Bug 739060 – Disable entitlement plugin and CAL counting

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 739060 - Disable entitlement plugin and CAL counting

Summary:	Disable entitlement plugin and CAL counting

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Linux 6
Classification:	Red Hat
Component:	ipa (Show other bugs)
Sub Component:
Version:	6.2
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	rc
Target Release:	---
Assigned To:	Rob Crittenden
QA Contact:	Chandrasekar Kannan
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:	747120 748554
	Show dependency tree / graph

Reported:	2011-09-16 09:17 EDT by Rob Crittenden
Modified:	2015-01-04 18:51 EST (History)
CC List:	6 users (show)

See Also:
Fixed In Version:	ipa-2.1.3-5.el6
Doc Type:	Bug Fix
Doc Text:	Do not document
Story Points:	---
Clone Of:
Environment:
Last Closed:	2011-12-06 13:31:41 EST
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2011:1533	normal	SHIPPED_LIVE	Moderate: ipa security and bug fix update	2011-12-05 20:23:31 EST

Groups: None (edit)

Description Rob Crittenden 2011-09-16 09:17:27 EDT

Description of problem:

Disable the web framework entitlement plugin and the ipa-compliance.cron cron job.

Comment 1 Rob Crittenden 2011-09-16 09:29:41 EDT

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/1805

Comment 2 Rob Crittenden 2011-09-20 09:25:03 EDT

Removed references to entitlement in spec file

Comment 4 Namita Soman 2011-09-22 15:20:21 EDT

ipa role-find 
lists:
entitlement compliance and entitlement management
which should not be available.

Version used: ipa-server-2.1.1-3.el6.x86_64

Comment 5 Jenny Galipeau 2011-09-27 17:02:51 EDT

ipa privilege-find ... too ...

  Privilege name: Password Policy Administrator
  Description: Password Policy Administrator
  Granting privilege to roles: Security Architect

  Privilege name: Read Entitlements
  Description: Read Entitlements
  Permissions: read entitlements
  Granting privilege to roles: Entitlement Management, Entitlement Compliance

Comment 6 Rob Crittenden 2011-10-07 16:11:50 EDT

More complete patch should erase all references to entitlements.

Comment 7 Jenny Galipeau 2011-10-26 11:43:44 EDT

version:

ipa-server-2.1.3-3.el6.x86_64

# ipa role-find | grep Entitlement
  Role name: Entitlement Compliance
  Role name: Entitlement Management
  Description: Entitlements administrator

# ipa privilege-find | grep Entitlement
  Privilege name: Read Entitlements
  Description: Read Entitlements
  Granting privilege to roles: Entitlement Management, Entitlement Compliance
  Privilege name: Register and Write Entitlements
  Description: Register and Write Entitlements
  Granting privilege to roles: Entitlement Management


And still available in the UI

Comment 8 Rob Crittenden 2011-10-26 13:34:38 EDT

How was the server installed? Unable to reproduce.

Comment 9 Jenny Galipeau 2011-10-26 14:01:13 EDT

umm I upgraded ...

Comment 13 Rob Crittenden 2011-10-27 13:47:32 EDT

The patch that handled upgrades had been dropped at some point. Upgrades and new installs should both work now.

Comment 15 Martin Kosek 2011-11-01 05:54:11 EDT

    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Do not document

Comment 16 Namita Soman 2011-11-07 14:16:18 EST

Verified using ipa-server-2.1.3-8.el6.x86_64

Tested with CLI and UI. No roles or privileges for Entitlement

Comment 17 errata-xmlrpc 2011-12-06 13:31:41 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2011-1533.html

Note You need to log in before you can comment on or make changes to this bug.