Bug 820234

Summary:	[ipa webui] Intermittent errors - 'cn' is required; limits exceeded for this query
Product:	Red Hat Enterprise Linux 7	Reporter:	Namita Soman <nsoman>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED WORKSFORME	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	low	Docs Contact:
Priority:	low
Version:	7.0	CC:	atolani, cww, dpal, frenaud, jgalipea, mkosek, pasik, pvoborni
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-10-19 11:02:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1203710

Description Namita Soman 2012-05-09 12:48:55 UTC

Description of problem:
I don't have reproducible steps, or what data may cause the error below:
IPA Error 3007: 'cn' is required
Hit Cancel and get error:
IPA Error 4204: limits exceeded for this query

Can cancel, and try again - with no errors.

Most likely, seeing it when adding members. But have also seen it when going to a User page or any of the other pages as well.

Version-Release number of selected component (if applicable):
ipa-server-2.2.0-12.el6.x86_64

How reproducible:
intermittent

Steps to Reproduce:
1. Either when listing objects on a page
2. Or when adding members - add Permission to a privilege

  
Actual results:
see error:
IPA Error 3007: 'cn' is required
Hit Cancel and get error:
IPA Error 4204: limits exceeded for this query


Expected results:
No error

Additional info:

Comment 1 Namita Soman 2012-05-09 13:00:35 UTC

Sometimes, after a cancel, have seen the error message replacing page content.

Comment 3 Namita Soman 2012-05-09 13:15:03 UTC

From httpd/error_log
[Wed May 09 08:36:37 2012] [error] ipa: INFO: admin:
permission_add(u'A', permissions=u'write', attrs=u'audio', type=u'user'):
SUCCESS
[Wed May 09 08:36:40 2012] [error] ipa: INFO: admin:
permission_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Wed May 09 08:36:48 2012] [error] ipa: INFO: admin:
permission_show(u'A'): SUCCESS
[Wed May 09 08:36:51 2012] [error] ipa: INFO: admin:
permission_show(u'A', rights=True, all=True): SUCCESS
[Wed May 09 08:36:51 2012] [error] ipa: INFO: admin:
permission_show(None): RequirementError
[Wed May 09 08:36:56 2012] [error] ipa: INFO: admin:
group_find(None): SUCCESS
[Wed May 09 08:36:58 2012] [error] ipa: INFO: admin:
privilege_find(u'', all=True): LimitsExceeded
[Wed May 09 08:36:58 2012] [error] ipa: INFO: admin:
group_find(None): SUCCESS
[Wed May 09 08:50:36 2012] [error] ipa: INFO: admin:
permission_show(None): RequirementError
[Wed May 09 08:50:43 2012] [error] ipa: INFO: admin:
permission_show(None): RequirementError
[Wed May 09 08:50:49 2012] [error] ipa: INFO: admin:
permission_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Wed May 09 08:51:05 2012] [error] ipa: INFO: admin:
permission_show(u'A'): SUCCESS
[Wed May 09 08:51:05 2012] [error] ipa: INFO: admin:
privilege_find(u'', all=True): SUCCESS
[Wed May 09 08:51:22 2012] [error] ipa: INFO: admin:
permission_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Wed May 09 08:51:28 2012] [error] ipa: INFO: admin:
group_find(None): SUCCESS
[Wed May 09 08:51:28 2012] [error] ipa: INFO: admin:
group_find(None): SUCCESS



or in another instance saw 'uid' is required - when adding groups for user 'a':
added user using cli, then from ui, clicked on user, went to usergroup tab,
clicked on add - to add groups 

[Wed May 09 09:01:02 2012] [error] ipa: INFO: admin:
user_add(u'a', givenname=u'a', sn=u'a', cn=u'a a', displayname=u'a a',
initials=u'aa', gecos=u'a a', krbprincipalname=u'a', random=False,
uidnumber=999, gidnumber=999, noprivate=False, all=False, raw=False,
version=u'2.34'): SUCCESS
[Wed May 09 09:01:08 2012] [error] ipa: INFO: admin:
user_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Wed May 09 09:01:10 2012] [error] ipa: INFO: admin: batch:
user_show(u'a', all=True): SUCCESS
[Wed May 09 09:01:10 2012] [error] ipa: INFO: admin: batch:
user_show(u'admin', all=True): SUCCESS
[Wed May 09 09:01:10 2012] [error] ipa: INFO: admin:
batch(({u'params': [[u'a'], {u'all': True}], u'method': u'user_show'},
{u'params': [[u'admin'], {u'all': True}], u'method': u'user_show'})): SUCCESS
[Wed May 09 09:01:19 2012] [error] ipa: INFO: admin:
user_show(u'a'): SUCCESS
[Wed May 09 09:01:21 2012] [error] ipa: INFO: admin:
user_show(None): RequirementError
[Wed May 09 09:01:21 2012] [error] ipa: INFO: admin: batch:
user_show(u'a', rights=True, all=True): SUCCESS
[Wed May 09 09:01:21 2012] [error] ipa: INFO: admin: batch:
pwpolicy_show(None, rights=True, user=u'a', all=True): SUCCESS
[Wed May 09 09:01:21 2012] [error] ipa: INFO: admin: batch:
krbtpolicy_show(u'a', rights=True, all=True): SUCCESS
[Wed May 09 09:01:21 2012] [error] ipa: INFO: admin:
batch(({u'params': [[u'a'], {u'all': True, u'rights': True}], u'method':
u'user_show'}, {u'params': [[], {u'all': True, u'user': u'a', u'rights':
True}], u'method': u'pwpolicy_show'}, {u'params': [[u'a'], {u'all': True,
u'rights': True}], u'method': u'krbtpolicy_show'})): SUCCESS
[Wed May 09 09:01:23 2012] [error] ipa: INFO: admin:
user_find(None): SUCCESS
[Wed May 09 09:02:01 2012] [error] ipa: INFO: admin:
user_find(None, sizelimit=0, pkey_only=True): SUCCESS
[Wed May 09 09:02:04 2012] [error] ipa: INFO: admin: batch:
user_show(u'a', all=True): SUCCESS

Comment 4 Martin Kosek 2012-05-09 13:45:32 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2741

Comment 11 Florence Blanc-Renaud 2018-10-19 11:02:10 UTC

This issue hasn't been seen for a while, hence closing as Works For Me.