Bug 681641

Summary: Unhelpful message from ipa-getcert
Product: Red Hat Enterprise Linux 5 Reporter: Nalin Dahyabhai <nalin>
Component: certmongerAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: low    
Version: 5.6CC: dpal, jgalipea
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: certmonger-0.34-1.el5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 652047 Environment:
Last Closed: 2011-07-21 07:26:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 652047, 683926    
Bug Blocks:    

Comment 3 Jenny Severance 2011-05-13 16:31:59 UTC
This does not seem to be the expected behavior .


-sh-4.1$ ipa-getcert list
Error connecting to DBus.
-sh-4.1$ echo $?
1

versions:

ipa-server-2.0.0-23.1.el6.x86_64
certmonger-0.42-1.el6.x86_64

Comment 4 Jenny Severance 2011-05-13 18:01:55 UTC
Additional automated regression test :

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: TEST PROTOCOL
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   LOG    ] :: Test run ID   : 1894670
:: [   LOG    ] :: Package       : certmonger
:: [   LOG    ] :: Test started  : 2011-05-13 13:49:02 EDT
:: [   LOG    ] :: Test finished : 2011-05-13 13:49:29 EDT
:: [   LOG    ] :: Test name     : /Regression/BZ_652047
:: [   LOG    ] :: Distro:       : Red Hat Enterprise Linux Server release 5.7 Beta (Tikanga)
:: [   LOG    ] :: Hostname      : dell-pe830-02.rhts.eng.bos.redhat.com
:: [   LOG    ] :: Architecture  : x86_64

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: Test description
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

Purpose of /Automation/Certmonger/Test/BZ_652047
Description: Testing of certmonger's 'ipa-getcert list' command when run as
non-root 
Author : kaleemullah Siddiqui <ksiddiqu>


::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: Setup
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   PASS   ] :: Running 'yum install certmonger -y'
:: [   PASS   ] :: Checking for the presence of certmonger rpm
:: [   LOG    ] :: Duration: 17s
:: [   LOG    ] :: Assertions: 2 good, 0 bad
:: [   PASS   ] :: RESULT: Setup

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: Test
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   PASS   ] :: Service started successfully
:: [   PASS   ] :: Running 'adduser certtest'
:: [   FAIL   ] :: Running 'su certtest -c 'ipa-getcert list > /tmp/temp.out'' (Expected 1, got 0)
:: [   PASS   ] :: File /tmp/temp.out should exist
:: [   FAIL   ] :: File '/tmp/temp.out' should contain 'Insufficient access.  Please retry operation as root.' 
:: [   PASS   ] :: File '/tmp/temp.out' should not contain 'Error org.freedesktop.DBus.Error.AccessDenied'
:: [   PASS   ] :: Running 'rm -rf /tmp/temp.out'
:: [   PASS   ] :: Running 'userdel -r certtest'
:: [   LOG    ] :: Duration: 2s
:: [   LOG    ] :: Assertions: 6 good, 2 bad
:: [   FAIL   ] :: RESULT: Test

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: Cleanup
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   PASS   ] :: Running 'yum remove certmonger -y'
:: [   LOG    ] :: Duration: 4s
:: [   LOG    ] :: Assertions: 1 good, 0 bad
:: [   PASS   ] :: RESULT: Cleanup

Comment 5 Nalin Dahyabhai 2011-05-13 19:04:50 UTC
(In reply to comment #3)
> This does not seem to be the expected behavior .
> 
> 
> -sh-4.1$ ipa-getcert list
> Error connecting to DBus.
> -sh-4.1$ echo $?
> 1
> 
> versions:
> 
> ipa-server-2.0.0-23.1.el6.x86_64
> certmonger-0.42-1.el6.x86_64

Is the DBus service ("/sbin/service messagebus status") running?

Comment 6 Dmitri Pal 2011-05-13 19:23:22 UTC
Yes it seems you hit a different issue and not executed the scenario in the bug.
Please retry.

Comment 7 Jenny Severance 2011-05-13 19:37:49 UTC
The scenario that was verified by Kaleem against RHEL 6.1 was automated and that failed - it passed against RHEL 6.1 after the fix.   Please see comment #4.

Comment 8 Dmitri Pal 2011-05-13 19:54:44 UTC
You are getting a different message from the one that you are testing. It is neither the old one nor the expected new one. That means that something else is wrong. That means that you are not testing what you think you are testing. So you need to resolve the issue and then retest. The issue seems to be that the message bus is not running in the first place. But it might be something else.
Please retest an if the issue persist keep the environment so that Nalin can investigate. It might be some kind of the race condition that we would not be able to investigate or reproduce otherwise. Please move to ON_QE yourself.

Comment 10 Nalin Dahyabhai 2011-05-17 18:00:12 UTC
(In reply to comment #7)
> The scenario that was verified by Kaleem against RHEL 6.1 was automated and
> that failed - it passed against RHEL 6.1 after the fix.   Please see comment
> #4.

It would be useful to know what was written to /tmp/temp.out during that run.

Comment 11 Jenny Severance 2011-05-17 20:01:10 UTC
verified


certmonger-0.42-1.el5

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 5.7 Beta (Tikanga)

# adduser certtest

# service certmonger start
Starting certmonger: [  OK  ]

# service certmonger status
certmonger (pid  21736) is running...


# su certtest -c 'ipa-getcert list'
Number of certificates and requests being tracked: 0.

Comment 12 errata-xmlrpc 2011-07-21 07:26:40 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-1002.html