Bug 742327
| Summary: | Default DNS Administration Role - Permissions missing | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Jenny Severance <jgalipea> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED ERRATA | QA Contact: | IDM QE LIST <seceng-idm-qe-list> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | high | ||
| Version: | 6.1 | CC: | dpal, grajaiya, mkosek, nsoman |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-2.1.3-1.el6 | Doc Type: | Bug Fix |
| Doc Text: |
Cause: permission objects related to DNS were improperly formatted and added before the relevant DNS privileges they are member of were added to LDAP
Consequence: DNS related permissions contain just limited information. Additionally, the privilege objects they are member of lacks memberof LDAP attributes pointing back to the permissions. Thus, user can get an incorrect list of permissions that are members of DNS related privilege.
Fix: When IPA package is upgraded, permission objects formatting is fixed and missing memberof LDAP attributes in relevant DNS privileges are added
Result: User gets a valid list of permissions when displaying a DNS related privilege. The permissions contain all needed information.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-12-06 18:33:02 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 748554 | ||
|
Description
Jenny Severance
2011-09-29 17:53:24 UTC
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1898 Fixed upstream: master: 7bd3b3e12147b794c4cf2f4457df5e20638c7b0e ipa-2-1: 9386f154947cd683272f7dfd7797bd9e51c20994 *** Bug 745946 has been marked as a duplicate of this bug. ***
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
New Contents:
Cause: permission objects related to DNS were improperly formatted and added before the relevant DNS privileges they are member of were added to LDAP
Consequence: DNS related permissions contain just limited information. Additionally, the privilege objects they are member of lacks memberof LDAP attributes pointing back to the permissions. Thus, user can get an incorrect list of permissions that are members of DNS related privilege.
Fix: When IPA package is upgraded, permission objects formatting is fixed and missing memberof LDAP attributes in relevant DNS privileges are added
Result: User gets a valid list of permissions when displaying a DNS related privilege. The permissions contain all needed information.
[root@decepticons ~]# ipa privilege-find "DNS Administrators" ------------------- 1 privilege matched ------------------- Privilege name: DNS Administrators Description: DNS Administrators Permissions: add dns entries, remove dns entries, update dns entries ---------------------------- Number of entries returned 1 ---------------------------- [root@decepticons ~]# Permissions now available by default. Verified. Name : ipa-server Relocations: (not relocatable) Version : 2.1.3 Vendor: Red Hat, Inc. Release : 8.el6 Build Date: Wed 02 Nov 2011 03:21:27 AM IST Install Date: Thu 03 Nov 2011 10:13:53 AM IST Build Host: x86-012.build.bos.redhat.com Group : System Environment/Base Source RPM: ipa-2.1.3-8.el6.src.rpm Size : 3381421 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://www.freeipa.org/ Summary : The IPA authentication server Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html |