freeipa / freeipa-healthcheck

Check the health of a freeIPA installation
GNU General Public License v3.0
50 stars 28 forks source link

Skip AD domains with posix ranges in the catalog check #269

Closed rcritten closed 1 year ago

rcritten commented 2 years ago

The catalog check is intended to ensure that the trust is working by looking up a user. For a non-posix range we can use the Administrator user because it has a predicible SID.

With a posix range the UID/GID may not be set so the lookup can fail (with an empty return value).

So skip domain which have a posix range associated with it.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1775199

Signed-off-by: Rob Crittenden rcritten@redhat.com