Bug 783475

Summary: ipa delegation-find --membergroup="" returns internal error
Product: Red Hat Enterprise Linux 6 Reporter: Scott Poore <spoore>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED DUPLICATE QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3CC: jgalipea, mkosek, nsoman
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-09 13:22:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Scott Poore 2012-01-20 15:01:46 UTC
Description of problem:

Running ipa delegation-find with membergroup="" returns an internal error:

# ipa delegation-find --membergroup=""
ipa: ERROR: an internal error has occurred

Version-Release number of selected component (if applicable):

ipa-server-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
ipa-admintools-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
389-ds-base-libs-1.2.9.14-1.el6.x86_64
389-ds-base-1.2.9.14-1.el6.x86_64


How reproducible:

always

Steps to Reproduce:
1.  <setup ipa server>
2.  kinit admin
3.  ipa delegation-find --membergroup=""
  
Actual results:

ipa: ERROR: an internal error has occurred

Expected results:

A more descriptive error should be displayed.

Additional info:

Comment 2 Scott Poore 2012-01-20 15:30:35 UTC
messages from /var/log/httpd/error_log:

[Fri Jan 20 10:29:33 2012] [error] ipa: ERROR: non-public: AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 10:29:33 2012] [error] Traceback (most recent call last):
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 229, in wsgi_execute
[Fri Jan 20 10:29:33 2012] [error]     result = self.Command[name](*args, **options)
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 10:29:33 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 10:29:33 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py", line 196, in execute
[Fri Jan 20 10:29:33 2012] [error]     results = api.Command['aci_find'](term, **kw)['result']
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 10:29:33 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 10:29:33 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 758, in execute
[Fri Jan 20 10:29:33 2012] [error]     dn = _group_from_memberof(kw['memberof'])
[Fri Jan 20 10:29:33 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 199, in _group_from_memberof
[Fri Jan 20 10:29:33 2012] [error]     st = memberof.find('memberOf=')
[Fri Jan 20 10:29:33 2012] [error] AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 10:29:33 2012] [error] ipa: INFO: admin@TESTRELM: delegation_find(None, memberof=None, pkey_only=False, all=False, raw=False, version=u'2.21'): AttributeError

Comment 3 Dmitri Pal 2012-01-20 23:18:24 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2289

Comment 4 Namita Soman 2012-01-24 15:42:57 UTC
Similar behaviour seen when using permission-add as in:
# ipa permission-add ManageHost --permissions="write" --subtree=cn=computers,cn=accounts,dc=testrelm,dc=com --memberof=""

Comment 5 Namita Soman 2012-01-26 13:53:40 UTC
And also affects when using permission-add with missing targets, as in:
ipa permission-add TestPermission --permissions=write --subtree=
Traceback is same as above with error:
[Thu Jan 26 08:45:46 2012] [error] AttributeError: 'NoneType' object has no attribute 'startswith'

Comment 6 Martin Kosek 2012-02-09 13:22:21 UTC

*** This bug has been marked as a duplicate of bug 783473 ***