util.so
                                                  Input: None
                                                  Working directory: None
                                                  Extra environment: 
INFO     2025-11-19 10:37:31,605      client.test Previous command completed with exit code 0
                                                  Output: sssd-common-2.9.7-5.el9.x86_64
                                                  Error output:

@pbrezina, @alexey-tikhonov any idea why this might happen?

bye,
Sumit

@sssd-bot sssd-bot force-pushed the SSSD-sssd-backport-pr8145-to-sssd-2-9 branch from 09dfd5f to 16a185c Compare November 20, 2025 07:49
@SSSD SSSD deleted a comment from sssd-bot Nov 20, 2025
@pbrezina
Copy link
Member

pbrezina commented Nov 25, 2025

@sumit-bose, hm:

FAILED tests/test_authentication.py::test_disable_an2ln (ipa) - AssertionError: Content of plugin config file does not match
assert None
...
FAILED tests/test_authentication.py::test_disable_an2ln (samba) - AssertionError: Content of plugin config file does not match assert None

Hi,

on the client the oroginal RPMs and not the ones build from the PR are installed when the test is run:

INFO     2025-11-19 10:37:31,479      client.test Executing command #203
                                                  Host: client.test
                                                  User: root
                                                  Shell: /usr/bin/env bash -c
                                                  Command: rpm -qf /usr/lib64/sssd/libsss_util.so
                                                  Input: None
                                                  Working directory: None
                                                  Extra environment: 
INFO     2025-11-19 10:37:31,605      client.test Previous command completed with exit code 0
                                                  Output: sssd-common-2.9.7-5.el9.x86_64
                                                  Error output:

@pbrezina, @alexey-tikhonov any idea why this might happen?

bye, Sumit

No idea, the logs shows that the built packages were installed https://github.com/SSSD/sssd/actions/runs/19529532549/job/55909057764#step:6:391

@sumit-bose sumit-bose force-pushed the SSSD-sssd-backport-pr8145-to-sssd-2-9 branch 2 times, most recently from 5d5494c to a6b40f6 Compare January 6, 2026 09:18
@sumit-bose @sssd-bot
test: check is an2ln plugin is disabled or not
8d49fa0 
The Kerberos 'an2ln' localauth plugin should be disabled in AD and IPA
environments where SSSD's localauth plugin can handle the mapping. In a
plain Kerberos environment libkrb5 defaults should be used.

Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
Reviewed-by: Alejandro López <allopez@redhat.com>
(cherry picked from commit e95d3fe)
@sssd-bot
Copy link
Contributor Author

sssd-bot commented Jan 6, 2026

The pull request was accepted by @alexey-tikhonov with the following PR CI status:

🟢 CodeQL (success)
🟢 rpm-build:centos-stream-9-x86_64:upstream (success)
🟢 ci / prepare (success)
🟢 ci / system (centos-9) (success)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)

There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

@sssd-bot sssd-bot force-pushed the SSSD-sssd-backport-pr8145-to-sssd-2-9 branch from a6b40f6 to 8d49fa0 Compare January 6, 2026 09:55
@alexey-tikhonov alexey-tikhonov merged commit 91d564b into SSSD:sssd-2-9 Jan 6, 2026
6 of 7 checks passed
@sssd-bot sssd-bot mentioned this pull request Jan 6, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alexey-tikhonov alexey-tikhonov alexey-tikhonov approved these changes

Assignees

@alexey-tikhonov alexey-tikhonov

Labels

Accepted backport-to-sssd-2-9-4 Corresponds to C8S

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@sssd-bot @alexey-tikhonov @sumit-bose @pbrezina @aplopez