Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1487564

Summary:	Traceback is seen when modification is done for user from ID Views - Default Trust View Tab.
Product:	Red Hat Enterprise Linux 8	Reporter:	Sudhir Menon <sumenon>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0	CC:	amore, frenaud, ksiddiqu, mkosek, pasik, pvoborni, rcritten, stsymbal, tscherf, twoerner
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-4.8.0-1	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-11-05 20:52:26 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Sudhir Menon 2017-09-01 09:48:08 UTC

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Install Trust with AD from cli
2. Add trusted AD user to default trust view cli
3. Enable debug=true in /etc/ipa/default.conf
4. Navigate to ID Views | Select Default trust View and select the user.
5. Click on the Refresh button on the LHS
 
Actual results:
[Fri Sep 01 05:43:45.892454 2017] [:error] [pid 15262] ipa: DEBUG: WSGI wsgi_dispatch.__call__:
[Fri Sep 01 05:43:45.892730 2017] [:error] [pid 15262] ipa: DEBUG: WSGI jsonserver_session.__call__:
[Fri Sep 01 05:43:45.969951 2017] [:error] [pid 15262] ipa: DEBUG: Created connection context.ldap2_94339510799440
[Fri Sep 01 05:43:45.970213 2017] [:error] [pid 15262] ipa: DEBUG: WSGI jsonserver.__call__:
[Fri Sep 01 05:43:45.970459 2017] [:error] [pid 15262] ipa: DEBUG: WSGI WSGIExecutioner.__call__:
[Fri Sep 01 05:43:46.006398 2017] [:error] [pid 15262] ipa: DEBUG: raw: user_show(u'aduser1', version=u'2.228')
[Fri Sep 01 05:43:46.007161 2017] [:error] [pid 15262] ipa: DEBUG: user_show(u'aduser1', rights=False, all=False, raw=False, version=u'2.228', no_members=False)
[Fri Sep 01 05:43:46.012263 2017] [:error] [pid 15262] ipa: DEBUG: retrieving schema for SchemaCache url=ldapi://%2fvar%2frun%2fslapd-TESTRELM-TEST.socket conn=<ldap.ldapobject.SimpleLDAPObject instance at 0x55cd22e47368>
[Fri Sep 01 05:43:46.666613 2017] [:error] [pid 15262] ipa: DEBUG: WSGI wsgi_execute PublicError: Traceback (most recent call last):
[Fri Sep 01 05:43:46.666677 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 367, in wsgi_execute
[Fri Sep 01 05:43:46.666692 2017] [:error] [pid 15262]     result = command(*args, **options)
[Fri Sep 01 05:43:46.666715 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 447, in __call__
[Fri Sep 01 05:43:46.666746 2017] [:error] [pid 15262]     return self.__do_call(*args, **options)
[Fri Sep 01 05:43:46.666759 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 475, in __do_call
[Fri Sep 01 05:43:46.666771 2017] [:error] [pid 15262]     ret = self.run(*args, **options)
[Fri Sep 01 05:43:46.666784 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 797, in run
[Fri Sep 01 05:43:46.666797 2017] [:error] [pid 15262]     return self.execute(*args, **options)
[Fri Sep 01 05:43:46.666810 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipaserver/plugins/baseldap.py", line 1321, in execute
[Fri Sep 01 05:43:46.666823 2017] [:error] [pid 15262]     self.obj.handle_not_found(*keys)
[Fri Sep 01 05:43:46.666836 2017] [:error] [pid 15262]   File "/usr/lib/python2.7/site-packages/ipaserver/plugins/baseldap.py", line 759, in handle_not_found
[Fri Sep 01 05:43:46.666857 2017] [:error] [pid 15262]     'pkey': pkey, 'oname': self.object_name,
[Fri Sep 01 05:43:46.667048 2017] [:error] [pid 15262] NotFound: aduser1: user not found
[Fri Sep 01 05:43:46.667063 2017] [:error] [pid 15262] 
[Fri Sep 01 05:43:46.667471 2017] [:error] [pid 15262] ipa: INFO: [jsonserver_session] admin: user_show(u'aduser1', version=u'2.228'): NotFound

Expected results: Fix the traceback and also the error, NotFound

Additional info: The above traceback is seen even when we add UID/GID/Gecos fields.

Comment 3 Sudhir Menon 2017-09-01 09:55:32 UTC

ipa-server-4.5.0-21.el7_4.1.x86_64

[root@cypher ~]# ipa trust-find
---------------
1 trust matched
---------------
  Realm name: pne.qe
  Domain NetBIOS name: PNE
  Domain Security Identifier: S-1-5-21-2202318585-426110948-4011710778
  Trust type: Active Directory domain
  UPN suffixes: test.qa, pune.in
----------------------------
Number of entries returned 1
----------------------------
[root@cypher ~]# id aduser1
uid=1261604757(aduser1) gid=1261604757(aduser1) groups=1261604757(aduser1),1261602139(adunigroup1),1261601559(adgroup1),1261601629(adgroup2),1261600513(domain users)

[root@cypher ~]# ipa idoverrideuser-find 'Default trust View'
--------------------------
1 User ID override matched
--------------------------
  Anchor to override: aduser1
  UID: 511
  GECOS: active directory user
----------------------------
Number of entries returned 1
----------------------------

Comment 4 Pavel Vomacka 2017-09-04 11:16:10 UTC

Upstream ticket:
https://pagure.io/freeipa/issue/7139

Comment 7 Florence Blanc-Renaud 2018-10-23 14:52:31 UTC

Removing the Regression keyword as the issue is not a regression. It was already present in RHEL 7.3:

# cat /etc/redhat-release 
Red Hat Enterprise Linux Server release 7.3 (Maipo)
# yum list ipa-server
ipa-server.x86_64                        4.4.0-14.el7_3.7
# tail -f /var/log/httpd/error_log
[...] [:error] [pid 14119] ipa: DEBUG: user_show(u'bob.com', rights=False, all=False, raw=False, version=u'2.213', no_members=False)
[...] [:error] [pid 14119] ipa: DEBUG: WSGI wsgi_execute PublicError: Traceback (most recent call last):
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 366, in wsgi_execute
[...] [:error] [pid 14119]     result = command(*args, **options)
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 449, in __call__
[...] [:error] [pid 14119]     return self.__do_call(*args, **options)
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 477, in __do_call
[...] [:error] [pid 14119]     ret = self.run(*args, **options)
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 799, in run
[...] [:error] [pid 14119]     return self.execute(*args, **options)
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipaserver/plugins/baseldap.py", line 1321, in execute
[...] [:error] [pid 14119]     self.obj.handle_not_found(*keys)
[...] [:error] [pid 14119]   File "/usr/lib/python2.7/site-packages/ipaserver/plugins/baseldap.py", line 759, in handle_not_found
[...] [:error] [pid 14119]     'pkey': pkey, 'oname': self.object_name,
[...] [:error] [pid 14119] NotFound: bob.com: user not found
[...] [:error] [pid 14119] 
[...] [:error] [pid 14119] ipa: INFO: [jsonserver_session] admin.COM: user_show(u'bob.com', version=u'2.213'): NotFound

Note that, although there is a traceback, there does not seem to be any functional problem. The commands
# ipa idoverrideuser-find 'Default Trust View'
and
# ipa idoverrideuser-show  'Default Trust View' bob.com
work without any issue.

Comment 15 Serhii Tsymbaliuk 2019-06-27 12:08:58 UTC

Fixed upstream
master:
https://pagure.io/freeipa/c/881ec5a31775a5643ca3c6a37b651fd2104d25b9
ipa-4-7:
https://pagure.io/freeipa/c/cbb276d650e47e1c6ea692a9731f8bba49e2dfec
ipa-4-6:
https://pagure.io/freeipa/c/5c56bb4ddb006531efcd58ddf4386297d76fef31

Comment 18 anuja 2019-08-19 11:39:38 UTC

Verified Using version :
ipa-server-4.8.0-8.module+el8.1.0+3977+ec23ef34.x86_64
sssd-ipa-2.2.0-11.el8.x86_64

[root@ipaqavmd ~]# date
Mon Aug 19 07:35:02 EDT 2019
[root@ipaqavmd ~]# ipa idoverrideuser-find 'Default trust View'
--------------------------
1 User ID override matched
--------------------------
  Anchor to override: aduser1
----------------------------
Number of entries returned 1
----------------------------
[root@ipaqavmd ~]# tail -n 20  /var/log/httpd/error_log
[Mon Aug 19 07:34:32.012024 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: WSGI jsonserver_session.__call__:
[Mon Aug 19 07:34:32.052629 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: Created connection context.ldap2_139803414017640
[Mon Aug 19 07:34:32.052818 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: WSGI jsonserver.__call__:
[Mon Aug 19 07:34:32.052981 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: WSGI WSGIExecutioner.__call__:
[Mon Aug 19 07:34:32.053658 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: raw: idoverrideuser_find('Default trust View', None, version='2.233')
[Mon Aug 19 07:34:32.054068 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: idoverrideuser_find('Default trust View', None, fallback_to_ldap=False, all=False, raw=False, version='2.233', pkey_only=False)
[Mon Aug 19 07:34:32.066025 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: Converting SID to object name: S-1-5-21-2842256260-195550463-1751006347-1109
[Mon Aug 19 07:34:32.081144 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: INFO: [jsonserver_session] admin: idoverrideuser_find/1('Default trust View', None, version='2.233'): SUCCESS
[Mon Aug 19 07:34:32.083108 2019] [wsgi:error] [pid 30060:tid 139803914008320] [remote 10.19.34.118:43530] ipa: DEBUG: Destroyed connection context.ldap2_139803414017640
[Mon Aug 19 07:35:08.962453 2019] [:warn] [pid 30064:tid 139803483936512] [client 10.19.34.118:43534] failed to set perms (3140) on file (/run/ipa/ccaches/admin)!, referer: https://ipaqavmd.testrelm.test/ipa/xml
[Mon Aug 19 07:35:08.965419 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: WSGI wsgi_dispatch.__call__:
[Mon Aug 19 07:35:08.965616 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: WSGI jsonserver_session.__call__:
[Mon Aug 19 07:35:09.029664 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: Created connection context.ldap2_139803414017808
[Mon Aug 19 07:35:09.029889 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: WSGI jsonserver.__call__:
[Mon Aug 19 07:35:09.030038 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: WSGI WSGIExecutioner.__call__:
[Mon Aug 19 07:35:09.030688 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: raw: idoverrideuser_find('Default trust View', None, version='2.233')
[Mon Aug 19 07:35:09.031112 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: idoverrideuser_find('Default trust View', None, fallback_to_ldap=False, all=False, raw=False, version='2.233', pkey_only=False)
[Mon Aug 19 07:35:09.042758 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: Converting SID to object name: S-1-5-21-2842256260-195550463-1751006347-1109
[Mon Aug 19 07:35:09.056435 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: INFO: [jsonserver_session] admin: idoverrideuser_find/1('Default trust View', None, version='2.233'): SUCCESS
[Mon Aug 19 07:35:09.058245 2019] [wsgi:error] [pid 30059:tid 139803914008320] [remote 10.19.34.118:43534] ipa: DEBUG: Destroyed connection context.ldap2_139803414017808
[root@ipaqavmd ~]# 

Based on this after ipa idoverrideuser-find 'Default trust View'
No Traceback errors are seen , thus marking bz as verified.

Comment 20 errata-xmlrpc 2019-11-05 20:52:26 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3348