Note: This bug is displayed in read-only format because
the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Description of problem:
1. Proposed title of this feature request
Checking command parameters are correct before committing changes in to the LDAP database
2. Who is the customer behind the request?
Account: Fonterra Co-Operative Group
TAM customer: NO
SRM customer: YES
Strategic: YES
3. What is the nature and description of the request?
Customer is requesting that a sanity check will be performed before committing changes in the database. For example the customer commits a typo in the update command below:
--------------
ldapmodify -D "cn=Directory Manager" -w ******** <<EOF
dn: cn=${server}Role,dc=zeus,dc=ghsewn,dc=com
changetype: modify
add: nsroledn
nsroledn: cn=sapCorpRole,dc=zeus,dc=ghsewn,dc=com
changetype: modify
add: nsroledn
nsroledn: cn=sapANZRole,ou=people,dc=zeus,dc=ghsewn,dc=com
EOF
---------------
The system should be able to detect the mistake on the command and show the an error/suggestion to the user such as below:
-------------
This one is incorrect "nsroledn: cn=sapCorpRole,dc=zeus,dc=ghsewn,dc=com"
This role is correct "nsroledn: cn=sapANZRole,ou=people,dc=zeus,dc=ghsewn,dc=com"
-------------
The customer suggested that the following parameters be checked:
- does role exist
- does policy exist
- group exist
4. Why does the customer need this? (List the business requirements here)
A typo in the command makes host/s unusable especially if you are using a script to run the command on multiple servers
5. How would the customer like to achieve this? (List the functional requirements here)
The customer wants a script that will check the syntax of the ldap command before it makes any changes in the database.
6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.
The customer can test this functionality in their test environment.
7. Is there already an existing RFE upstream or in Red Hat Bugzilla?
I don't think there is one already.
8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?
No
9. Is the sales team involved in this request and do they have any additional input?
No
10. List any affected packages or components.
No
11. Would the customer be able to assist in testing this functionality if implemented?
Yes
Instead of an argument checker, what if there were a way to do a "dry-run" of the ldapmodify command, that would show you what the command would do? Would that satisfy the customer's requirement?
(In reply to Rich Megginson from comment #1)
> Instead of an argument checker, what if there were a way to do a "dry-run"
> of the ldapmodify command, that would show you what the command would do?
> Would that satisfy the customer's requirement?
Reply from Customer:
if the dry-run was to say:
adding/modifying/deleteing
[attribute/entry]
warning: attribute /policy / role doesnt exist
This functionality would really require a new LDAP standard, as LDAP clients (like ldapmodify) would need the ability to ask the server to perform a dry-run option via a control or extended operation. This would be a very time consuming process to go through, and it's unclear that a new standard would be accepted. In addition, the change would be very complex to implement on the server side. Unless there is a really stong request to do this, I do not believe it is worth the investment. Closing as WONTFIX.
Description of problem: 1. Proposed title of this feature request Checking command parameters are correct before committing changes in to the LDAP database 2. Who is the customer behind the request? Account: Fonterra Co-Operative Group TAM customer: NO SRM customer: YES Strategic: YES 3. What is the nature and description of the request? Customer is requesting that a sanity check will be performed before committing changes in the database. For example the customer commits a typo in the update command below: -------------- ldapmodify -D "cn=Directory Manager" -w ******** <<EOF dn: cn=${server}Role,dc=zeus,dc=ghsewn,dc=com changetype: modify add: nsroledn nsroledn: cn=sapCorpRole,dc=zeus,dc=ghsewn,dc=com changetype: modify add: nsroledn nsroledn: cn=sapANZRole,ou=people,dc=zeus,dc=ghsewn,dc=com EOF --------------- The system should be able to detect the mistake on the command and show the an error/suggestion to the user such as below: ------------- This one is incorrect "nsroledn: cn=sapCorpRole,dc=zeus,dc=ghsewn,dc=com" This role is correct "nsroledn: cn=sapANZRole,ou=people,dc=zeus,dc=ghsewn,dc=com" ------------- The customer suggested that the following parameters be checked: - does role exist - does policy exist - group exist 4. Why does the customer need this? (List the business requirements here) A typo in the command makes host/s unusable especially if you are using a script to run the command on multiple servers 5. How would the customer like to achieve this? (List the functional requirements here) The customer wants a script that will check the syntax of the ldap command before it makes any changes in the database. 6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented. The customer can test this functionality in their test environment. 7. Is there already an existing RFE upstream or in Red Hat Bugzilla? I don't think there is one already. 8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)? No 9. Is the sales team involved in this request and do they have any additional input? No 10. List any affected packages or components. No 11. Would the customer be able to assist in testing this functionality if implemented? Yes