Red Hat Bugzilla – Bug 740844
Missing additional info while removing a non-existing service from an hbacrule.
Last modified: 2011-12-06 13:32:20 EST
Description of problem: Version-Release number of selected component (if applicable): ipa-server-2.1.1-4.el6.x86_64 How reproducible: Always Steps to Reproduce: 1. [root@kungfupanda ~]# ipa hbacrule-remove-host Rule name: sghai1 [member host]: test [member host group]: Rule name: sghai1 Enabled: FALSE Hosts: kungfupanda.lab.eng.pnq.redhat.com Failed hosts/hostgroups: member host: test: This entry is not a member --------------------------- Number of members removed 0 --------------------------- 2. However, while removing a non-existing service from the hbacrule we just get "Number of members added 0" and not additional info as "this entry is not a member". Actual results: [root@kungfupanda ~]# ipa hbacrule-remove-service Rule name: sghai1 [member HBAC service]: ftp [member HBAC service group]: Rule name: sghai1 Enabled: FALSE Hosts: kungfupanda.lab.eng.pnq.redhat.com --------------------------- Number of members removed 0 --------------------------- Expected results: [root@kungfupanda ~]# ipa hbacrule-remove-service Rule name: sghai1 [member HBAC service]: ftp [member HBAC service group]: Rule name: sghai1 Enabled: FALSE Hosts: kungfupanda.lab.eng.pnq.redhat.com member service: ftp: This entry is not a member <<<<<<<<<<< --------------------------- Number of members removed 0 --------------------------- Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1863
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/6aa5bfe5db3b44197b181cf138c8f257b622e8b4 ipa-2-1: https://fedorahosted.org/freeipa/changeset/2be04c6e7fc281bb68f78f78a77718a3d963e789
[root@bumblebee ~]# ipa hbacrule-remove-service Rule name: rule1 [member HBAC service]: ftp [member HBAC service group]: Rule name: rule1 Enabled: TRUE Users: shanks Hosts: bumblebee.lab.eng.pnq.redhat.com Source Hosts: mudflap.lab.eng.pnq.redhat.com Services: vsftpd Failed service/service groups: member HBAC service: ftp: This entry is not a member --------------------------- Number of members removed 0 --------------------------- Verified. [root@bumblebee ~]# rpm -qi ipa-server Name : ipa-server Relocations: (not relocatable) Version : 2.1.2 Vendor: Red Hat, Inc. Release : 2.el6 Build Date: Fri 07 Oct 2011 05:09:04 PM EDT Install Date: Sat 08 Oct 2011 07:36:33 AM EDT Build Host: x86-001.build.bos.redhat.com Group : System Environment/Base Source RPM: ipa-2.1.2-2.el6.src.rpm Size : 3363225 License: GPLv3+ Signature : (none) Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://www.freeipa.org/ Summary : The IPA authentication server
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Do not document
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html