Bug 1429498 - A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will result in a segfault.
Summary: A filtered nsrole that specifies an empty nsrole in its nsRoleFilter will res...
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: 389-ds-base
Version: 7.3
Hardware: Unspecified
OS: Unspecified
Target Milestone: rc
: ---
Assignee: Noriko Hosoi
QA Contact: Viktor Ashirov
Marc Muehlfeld
Depends On: 1419162
TreeView+ depends on / blocked
Reported: 2017-03-06 13:45 UTC by Jaroslav Reznik
Modified: 2017-04-12 12:36 UTC (History)
7 users (show)

Fixed In Version: 389-ds-base-
Doc Type: Bug Fix
Doc Text:
Previously, when adding a filtered role definition that uses the "nsrole" virtual attribute in the filter, Directory Server terminated unexpectedly. A patch has been applied, and now the roles plug-in ignores all virtual attributes. As a result, an error message is logged when an invalid filter is used. Additionally, the role is deactivated and Directory Server no longer fails.
Clone Of: 1419162
Last Closed: 2017-04-12 12:36:50 UTC
Target Upstream Version:

Attachments (Terms of Use)

System ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:0920 normal SHIPPED_LIVE Important: 389-ds-base security and bug fix update 2017-04-12 16:27:01 UTC

Description Jaroslav Reznik 2017-03-06 13:45:07 UTC
This bug has been copied from bug #1419162 and has been proposed
to be backported to 7.3 z-stream (EUS).

Comment 4 Sankar Ramalingam 2017-03-09 12:25:09 UTC
Executed upstream test ticket49122_test.py on the latest 389-ds-base- build and it PASSED. Hence, marking the bug as Verified.

[0 root@qeos-105 tickets]# py.test  -v ticket49122_test.py 

DS build:
nss: 3.28.3-2.el7
nspr: 4.13.1-1.0.el7_3
openldap: 2.4.44-1.el7
svrcore: 4.1.2-1.el7

rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests/tests/tickets, inifile: 
plugins: metadata-1.3.0, html-1.14.1, cov-2.4.0, beakerlib-0.7
collected 1 items 

ticket49122_test.py::test_ticket49122 PASSED

=========== 1 passed in 31.41 seconds =============

Comment 6 errata-xmlrpc 2017-04-12 12:36:50 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.


Note You need to log in before you can comment on or make changes to this bug.