Hide Forgot
Description of problem: Version-Release number of selected component (if applicable): ipa-server-2.1.2-2.el6.x86_64 How reproducible: always Steps to Reproduce: 1. [root@qe-blade-04 ~]# ipa hbacrule-show rule3 Rule name: rule3 Enabled: TRUE Users: user3 Hosts: qe-blade-04.idm.lab.bos.redhat.com Source Hosts: ipaqavme.idm.lab.bos.redhat.com Service Groups: ftp 2. [root@qe-blade-04 ~]# ipa hbacsvcgroup-show ftp Service group name: ftp Description: Default group of ftp related services Member HBAC service: ftp, proftpd, pure-ftpd, gssftp, vsftpd 3. [root@qe-blade-04 ~]# ipa hbactest --user=user3 --srchost=ipaqavme.idm.lab.bos.redhat.com --host=qe-blade-04.idm.lab.bos.redhat.com --service=vsftpd --rule=rule3 --------------------- Access granted: False --------------------- notmatched: rule3 [root@qe-blade-04 ~]# Actual results: Access granted: False Expected results: Access granted: True & matched: rule3 Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/1988
Patch sent to upstream.
fixed upstream master: c9ef39918abc41f0f68c4e6c1b4495fb0a4c976b ipa-2-1: 28692ef60fd4b3f277349613d4901e48857edefb
[root@bumblebee ~]# ipa hbacsvcgroup-show ftp Service group name: ftp Description: Default group of ftp related services Member HBAC service: ftp, proftpd, pure-ftpd, vsftpd, gssftp [root@bumblebee ~]# [root@bumblebee ~]# ipa hbacrule-show rule1 Rule name: rule1 Enabled: TRUE User Groups: hbacusers Hosts: bumblebee.lab.eng.pnq.redhat.com Service Groups: ftp External host: external.lab.eng.pnq.redhat.com [root@bumblebee ~]# [root@bumblebee ~]# ipa hbactest --user=user1 --srchost=external.lab.eng.pnq.redhat.com --host=bumblebee.lab.eng.pnq.redhat.com --service=vsftpd --rule=rule1 -------------------- Access granted: True -------------------- matched: rule1 [root@bumblebee ~]# Verified. Version: ipa-server-2.1.3-3.el6.x86_64
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: Do not document
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2011-1533.html