Bug 1618699

Summary: ovirt-engine-extension-aaa-ldap-setup fails with UnicodeDecodeError
Product: Red Hat Enterprise Virtualization Manager Reporter: Roman Hodain <rhodain>
Component: ovirt-engine-extension-aaa-ldapAssignee: Ondra Machacek <omachace>
Status: CLOSED ERRATA QA Contact: Petr Matyáš <pmatyas>
Severity: low Docs Contact:
Priority: medium    
Version: 4.1.11CC: lsurette, lsvaty, mperina, mtessun, Rhev-m-bugs
Target Milestone: ovirt-4.3.2   
Target Release: 4.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-engine-extension-aaa-ldap-1.3.9 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-05-08 12:35:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Roman Hodain 2018-08-17 11:25:29 UTC 
Description of problem:
When the provided certificate chain contains some non utf-8 characters, the setup fails. The characters can get the CA file with comments like 
     "# Certinomis - Autorité Racine"

Version-Release number of selected component (if applicable):
ovirt-engine-extension-aaa-ldap-setup-1.3.7-1.el7ev.noarch

How reproducible:
100%

Steps to Reproduce:
1. Provide a CAFiles containing comments encoded in non utf-8. For exmaple "# Certinomis - Autorité Racine"

Actual results:
2018-08-14 07:29:31 DEBUG otopi.context context._executeMethod:142 method exception
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/otopi/context.py", line 132, in _executeMethod
    method['method']()
  File "/usr/share/ovirt-engine-extension-aaa-ldap/setup/bin/../plugins/ovirt-engine-extension-aaa-ldap/
ldap/config.py", line 271, in _customization
    constants.LDAPEnv.CACERT
  File "/usr/lib/python2.7/site-packages/otopi/plugin.py", line 909, in execute
    if stdin is not None else None
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 53557: ordinal not in range(128)


Expected results:
The file is processed
Comment 3 Petr Matyáš 2019-03-07 10:20:51 UTC 
Verified on ovirt-engine-extension-aaa-ldap-setup-1.3.9-1.el7ev.noarch
Comment 5 errata-xmlrpc 2019-05-08 12:35:33 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:1072