Red Hat Bugzilla – Bug 1373091
Adding an auth indicator from the CLI creates an extra check box in the UI
Last modified: 2017-08-01 05:39:54 EDT
Created attachment 1197790 [details] otp check box Description of problem: When adding an authentication indicator from the command line, the corresponding check box in the UI is not checked. Instead, a completely new (and unchecked) check box appears. Version-Release number of selected component (if applicable): How reproducible: Always. Steps to Reproduce: 1. ipa host-mod server.example.com --auth-ind=otp 2.Output of ipa host-show shows this: ... Authentication Indicators: otp ... Actual results: A new check box appears in the host entry page in the UI: "otp" (next to "OTP" and "RADIUS"). None of the check boxes are actually checked. See the attached screenshot. Expected results: The "OTP" check box gets checked in the UI, no new extra check box is created. Additional info:
I've reproduce the bug with any uppercase auth indicator, e.g.: ipa host-mod server.example.com --auth-ind=ABC The mentioned ipa host-mod server.example.com --auth-ind=otp Works OK. There is a bug in Web UI that internally transforms the values to lower case - therefore 'OTP' is checked in Web UI when 'otp' is set in CLI. And 'otp' is saved to LDAP when 'OTP is checked in Web UI.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/6308
Authentication indicators feaure in RHEL 7.3 by default uses only two indicators: "otp" and "radius". Web UI works with those. CLI and WebUI allows to define also custom indicators which requires special third party plugin. CLI works with those well but Web UI doesn't handle uppercase characters(this bug). This part is not supported workflow, therefore moving to 7.4.
It is even worse. When deleting the flag in the WebUI, its not flagged anymore but still in the database. The only way to get rid of it via CLI. This should be fixed in 7.3 or at least documented in a KB how to work around this issue.
*** Bug 1421118 has been marked as a duplicate of this bug. ***
Fixed upstream master: https://pagure.io/freeipa/c/0220fc8986e4fef017185bde675dc9cf0f90afd8 https://pagure.io/freeipa/c/ad3451067ad474ea52872913d6789b1652f9a9c4
Created attachment 1285080 [details] output # ipa host-mod $(hostname) --auth-ind=otp ... Authentication Indicators: otp ... ipa-server-4.5.0-13.el7.x86_64 Verified
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2304