Bug 1168631 - [AAA] handle group loops
Summary: [AAA] handle group loops
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: oVirt
Classification: Retired
Component: ovirt-engine-core
Version: 3.5
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: 3.5.1
Assignee: Alon Bar-Lev
QA Contact: Ondra Machacek
URL:
Whiteboard: infra
Depends On:
Blocks: oVirt-AAA-rewrite
TreeView+ depends on / blocked
 
Reported: 2014-11-27 12:54 UTC by Alon Bar-Lev
Modified: 2016-02-10 19:34 UTC (History)
10 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-01-21 16:06:18 UTC
oVirt Team: Infra
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 35663 0 master MERGED aaa: sync: handle group loops Never
oVirt gerrit 35704 0 ovirt-engine-3.5 MERGED aaa: sync: handle group loops Never

Description Alon Bar-Lev 2014-11-27 12:54:23 UTC 
if for some reason there is loop within groups we get infinite loop when syncing users. although should not happen and was not handled before nice to fix.

Caused by: java.lang.StackOverflowError
	at java.util.concurrent.ConcurrentHashMap.hash(ConcurrentHashMap.java:333) [rt.jar:1.7.0_71]
	at java.util.concurrent.ConcurrentHashMap.get(ConcurrentHashMap.java:988) [rt.jar:1.7.0_71]
	at org.ovirt.engine.api.extensions.ExtMap.get(ExtMap.java:379) [ovirt-engine-extensions-api.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]
	at org.ovirt.engine.core.aaa.AuthzUtils.constructGroupsMembershipTree(AuthzUtils.java:116) [aaa.jar:]
Comment 1 Ondra Machacek 2014-12-17 09:14:47 UTC 
2014-12-17 10:13:51,034 ERROR [org.ovirt.engine.core.aaa.AuthzUtils] (DefaultQuartzScheduler_Worker-9) Group recursion detected for group 'grouploop1' stack is [451147c6-85cb-11e4-bfbd-001a4a013f06, 3eeaa676-85cb-11e4-8f7b-001a4a013f06]
2014-12-17 10:13:51,131 INFO  [org.ovirt.engine.core.bll.aaa.SyncUsers] (DefaultQuartzScheduler_Worker-9) Principal user1::ldap-authz-simple_ipa synchronized
Comment 2 Sandro Bonazzola 2015-01-21 16:06:18 UTC 
oVirt 3.5.1 has been released. If problems still persist, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.