Bug 712072 – Unexpected message from ipa-getcert with non-root user

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 712072 - Unexpected message from ipa-getcert with non-root user

Summary:	Unexpected message from ipa-getcert with non-root user

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 5
Classification:	Red Hat
Component:	certmonger (Show other bugs)
Sub Component:
Version:	5.7
Hardware:	x86_64 Linux

Priority	unspecified Severity medium
Target Milestone:	rc
Target Release:	---
Assigned To:	Nalin Dahyabhai
QA Contact:
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2011-06-09 08:37 EDT by Kaleem
Modified:	2012-02-21 01:17 EST (History)
CC List:	3 users (show)

See Also:
Fixed In Version:	certmonger-0.50-1.el5
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2012-02-21 01:17:12 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHBA-2012:0245	normal	SHIPPED_LIVE	certmonger bug fix and enhancement update	2012-02-20 10:07:20 EST

Groups: None (edit)

Description Kaleem 2011-06-09 08:37:44 EDT

Description of problem:
Unexpected message from ipa-getcert when called by non-root user.

Version-Release number of selected component (if applicable):
certmonger-0.42-1.el5

How reproducible:
Always

Steps to Reproduce:
1.Install certmonger
2.Start certmonger service
3.run 'ipa-getcet list' command as non-root user.
  
Actual results:
Following message is displayed on console.
"Number of certificates and requests being tracked: 0." 

Expected results:
Following error message should be displayed.
"Insufficient access.  Please retry operation as root."

Additional info:
https://bugzilla.redhat.com/show_bug.cgi?id=683926.

Comment 2 Kaleem 2011-11-23 04:27:31 EST

Verified.

Certmonger Version:
[root@dhcp201-118 ~]# rpm -q certmonger
certmonger-0.50-1.el5
[root@dhcp201-118 ~]#

Now proper error message is displayed when non-root user runs "ipa-getcert list" command.

[root@dhcp201-118 ~]# su - testuser
[testuser@dhcp201-118 ~]$ ipa-getcert list
Insufficient access.  Please retry operation as root.
[testuser@dhcp201-118 ~]$

Comment 3 errata-xmlrpc 2012-02-21 01:17:12 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0245.html

Note You need to log in before you can comment on or make changes to this bug.