Bug 710240 – Added option to Sudo rule message is displayed even when the given option already exists.

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 710240 - Added option to Sudo rule message is displayed even when the given option already exists.

Summary:	Added option to Sudo rule message is displayed even when the given option alr...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 6
Classification:	Red Hat
Component:	ipa (Show other bugs)
Sub Component:
Version:	6.2
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Rob Crittenden
QA Contact:	Chandrasekar Kannan
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2011-06-02 14:59 EDT by Gowrishankar Rajaiyan
Modified:	2015-01-04 18:49 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:	ipa-2.1.0-1.el6
Doc Type:	Bug Fix
Doc Text:	Cause: Adding a duplicate sudorule option does not generate an error. Consequence: This is confusing and inconsistent with the IPA command-line. Fix: Rather than ignoring duplicate values an error is raised when one is added. Result: An error is raised when a duplicate option is added.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2011-12-06 13:22:55 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2011:1533	normal	SHIPPED_LIVE	Moderate: ipa security and bug fix update	2011-12-05 20:23:31 EST

Groups: None (edit)

Description Gowrishankar Rajaiyan 2011-06-02 14:59:43 EDT

Description of problem:


Version-Release number of selected component (if applicable):
ipa-server-2.0.0-23.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. # ipa sudorule-add-option defaultrule1--sudooption=always_set_home
--------------------
sudorule-add-option:
--------------------
----------------------------------------------------------
Added option "always_set_home" to Sudo rule "defaultrule1"
----------------------------------------------------------

2. Add the same option again.
# ipa sudorule-add-option defaultrule1--sudooption=always_set_home

  
Actual results:
1. # ipa sudorule-add-option defaultrule1--sudooption=always_set_home
--------------------
sudorule-add-option:
--------------------
----------------------------------------------------------
Added option "always_set_home" to Sudo rule "defaultrule1"
----------------------------------------------------------

2. The option is not added as it already exists as expected. 


Expected results:
Appropriate message should be displayed stating that the given sudooption already exists. 

Additional info:

Comment 2 Dmitri Pal 2011-06-02 15:55:00 EDT

https://fedorahosted.org/freeipa/ticket/1277

Comment 3 Rob Crittenden 2011-07-19 13:22:53 EDT

master: 44cdf8ef54ff761a5e38919b8cdce5128928985a

Comment 5 Jenny Galipeau 2011-10-05 16:15:15 EDT

verified :

[root@ipaserver ~]# ipa sudorule-add-option sudorule1 --sudooption=always_set_home
-------------------------------------------------------
Added option "always_set_home" to Sudo Rule "sudorule1"
-------------------------------------------------------
  Rule name: sudorule1
  Enabled: TRUE
  Sudo Option: always_set_home

[root@ipaserver ~]# ipa sudorule-add-option sudorule1 --sudooption=always_set_home
ipa: ERROR: This entry already exists

[root@ipaserver ~]# echo $?
1

version:
ipa-server-2.1.1-4.el6.x86_64

Comment 6 Rob Crittenden 2011-10-31 15:24:22 EDT

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Cause: Adding a duplicate sudorule option does not generate an error.
Consequence: This is confusing and inconsistent with the IPA command-line.
Fix: Rather than ignoring duplicate values an error is raised when one is added.
Result: An error is raised when a duplicate option is added.

Comment 7 errata-xmlrpc 2011-12-06 13:22:55 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html

Note You need to log in before you can comment on or make changes to this bug.