RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1544796 - IPA Error 905: CommandError unknown command 'undefined'
Summary: IPA Error 905: CommandError unknown command 'undefined'
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: ipa
Version: 7.4
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: IPA Maintainers
QA Contact: ipa-qe
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-02-13 14:17 UTC by Michal Toth
Modified: 2021-09-09 13:12 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-10-11 07:08:54 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Michal Toth 2018-02-13 14:17:54 UTC 
Description of problem:
When default 90 days password policy kicked in, I changed admin password.
Then I wanted to change password again (within few minutes), but it was refused due to min life time 1 hour. After changing this to 0 hours and changing password I got following error dialog


IPA Error 905: CommandError

unknown command 'undefined'


Version-Release number of selected component (if applicable):
ipa-server-common-4.5.0-21.el7_4.2.2.noarch
ipa-server-4.5.0-21.el7_4.2.2.x86_64

I have no idea what version I should pick from "Version list" - defaulting to 7.7

Actual results:
ComamndError

Expected results:
Password for user admin is changed
Comment 2 Michal Toth 2018-02-13 14:19:23 UTC 
New password has been applied, despite error dialog.
Comment 3 Rob Crittenden 2018-02-13 18:26:38 UTC 
I've been trying to reproduce without starting with an expired password and have been unable to do so.

I set the minlife to 0 and in the UI over and over just reset the password.

Can you find where the password was changed in /var/log/httpd/error_log and see if there was an exception thrown or at traceback?
Comment 4 Michal Toth 2018-02-14 08:31:10 UTC 
I can see only this in error_log. No traceback, but "CommandError" is there...
I have no problem to provide access to this IPA server if needed, as it is only testing environment (currently being used).

<blockquote>
[Tue Feb 13 15:12:01.906796 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.123722 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: passwd(u'admin', u'********', u'********', version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.259125 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.338398 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.356096 2018] [:error] [pid 1267] ipa: INFO: admin: batch: user_show(u'admin', rights=True, all=True): SUCCESS
[Tue Feb 13 15:12:02.384805 2018] [:error] [pid 1267] ipa: INFO: admin: batch: pwpolicy_show(None, rights=True, user=u'admin', all=True): SUCCESS
[Tue Feb 13 15:12:02.391569 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: whoami(version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.426099 2018] [:error] [pid 1267] ipa: INFO: admin: batch: krbtpolicy_show(u'admin', rights=True, all=True): SUCCESS
[Tue Feb 13 15:12:02.428725 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.509168 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: undefined: CommandError
[Tue Feb 13 15:12:02.513103 2018] [:error] [pid 1267] ipa: INFO: admin: batch: cert_find(None, sizelimit=0, all=True, user=(u'admin',)): SUCCESS
[Tue Feb 13 15:12:02.513376 2018] [:error] [pid 1267] ipa: INFO: [jsonserver_session] admin: batch(({u'params': ([u'admin'], {u'all': True, u'rights': True}), u'method': u'user_show'}, {u'params': ([], {u'all': True, u'user': u'admin', u'rights': True}), u'method': u'pwpolicy_show'}, {u'params': ([u'admin'], {u'all': True, u'rights': True}), u'method': u'krbtpolicy_show'}, {u'params': ([], {u'sizelimit': 0, u'all': True, u'user': (u'admin',)}), u'method': u'cert_find'}), version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.644472 2018] [:warn] [pid 1273] [client 10.40.204.176:58158] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.694598 2018] [:warn] [pid 1271] [client 10.40.204.176:58170] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:12:02.701804 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: radiusproxy_find(None, version=u'2.228'): SUCCESS
[Tue Feb 13 15:12:02.751705 2018] [:error] [pid 1267] ipa: INFO: [jsonserver_session] admin: user_find(None, version=u'2.228', no_members=True): SUCCESS
[Tue Feb 13 15:15:16.413060 2018] [:warn] [pid 1272] [client 10.40.204.176:58322] failed to set perms (3140) on file (/var/run/ipa/ccaches/admin)!, referer: https://ipa-server.msgqe.com/ipa/ui/
[Tue Feb 13 15:15:16.562955 2018] [:error] [pid 1268] ipa: INFO: [jsonserver_session] admin: undefined: CommandError
<blockquote>
Comment 5 Rob Crittenden 2018-02-20 20:00:07 UTC 
Upstream ticket:
https://pagure.io/freeipa/issue/7419
Comment 10 Dhiru Kholia 2018-07-19 15:29:02 UTC 
This bug has been fixed upstream and in Fedora.

https://bugzilla.redhat.com/show_bug.cgi?id=1488640 has more details.

Will this fix be backported to RHEL 7.x?
Comment 11 Florence Blanc-Renaud 2018-10-11 07:08:54 UTC 
The bug was fixed upstream in FreeIPA 4.6.1, and RHEL 7.6 has been rebased to IPA 4.6.4, hence RHEL 7.6 now contains the fix for this issue.
Note You need to log in before you can comment on or make changes to this bug.