Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1859878

Summary: Managed Entries configuration not being enforced
Product: Red Hat Enterprise Linux 8 Reporter: Sudhir Menon <sumenon>
Component: 389-ds-baseAssignee: Simon Pichugin <spichugi>
Status: CLOSED ERRATA QA Contact: ipa-qe <ipa-qe>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.3CC: ds-qe-bugs, ksiddiqu, mreynolds, pasik, pcech, rcritten, sgouvern, spichugi, tbordaz, tscherf, vashirov
Target Milestone: rcKeywords: Regression, Triaged
Target Release: 8.0Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: 389-ds-devel-1.4-8040020201105165416.866effaa Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-05-18 15:45:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Sudhir Menon 2020-07-23 08:58:15 UTC 
Description of problem: Traceback is seen when hostgroup is being deleted 

Version-Release number of selected component (if applicable):
ipa-server-4.8.7-7.module+el8.3.0+7376+c83e4fcd.x86_64
selinux-policy-3.14.3-49.el8.noarch

How reproducible: Always

Steps to Reproduce:
1. /usr/sbin/ipa-managed-entries --entry="NGP Definition" enable
2. ipa hostgroup-add --desc=mygroup mygroup
3. ipa netgroup-find --managed mygroup
4. ipa hostgroup-del mygroup
5. ipa hostgroup-add mygroup
6. ipa netgroup-del mygroup
7. ipa hostgroup-find
8. ipa hostgroup-del mygroup

Actual results:
[root@master ~]# ipa hostgroup-find
--------------------
2 hostgroups matched
--------------------
  Host-group: ipaservers
  Description: IPA server hosts
 
  Host-group: mygroup
----------------------------
Number of entries returned 2
----------------------------

[root@master ~]# ipa hostgroup-del mygroup
ipa: ERROR: mygroup: host group not found

Traceback is seen in error_log file

[Thu Jul 23 04:35:51.172577 2020] [wsgi:error] [pid 112397:tid 140709678946624] ipa: INFO: *** PROCESS START ***
[Thu Jul 23 04:35:51.188946 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: WSGI wsgi_dispatch.__call__:
[Thu Jul 23 04:35:51.189286 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: WSGI jsonserver_session.__call__:
[Thu Jul 23 04:35:51.346515 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: Created connection context.ldap2_140709036643496
[Thu Jul 23 04:35:51.346764 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: WSGI jsonserver.__call__:
[Thu Jul 23 04:35:51.346908 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: WSGI WSGIExecutioner.__call__:
[Thu Jul 23 04:35:51.362681 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: raw: hostgroup_del(['mygroup'], version='2.239')
[Thu Jul 23 04:35:51.363058 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: hostgroup_del(('mygroup',), continue=False, version='2.239')
[Thu Jul 23 04:35:51.524099 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: WSGI wsgi_execute PublicError: Traceback (most recent call last):
[Thu Jul 23 04:35:51.524236 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipapython/ipaldap.py", line 1077, in error_handler
[Thu Jul 23 04:35:51.524276 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     yield
[Thu Jul 23 04:35:51.524315 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipapython/ipaldap.py", line 1710, in delete_entry
[Thu Jul 23 04:35:51.524354 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     self.conn.delete_s(str(dn))
[Thu Jul 23 04:35:51.524393 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 558, in delete_s
[Thu Jul 23 04:35:51.524441 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     return self.delete_ext_s(dn,None,None)
[Thu Jul 23 04:35:51.524494 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 551, in delete_ext_s
[Thu Jul 23 04:35:51.524533 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all=1,timeout=self.timeout)
[Thu Jul 23 04:35:51.524572 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 749, in result3
[Thu Jul 23 04:35:51.524611 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     resp_ctrl_classes=resp_ctrl_classes
[Thu Jul 23 04:35:51.524649 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 756, in result4
[Thu Jul 23 04:35:51.524689 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
[Thu Jul 23 04:35:51.524728 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 329, in _ldap_call
[Thu Jul 23 04:35:51.524767 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     reraise(exc_type, exc_value, exc_traceback)
[Thu Jul 23 04:35:51.524806 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/compat.py", line 44, in reraise
[Thu Jul 23 04:35:51.524862 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     raise exc_value
[Thu Jul 23 04:35:51.524901 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/site-packages/ldap/ldapobject.py", line 313, in _ldap_call
[Thu Jul 23 04:35:51.524941 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     result = func(*args,**kwargs)
[Thu Jul 23 04:35:51.524998 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ldap.NO_SUCH_OBJECT: {'desc': 'No such object'}
[Thu Jul 23 04:35:51.525036 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]
[Thu Jul 23 04:35:51.525075 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] During handling of the above exception, another exception occurred:
[Thu Jul 23 04:35:51.525113 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]
[Thu Jul 23 04:35:51.525200 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] Traceback (most recent call last):
[Thu Jul 23 04:35:51.525240 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1578, in delete_entry
[Thu Jul 23 04:35:51.525279 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     self._exc_wrapper(nkeys, options, ldap.delete_entry)(dn)
[Thu Jul 23 04:35:51.525317 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1120, in wrapped
[Thu Jul 23 04:35:51.525359 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     return func(*call_args, **call_kwargs)
[Thu Jul 23 04:35:51.525418 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1129, in exc_func
[Thu Jul 23 04:35:51.525466 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     self, keys, options, e, call_func, *args, **kwargs)
[Thu Jul 23 04:35:51.525505 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1624, in exc_callback
[Thu Jul 23 04:35:51.525544 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     raise exc
[Thu Jul 23 04:35:51.525582 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1120, in wrapped
[Thu Jul 23 04:35:51.525621 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     return func(*call_args, **call_kwargs)
[Thu Jul 23 04:35:51.525659 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipapython/ipaldap.py", line 1710, in delete_entry
[Thu Jul 23 04:35:51.525698 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     self.conn.delete_s(str(dn))
[Thu Jul 23 04:35:51.525736 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib64/python3.6/contextlib.py", line 99, in __exit__
[Thu Jul 23 04:35:51.525775 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     self.gen.throw(type, value, traceback)
[Thu Jul 23 04:35:51.525814 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipapython/ipaldap.py", line 1087, in error_handler
[Thu Jul 23 04:35:51.525852 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     raise errors.NotFound(reason=arg_desc or 'no such entry')
[Thu Jul 23 04:35:51.525891 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipalib.errors.NotFound: no such entry
[Thu Jul 23 04:35:51.525929 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]
[Thu Jul 23 04:35:51.525967 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] During handling of the above exception, another exception occurred:
[Thu Jul 23 04:35:51.526006 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]
[Thu Jul 23 04:35:51.526044 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] Traceback (most recent call last):
[Thu Jul 23 04:35:51.526090 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/rpcserver.py", line 395, in wsgi_execute
[Thu Jul 23 04:35:51.526166 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     result = command(*args, **options)
[Thu Jul 23 04:35:51.526210 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipalib/frontend.py", line 450, in __call__
[Thu Jul 23 04:35:51.526249 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     return self.__do_call(*args, **options)
[Thu Jul 23 04:35:51.526287 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipalib/frontend.py", line 478, in __do_call
[Thu Jul 23 04:35:51.526326 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     ret = self.run(*args, **options)
[Thu Jul 23 04:35:51.526365 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipalib/frontend.py", line 800, in run
[Thu Jul 23 04:35:51.526403 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     return self.execute(*args, **options)
[Thu Jul 23 04:35:51.526451 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1603, in execute
[Thu Jul 23 04:35:51.526511 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     delete_entry(pkey)
[Thu Jul 23 04:35:51.526566 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 1580, in delete_entry
[Thu Jul 23 04:35:51.526605 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     raise self.obj.handle_not_found(*nkeys)
[Thu Jul 23 04:35:51.526643 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]   File "/usr/lib/python3.6/site-packages/ipaserver/plugins/baseldap.py", line 775, in handle_not_found
[Thu Jul 23 04:35:51.526682 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]     'pkey': pkey, 'oname': self.object_name,
[Thu Jul 23 04:35:51.526720 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipalib.errors.NotFound: mygroup: host group not found
[Thu Jul 23 04:35:51.526767 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250]
[Thu Jul 23 04:35:51.527028 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: INFO: [jsonserver_session] admin: hostgroup_del/1(['mygroup'], version='2.239'): NotFound
[Thu Jul 23 04:35:51.529252 2020] [wsgi:error] [pid 112397:tid 140709009970944] [remote 2620:52:0:1322:10:16ff:fe98:181:38250] ipa: DEBUG: Destroyed connection context.ldap2_140709036643496
[Thu Jul 23 04:35:51.772265 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml'
[Thu Jul 23 04:35:51.772543 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_i18n_messages() at '/i18n_messages'
[Thu Jul 23 04:35:51.772735 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json'
[Thu Jul 23 04:35:51.772985 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json'
[Thu Jul 23 04:35:51.773202 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'
[Thu Jul 23 04:35:51.773456 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_x509() at '/session/login_x509'
[Thu Jul 23 04:35:51.773649 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password'
[Thu Jul 23 04:35:51.773831 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password'
[Thu Jul 23 04:35:51.774028 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token'
[Thu Jul 23 04:35:51.774265 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml'
[Thu Jul 23 04:35:51.774648 2020] [wsgi:error] [pid 112394:tid 140709678946624] ipa: INFO: *** PROCESS START ***
[Thu Jul 23 04:35:52.207351 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_i18n_messages() at '/i18n_messages'
[Thu Jul 23 04:35:52.207607 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json'
[Thu Jul 23 04:35:52.207869 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json'
[Thu Jul 23 04:35:52.208057 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'
[Thu Jul 23 04:35:52.208306 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_x509() at '/session/login_x509'
[Thu Jul 23 04:35:52.208510 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password'
[Thu Jul 23 04:35:52.208696 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password'
[Thu Jul 23 04:35:52.208869 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token'
[Thu Jul 23 04:35:52.209057 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml'
[Thu Jul 23 04:35:52.209398 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml'
[Thu Jul 23 04:35:52.209660 2020] [wsgi:error] [pid 112395:tid 140709678946624] ipa: INFO: *** PROCESS START ***
[Thu Jul 23 04:35:52.330633 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver() at '/xml'
[Thu Jul 23 04:35:52.330895 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_i18n_messages() at '/i18n_messages'
[Thu Jul 23 04:35:52.331084 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_session() at '/session/json'
[Thu Jul 23 04:35:52.331313 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.jsonserver_kerb() at '/json'
[Thu Jul 23 04:35:52.331509 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_kerberos() at '/session/login_kerberos'
[Thu Jul 23 04:35:52.331729 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_x509() at '/session/login_x509'
[Thu Jul 23 04:35:52.331917 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.login_password() at '/session/login_password'
[Thu Jul 23 04:35:52.332094 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.change_password() at '/session/change_password'
[Thu Jul 23 04:35:52.332297 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.sync_token() at '/session/sync_token'
[Thu Jul 23 04:35:52.332512 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: DEBUG: Mounting ipaserver.rpcserver.xmlserver_session() at '/session/xml'
[Thu Jul 23 04:35:52.332872 2020] [wsgi:error] [pid 112396:tid 140709678946624] ipa: INFO: *** PROCESS START ***


Expected results: Fix the traceback seen.

Additional info:
Comment 1 Rob Crittenden 2020-07-27 17:04:34 UTC 
The traceback is not related and just reports the NotFound.

I think this may be a bug in the MEP plugin as it should raise an error when attempting to delete a managed entry.

The reproduction is simpler than c#0:

ipa hostgroup-add test
ipa netgroup-del test

The netgroup-del should fail since it is managed. Since it isn't then the hostgroup cannot be deleted as a result.

The same thing happens with users/groups but the IPA group plugin has a pre_callback that checks for mepmanagedby and raises an exception if it's there. The netgroup plugin doesn't have this. But we should not rely on the framework to prevent things in LDAP.

Re-assigning to 389-ds.
Comment 2 Simon Pichugin 2020-07-31 09:43:20 UTC 
Upstream issue:
https://pagure.io/389-ds-base/issue/51222
Comment 13 sgouvern 2020-11-20 09:11:56 UTC 
Tested with build 389-ds-base-1.4.3.16-1.module+el8.4.0+8740+d5ec8778.x86_64

# PYTHONPATH=src/lib389/ py.test -s -v dirsrvtests/tests/suites/plugins/managed_entry_test.py 
re-exec with libfaketime dependencies
================================================================= test session starts =================================================================
platform linux -- Python 3.6.8, pytest-6.1.2, py-1.9.0, pluggy-0.13.1 -- /usr/bin/python3.6
cachedir: .pytest_cache
metadata: {'Python': '3.6.8', 'Platform': 'Linux-4.18.0-247.el8.x86_64-x86_64-with-redhat-8.4-Ootpa', 'Packages': {'pytest': '6.1.2', 'py': '1.9.0', 'pluggy': '0.13.1'}, 'Plugins': {'metadata': '1.10.0', 'html': '3.0.0', 'libfaketime': '0.1.2'}}
389-ds-base: 1.4.3.16-1.module+el8.4.0+8740+d5ec8778
nss: 3.53.1-11.el8_2
nspr: 4.25.0-2.el8_2
openldap: 2.4.46-16.el8
cyrus-sasl: 2.1.27-5.el8
FIPS: disabled
rootdir: /mnt/tests/rhds/tests/upstream/ds/dirsrvtests, configfile: pytest.ini
plugins: metadata-1.10.0, html-3.0.0, libfaketime-0.1.2
collected 3 items                                                                                                                                     

dirsrvtests/tests/suites/plugins/managed_entry_test.py::test_binddn_tracking INFO:lib389.topologies:Instance with parameters {'ldap-port': 38901, 'ldap-secureport': 63601, 'server-id': 'standalone1', 'suffix': 'dc=example,dc=com'} was created.
PASSED
dirsrvtests/tests/suites/plugins/managed_entry_test.py::test_mentry01 PASSED
dirsrvtests/tests/suites/plugins/managed_entry_test.py::test_managed_entry_removal PASSEDInstance slapd-standalone1 removed.


================================================================= 3 passed in 25.74s ==================================================================


Setting Verified to 'tested'
Comment 14 sgouvern 2020-11-23 09:51:26 UTC 
 
verified:tested (see comment 13) with build 389-ds-base-1.4.3.16-1.module+el8.4.0+8740+d5ec8778.x86_64
-> marking as VERIFIED
Comment 16 errata-xmlrpc 2021-05-18 15:45:26 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (389-ds:1.4 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1835