Bug 783543

Summary:	ipa delegation-mod --membergroup= returns internal error
Product:	Red Hat Enterprise Linux 6	Reporter:	Scott Poore <spoore>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED DUPLICATE	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.3	CC:	mkosek
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-09 13:01:06 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Scott Poore 2012-01-20 19:13:28 UTC

Description of problem:

# ipa delegation-mod testdelegation --membergroup=
ipa: ERROR: an internal error has occurred

Version-Release number of selected component (if applicable):

ipa-server-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
ipa-admintools-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
389-ds-base-libs-1.2.9.14-1.el6.x86_64
389-ds-base-1.2.9.14-1.el6.x86_64

How reproducible:

always

Steps to Reproduce:
1.  <setup ipa server>
2.  kinit admin
3.  ipa delegation-add testdelegation --membergroup=admins --group=ipausers --attrs=mobile
4.  ipa delegation-mod testdelegation --membergroup=
  
Actual results:

ipa: ERROR: an internal error has occurred

Expected results:

A more descriptive message should be returned.
Additional info:

Comment 1 Scott Poore 2012-01-20 19:13:46 UTC

[Fri Jan 20 14:09:58 2012] [error] ipa: ERROR: non-public: AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 14:09:58 2012] [error] Traceback (most recent call last):
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 229, in wsgi_execute
[Fri Jan 20 14:09:58 2012] [error]     result = self.Command[name](*args, **options)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 14:09:58 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 14:09:58 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py", line 168, in execute
[Fri Jan 20 14:09:58 2012] [error]     result = api.Command['aci_mod'](aciname, **kw)['result']
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 14:09:58 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 14:09:58 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 636, in execute
[Fri Jan 20 14:09:58 2012] [error]     newaci = _make_aci(ldap, None, aciname, newkw)
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 268, in _make_aci
[Fri Jan 20 14:09:58 2012] [error]     groupdn = _group_from_memberof(kw['memberof'])
[Fri Jan 20 14:09:58 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 199, in _group_from_memberof
[Fri Jan 20 14:09:58 2012] [error]     st = memberof.find('memberOf=')
[Fri Jan 20 14:09:58 2012] [error] AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 14:09:58 2012] [error] ipa: INFO: admin@TESTRELM: delegation_mod(u'testdelegation', memberof=None, all=False, raw=False, version=u'2.21'): AttributeError

Comment 2 Scott Poore 2012-01-20 19:19:27 UTC

The same occurs here:

# ipa delegation-mod testdelegation --membergroup=""
ipa: ERROR: an internal error has occurred

/var/log/httpd/error_log messages:

[Fri Jan 20 14:17:56 2012] [error] ipa: ERROR: non-public: AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 14:17:56 2012] [error] Traceback (most recent call last):
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 229, in wsgi_execute
[Fri Jan 20 14:17:56 2012] [error]     result = self.Command[name](*args, **options)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 14:17:56 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 14:17:56 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py", line 168, in execute
[Fri Jan 20 14:17:56 2012] [error]     result = api.Command['aci_mod'](aciname, **kw)['result']
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 438, in __call__
[Fri Jan 20 14:17:56 2012] [error]     ret = self.run(*args, **options)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 696, in run
[Fri Jan 20 14:17:56 2012] [error]     return self.execute(*args, **options)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 636, in execute
[Fri Jan 20 14:17:56 2012] [error]     newaci = _make_aci(ldap, None, aciname, newkw)
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 268, in _make_aci
[Fri Jan 20 14:17:56 2012] [error]     groupdn = _group_from_memberof(kw['memberof'])
[Fri Jan 20 14:17:56 2012] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py", line 199, in _group_from_memberof
[Fri Jan 20 14:17:56 2012] [error]     st = memberof.find('memberOf=')
[Fri Jan 20 14:17:56 2012] [error] AttributeError: 'NoneType' object has no attribute 'find'
[Fri Jan 20 14:17:56 2012] [error] ipa: INFO: admin@TESTRELM: delegation_mod(u'testdelegation', memberof=None, all=False, raw=False, version=u'2.21'): AttributeError

Comment 4 Dmitri Pal 2012-01-20 23:19:01 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2295