Description of problem: While tracking security updates (more importantly, during security audits), we sometimes need to search for hosts that have a specific package installed, but not the most recent release. This is meant as a way to verify the systems are really up to date (and don't have a package left over from a time before we introduced spacewalk or something else. This search can easily be done in the web interface with an advanced search, searching the field "installed packages", searching (for example) for: bash version:3.2 -release:32.el5 Which would list all systems that have bash 3.2 installed (with CentOS5, this is obviously the case), but not release 32.el5. This specific query works, but it is near the limit. When searching for mysql-server for example, the field is too short (maxlength ist 36). Version-Release number of selected component (if applicable): 1.5 How reproducible: Try to Enter a search term longer than 36 characters. Actual results: Entry of longer search terms not possible Expected results: (almost) arbitrary length search terms should be possible. Additional info: A similar search on commandline or with spacecmd would also be nice. We were not able to find one.
Created attachment 530243 [details] I think this would solve it (mostly) I'm not a java programmer (but I know java syntax enough to read programs), so I got the git tree and checked the sources best I could. I patched systemsearch.jsp (see attached patch), and found no unintended side effects. I think it would even be no problem to drop the maxlength parameter altogether. Actually, patching this file alone didn't do anything (on the live system, without recompiling), I still get the web page with maxlength="36" for the search_string parameter. I try to get my system to rebuild spacewalk-java, but I experience several problems installing the build dependencies.
Hey Sven, there's one more point: code/src/com/redhat/rhn/frontend/action/systems/validation/systemSearchForm.xsd that is used for input validation. So, if we would drop the maxlegth completely, you would get following validation error on webui, when entering string longer than 100chars: "Search string cannot be greater than 100 characters (Note: double byte chars are not supported)." So, I just increased the limit just to 100 chars. spacewalk.git: 2df5137ea5be18beb58f75d30864bb5f215cffb5 For the command line option, try to use system.search.* APIs.
Hi Thomas. While I think 100 characters should be OK for us, I'm wondering where the limit comes from. All relevant database fields seem to be at least 128 characters in size (system names can have at least 200 characters IIRC from the SQL schema). So unless there are restrictions somewhere else, which enforce a lower limit, I would go to 128 characters at least (for both the systemSearchForm.xsd and the systemsearch.jsp files). Using arbitrarily low limits where there is no technical reason seems wrong to me, at least anywhere outside the database design. Anyhow: Thanks a lot for taking on this bug so quickly. One question though: Will this be in Spacewalk 1.6? Regards, Sven
Spacewalk 1.6 has been released.