Bug 888524
| Summary: | ipa delegation-find --group option returns internal error | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Scott Poore <spoore> |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> |
| Status: | CLOSED ERRATA | QA Contact: | Namita Soman <nsoman> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | medium | ||
| Version: | 6.4 | CC: | dpal, mkosek, tlavigne |
| Target Milestone: | rc | Keywords: | Regression |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | ipa-3.0.0-17.el6 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-02-21 09:31:23 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 895654 | ||
|
Description
Scott Poore
2012-12-18 20:11:38 UTC
Something confusing me here though. When I run with --attrs=badattr it fails as expected instead of with internal error. [root@rhel6-1 ipa-delegation-cli]# ipa delegation-find --membergroup=mg1000 --group=gr1000 --attrs=badattrs --------------------- 0 delegations matched --------------------- ---------------------------- Number of entries returned 0 ---------------------------- [root@rhel6-1 ipa-delegation-cli]# tail -1 /var/log/httpd/error_log [Tue Dec 18 14:19:36 2012] [error] ipa: INFO: admin: delegation_find(None, attrs=(u'badattrs',), memberof=u'mg1000', group=u'gr1000', pkey_only=False, all=False, raw=False, version=u'2.46'): SUCCESS So, does that means it searches for the attrs first, finds nothing, so fails before it has a chance to hit the code searching for group? Thanks for the report. I will start from your last comment. When we search with --attrs, we skip --group or any other following checks when this one fails because it is obvious that this particular delegation won't be included in the search result. About the bug report itself, this is indeed a bug. I will clone it upstream. Upstream ticket: https://fedorahosted.org/freeipa/ticket/3311 Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/86e56b91257efa8d7c8a388f2a8a14d0adf367e5 ipa-3-1: https://fedorahosted.org/freeipa/changeset/8183e2c94b7732f2e19cd257489609d0863c2124 ipa-3-0: https://fedorahosted.org/freeipa/changeset/00e18a808d76899b0619b634afa5a1c331113fa2 Verified. Version :: ipa-server-3.0.0-17.el6.x86_64 Manual Test Results :: [root@rhel6-1 ~]# kinit admin Password for admin: [root@rhel6-1 ~]# ipa group-add mg1000 --desc=mg1000 -------------------- Added group "mg1000" -------------------- Group name: mg1000 Description: mg1000 GID: 92400001 [root@rhel6-1 ~]# ipa group-add gr1000 --desc=gr1000 -------------------- Added group "gr1000" -------------------- Group name: gr1000 Description: gr1000 GID: 92400003 [root@rhel6-1 ~]# ipa delegation-add delegation_find_positive_1000 --membergroup=mg1000 --group=gr1000 --attrs=mobile ------------------------------------------------ Added delegation "delegation_find_positive_1000" ------------------------------------------------ Delegation name: delegation_find_positive_1000 Permissions: write Attributes: mobile Member user group: mg1000 User group: gr1000 [root@rhel6-1 ~]# ipa delegation-find --group=gr1000 -------------------- 1 delegation matched -------------------- Delegation name: delegation_find_positive_1000 Permissions: write Attributes: mobile Member user group: mg1000 User group: gr1000 ---------------------------- Number of entries returned 1 ---------------------------- Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0528.html |