Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1272998

Summary:	register-ds-admin.pl changes admin certificate database file rights.
Product:	Red Hat Directory Server	Reporter:	German Parente <gparente>
Component:	Admin	Assignee:	Rich Megginson <rmeggins>
Status:	CLOSED DUPLICATE	QA Contact:	Viktor Ashirov <vashirov>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	9.1	CC:	nhosoi
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-03-10 01:16:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description German Parente 2015-10-19 11:47:40 UTC

Description of problem:

register-ds-admin.pl changes admin certificate database file rights.

Version-Release number of selected component (if applicable): 389-admin-1.1.42-1.el6dsrv

Steps to Reproduce:
1. setup-ds-admin.pl using custom directory server user (I have not checked with nobody).

2. check certificate databasse file rights:

[root@dhcp-10-12-211-158 ~]# ls -ltr /etc/dirsrv/admin-serv/*.db
-rw-------. 1 dirsrv root 65536 Oct 19 05:30 /etc/dirsrv/admin-serv/cert8.db
-rw-------. 1 dirsrv root 16384 Oct 19 05:30 /etc/dirsrv/admin-serv/key3.db
-rw-------. 1 dirsrv root 16384 Oct 19 05:30 /etc/dirsrv/admin-serv/secmod.db
[root@dhcp-10-12-211-158 ~]# 

3. setup-ds.pl to install a second server

4. register-ds-admin.pl to register the second server 

5. check file rights:

[root@dhcp-10-12-211-158 ~]# ls -ltr /etc/dirsrv/admin-serv/*.db
-rw-r--r--. 1 root root 65536 Oct 19 07:35 /etc/dirsrv/admin-serv/cert8.db
-rw-r--r--. 1 root root 16384 Oct 19 07:35 /etc/dirsrv/admin-serv/key3.db
-rw-r--r--. 1 root root 16384 Oct 19 07:35 /etc/dirsrv/admin-serv/secmod.db
[root@dhcp-10-12-211-158 ~]# 

Actual results:

rights of admin certificate database are changed.

Additional info:

workaround: change the rights manually.

Comment 1 Noriko Hosoi 2015-10-19 18:46:05 UTC

Upstream ticket:
https://fedorahosted.org/389/ticket/48314