Bug 783548

Summary: ipa delegation-mod is not failing when membergroup does not exist
Product: Red Hat Enterprise Linux 6 Reporter: Scott Poore <spoore>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED DUPLICATE QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.3CC: jgalipea, mkosek
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-09 12:56:09 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Scott Poore 2012-01-20 19:33:25 UTC 
Description of problem:

ipa delegation-mod works if --membergroup entry does not exist.   It should
fail in this scenario like it does when --group entry does not exist.


# ipa group-find dnegroup
----------------
0 groups matched
----------------
----------------------------
Number of entries returned 0
----------------------------

# ipa delegation-mod testdelegation --membergroup=dnegroup
------------------------------------
Modified delegation "testdelegation"
------------------------------------
  Delegation name: testdelegation
  Permissions: write
  Attributes: mobile
  Member user group: dnegroup
  User group: ipausers


Version-Release number of selected component (if applicable):

ipa-server-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
ipa-admintools-2.2.0-101.20120118T0229zgitbb854ce.el6.x86_64
389-ds-base-libs-1.2.9.14-1.el6.x86_64
389-ds-base-1.2.9.14-1.el6.x86_64

How reproducible:

always

Steps to Reproduce:
1.  <setup ipa server>
2.  kinit admin
3.  ipa delegation-add testdelegation --membergroup=admins --group=ipausers --attrs=mobile
4.  ipa delegation-mod testdelegation --membergroup=dnegroup
  
Actual results:

Modifies entry with invalid membergroup.

Expected results:

returns an error similar to --group when it is passed an invalid group name.

Additional info:

/var/log/httpd/error_log message:

[Fri Jan 20 14:28:34 2012] [error] ipa: INFO: admin@TESTRELM: delegation_mod(u'testdelegation', memberof=u'dnegroup', all=False, raw=False, version=u'2.21'): SUCCESS
Comment 2 Dmitri Pal 2012-01-20 23:19:06 UTC 
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2296
Comment 3 Martin Kosek 2012-02-09 12:56:09 UTC 

*** This bug has been marked as a duplicate of bug 783307 ***