Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 752686

Summary: Negative test case for defaultgroup in ipa config-mod causes internal error.
Product: Red Hat Enterprise Linux 6 Reporter: Gowrishankar Rajaiyan <grajaiya>
Component: ipaAssignee: Rob Crittenden <rcritten>
Status: CLOSED ERRATA QA Contact: IDM QE LIST <seceng-idm-qe-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.2CC: dpal, jgalipea, mkosek
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ipa-2.2.0-1.el6 Doc Type: Bug Fix
Doc Text:
No documentation needed.
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-06-20 13:16:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 756082    

Description Gowrishankar Rajaiyan 2011-11-10 06:03:22 UTC
Description of problem:


Version-Release number of selected component (if applicable):
ipa-server-2.1.3-9.el6.x86_64

How reproducible:
Always

Steps to Reproduce:
1. [root@decepticons ~]# ipa config-mod --defaultgroup=doesntexist
ipa: ERROR: an internal error has occurred

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [10:23:48] ::  negative test case for defaultgroup
ipa: ERROR: an internal error has occurred
:: [   FAIL   ] :: set defaultgroup=[doesntexist] (Expected 2, got 1)
'ae46af50-4ea1-4e2a-a609-96b5c3bf512f'
ipaconfig-mod-defaultgroup-negative result: FAIL
   metric: 1
   Log: /tmp/beakerlib-3535640/journal.txt
    Info: Searching AVC errors produced since 1320765828.78 (Tue Nov  8 10:23:48 2011)
  

Actual results:
ipa: ERROR: an internal error has occurred


Expected results:
ipa: ERROR: The group doesn't exist


Additional info:
This test used to pass earlier, I checked in previous run with ipa-admintools-2.1.1-1.el6.x86_64.
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [08:39:45] ::  negative test case for defaultgroup
ipa: ERROR: The group doesn't exist
:: [   PASS   ] :: set defaultgroup=[doesntexist]
'8623b956-20bc-4512-97f1-cbfa77928401'
ipaconfig-mod-defaultgroup-negative result: PASS
   metric: 0
   Log: /tmp/beakerlib-2996049/journal.txt



==> /var/log/httpd/error_log <==
[Thu Nov 10 11:28:31 2011] [error] ipa: ERROR: non-public: TypeError: message: need a <type 'unicode'>; got Gettext("The group doesn't exist", domain='ipa', localedir=None) (a <class 'ipalib.text.Gettext'>)
[Thu Nov 10 11:28:31 2011] [error] Traceback (most recent call last):
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 228, in wsgi_execute
[Thu Nov 10 11:28:31 2011] [error]     result = self.Command[name](*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 432, in __call__
[Thu Nov 10 11:28:31 2011] [error]     ret = self.run(*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 738, in run
[Thu Nov 10 11:28:31 2011] [error]     return self.execute(*args, **options)
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py", line 996, in execute
[Thu Nov 10 11:28:31 2011] [error]     ldap, dn, entry_attrs, attrs_list, *keys, **options
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/plugins/config.py", line 202, in pre_callback
[Thu Nov 10 11:28:31 2011] [error]     raise errors.NotFound(message=_("The group doesn't exist"))
[Thu Nov 10 11:28:31 2011] [error]   File "/usr/lib/python2.6/site-packages/ipalib/errors.py", line 273, in __init__
[Thu Nov 10 11:28:31 2011] [error]     TYPE_ERROR % ('message', unicode, message, type(message))
[Thu Nov 10 11:28:31 2011] [error] TypeError: message: need a <type 'unicode'>; got Gettext("The group doesn't exist", domain='ipa', localedir=None) (a <class 'ipalib.text.Gettext'>)
[Thu Nov 10 11:28:31 2011] [error] ipa: INFO: admin.PNQ.REDHAT.COM: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13'): TypeError



[root@decepticons ~]# ipa -d config-mod --defaultgroup=doesntexist
ipa: DEBUG: importing all plugin modules in '/usr/lib/python2.6/site-packages/ipalib/plugins'...
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/aci.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automember.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/automount.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/baseldap.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/batch.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/cert.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/config.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/delegation.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/dns.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/group.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacrule.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvc.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbacsvcgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hbactest.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/host.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/hostgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/internal.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/kerberos.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/krbtpolicy.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/migration.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/misc.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/netgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/passwd.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/permission.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/ping.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/privilege.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/pwpolicy.py'
ipa: DEBUG: args=klist -V
ipa: DEBUG: stdout=Kerberos 5 version 1.9

ipa: DEBUG: stderr=
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/role.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/service.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmd.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudocmdgroup.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/sudorule.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/user.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/virtual.py'
ipa: DEBUG: importing plugin module '/usr/lib/python2.6/site-packages/ipalib/plugins/xmlclient.py'
ipa: INFO: trying https://decepticons.lab.eng.pnq.redhat.com/ipa/xml
ipa: DEBUG: Created connection context.xmlclient
ipa: DEBUG: raw: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13')
ipa: DEBUG: config_mod(ipadefaultprimarygroup=u'doesntexist', rights=False, all=False, raw=False, version=u'2.13')
ipa: INFO: Forwarding 'config_mod' to server u'https://decepticons.lab.eng.pnq.redhat.com/ipa/xml'
ipa: DEBUG: NSSConnection init decepticons.lab.eng.pnq.redhat.com
ipa: DEBUG: connect_socket_family: host=decepticons.lab.eng.pnq.redhat.com port=443 family=PR_AF_INET
ipa: DEBUG: connecting: 10.65.201.77:443
ipa: DEBUG: auth_certificate_callback: check_sig=True is_server=False
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
        Issuer: CN=Certificate Authority,O=LAB.ENG.PNQ.REDHAT.COM
        Validity:
            Not Before: Tue Nov 08 05:42:37 2011 UTC
            Not After : Fri Nov 08 05:42:37 2013 UTC
        Subject: CN=decepticons.lab.eng.pnq.redhat.com,O=LAB.ENG.PNQ.REDHAT.COM
        Subject Public Key Info:
            Public Key Algorithm: PKCS #1 RSA Encryption
                RSA Public Key:
                    Modulus:
                        ce:5a:f7:34:bf:26:41:1a:b9:58:2d:12:d1:27:03:56:
                        c4:93:d7:9e:90:aa:bd:22:13:4c:55:24:33:a4:16:83:
                        77:d1:86:b1:a2:c7:b3:9a:fe:20:95:de:ec:d9:7d:e2:
                        d7:2a:0c:dd:97:4b:99:af:e8:ec:db:5c:d8:71:6f:78:
                        60:11:d9:a4:c0:26:d1:87:f1:43:63:99:71:61:82:11:
                        60:9b:2e:99:19:ed:f8:73:96:b6:2b:3f:a5:80:b5:41:
                        d1:d4:72:3e:18:20:4c:5f:f0:c6:45:f1:d9:86:e7:c1:
                        fc:5d:e8:91:4a:f0:e1:e8:5a:da:b7:de:61:98:54:d6:
                        dd:a2:cf:76:99:a8:a3:d9:8c:7f:58:a8:11:72:a6:25:
                        9d:07:1a:42:16:12:c1:ee:e7:5c:3f:fd:97:3c:89:9b:
                        c7:05:ed:89:6a:a8:89:e2:b3:6d:87:23:0c:66:74:fe:
                        d7:93:eb:fc:5d:25:03:8d:fb:80:05:41:6c:fb:68:1f:
                        cd:31:23:e4:63:73:56:94:9e:90:2f:5b:b7:bd:89:8c:
                        97:7e:4e:f2:3d:d3:ad:cb:b9:dc:24:65:24:88:4d:96:
                        00:c5:97:dd:8b:f0:91:3a:d3:b5:0a:dc:08:ad:08:9e:
                        dd:a9:b6:81:a4:4f:9d:aa:2e:4b:b2:8e:aa:07:9a:bb
                    Exponent: 65537 (0x10001)
    Signed Extensions: (4)
        Name: Certificate Authority Key Identifier
        Critical: False
        Key ID:
            be:06:b1:15:11:47:c3:17:49:32:a4:f2:1c:d5:c7:ea:
            39:8a:e5:9b
        Serial Number: None
        General Names: [0 total]

        Name: Authority Information Access
        Critical: False

        Name: Certificate Key Usage
        Critical: True
        Usages:
            Digital Signature
            Non-Repudiation
            Key Encipherment
            Data Encipherment

        Name: Extended Key Usage
        Critical: False
        Usages:
            TLS Web Server Authentication Certificate
            TLS Web Client Authentication Certificate

    Fingerprint (MD5):
        62:5b:95:fb:22:39:a6:fd:ab:07:9d:1e:b5:c5:ab:f9
    Fingerprint (SHA1):
        91:44:d4:65:2f:64:87:dc:73:20:3a:6e:d1:a1:7e:f6:
        80:49:71:2e
    Signature:
        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption
        Signature Data:
            a3:6e:89:a8:c4:40:ea:a2:a0:05:18:81:27:eb:d0:2d:
            c3:1d:c3:ce:9a:bc:c0:17:13:94:51:85:d8:de:a9:bf:
            00:b8:3c:be:d7:2d:ab:7e:cd:d5:36:74:86:42:95:83:
            22:a0:98:10:75:ce:22:12:7d:3e:18:36:0f:d3:40:c1:
            85:c2:34:aa:3a:d3:3e:86:88:e4:16:9f:88:ad:e0:36:
            06:45:ec:a5:53:22:a6:43:38:d8:b6:26:71:45:7d:e7:
            4e:25:05:ed:e5:c3:ad:84:d5:01:19:69:3e:e4:5f:3c:
            b2:4c:c6:55:77:f5:1a:3e:95:82:f5:19:20:92:c9:48:
            78:ec:05:b2:d5:bd:44:10:fb:a1:c8:db:27:15:d7:14:
            58:c9:a1:b2:9f:be:cd:e1:f2:b3:81:d0:9e:cd:35:e5:
            a0:eb:06:dc:94:34:da:7a:23:45:17:6e:8e:31:94:05:
            d8:d4:8b:45:29:7d:c5:f5:e0:f5:e3:8a:a4:0e:3e:90:
            a9:a7:8b:f6:64:34:a0:a0:3b:52:9a:67:79:cb:ca:eb:
            87:88:90:98:7e:a9:53:d6:21:9c:52:9b:b4:f7:3f:91:
            a0:95:ad:f2:28:89:16:b3:34:fa:7e:1d:65:83:07:0f:
            71:fa:5c:5b:6f:c8:47:ed:18:8d:ae:e2:a0:e0:e6:96
ipa: DEBUG: approved_usage = SSLServer intended_usage = SSLServer
ipa: DEBUG: cert valid True for "CN=decepticons.lab.eng.pnq.redhat.com,O=LAB.ENG.PNQ.REDHAT.COM"
ipa: DEBUG: handshake complete, peer = 10.65.201.77:443
ipa: DEBUG: Caught fault 903 from server https://decepticons.lab.eng.pnq.redhat.com/ipa/xml: an internal error has occurred
ipa: DEBUG: Destroyed connection context.xmlclient
ipa: ERROR: an internal error has occurred
[root@decepticons ~]#

Comment 3 Rob Crittenden 2011-11-10 13:51:41 UTC
Moving to 6.3. This isn't a critical failure.

Comment 5 Martin Kosek 2011-11-14 08:08:29 UTC
Upstream ticket:
https://fedorahosted.org/freeipa/ticket/2096

Comment 8 Jenny Severance 2012-03-19 15:45:53 UTC
Verified

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:: [   LOG    ] :: ipaconfig_mod_defaultgroup_negative
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

:: [   LOG    ] :: negative test case for defaultgroup
:: [   LOG    ] :: https://bugzilla.redhat.com/show_bug.cgi?id=752686
:: [   PASS   ] :: set defaultgroup=[doesntexist]
:: [   LOG    ] :: Duration: 1s
:: [   LOG    ] :: Assertions: 1 good, 0 bad
:: [   PASS   ] :: RESULT: ipaconfig_mod_defaultgroup_negative


version:
ipa-server.x86_64 0:2.2.0-4.el6

Comment 10 Martin Kosek 2012-04-19 12:06:57 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No documentation needed.

Comment 12 errata-xmlrpc 2012-06-20 13:16:51 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0819.html