Bug 1544796

Summary: IPA Error 905: CommandError unknown command 'undefined'
Product: Red Hat Enterprise Linux 7 Reporter: Michal Toth <mtoth>
Component: ipaAssignee: IPA Maintainers <ipa-maint>
Status: CLOSED CURRENTRELEASE QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.4CC: arajendr, dhiru, frenaud, jdanek, kludhwan, mtoth, pasik, pvoborni, rcritten, tscherf
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-11 07:08:54 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Michal Toth 2018-02-13 14:17:54 UTC
Description of problem:
When default 90 days password policy kicked in, I changed admin password.
Then I wanted to change password again (within few minutes), but it was refused due to min life time 1 hour. After changing this to 0 hours and changing password I got following error dialog


IPA Error 905: CommandError

unknown command 'undefined'


Version-Release number of selected component (if applicable):
ipa-server-common-4.5.0-21.el7_4.2.2.noarch
ipa-server-4.5.0-21.el7_4.2.2.x86_64

I have no idea what version I should pick from "Version list" - defaulting to 7.7

Actual results:
ComamndError

Expected results:
Password for user admin is changed

Comment 2 Michal Toth 2018-02-13 14:19:23 UTC
New password has been applied, despite error dialog.

Comment 3 Rob Crittenden 2018-02-13 18:26:38 UTC
I've been trying to reproduce without starting with an expired password and have been unable to do so.

I set the minlife to 0 and in the UI over and over just reset the password.

Can you find where the password was changed in /var/log/httpd/error_log and see if there was an exception thrown or at traceback?

Comment 4 Michal Toth 2018-02-14 08:31:10 UTC
I can see only this in error_log. No traceback, but "CommandError" is there...
I have no problem to provide access to this IPA server if needed, as it is only testing environment (currently being used).

<blockquote>
[Tue Feb 13 15:12:01.906796 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.123722 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: passwd(u'admin', u'********', u'********', version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.259125 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.338398 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.356096 2018] [:error] [pid 1267] ipa: INFO: admin: batch: user_show(u'admin', rights=True, all=True): SUCCESS
[Tue Feb 13 15:12:02.384805 2018] [:error] [pid 1267] ipa: INFO: admin: batch: pwpolicy_show(None, rights=True, user=u'admin', all=True): SUCCESS
[Tue Feb 13 15:12:02.391569 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: whoami(version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.426099 2018] [:error] [pid 1267] ipa: INFO: admin: batch: krbtpolicy_show(u'admin', rights=True, all=True): SUCCESS
[Tue Feb 13 15:12:02.428725 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.509168 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: undefined: CommandError
[Tue Feb 13 15:12:02.513103 2018] [:error] [pid 1267] ipa: INFO: admin: batch: cert_find(None, sizelimit=0, all=True, user=(u'admin',)): SUCCESS
[Tue Feb 13 15:12:02.513376 2018] [:error] [pid 1267] ipa: INFO: [jsonserver_session] admin: batch(({u'params': ([u'admin'], {u'all': True, u'rights': True}), u'method': u'user_show'}, {u'params': ([], {u'all': True, u'user': u'admin', u'rights': True}), u'method': u'pwpolicy_show'}, {u'params': ([u'admin'], {u'all': True, u'rights': True}), u'method': u'krbtpolicy_show'}, {u'params': ([], {u'sizelimit': 0, u'all': True, u'user': (u'admin',)}), u'method': u'cert_find'}), version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.644472 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.694598 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.701804 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: radiusproxy_find(None, version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.751705 2018] [:error] [pid 1267] ipa: INFO: [jsonserver_session] admin: user_find(None, version=u'2.228', no_members=True): SUCCESS
[Tue Feb 13 15:15:16.413060 2018] [:warn] [pid 1272] [client 10.40.204.176:58322] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:15:16.562955 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: undefined: CommandError
<blockquote>

Comment 5 Rob Crittenden 2018-02-20 20:00:07 UTC
Upstream ticket:
https://pagure.io/freeipa/issue/7419

Comment 10 Dhiru Kholia 2018-07-19 15:29:02 UTC
This bug has been fixed upstream and in Fedora.

https://bugzilla.redhat.com/show_bug.cgi?id=1488640 has more details.

Will this fix be backported to RHEL 7.x?

Comment 11 Florence Blanc-Renaud 2018-10-11 07:08:54 UTC
The bug was fixed upstream in FreeIPA 4.6.1, and RHEL 7.6 has been rebased to IPA 4.6.4, hence RHEL 7.6 now contains the fix for this issue.