Bug 709665

https://fedorahosted.org/freeipa/ticket/1270

master: 6e5885d109a6aa303b62706bd571dc076491fab4

ipa-2-0: 0705fa243cd411068f25304a85df75ee3f143a25

[root@ipaserver ~]# ipa sudorule-add-host sudorule1 --hosts=test2.example.com
  Rule name: sudorule1
  Enabled: TRUE
  Failed hosts/hostgroups: 
    member host: test2.example.com: no such entry
-------------------------
Number of members added 0
-------------------------


[root@ipaserver ~]# ipa sudorule-remove-host sudorule1 --hosts=test2.example.com --all
  dn: ipauniqueid=e494cc1c-ef80-11e0-898e-00110a9d72f2,cn=sudorules,cn=sudo,dc=jgalipea
  Rule name: sudorule1
  Enabled: TRUE
  External host: test2.example.com   <<====================================
  ipauniqueid: e494cc1c-ef80-11e0-898e-00110a9d72f2
  objectclass: ipaassociation, ipasudorule
---------------------------
Number of members removed 1
---------------------------

output still contains the external host that was removed

version tested :
ipa-server-2.1.1-4.el6.x86_64

This will be fixed in the 2.1.2 rebase, it works for me.

okay need to change the fixed in version and it should have been Modified and not ON_QA  .. when bugs get added to the errata they switch from Modified to ON_QA that how I know the fix is available!

I understand the process. It is possible that this regressed or was not completely fixed, but it appears to be fixed now. Holding in ASSIGNED until the 2.1.2 rebase is complete.

IIRC, bugs that are fixed upstream should be put to MODIFIED. Then, as Jenny wrote, they are moved to ON_QA when errata is ready.

This is what we do with all the other bugs and I think we should do it with this one too otherwise it can brings confusion.

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Cause: The output when removing external hosts from a sudorule contained the hosts that were removed.
Consequence: This caused confusion because the hosts were actually removed.
Fix: Refresh the external host information before returning data to the client.
Result: The removed external hosts are no longer displayed in the sudo rule output.

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: sudorule-remove-host_003: Remove multiple hosts from sudorule.
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   PASS   ] :: Running 'ipa sudorule-remove-host sudorule1 --hosts=test2.example.com,test3.example2.com --all > /tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt 2>&1'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'Rule name: sudorule1'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'Enabled: TRUE'
:: [11:43:02] ::  Verifying https://bugzilla.redhat.com/show_bug.cgi?id=709665
grep: test2.example.com: No such file or directory
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  dn: ipauniqueid=199209b4-04a0-11e1-a0da-00215e258b54,cn=sudorules,cn=sudo,dc=testrelm
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  Rule name: sudorule1
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  Host Groups: hostgroup1, hostgroup2, hostgroup3, hostgroup4, hostgroup5
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  ipauniqueid: 199209b4-04a0-11e1-a0da-00215e258b54
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should not contain 'test2.example.com'
grep: test3.example2.com: No such file or directory
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  dn: ipauniqueid=199209b4-04a0-11e1-a0da-00215e258b54,cn=sudorules,cn=sudo,dc=testrelm
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  Rule name: sudorule1
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  Host Groups: hostgroup1, hostgroup2, hostgroup3, hostgroup4, hostgroup5
/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt:  ipauniqueid: 199209b4-04a0-11e1-a0da-00215e258b54
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should not contain 'test3.example2.com'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'test5.example'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'test4.example.com'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'Host Groups: hostgroup1, hostgroup2, hostgroup3'
:: [   PASS   ] :: File '/tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt' should contain 'Number of members removed 2'
  dn: ipauniqueid=199209b4-04a0-11e1-a0da-00215e258b54,cn=sudorules,cn=sudo,dc=testrelm
  Rule name: sudorule1
  Enabled: TRUE
  Host Groups: hostgroup1, hostgroup2, hostgroup3, hostgroup4, hostgroup5
  External host: test5.example, test4.example.com
  ipauniqueid: 199209b4-04a0-11e1-a0da-00215e258b54
  objectclass: ipaassociation, ipasudorule
---------------------------
Number of members removed 2
---------------------------
:: [   PASS   ] :: Running 'cat /tmp/tmp.jHjyYyUOzz/sudorule-remove-host_003.txt'
'612de46a-2096-44a2-8dc1-a255a1769f45'
sudorule-remove-host-003 result: PASS
   metric: 0
   Log: /tmp/beakerlib-3455158/journal.txt
    Info: Searching AVC errors produced since 1320162180.5 (Tue Nov  1 11:43:00 2011)
     Searching logs...
     Info: No AVC messages found.
 Writing to /mnt/testarea/tmp.eH0V48
:
   AvcLog: /mnt/testarea/tmp.eH0V48

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


Verified. Version: ipa-server-2.1.3-7.el6.x86_64ipa-server-2.1.3-7.el6.x86_64

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html