Hide Forgot
Description of problem: User field separator uses '$$' within ipaSELinuxUserMapOrder. Previously it was '$' only Version-Release number of selected component (if applicable): ipa-server-4.8.0-1.module+el8.1.0+3577+202f0a51.x86_64 Steps to Reproduce: 1. ipa config-show | grep "SELinux user map order: guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$sysadm_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023" Actual results: # ipa config-show Maximum username length: 32 Maximum hostname length: 64 Home directory base: /home Default shell: /bin/sh Default users group: ipausers Default e-mail domain: bak2.test Search time limit: 2 Search size limit: 100 User search fields: uid,givenname,sn,telephonenumber,ou,title Group search fields: cn,description Enable migration mode: FALSE Certificate Subject base: O=BAK2.TEST Password Expiration Notification (days): 4 Password plugin features: AllowNThash, KDC:Disable Last Success SELinux user map order: guest_u:s0$$xguest_u:s0$$user_u:s0$$staff_u:s0-s0:c0.c1023$$sysadm_u:s0-s0:c0.c1023$$unconfined_u:s0-s0:c0.c1023 Default SELinux user: unconfined_u:s0-s0:c0.c1023 Default PAC types: MS-PAC, nfs:NONE IPA masters: kvm-01-guest05.bak2.test IPA master capable of PKINIT: kvm-01-guest05.bak2.test IPA CA servers: kvm-01-guest05.bak2.test IPA CA renewal master: kvm-01-guest05.bak2.test IPA DNS servers: kvm-01-guest05.bak2.test [root@kvm-01-guest05 ~]# Expected results: There should not be extra '$' in separator field
downstream test suite bash:ipa-default Failed test : General Server Configuration
Upstream ticket: https://pagure.io/freeipa/issue/8005
Upstream PR in progress https://github.com/freeipa/freeipa/pull/3372
master: * ac1ea0ec6710f40adffc3f04b39422f3043c6554 Fix `test_webui.test_selinuxusermap`
ipa-4-8: * 96af5394c210e637a5ab81d6925be3b0a429fc08 Fix `test_webui.test_selinuxusermap`
Will be fixed in an idm:DL1 module build that includes ipa-server-4.8.0-3.el8
Verified using : ipa-server-4.8.0-4.module+el8.1.0+3696+eb4a1e69.x86_64 [root@apollo ~]# ipa config-show Maximum username length: 32 Maximum hostname length: 64 Home directory base: /home Default shell: /bin/sh Default users group: ipausers Default e-mail domain: bak2.test Search time limit: 2 Search size limit: 100 User search fields: uid,givenname,sn,telephonenumber,ou,title Group search fields: cn,description Enable migration mode: FALSE Certificate Subject base: O=BAK2.TEST Password Expiration Notification (days): 4 Password plugin features: AllowNThash, KDC:Disable Last Success SELinux user map order: guest_u:s0$xguest_u:s0$user_u:s0$staff_u:s0-s0:c0.c1023$sysadm_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023 Default SELinux user: unconfined_u:s0-s0:c0.c1023 Default PAC types: MS-PAC, nfs:NONE IPA masters: apollo.bak2.test IPA CA servers: apollo.bak2.test IPA CA renewal master: apollo.bak2.test IPA DNS servers: apollo.bak2.test There is no extra '$' in SELinux user map order Based on this marking bz as verified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:3348