Bug 1311251 - Multiple nextRange attributes in ou=certificateRepository,ou=ca,o=ipaca
Summary: Multiple nextRange attributes in ou=certificateRepository,ou=ca,o=ipaca
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: pki-core
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: 7.4
Assignee: Matthew Harmsen
QA Contact: Asha Akkiangady
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-02-23 17:55 UTC by German Parente
Modified: 2020-10-04 21:06 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-26 00:32:36 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github dogtagpki pki issues 2351 0 None None None 2020-10-04 21:06:30 UTC

Description German Parente 2016-02-23 17:55:54 UTC
Description of problem:

Customer is creating and deleting same replica several times. As a result, there's an issue to create a replica with a failure of pki instance configuration.

One of the observed issues is:


# certificateRepository, ca, ipaca
dn: ou=certificateRepository,ou=ca,o=ipaca
nextRange: 140000001
nextRange: 350000001
nextRange: 340000001

I am sorry that I don't know exactly how to reproduce this. I report this bug just to trace this behavior that is apparently not desired.

The real error is in attachment and it's related to the creation of a range that is rejected with err=68 (entry already exists).

I am attaching the debug log showing this error. And also, the full list of ranges (objectclass=pkirange)

Any help to understand why the range creation is failing is welcome.

Thanks and regards

German.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 4 Matthew Harmsen 2016-03-07 23:52:47 UTC
Upstream ticket:
https://fedorahosted.org/pki/ticket/2231

Comment 5 Matthew Harmsen 2016-03-22 23:07:57 UTC
Hi Matthew,

Thanks. The customer has reinstalled from scratch. And I don't think this bug is easy to reproduce. So, no need to be back-ported. 

Thanks a lot for the fix and your help. 

Regards,

German. 

On Mar 21, 2016, at 22:49, Matthew Harmsen <mharmsen> wrote:

> German,
>
> Once the following Bug has been fixed:
>
>     Bugzilla Bug #1311251 - Multiple nextRange attributes in ou=certificateRepository,ou=ca,o=ipaca
>
> Does the customer require that the solution be back-ported to RHEL 7.2.z?
>
> Thanks,
> -- Matt

Per CS/DS Triage Meeting of 03/22/2016:  10.4

Comment 6 Matthew Harmsen 2016-04-20 22:10:26 UTC
Per CS Bug/Ticket Triage held 04/19/2016:  RHEL 7.4

This ticket may be closed with INSUFFICIENT DATA since we can't reproduce.


Note You need to log in before you can comment on or make changes to this bug.