Bug 1168631

Summary:	[AAA] handle group loops
Product:	[Retired] oVirt	Reporter:	Alon Bar-Lev <alonbl>
Component:	ovirt-engine-core	Assignee:	Alon Bar-Lev <alonbl>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Ondra Machacek <omachace>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	3.5	CC:	awels, bazulay, bugs, ecohen, gklein, iheim, lsurette, rbalakri, yeylon, yzaslavs
Target Milestone:	---	Keywords:	CodeChange
Target Release:	3.5.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-01-21 16:06:18 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1076964

Description Alon Bar-Lev 2014-11-27 12:54:23 UTC

if for some reason there is loop within groups we get infinite loop when syncing users. although should not happen and was not handled before nice to fix.

Caused by: java.lang.StackOverflowError
	at java.util.concurrent.ConcurrentHashMap.hash(ConcurrentHashMap.java:333) [rt.jar:1.7.0_71]
	at java.util.concurrent.ConcurrentHashMap.get(ConcurrentHashMap.java:988) [rt.jar:1.7.0_71]
	at org.ovirt.engine.api.extensions.ExtMap.get(ExtMap.java:379) [ovirt-engine-extensions-api.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]

Comment 1 Ondra Machacek 2014-12-17 09:14:47 UTC

2014-12-17 10:13:51,034 ERROR [org.ovirt.engine.core.aaa.AuthzUtils] (DefaultQuartzScheduler_Worker-9) Group recursion detected for group 'grouploop1' stack is [451147c6-85cb-11e4-bfbd-001a4a013f06, 3eeaa676-85cb-11e4-8f7b-001a4a013f06]
2014-12-17 10:13:51,131 INFO  [org.ovirt.engine.core.bll.aaa.SyncUsers] (DefaultQuartzScheduler_Worker-9) Principal user1::ldap-authz-simple_ipa synchronized

Comment 2 Sandro Bonazzola 2015-01-21 16:06:18 UTC

oVirt 3.5.1 has been released. If problems still persist, please make note of it in this bug report.