Red Hat Bugzilla – Bug 1115048
Description attribute should not be required
Last modified: 2015-03-05 05:14:53 EST
This bug is created as a clone of upstream ticket: https://fedorahosted.org/freeipa/ticket/4387 LDAP attribute `description` (OID `2.5.4.13`) is always optional in LDAP schema but IPA UI forces user to enter something. I have noticed this problem with `permission-add`, `privilege-add` and `role-add` commands but I suspect that the same applies to many other IPA commands.
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/cd9a4cca1fe17998a342fde000ece5bf46d13d27 ipa-4-1: https://fedorahosted.org/freeipa/changeset/b69510b9bf8216d52707968bf520fd2dfa6e1ba7
verified. Version :: ipa-server-4.1.0-16.el7.x86_64 Results :: Tested successfully in WebUI. [root@vm8 ~]# ipa role-add testrole1 ---------------------- Added role "testrole1" ---------------------- Role name: testrole1 [root@vm8 ~]# ipa privilege-add testpriv1 --------------------------- Added privilege "testpriv1" --------------------------- Privilege name: testpriv1 [root@vm8 ~]# ipa permission-add --right=read --bindtype=permission --subtree="dc=ipa2,dc=example,dc=com" --target="cn=dns,dc=ipa2,dc=example,dc=com" testperms1 ----------------------------- Added permission "testperms1" ----------------------------- Permission name: testperms1 Granted rights: read Bind rule type: permission Subtree: dc=ipa2,dc=example,dc=com Target DN: cn=dns,dc=ipa2,dc=example,dc=com
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html