Bug 1970259

Summary: A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule
Product: Red Hat Enterprise Linux 8 Reporter: thierry bordaz <tbordaz>
Component: 389-ds-baseAssignee: thierry bordaz <tbordaz>
Status: CLOSED ERRATA QA Contact: RHDS QE <ds-qe-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.4CC: aadhikar, bsmejkal, frenaud, ldap-maint, mreynolds, sgouvern, toneata
Target Milestone: betaKeywords: Triaged, ZStream
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: 389-ds-base-1.4.3.23-3.module+el8.5.0+11463+c476656c Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1970791 1993267 2005435 2022090 (view as bug list) Environment:
Last Closed: 2021-11-09 18:11:20 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1970791, 1993267, 2005435, 2022090    

Description thierry bordaz 2021-06-10 07:47:30 UTC 
Description of problem:
The fix for BZ #1790975 is incomplete, it can erroneously set the connection as being a replication connection.


Version-Release number of selected component (if applicable):
since 1.3.10


How reproducible:
See upstream ticket


Actual results:
failure of test_access_from_certain_network_only_ip tests. Crash.


Expected results:
Should not set replication flag in the connection
Comment 8 sgouvern 2021-06-28 14:47:53 UTC 
build 389-ds-base-1.4.3.23-3.module+el8.5.0+11463+c476656c.x86_64.rpm planned for ITM 18 needs a respin - Moving to ITM 19
Comment 9 Akshay Adhikari 2021-07-07 11:29:09 UTC 
Build Tested: 389-ds-base-1.4.3.23-4.module+el8.5.0+11627+16aed726.x86_64

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

# perl SimpleBindSeveralOps.perl -h localhost -p 636 -D uid=foo,ou=people,dc=example,dc=com -w foo -b dc=example,dc=com -s sub uid=demo_user
DN to change : uid=demo_user,ou=people,dc=example,dc=com

-> Marking as verified: tested
Comment 13 sgouvern 2021-07-12 07:58:10 UTC 
As per comment 9, marking as VERIFIED
Comment 16 errata-xmlrpc 2021-11-09 18:11:20 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (389-ds-base bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:4203