Bug 967869
| Summary: | Inconsistent replies from FreeIPA to Netlogon ping queries | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Dmitri Pal <dpal> | |
| Component: | ipa | Assignee: | Rob Crittenden <rcritten> | |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Namita Soman <nsoman> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | medium | |||
| Version: | 7.0 | CC: | abokovoy, mkosek, rcritten, rmeggins, sbose, sgoveas, ssorce, stefw | |
| Target Milestone: | rc | |||
| Target Release: | --- | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | ipa-3.2.1-1.el7 | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | 966504 | |||
| : | 967870 (view as bug list) | Environment: | ||
| Last Closed: | 2014-06-13 12:49:38 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 966504, 970024 | |||
| Bug Blocks: | 967870 | |||
|
Description
Dmitri Pal
2013-05-28 12:55:25 UTC
Fixed upstream: master: 1e224c2ea021f546aea83d56779268ca2e099c89 CLDAP: Return empty reply on non-fatal errors b402b6d553bc4b19697bdcc7dab30cbc18971e28 CLDAP: Fix domain handling in netlogon requests ipa-3-2: 2dd96732e157200742f45b42b9d932aa499a656a CLDAP: Return empty reply on non-fatal errors c5d3f984216a3ee96c62bd1f0dcfc60fe80b34fa CLDAP: Fix domain handling in netlogon requests ipa-3-1: 1657b1ed6c8c57638162f825d43fc684237f382f CLDAP: Return empty reply on non-fatal errors 2d6eb08c835e38d5b1d5142e0c19007018d1e719 CLDAP: Fix domain handling in netlogon requests Additional fix upstream to avoid hang when just one CLDAP query filter component is used: master: https://fedorahosted.org/freeipa/changeset/b21abc76caac8b251f708e77da7c8c7046fa22a7 ipa-3-2: https://fedorahosted.org/freeipa/changeset/848f4bc16d6d253045265f71669f6346819f4108 ipa-3-1: https://fedorahosted.org/freeipa/changeset/4f8cce7ba114cc13aceecfab3420c63cb26342fa * ipa-adtrust-install to activate the CLDAP plugin of the directory server [root@dhcp207-43 ~]# ipa-adtrust-install -a Secret123 -U * Successful query with DnsDomain [root@dhcp207-43 ~]# ldapsearch -LL -H cldap://dhcp207-43.testrelm.com -b "" -s base '(&(DnsDomain=testrelm.com)(NtVer=\06\00\00\00))' NetLogon version: 1 version: 1 dn: netlogon:: FwAAAP0DAABfbiauUnHMT4Z+6sTX58qtCHRlc3RyZWxtA2NvbQDAGApkaGNwMjA3LTQ zwBgIVEVTVFJFTE0ADFxcREhDUDIwNy00MwAAF0RlZmF1bHQtRmlyc3QtU2l0ZS1OYW1lAMBOEAIA AAB/AAABAAAAAAAAAAAABQAAAP////8= * Successful query against IPA without DnsDomain and does not hang [root@dhcp207-43 ~]# ldapsearch -LL -H cldap://dhcp207-43.testrelm.com -b "" -s base '(&(NtVer=\06\00\00\00))' NetLogon version: 1 version: 1 dn: netlogon:: FwAAAP0DAABfbiauUnHMT4Z+6sTX58qtCHRlc3RyZWxtA2NvbQDAGApkaGNwMjA3LTQ zwBgIVEVTVFJFTE0ADFxcREhDUDIwNy00MwAAF0RlZmF1bHQtRmlyc3QtU2l0ZS1OYW1lAMBOEAIA AAB/AAABAAAAAAAAAAAABQAAAP////8= * Query with invalid DnsDomain, does not hang [root@dhcp207-43 ipa-trust-cli]# ldapsearch -LL -H cldap://dhcp207-43.testrelm.com -b "" -s base '(&(DnsDomain=blah.com))' NetLogon version: 1 version: 1 [root@dhcp207-43 ~]# echo $? 0 * Does not hang on LDAP from IPA to query that was successful via CLDAP [root@dhcp207-43 ~]# ldapsearch -LL -x -H ldap://dhcp207-43.testrelm.com -w Secret123 -b "" -s base '(&(DnsDomain=testrelm.com)(NtVer=\06\00\00\00))' NetLogon version: 1 version: 1 [root@dhcp207-43 ~]# echo $? 0 Verified in version [root@dhcp207-43 ~]# rpm -q ipa-server ipa-server-3.3.3-8.el7.x86_64 This request was resolved in Red Hat Enterprise Linux 7.0. Contact your manager or support representative in case you have further questions about the request. |