Bug 1029959
| Summary: | Managed Entries betxnpreoperation - transaction not aborted upon failure to create managed entry | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Ján Rusnačko <jrusnack> |
| Component: | 389-ds-base | Assignee: | Rich Megginson <rmeggins> |
| Status: | CLOSED ERRATA | QA Contact: | Viktor Ashirov <vashirov> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | low | ||
| Version: | 7.0 | CC: | amsharma, mkubik, mreynolds, nhosoi, nkinder |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | 389-ds-base-1.3.3.1-1.el7 | Doc Type: | Bug Fix |
| Doc Text: |
Cause: Managed entry plugin fails to return an error, when it should return an error.
Consequence: A operation rejected by the plugin should also be aborted in the backend
Fix: Return the proper error code.
Result: An operation rejected by the plugin will not be committed to the database.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2015-03-05 09:31:17 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Ján Rusnačko
2013-11-13 15:40:19 UTC
Upstream ticket: https://fedorahosted.org/389/ticket/47644 Fixed upstream. [root@dhcp201-126 export]# ldapmodify -x -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF > dn: cn=Managed Entries,cn=plugins,cn=config > changetype: modify > replace: nsslapd-pluginEnabled > nsslapd-pluginEnabled: on > EOF modifying entry "cn=Managed Entries,cn=plugins,cn=config" ldapmodify -a -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF ldapsearch -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 -LLL -b "cn=tuser,ou=people,dc=example,dc=com" [root@dhcp201-126 export]# ldapmodify -a -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF > dn: cn=template,dc=example,dc=com > objectclass: top > objectclass: mepTemplateEntry > cn: template > mepRDNAttr: cn > mepStaticAttr: objectclass: top > mepStaticAttr: objectclass: person > mepStaticAttr: objectclass: inetOrgPerson > mepMappedAttr: cn: \$cn > mepMappedAttr: uid: \$uid > mepMappedAttr: sn: \$sn > EOF adding new entry "cn=template,dc=example,dc=com" [root@dhcp201-126 export]# ldapmodify -a -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF > dn: cn=definition,cn=Managed Entries, cn=plugins,cn=config > objectclass: top > objectclass: extensibleObject > cn: definition > originScope: ou=people,dc=example,dc=com > originFilter: objectclass=person > managedBase: ou=Groups,dc=example,dc=com > managedTemplate: cn=template,dc=example,dc=com > EOF adding new entry "cn=definition,cn=Managed Entries, cn=plugins,cn=config" [root@dhcp201-126 export]# ldapmodify -a -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 << EOF > dn: cn=tuser,ou=people,dc=example,dc=com > objectclass: top > objectclass: person > cn: tuser > sn: tuser > EOF adding new entry "cn=tuser,ou=people,dc=example,dc=com" ldap_add: Server is unwilling to perform (53) additional info: Managed Entry Plugin rejected add operation (see errors log). [root@dhcp201-126 export]# ldapsearch -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 -LLL -b "cn=tuser,ou=people,dc=example,dc=com" No such object (32) Matched DN: ou=people,dc=example,dc=com [root@dhcp201-126 export]# ldapsearch -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 -LLL -b "cn=tuser,ou=groups,dc=example,dc=com" No such object (32) Matched DN: ou=groups,dc=example,dc=com [root@dhcp201-126 export]# ldapsearch -p 389 -h localhost -D "cn=Directory Manager" -w Secret123 -LLL -b "cn=tuser,ou=people,dc=example,dc=com" dn No such object (32) Matched DN: ou=people,dc=example,dc=com logs:: ======== [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_parse_mapped_attr: Mapped attribute "uid" is not present in origin entry "cn=tuser,ou=People,dc=example,dc=com". Please correct template to only map attributes required by the schema. [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_create_managed_entry: Error parsing mapped attribute in template "cn=template,dc=example,dc=com". [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_add_managed_entry: Unable to create a managed entry from origin entry "cn=tuser,ou=People,dc=example,dc=com" using config "cn=definition,cn=Managed Entries,cn=plugins,cn=config". [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_parse_mapped_attr: Mapped attribute "uid" is not present in origin entry "cn=tuser,ou=People,dc=example,dc=com". Please correct template to only map attributes required by the schema. [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_create_managed_entry: Error parsing mapped attribute in template "cn=template,dc=example,dc=com". [30/Dec/2014:15:21:23 +051800] managed-entries-plugin - mep_add_managed_entry: Unable to create a managed entry from origin entry "cn=tuser,ou=People,dc=example,dc=com" using config "cn=definition,cn=Managed Entries,cn=plugins,cn=config". Hence VERIFIED, Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0416.html |