Bug 652047

Summary:	Unhelpful message from ipa-getcert
Product:	Red Hat Enterprise Linux 6	Reporter:	Dmitri Pal <dpal>
Component:	certmonger	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED ERRATA	QA Contact:	Jenny Severance <jgalipea>
Severity:	medium	Docs Contact:
Priority:	low
Version:	6.1	CC:	jgalipea, kchamart, ksiddiqu
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	certmonger-0.34-1.el6	Doc Type:	Bug Fix
Doc Text:	Previously, the certmonger utility did not display a user-friendly error message when the user ran the ipa-getcert command with privileges that were insufficient for the system bus to allow it to communicate with the certmonger service. With this update, certmonger suppresses the original error message if a user-friendly message is available. The user can display both messages with the -v option.	Story Points:	---
Clone Of:
Clones:	681641 683926 (view as bug list)		Environment:
Last Closed:	2011-05-19 13:07:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	681641, 683926

Description Dmitri Pal 2010-11-10 21:36:49 UTC

Description of problem:
The certmonger displays an unhelpful message when ip-getcert is called by non root.


* Install certmonger
* Reboot the system 
* As non root run ipa-getcert
  
Actual results:
 Error org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.76" (uid=500 pid=3468 comm="ipa-getcert) interface="org.fedorahosted.certmonger" member="get_requests" error name="(unset)" requested_reply=0 destination="org.fedorahosted.certmonger" (uid=0 pid=2560 comm="/usr/sbin/certmonger))

Expected results:
Meaningful error message. Something like:
"Insufficient access right. Please try operation as root."

Comment 1 Nalin Dahyabhai 2011-01-11 23:46:08 UTC

Fixed in upstream repository, targeting 0.34 release.

Comment 3 Kaleem 2011-03-09 09:46:41 UTC

I tried to verify this with certmonger-0.34-1.el6 on RHEL6.1 Beta.
I observed that meaningful error message is displayed now but along with the debug message as well which was displayed before the fix.

Now the message is:
 "Error org.freedesktop.DBus.Error.AccessDenied: Rejected send message, 1 matched rules; type="method_call", sender=":1.125" (uid=501 pid=24332 comm="ipa-getcert) interface="org.fedorahosted.certmonger" member="get_requests" error name="(unset)" requested_reply=0 destination="org.fedorahosted.certmonger" (uid=0 pid=13964 comm="/usr/sbin/certmonger))".
 "Insufficient access.  Please retry operation as root."

Comment 11 Eva Kopalova 2011-05-02 17:02:40 UTC

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, the certmonger utility did not display a user-friendly error message when the user ran the ipa-getcert command with privileges that were insufficient for the system bus to allow it to communicate with the certmonger service. With this update, certmonger suppresses the original error message if a user-friendly message is available. The user can display both messages with the -v option.

Comment 12 errata-xmlrpc 2011-05-19 13:07:15 UTC

An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0570.html