Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
For bugs related to Red Hat Enterprise Linux 5 product line. The current stable release is 5.10. For Red Hat Enterprise Linux 6 and above, please visit Red Hat JIRA https://issues.redhat.com/secure/CreateIssue!default.jspa?pid=12332745 to report new issues.

Bug 494981

Summary: CS 8.0 Alpha -- When Renrollment policy is set (RE_ENROLL) then the error message display erroneously specifies the card is suspended.
Product: Red Hat Enterprise Linux 5 Reporter: Sean Veale <sean.veale>
Component: escAssignee: Jack Magne <jmagne>
Status: CLOSED ERRATA QA Contact: desktop-bugs <desktop-bugs>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 5.4CC: aakkiang, alee, mharmsen, rrelyea, shaines, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-09-02 09:58:22 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 443788, 497004    
Attachments:
Description Flags
Renroll error (logs and screenshot) none

Description Sean Veale 2009-04-08 21:29:04 UTC
Created attachment 338808 [details]
Renroll error (logs and screenshot)

Description of problem:


Version-Release number of selected component (if applicable):
 When Renrollment policy is set (RE_ENROLL) then the error message display erroneously specifies the card is suspended.  See the attached zip which has the tps debug and error log and the screenshot of the message

How reproducible:
Always 

Steps to Reproduce:
1. Through the Agent page of the TPS specifiy the RE_ENROLL to be false. 
2.Try to enroll a formatted token. 
3.
  
Actual results:
Incorrect error message referencing the card is suspended.  

Expected results:
Error message referencing the card can't be re enrolled. 

Additional info:

See logs

Comment 1 Jack Magne 2009-04-21 20:32:32 UTC
Proposed error message change:

Index: esc.properties
===================================================================
RCS file: /cvs/dirsec/esc/src/app/xul/esc/chrome/locale/en-US/esc.properties,v
retrieving revision 1.7
diff -r1.7 esc.properties
107c107
< errorTokenSuspended=Your smart card has been suspended.
---
> errorTokenSuspended=You are not allowed to perform this operation with this sm
art card.

Comment 2 Scott Haines 2009-04-22 18:47:08 UTC
Changing product from Certificate System to Red Hat Enterprise 5.  Rebase of
ESC to version 1.1.0 to pick up present and future Certificate System v8 fixes.

Comment 3 Scott Haines 2009-04-22 18:48:28 UTC
Setting ack requests.

Comment 4 Scott Haines 2009-04-22 18:57:07 UTC
Setting devel ack.

Comment 5 Matthew Harmsen 2009-04-22 22:49:12 UTC
Comment #1 +mharmsen

Comment 6 Jack Magne 2009-04-22 23:39:50 UTC
$ cvs   commit esc.properties

Checking in esc.properties;
/cvs/dirsec/esc/src/app/xul/esc/chrome/locale/en-US/esc.properties,v  <--  esc.p
roperties
new revision: 1.8; previous revision: 1.7
done
Running syncmail...
Mailing relnotes...
...syncmail done.
Running syncmail...
Mailing cvsdirsec...
...syncmail done.

Comment 9 Asha Akkiangady 2009-07-26 20:31:21 UTC
Verified.

Performed token enrollment using Gemalto 64K smart cards on Rhel 5.3
i386 successfully.
coolkey version: coolkey-1.1.0-6.el5 (latest from RHEL5.3 BaseOS)
esc version: esc-1.1.0-9.el5 (cs 8.0 build)

Steps:
1. Enroll token#1 fo user#1.
2. Format token#1.
3. tps agent page set policy for token#1 to be RE_ENROLL=NO
4. Enroll token#1 for user#2, enrollment is successful.

Comment 11 errata-xmlrpc 2009-09-02 09:58:22 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-1310.html