Bug 439863

Summary: ldapmodify fails when running against /usr/share/ipa/default-keytypes.ldif
Product: [Retired] freeIPA Reporter: Perry Myers <pmyers>
Component: ipa-serverAssignee: Nathan Kinder <nkinder>
Status: CLOSED ERRATA QA Contact: Chandrasekar Kannan <ckannan>
Severity: low Docs Contact:
Priority: low    
Version: 1.0CC: benl
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: freeipa-2.0.0-1.fc15 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 429034    
Attachments:
Description Flags
ldapmodify run with -d 3 none

Description Perry Myers 2008-03-31 19:54:45 UTC 
Description of problem:
Installed fedora-ds-base and ipa-server from rawhide.  During ipa install the ds
is created and ldapmodify is run as follows:

/usr/bin/ldapmodify -h 127.0.0.1 -xv -D "cn=Directory Manager" -w password -f
/tmp/foo

/tmp/foo is a randomly generated filename and the contents of this file are like
the following:

#kerberos keytypes
dn: cn=INT.VALANET.ORG,cn=kerberos,dc=int,dc=valanet,dc=org
changetype: modify
add: krbSupportedEncSaltTypes
krbSupportedEncSaltTypes: aes256-cts:normal
krbSupportedEncSaltTypes: aes128-cts:normal
krbSupportedEncSaltTypes: des3-hmac-sha1:normal
krbSupportedEncSaltTypes: arcfour-hmac:normal
krbSupportedEncSaltTypes: des-hmac-sha1:normal
krbSupportedEncSaltTypes: des-cbc-md5:normal
krbSupportedEncSaltTypes: des-cbc-crc:normal
krbSupportedEncSaltTypes: des-cbc-crc:v4
krbSupportedEncSaltTypes: des-cbc-crc:afs3
krbDefaultEncSaltTypes: aes256-cts:normal
krbDefaultEncSaltTypes: aes128-cts:normal
krbDefaultEncSaltTypes: des3-hmac-sha1:normal
krbDefaultEncSaltTypes: arcfour-hmac:normal
krbDefaultEncSaltTypes: des-hmac-sha1:normal
krbDefaultEncSaltTypes: des-cbc-md5:normal

This file is taken from /usr/share/ipa/default-keytypes.ldif.

ldapmodify fails with the following error message:

ldap_initialize( ldap://127.0.0.1 )
ldapmodify: wrong attributeType at line 13, entry
"cn=INT.VALANET.ORG,cn=kerberos,dc=int,dc=valanet,dc=org"

Version-Release number of selected component (if applicable):
ipa-server-0.99-12.fc9.x86_64
fedora-ds-base-1.1.0.1-3.fc9.x86_64

How reproducible:
Every time

Steps to Reproduce:
1. Install Fedora 9 beta and install the ipa-server and fedora-ds-base RPMs
2. Run ipa-server-install 
3.
  
Actual results:
ipa-server-install completes, but a critical error is reported for the
ldapmodify command as described above.

Expected results:
ldapmodify should succeed.

Additional info:
Comment 1 Perry Myers 2008-03-31 19:54:45 UTC 
Created attachment 299755 [details]
ldapmodify run with -d 3
Comment 2 Simo Sorce 2008-04-30 18:43:23 UTC 
We fixed this.
Comment 4 Yi Zhang 2008-05-28 19:20:36 UTC 
not happening in RHEL 5 32 & 64 bit