Bug 1643772

Summary: ds-replcheck should validate suffix exists and it's replicated.
Product: Red Hat Enterprise Linux 7 Reporter: German Parente <gparente>
Component: 389-ds-baseAssignee: mreynolds
Status: CLOSED ERRATA QA Contact: RHDS QE <ds-qe-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.5CC: aadhikar, lkrispen, nkinder, pasik, rmeggins, spichugi, tbordaz, vashirov, vmishra
Target Milestone: rc   
Target Release: 7.7   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 389-ds-base-1.3.9.1-6.el7 Doc Type: Bug Fix
Doc Text:
Cause: Running ds-replcheck with a invalid suffix Consequence: The tool reports a very odd confusing error message Fix: Properly check if the suffix exists Result: The tools reports a useful error message when the suffix does not exist.
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-06 12:58:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description German Parente 2018-10-28 15:14:13 UTC
Description of problem:

seen at customer site, as first request to ldap database is the RUV, if the suffix provided in the command line does not exist or it's not replicated, we have an error message that it's regarding the RUV:

ds-replcheck -D "cn=directory manager" -w secret12 -b "o=ipaca" -r ldap://ipamaster.germanparente.local:389 -m ldap://ipareplica.germanparente.local
Performing online report...
Connecting to servers...
Gathering Master's RUV...
Error: Failed to get Master RUV entry: {'desc': 'No such object'}


Version-Release number of selected component (if applicable): 7.5


How reproducible: always


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 5 Akshay Adhikari 2019-05-07 14:52:13 UTC
Build Tested: 389-ds-base-1.3.9.1-5.el7.x86_64

Steps:

1) Create a replication between LDAP instances.
2) Run ds-replcheck -D "cn=directory manager" -w password -m ldap://aadhikar.example.com:39001 -r ldap://aadhikar.example.com:39002 -b "dc=test,dc=com"
where the suffix provided does not exist("dc=test,dc=com").

ds-replcheck script does not have the required changes, actual fix is not back-ported. Marking it as FAILED_QA.

Comment 6 Akshay Adhikari 2019-05-15 11:54:45 UTC
Build Tested: 389-ds-base-1.3.9.1-6.el7.x86_64

Steps:

1) Create a replication between LDAP instances

2) Run ds-replcheck script with an incorrect suffix

[root@master ~]# ds-replcheck -D "cn=directory manager" -w password -m ldap://`hostname`:39001 -r ldap://`hostname`:39002 -b "dc=test,dc=com"
Performing online report...
Connecting to servers...
Validating suffix ...
Error: Failed to validate suffix in web9.testrelm.test. dc=test,dc=com does not exist.

Marking it as VERIFIED.

Comment 8 errata-xmlrpc 2019-08-06 12:58:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2152