Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1281803

Summary:	Incorrect user and group identifiers aren't handled correctly
Product:	[oVirt] ovirt-engine	Reporter:	Juan Hernández <juan.hernandez>
Component:	RestAPI	Assignee:	Juan Hernández <juan.hernandez>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Ondra Machacek <omachace>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	3.6.0.2	CC:	bugs, omachace
Target Milestone:	ovirt-3.6.1	Keywords:	ZStream
Target Release:	3.6.1	Flags:	juan.hernandez: ovirt-3.6.z? rule-engine: planning_ack? juan.hernandez: devel_ack+ rule-engine: testing_ack+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-12-16 12:23:52 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1241117

Description Juan Hernández 2015-11-13 12:55:19 UTC

When an incorrect user or group identifier is passed to the RESTAPI an exception is generated in the DirectoryEntryIdUtils class. This exception isn't handled by the server and it is eventually sent to the caller. Instead of this the RESTAPI should check the identifier and send a 404 HTTP response.

Comment 1 Red Hat Bugzilla Rules Engine 2015-11-13 12:57:23 UTC

This bug is not marked for z-stream, yet the milestone is for a z-stream version, therefore the milestone has been reset.
Please set the correct milestone or add the z-stream flag.

Comment 2 Ondra Machacek 2015-11-26 09:09:24 UTC

[root@om-ovirt36 ~]# rpm -q rhevm-backend
rhevm-backend-3.6.1-0.2.el6.noarch

[root@om-ovirt36 ~]# curl -I -k https://localhost:443/ovirt-engine/api/domains/696E7465726E616C2D617574687A/users/RandomString@#%

HTTP/1.1 401 Unauthorized

Comment 3 Ondra Machacek 2015-11-26 09:10:20 UTC

Sorry, wrong command, correct one is:

[root@om-ovirt36 ~]# curl -I -k -u admin@internal:password https://localhost:443/ovirt-engine/api/domains/696E7465726E616C2D617574687A/users/RandomString@#%

HTTP/1.1 404 Not Found

Comment 4 Sandro Bonazzola 2015-12-16 12:23:52 UTC

According to verification status and target milestone this issue should be fixed in oVirt 3.6.1. Closing current release.