Bug 1924130

Summary: RHDS11: “write” permission of ACI changes ns-slapd’s behavior on search operation
Product: Red Hat Enterprise Linux 8 Reporter: sgouvern
Component: 389-ds-baseAssignee: mreynolds
Status: CLOSED ERRATA QA Contact: RHDS QE <ds-qe-bugs>
Severity: high Docs Contact:
Priority: high    
Version: 8.4CC: bsmejkal, ds-qe-bugs, ebock, kyoneyam, ldap-maint, mmuehlfe, mreynolds, msauton, sgouvern, tbordaz, tkubota, tomichi, vashirov
Target Milestone: rcKeywords: ZStream
Target Release: 8.0   
Hardware: All   
OS: Linux   
Whiteboard: sync-to-jira
Fixed In Version: 389-ds-1.4-8040020210203193446-866effaa Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1909675
: 1925452 1925540 1946633 1946634 (view as bug list) Environment:
Last Closed: 2021-05-18 15:45:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1909675, 1925537    
Bug Blocks: 1921856, 1925452, 1925540, 1946633, 1946634    

Comment 2 bsmejkal 2021-02-10 14:00:02 UTC
============================================================================================================ test session starts =============================================================================================================
platform linux -- Python 3.6.8, pytest-6.2.2, py-1.10.0, pluggy-0.13.1 -- /usr/bin/python3.6
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-283.el8.x86_64-x86_64-with-redhat-8.5-Ootpa', 'Packages': {'pytest': '6.2.2', 'py': '1.10.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.11.0', 'html': '3.1.1', 'libfaketime': '0.1.2'}}
389-ds-base: 1.4.3.16-9.module+el8.4.0+9794+54684cb0
nss: 3.53.1-11.el8_2
nspr: 4.25.0-2.el8_2
openldap: 2.4.46-16.el8
cyrus-sasl: 2.1.27-5.el8
FIPS: disabled
rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests, configfile: pytest.ini
plugins: metadata-1.11.0, html-3.1.1, libfaketime-0.1.2
collected 1 item                                                                                                                                                                                                                             

dirsrvtests/tests/suites/acl/repeated_ldap_add_test.py::test_repeated_ldap_add PASSED                                                                                                                                                  [100%]

============================================================================================================ 1 passed in 41.53s =============================================================================================================

Marking as Verified:Tested.

Comment 6 mreynolds 2021-02-10 18:10:59 UTC
related issue: https://github.com/389ds/389-ds-base/issues/4609

Comment 7 bsmejkal 2021-02-12 10:15:47 UTC
Test results according to recent changes on which tests to use for verification:

============================================================================================================ test session starts =============================================================================================================
platform linux -- Python 3.6.8, pytest-6.2.2, py-1.10.0, pluggy-0.13.1 -- /usr/bin/python3.6
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-283.el8.x86_64-x86_64-with-redhat-8.4-Ootpa', 'Packages': {'pytest': '6.2.2', 'py': '1.10.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.11.0', 'html': '3.1.1', 'libfaketime': '0.1.2'}}
389-ds-base: 1.4.3.16-10.module+el8.4.0+9902+6195a65d
nss: 3.53.1-17.el8_3
nspr: 4.25.0-2.el8_2
openldap: 2.4.46-16.el8
cyrus-sasl: 2.1.27-5.el8
FIPS: disabled
rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests, configfile: pytest.ini
plugins: metadata-1.11.0, html-3.1.1, libfaketime-0.1.2
collected 3 items                                                                                                                                                                                                                            

dirsrvtests/tests/suites/basic/basic_test.py::test_bind_entry_missing_passwd PASSED                                                                                                                                                    [ 33%]
dirsrvtests/tests/suites/acl/misc_test.py::test_info_disclosure PASSED                                                                                                                                                                 [ 66%]
dirsrvtests/tests/suites/acl/repeated_ldap_add_test.py::test_repeated_ldap_add PASSED                                                                                                                                                  [100%]

============================================================================================================ 3 passed in 57.85s =============================================================================================================

Comment 17 bsmejkal 2021-03-12 14:29:16 UTC
============================================================================================================ test session starts =============================================================================================================
platform linux -- Python 3.6.8, pytest-6.2.2, py-1.10.0, pluggy-0.13.1 -- /usr/bin/python3.6
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-293.el8.x86_64-x86_64-with-redhat-8.4-Ootpa', 'Packages': {'pytest': '6.2.2', 'py': '1.10.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.11.0', 'html': '3.1.1', 'libfaketime': '0.1.2'}}
389-ds-base: 1.4.3.16-13.module+el8.4.0+10307+74bbfb4e
nss: 3.53.1-17.el8_3
nspr: 4.25.0-2.el8_2
openldap: 2.4.46-16.el8
cyrus-sasl: 2.1.27-5.el8
FIPS: disabled
rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests, configfile: pytest.ini
plugins: metadata-1.11.0, html-3.1.1, libfaketime-0.1.2
collected 3 items                                                                                                                                                                                                                            

dirsrvtests/tests/suites/basic/basic_test.py::test_bind_entry_missing_passwd PASSED                                                                                                                                                    [ 33%]
dirsrvtests/tests/suites/basic/basic_test.py::test_bind_invalid_entry PASSED                                                                                                                                                           [ 66%]
dirsrvtests/tests/suites/acl/misc_test.py::test_info_disclosure PASSED                                                                                                                                                                 [100%]

============================================================================================================ 3 passed in 20.02s ===========================================================================================================

Keeping Verified:Tested.

Comment 18 sgouvern 2021-03-15 09:09:58 UTC
As per comment 17 marking as VERIFIED on build 389-ds-base-libs-1.4.3.16-13.module+el8.4.0+10307+74bbfb4e.x86_64

Comment 22 errata-xmlrpc 2021-05-18 15:45:44 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (389-ds:1.4 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1835