freeipa

#5737 ipa trust-find show false positive warnings about broken trusts
Closed: Fixed Opened by mbasti.

Closed: Fixed
Reopen Issue 
# ipa trust-find
ipa: WARNING: Your trust to ipasub2008r2-1.ipaad2008r2.test is broken. Please re-create it by running 'ipa trust-add' again.
----------------
2 trusts matched
----------------
  Realm name: ipaad2008r2.test
  Domain NetBIOS name: IPAAD2008R2
  Domain Security Identifier: S-1-5-21-1765444267-4284514389-3232425237
  Trust type: Active Directory domain
  Realm name: ipasub2008r2-1.ipaad2008r2.test
  Domain NetBIOS name: IPASUB2008R2-1
  Domain Security Identifier: S-1-5-21-469193889-4273894478-2486872656
----------------------------
Number of entries returned 2
----------------------------

Warning should be shown only for parent domains. Subdomains do not contain SIDs.

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1311470 (Red Hat Enterprise Linux 7)

master:

  • de8c6d81fd5d0f759ac0201e2c517bcb8b43d960 Fix broken trust warnings

ipa-4-3:

  • 1e0208612087e80f673e7ec1f8e050b57b5f1fb7 Fix broken trust warnings

ipa-4-2:

  • fb11384e65d74b6a027bf8cfe9f93e003bba5236 Fix broken trust warnings

Metadata Update from @mbasti:
- Issue assigned to mbasti
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Lowest
defect
Trusts
None
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.