Bug 1281522

Summary: acl - regression - trailing ', (comma)' in macro matched value is not removed.
Product: Red Hat Enterprise Linux 7 Reporter: Jan Kurik <jkurik>
Component: 389-ds-baseAssignee: Noriko Hosoi <nhosoi>
Status: CLOSED ERRATA QA Contact: Viktor Ashirov <vashirov>
Severity: unspecified Docs Contact:
Priority: high    
Version: 7.0CC: amsharma, jkurik, mnavrati, msauton, nhosoi, nkinder, rmeggins
Target Milestone: rcKeywords: Regression, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 389-ds-base-1.3.4.0-20.el7_2 Doc Type: Bug Fix
Doc Text:
Previously, in access control evaluation, retrieving a matched value for a macro failed to remove a trailing comma. As a consequence, if the Access Control List (ACL) contained a macro, the correct permission was not provided. To fix this bug, if a trailing comma is found in the matched value, the comma is properly removed. As a result, if the ACL contains a macro, the correct permission is provided.
Story Points: ---
Clone Of: 1280123 Environment:
Last Closed: 2015-12-08 10:34:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1280123    
Bug Blocks:    

Description Jan Kurik 2015-11-12 16:27:40 UTC
This bug has been copied from bug #1280123 and has been proposed
to be backported to 7.2 z-stream (EUS).

Comment 8 Amita Sharma 2015-11-27 15:59:24 UTC
Thanks Noriko,

Build Tested ::
================
[root@dhcp201-167 export]# rpm -qa | grep 389
389-ds-base-1.3.4.0-21.el7_2.x86_64
389-ds-base-debuginfo-1.3.4.0-21.el7_2.x86_64
389-ds-base-libs-1.3.4.0-21.el7_2.x86_64


quickinstall startup 	100% (5/5) 	  	 
Acl startup(o=ace industry,c=us) 	100% (1/1) 	  	 
Acl run(o=ace industry,c=us) 	  	0% (1/400) 	 
Acl cleanup 	100% (1/1) 	  	 

One failure is not related to this bug, that is script issue.

Comment 10 errata-xmlrpc 2015-12-08 10:34:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-2572.html