Bug 2151948 - dscreate for non-root user suggests privileged ports
Summary: dscreate for non-root user suggests privileged ports
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Directory Server
Classification: Red Hat
Component: 389-ds-base
Version: 12.1
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: DS12.2
: dirsrv-12.2
Assignee: Pierre Rogier
QA Contact: LDAP QA Team
Zuzana Zoubkova
URL:
Whiteboard: sync-to-jira
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-12-08 16:59 UTC by Viktor Ashirov
Modified: 2023-05-30 09:41 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-05-30 09:40:35 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github 389ds 389-ds-base pull 5579 0 None open Issue 5560 - non root dscreate set defaults requiring superuser privilege 2023-01-12 16:32:00 UTC
Red Hat Issue Tracker IDMDS-2731 0 None None None 2023-01-12 16:28:46 UTC
Red Hat Issue Tracker IDMDS-2996 0 None None None 2023-05-04 10:16:59 UTC
Red Hat Product Errata RHBA-2023:3344 0 None None None 2023-05-30 09:41:09 UTC

Description Viktor Ashirov 2022-12-08 16:59:51 UTC
Description of problem:
dscreate in interactive mode for non-root user suggests default ports 389 and 636. 

$ dscreate  interactive
Install Directory Server (interactive mode)
===========================================
...

Enter port number [389]: 1389

Create self-signed certificate database [yes]:

Enter secure port number [636]: 1636

...

We already do checks if the port is available or not, we should also check if the user is root and is able to use these ports. And if not, provide empty defaults. 

Version-Release number of selected component (if applicable):
389-ds-base-2.1.5-4.module+el9dsrv+16995+8a75ed16.x86_64

How reproducible:
always

Steps to Reproduce:
$ mkdir -p bin
$ dscreate ds-root $HOME/test $HOME/bin
$ hash -r
$ dscreate interactive

Comment 3 Akshay Adhikari 2023-05-08 13:58:29 UTC
Build Tested: 389-ds-base-2.2.7-2.module+el9dsrv+18726+78959e84.x86_64

Steps to Reproduce: 
$ mkdir -p bin
$ dscreate ds-root $HOME/test $HOME/bin
$ hash -r
$ dscreate interactive
Install Directory Server (interactive mode)
===========================================
...

Enter the instance name [ds-test]: 

Enter port number [1389]: 

Create self-signed certificate database [yes]: 

Enter secure port number [1636]: 

....


The server suggests a different set of ports for non-root users, which the user has access to, Marking as VERIFIED.

Comment 5 errata-xmlrpc 2023-05-30 09:40:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (redhat-ds:12 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:3344


Note You need to log in before you can comment on or make changes to this bug.