Bug 1321891
| Summary: | DES to AES password conversion fails if a backend is empty | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Marcel Kolaja <mkolaja> |
| Component: | 389-ds-base | Assignee: | Noriko Hosoi <nhosoi> |
| Status: | CLOSED ERRATA | QA Contact: | Viktor Ashirov <vashirov> |
| Severity: | urgent | Docs Contact: | Petr Bokoc <pbokoc> |
| Priority: | urgent | ||
| Version: | 7.3 | CC: | afarley, batkisso, mreynolds, msauton, nhosoi, nkinder, pbokoc, rmeggins |
| Target Milestone: | rc | Keywords: | ZStream |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | 389-ds-base-1.3.4.0-30.el7_2 | Doc Type: | Bug Fix |
| Doc Text: |
During the upgrade from Red Hat Enterprise Linux 7.1 to 7.2, the encryption algorithm used by the Reversible Password Plug-in was changed from DES to AES, and 389-ds-base automatically converted all passwords to the new algorithm upon upgrade. However, password conversion failed with an "error 32" if any defined backend was missing the top entry. Additionally, even if the conversion failed, 389-ds-base still disabled the DES plug-in, which caused existing passwords to fail to decode.
This bug has been fixed, 389-ds-base now ignores errors when searching backends for passwords to convert, and the DES plug-in is now only disabled after all passwords using the DES algorithm were successfully converted to AES.
|
Story Points: | --- |
| Clone Of: | 1320715 | Environment: | |
| Last Closed: | 2016-05-12 09:59:24 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1320715 | ||
| Bug Blocks: | |||
|
Description
Marcel Kolaja
2016-03-29 10:37:19 UTC
Build tested: 389-ds-base-1.3.4.0-30.el7_2.x86_64 platform linux2 -- Python 2.7.5, pytest-2.9.1, py-1.4.31, pluggy-0.3.1 -- /usr/bin/python cachedir: tickets/.cache rootdir: /export/tests/tickets, inifile: plugins: html-1.8.0, xdist-1.14, cov-2.2.1, catchlog-1.2.2, flake8-0.2 collected 2 items tickets/ticket47462_test.py::test_ticket47462 PASSED tickets/ticket47462_test.py::test_ticket47462_final PASSED Marking as VERIFIED. Hello Noriko, can you please check the Doc Text and let me know if it's correct? Thanks, Petr (In reply to Petr Bokoc from comment #6) > Hello Noriko, can you please check the Doc Text and let me know if it's > correct? > > Thanks, > Petr Hi Petr, The Doc Text is very well written. Thanks! You have my ack. --noriko Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-1048.html |