Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1408439

Summary:	ipa idoverrideuser-find view --anchor fails to return output
Product:	Red Hat Enterprise Linux 7	Reporter:	Sudhir Menon <sumenon>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.3	CC:	cheimes, frenaud, ipa-maint, mpanaous, ndehadra, pasik, pvoborni, rcritten, sorlov, tscherf
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-4.6.5-1.el7	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1657745 (view as bug list)		Environment:
Last Closed:	2019-08-06 13:09:02 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1657745

Description Sudhir Menon 2016-12-23 12:06:21 UTC

Description of problem: ipa idoverrideuser-find view --anchor


Version-Release number of selected component (if applicable):
ipa-server-4.4.0-14.el7_3.3.x86_64

How reproducible: Always

Steps to Reproduce:
1. Install IPA server and establish trust with AD
2. Now create a view and then add AD trusted users to the view
3. Now run idoverrideuser-find using --anchor option

Actual results:

[root@master samba]# ipa idoverrideuser-find
ID View Name: view
---------------------------
2 User ID overrides matched
---------------------------
  Anchor to override: idviewuser18
 
  Anchor to override: idviewuser1
----------------------------
Number of entries returned 2
----------------------------

[root@master samba]# ipa idoverrideuser-find view --anchor='idviewuser18';
---------------------------
0 User ID overrides matched
---------------------------
----------------------------
Number of entries returned 0
----------------------------

[root@master samba]# ipa idoverrideuser-find view --anchor='idviewuser18';
---------------------------
0 User ID overrides matched
---------------------------
----------------------------
Number of entries returned 0


Expected results: Should return the output if the anchor matches.

Additional info:

Comment 2 Petr Vobornik 2017-01-06 17:40:02 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/6594

Comment 6 Christian Heimes 2018-12-07 10:42:17 UTC

Fixed upstream
master:
https://pagure.io/freeipa/c/97e9e009bf21215be65676d55e19c11d5745aca7
https://pagure.io/freeipa/c/5a2a7151d505398e8a366f15109818e3772b79ac
https://pagure.io/freeipa/c/f52e0e31f7c76a3cd6b9b51aeba120c4ba3f38c9

Comment 7 Rob Crittenden 2018-12-07 15:08:25 UTC

ipa-4-7:
https://pagure.io/freeipa/c/5e6cb0ca034c711fe81fcfe7c651c5af3c65aa40
https://pagure.io/freeipa/c/11b06d24a94c5e92a0275df759bc81f0fc81d802
https://pagure.io/freeipa/c/e86498ea2f8259118025e622cc5f1cf2c26f2757

ipa-4-6:
https://pagure.io/freeipa/c/9229c8377186767b2588f06e58628d2b2891cf1d
https://pagure.io/freeipa/c/f1badca043b6f5a309d4c0d95a0329c764582e24

Comment 11 Sergey Orlov 2019-06-05 14:32:58 UTC

Verified for nightly build of RHEL 7.7 using tests in ipatests/test_integration/test_idviews.py

$ rpm -q ipa-server
ipa-server-4.6.5-9.el7.x86_64

Test results:
======================================================================================== test session starts ========================================================================================
platform linux2 -- Python 2.7.5, pytest-3.2.3, py-1.4.34, pluggy-0.4.0 -- /usr/bin/python2
cachedir: .cache
rootdir: /usr/lib/python2.7/site-packages/ipatests, inifile:
plugins: multihost-1.1, sourceorder-0.5
collected 9 items                                                                                                                                                                                    

test_integration/test_idviews.py::TestCertsInIDOverrides::test_certs_in_idoverrides_ad_users SKIPPED
test_integration/test_idviews.py::TestCertsInIDOverrides::test_dbus_user_lookup SKIPPED
test_integration/test_idviews.py::TestRulesWithServicePrincipals::test_rules_with_service_principals PASSED
test_integration/test_idviews.py::TestIDViews::test_useroverride PASSED
test_integration/test_idviews.py::TestIDViews::test_useroverride_original_uid PASSED
test_integration/test_idviews.py::TestIDViews::test_anchor_username PASSED
test_integration/test_idviews.py::TestIDViews::test_groupoverride PASSED
test_integration/test_idviews.py::TestIDViews::test_groupoverride_system_objects PASSED
test_integration/test_idviews.py::TestIDViews::test_anchor_groupname PASSED

=============================================================================== 7 passed, 2 skipped in 732.32 seconds ===============================================================================

Comment 14 errata-xmlrpc 2019-08-06 13:09:02 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2241