Bug 671016 - "ipa permission-find test" failed
Summary: "ipa permission-find test" failed
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: freeIPA
Classification: Retired
Component: ipa-server
Version: 2.0
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
Assignee: Rob Crittenden
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-01-19 22:28 UTC by Yi Zhang
Modified: 2015-01-04 23:45 UTC (History)
5 users (show)

Fixed In Version: freeipa-2.1.0-1.fc15
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-27 07:22:28 UTC


Attachments (Terms of Use)

Description Yi Zhang 2011-01-19 22:28:45 UTC
Description of problem:
If you have a permission named "test", you can create it but "ipa permission-find test" returns error

My test is below:
[yi@dhcp-137 ipa-delegation]$ ipa permission-add test --desc=test --permissions=add --type=user
-----------------------
Added permission "test"
-----------------------
  Permission name: test
  Description: test
  Permissions: add
  Type: user
[yi@dhcp-137 ipa-delegation]$ ipa permission-find test
ipa: ERROR: no such entry
[yi@dhcp-137 ipa-delegation]$ ipa permission-del test
-------------------------
Deleted permission "test"
-------------------------
[yi@dhcp-137 ipa-delegation]$ ipa permission-find test
ipa: ERROR: no such entry


Version-Release number of selected component (if applicable):ipa-server-2.0-0.2011011115gitc778919.fc14.i686


How reproducible: always

Comment 1 Yi Zhang 2011-01-19 22:29:10 UTC
httpd error_log:

[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: Created connection context.ldap2
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_add(u'test', description=u'test', permissions=(u'add',), type=u'user', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_add(u'test', description=u'test', permissions=(u'add',), type=u'user', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', test=True, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', selfaci=False, test=True, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_show(u'test', rights=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', test=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_add(u'test', permission=u'test', permissions=(u'add',), type=u'user', selfaci=False, test=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: permission_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: permission_show(u'test', rights=False, all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: raw: aci_show(u'test')
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: aci_show(u'test', all=False, raw=False)
[Wed Jan 19 14:24:47 2011] [error] ipa: DEBUG: ACI not found for test
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: response: entries returned 1
[Wed Jan 19 14:24:47 2011] [error] ipa: INFO: Destroyed connection context.ldap2
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: Created connection context.ldap2
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: permission_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: permission_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'Manage group members random')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'Manage group members random', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for Manage group members random
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'Manage group members add')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'Manage group members add', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for Manage group members add
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test001 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test001 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test002 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test002 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test003 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test003 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test003 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test004 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test004 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test004 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test005 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test005 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test006 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test006 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: ACI not found for test006 permission
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test007 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test007 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test009 permission')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test009 permission', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'testgrp')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'testgrp', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'testper')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'testper', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_show(u'test')
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_show(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: DEBUG: raw: aci_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: aci_find(u'test', all=False, raw=False)
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: response: NotFound: no such entry
[Wed Jan 19 14:24:59 2011] [error] ipa: INFO: Destroyed connection context.ldap2

Comment 2 Rob Crittenden 2011-01-19 22:56:40 UTC
Was this done on a clean system or is this the same machine where ipa permission-find returned no entries?

Comment 3 Yi Zhang 2011-01-19 23:35:20 UTC
same host that i ran test for permission-find

Comment 4 Dmitri Pal 2011-01-19 23:46:35 UTC
That I can't reproduce this one.

Comment 5 Dmitri Pal 2011-01-19 23:48:56 UTC
(In reply to comment #4)
> That I can't reproduce this one.

I can't reproduce this one.
Tried same steps with yesterday build - works fine.

Comment 8 Jakub Hrozek 2011-01-24 21:50:26 UTC
https://fedorahosted.org/freeipa/ticket/843

Comment 9 Martin Kosek 2011-01-26 08:19:11 UTC
Closing the ticket #843 - I cannot reproduce this issue on current FreeIPA version.

Comment 10 Yi Zhang 2011-02-16 22:01:48 UTC
I run a simple test on newer version if ipav2. I no longer see this problem. Bug closed

[yi@works4me ~]$ ipa permission-add
Permission name: test
Permissions: read
[Attributes]: 
[Type]: user
[Member of group]: 
[Filter]: 
[Subtree]: 
[Target group]: 
-----------------------
Added permission "test"
-----------------------
  Permission name: test
  Permissions: read
  Type: user
[yi@works4me ~]$ ipa permission-find test
--------------------
1 permission matched
--------------------
  Permission name: test
  Permissions: read
  Type: user
----------------------------
Number of entries returned 1
----------------------------



[yi@works4me ~]$ rpm -qa | grep freeipa-server
freeipa-server-selinux-2.0-0.2011020119gitec59e61.fc14.i686
freeipa-server-2.0-0.2011020119gitec59e61.fc14.i686


Note You need to log in before you can comment on or make changes to this bug.