Bug 752686

Summary: Negative test case for defaultgroup in ipa config-mod causes internal error.
Product: Red Hat Enterprise Linux 6 Reporter: Gowrishankar Rajaiyan <grajaiya>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.2CC: dpal, jgalipea, mkosek
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-2.2.0-1.el6 Doc Type: Bug Fix
Doc Text:
No documentation needed.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-20 13:16:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 756082    

Description Gowrishankar Rajaiyan 2011-11-10 06:03:22 UTC
Description of problem:


Version-Release number of selected component (if applicable):
ipa-server-2.1.3-9.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. [root@decepticons ~]# ipa config-mod --defaultgroup=doesntexist
ipa: ERROR: an internal error has occurred

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [10:23:48] ::  negative test case for defaultgroup
ipa: ERROR: an internal error has occurred
:: [   FAIL   ] :: set defaultgroup=[doesntexist] (Expected 2, got 1)
'ae46af50-4ea1-4e2a-a609-96b5c3bf512f'
ipaconfig-mod-defaultgroup-negative result: FAIL
   metric: 1
   Log: /tmp/beakerlib-3535640/journal.txt
    Info: Searching AVC errors produced since 1320765828.78 (Tue Nov  8 10:23:48 2011)
  

Actual results:
ipa: ERROR: an internal error has occurred


Expected results:
ipa: ERROR: The group doesn't exist


Additional info:
This test used to pass earlier, I checked in previous run with ipa-admintools-2.1.1-1.el6.x86_64.
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [08:39:45] ::  negative test case for defaultgroup
ipa: ERROR: The group doesn't exist
:: [   PASS   ] :: set defaultgroup=[doesntexist]
'8623b956-20bc-4512-97f1-cbfa77928401'
ipaconfig-mod-defaultgroup-negative result: PASS
   metric: 0
   Log: /tmp/beakerlib-2996049/journal.txt



==> /var/log/httpd/error_log <==
[Thu Nov 10 11:28:31 2011] [error] ipa: ERROR: non-public: TypeError: message: need a <type 'unicode'>; got Gettext("The group doesn't exist", domain='ipa', localedir=None) (a <class 'ipalib.text.Gettext'>)
[Thu Nov 10 11:28:31 2011] [error] Traceback (most recent call last):
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 228, in wsgi_execute
[Thu Nov 10 11:28:31 2011] [error]     result = self.Command[name](*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 432, in __call__
[Thu Nov 10 11:28:31 2011] [error]     ret = self.run(*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 738, in run
[Thu Nov 10 11:28:31 2011] [error]     return self.execute(*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py", line 996, in execute
[Thu Nov 10 11:28:31 2011] [error]     ldap, dn, entry_attrs, attrs_list, *keys, **options
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/config.py", line 202, in pre_callback
[Thu Nov 10 11:28:31 2011] [error]     raise errors.NotFound(message=_("The group doesn't exist"))
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/errors.py", line 273, in __init__
[Thu Nov 10 11:28:31 2011] [error]     TYPE_ERROR % ('message', unicode, message, type(message))
[Thu Nov 10 11:28:31 2011] [error] TypeError: message: need a <type 'unicode'>; got Gettext("The group doesn't exist", domain='ipa', localedir=None) (a <class 'ipalib.text.Gettext'>)
[Thu Nov 10 11:28:31 2011] [error] ipa: INFO: admin.PNQ.REDHAT.COM: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13'): TypeError



[root@decepticons ~]# ipa -d config-mod --defaultgroup=doesntexist
ipa: DEBUG: importing all plugin modules in '/usr/lib/python2.6/site-packages/ipalib/plugins'...
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
ipa: DEBUG: args=klist -V
ipa: DEBUG: stdout=Kerberos 5 version 1.9

ipa: DEBUG: stderr=
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
ipa: INFO: trying https://decepticons.lab.eng.pnq.redhat.com/ipa/xml
ipa: DEBUG: Created connection context.xmlclient
ipa: DEBUG: raw: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13')
ipa: DEBUG: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13')
ipa: INFO: Forwarding 'config_mod' to server u'https://decepticons.lab.eng.pnq.redhat.com/ipa/xml'
ipa: DEBUG: NSSConnection init decepticons.lab.eng.pnq.redhat.com
ipa: DEBUG: connect_socket_family: host=decepticons.lab.eng.pnq.redhat.com port=443 family=PR_AF_INET
ipa: DEBUG: connecting: 10.65.201.77:443
ipa: DEBUG: auth_certificate_callback: check_sig=True is_server=False
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
        Issuer: CN=Certificate Authority,O=LAB.ENG.PNQ.REDHAT.COM
        Validity:
            Not Before: Tue Nov 08 05:42:37 2011 UTC
            Not After : Fri Nov 08 05:42:37 2013 UTC
        Subject: CN=decepticons.lab.eng.pnq.redhat.com,O=LAB.ENG.PNQ.REDHAT.COM
        Subject Public Key Info:
            Public Key Algorithm: PKCS #1 RSA Encryption
                RSA Public Key:
                    Modulus:
                        ce:5a:f7:34:bf:26:41:1a:b9:58:2d:12:d1:27:03:56:
                        c4:93:d7:9e:90:aa:bd:22:13:4c:55:24:33:a4:16:83:
                        77:d1:86:b1:a2:c7:b3:9a:fe:20:95:de:ec:d9:7d:e2:
                        d7:2a:0c:dd:97:4b:99:af:e8:ec:db:5c:d8:71:6f:78:
                        60:11:d9:a4:c0:26:d1:87:f1:43:63:99:71:61:82:11:
                        60:9b:2e:99:19:ed:f8:73:96:b6:2b:3f:a5:80:b5:41:
                        d1:d4:72:3e:18:20:4c:5f:f0:c6:45:f1:d9:86:e7:c1:
                        fc:5d:e8:91:4a:f0:e1:e8:5a:da:b7:de:61:98:54:d6:
                        dd:a2:cf:76:99:a8:a3:d9:8c:7f:58:a8:11:72:a6:25:
                        9d:07:1a:42:16:12:c1:ee:e7:5c:3f:fd:97:3c:89:9b:
                        c7:05:ed:89:6a:a8:89:e2:b3:6d:87:23:0c:66:74:fe:
                        d7:93:eb:fc:5d:25:03:8d:fb:80:05:41:6c:fb:68:1f:
                        cd:31:23:e4:63:73:56:94:9e:90:2f:5b:b7:bd:89:8c:
                        97:7e:4e:f2:3d:d3:ad:cb:b9:dc:24:65:24:88:4d:96:
                        00:c5:97:dd:8b:f0:91:3a:d3:b5:0a:dc:08:ad:08:9e:
                        dd:a9:b6:81:a4:4f:9d:aa:2e:4b:b2:8e:aa:07:9a:bb
                    Exponent: 65537 (0x10001)
    Signed Extensions: (4)
        Name: Certificate Authority Key Identifier
        Critical: False
        Key ID:
            be:06:b1:15:11:47:c3:17:49:32:a4:f2:1c:d5:c7:ea:
            39:8a:e5:9b
        Serial Number: None
        General Names: [0 total]

        Name: Authority Information Access
        Critical: False

        Name: Certificate Key Usage
        Critical: True
        Usages:
            Digital Signature
            Non-Repudiation
            Key Encipherment
            Data Encipherment

        Name: Extended Key Usage
        Critical: False
        Usages:
            TLS Web Server Authentication Certificate
            TLS Web Client Authentication Certificate

    Fingerprint (MD5):
        62:5b:95:fb:22:39:a6:fd:ab:07:9d:1e:b5:c5:ab:f9
    Fingerprint (SHA1):
        91:44:d4:65:2f:64:87:dc:73:20:3a:6e:d1:a1:7e:f6:
        80:49:71:2e
    Signature:
        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
        Signature Data:
            a3:6e:89:a8:c4:40:ea:a2:a0:05:18:81:27:eb:d0:2d:
            c3:1d:c3:ce:9a:bc:c0:17:13:94:51:85:d8:de:a9:bf:
            00:b8:3c:be:d7:2d:ab:7e:cd:d5:36:74:86:42:95:83:
            22:a0:98:10:75:ce:22:12:7d:3e:18:36:0f:d3:40:c1:
            85:c2:34:aa:3a:d3:3e:86:88:e4:16:9f:88:ad:e0:36:
            06:45:ec:a5:53:22:a6:43:38:d8:b6:26:71:45:7d:e7:
            4e:25:05:ed:e5:c3:ad:84:d5:01:19:69:3e:e4:5f:3c:
            b2:4c:c6:55:77:f5:1a:3e:95:82:f5:19:20:92:c9:48:
            78:ec:05:b2:d5:bd:44:10:fb:a1:c8:db:27:15:d7:14:
            58:c9:a1:b2:9f:be:cd:e1:f2:b3:81:d0:9e:cd:35:e5:
            a0:eb:06:dc:94:34:da:7a:23:45:17:6e:8e:31:94:05:
            d8:d4:8b:45:29:7d:c5:f5:e0:f5:e3:8a:a4:0e:3e:90:
            a9:a7:8b:f6:64:34:a0:a0:3b:52:9a:67:79:cb:ca:eb:
            87:88:90:98:7e:a9:53:d6:21:9c:52:9b:b4:f7:3f:91:
            a0:95:ad:f2:28:89:16:b3:34:fa:7e:1d:65:83:07:0f:
            71:fa:5c:5b:6f:c8:47:ed:18:8d:ae:e2:a0:e0:e6:96
ipa: DEBUG: approved_usage = SSLServer intended_usage = SSLServer
ipa: DEBUG: cert valid True for "CN=decepticons.lab.eng.pnq.redhat.com,O=LAB.ENG.PNQ.REDHAT.COM"
ipa: DEBUG: handshake complete, peer = 10.65.201.77:443
ipa: DEBUG: Caught fault 903 from server https://decepticons.lab.eng.pnq.redhat.com/ipa/xml: an internal error has occurred
ipa: DEBUG: Destroyed connection context.xmlclient
ipa: ERROR: an internal error has occurred
[root@decepticons ~]#

Comment 3 Rob Crittenden 2011-11-10 13:51:41 UTC
Moving to 6.3. This isn't a critical failure.

Comment 5 Martin Kosek 2011-11-14 08:08:29 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2096

Comment 8 Jenny Severance 2012-03-19 15:45:53 UTC
Verified

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   LOG    ] :: negative test case for defaultgroup
:: [   LOG    ] :: https://bugzilla.redhat.com/show_bug.cgi?id=752686
:: [   PASS   ] :: set defaultgroup=[doesntexist]
:: [   LOG    ] :: Duration: 1s
:: [   LOG    ] :: Assertions: 1 good, 0 bad
:: [   PASS   ] :: RESULT: ipaconfig_mod_defaultgroup_negative


version:
ipa-server.x86_64 0:2.2.0-4.el6

Comment 10 Martin Kosek 2012-04-19 12:06:57 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No documentation needed.

Comment 12 errata-xmlrpc 2012-06-20 13:16:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0819.html