Bug 671016

Summary:	"ipa permission-find test" failed
Product:	[Retired] freeIPA	Reporter:	Yi Zhang <yzhang>
Component:	ipa-server	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	medium	Docs Contact:
Priority:	low
Version:	2.0	CC:	benl, dpal, jgalipea, jhrozek, mkosek
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	freeipa-2.1.0-1.fc15	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-03-27 07:22:28 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Yi Zhang 2011-01-19 22:28:45 UTC

Description of problem:
If you have a permission named "test", you can create it but "ipa permission-find test" returns error

My test is below:
[yi@dhcp-137 ipa-delegation]$ ipa permission-add test --desc=test --permissions=add --type=user
-----------------------
Added permission "test"
-----------------------
  Permission name: test
  Description: test
  Permissions: add
  Type: user
[yi@dhcp-137 ipa-delegation]$ ipa permission-find test
ipa: ERROR: no such entry
[yi@dhcp-137 ipa-delegation]$ ipa permission-del test
-------------------------
Deleted permission "test"
-------------------------
[yi@dhcp-137 ipa-delegation]$ ipa permission-find test
ipa: ERROR: no such entry


Version-Release number of selected component (if applicable):ipa-server-2.0-0.2011011115gitc778919.fc14.i686


How reproducible: always

Comment 1 Yi Zhang 2011-01-19 22:29:10 UTC

httpd error_log:

[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: Created connection context.ldap2
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_add(u'test', description=u'test', permissions=(u'add',), type=u'user', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_add(u'test', description=u'test', permissions=(u'add',), type=u'user', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', test=True, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', selfaci=False, test=True, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_show(u'test', rights=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', test=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', selfaci=False, test=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_show(u'test', rights=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_show(u'test', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: ACI not found for test
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: response: entries returned 1
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: Destroyed connection context.ldap2
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: Created connection context.ldap2
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: permission_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: permission_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'Manage group members random')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'Manage group members random', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for Manage group members random
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'Manage group members add')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'Manage group members add', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for Manage group members add
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test001 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test001 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test002 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test002 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test003 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test003 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test003 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test004 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test004 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test004 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test005 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test005 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test006 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test006 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test006 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test007 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test007 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test009 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test009 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'testgrp')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'testgrp', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'testper')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'testper', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: response: NotFound: no such entry
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: Destroyed connection context.ldap2

Comment 2 Rob Crittenden 2011-01-19 22:56:40 UTC

Was this done on a clean system or is this the same machine where ipa permission-find returned no entries?

Comment 3 Yi Zhang 2011-01-19 23:35:20 UTC

same host that i ran test for permission-find

Comment 4 Dmitri Pal 2011-01-19 23:46:35 UTC

That I can't reproduce this one.

Comment 5 Dmitri Pal 2011-01-19 23:48:56 UTC

(In reply to comment #4)
> That I can't reproduce this one.

I can't reproduce this one.
Tried same steps with yesterday build - works fine.

Comment 8 Jakub Hrozek 2011-01-24 21:50:26 UTC

https://fedorahosted.org/freeipa/ticket/843

Comment 9 Martin Kosek 2011-01-26 08:19:11 UTC

Closing the ticket #843 - I cannot reproduce this issue on current FreeIPA version.

Comment 10 Yi Zhang 2011-02-16 22:01:48 UTC

I run a simple test on newer version if ipav2. I no longer see this problem. Bug closed

[yi@works4me ~]$ ipa permission-add
Permission name: test
Permissions: read
[Attributes]: 
[Type]: user
[Member of group]: 
[Filter]: 
[Subtree]: 
[Target group]: 
-----------------------
Added permission "test"
-----------------------
  Permission name: test
  Permissions: read
  Type: user
[yi@works4me ~]$ ipa permission-find test
--------------------
1 permission matched
--------------------
  Permission name: test
  Permissions: read
  Type: user
----------------------------
Number of entries returned 1
----------------------------



[yi@works4me ~]$ rpm -qa | grep freeipa-server
freeipa-server-selinux-2.0-0.2011020119gitec59e61.fc14.i686
freeipa-server-2.0-0.2011020119gitec59e61.fc14.i686