Hide Forgot
Description of problem: You should not be able to modify certificate subject base, it is set on install and not configurable ipa config-mod --setattr=ipacertificatesubjectbase="OU=Bogus" is successful Version-Release number of selected component (if applicable): ipa-server-2.2.0-5.el6.x86_64 How reproducible: always Steps to Reproduce: 1. kinit admin 2.ipa config-mod --setattr=ipacertificatesubjectbase="OU=Bogus" 3. Actual results: Expected results: Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2580
Fixed upstream: master: https://fedorahosted.org/freeipa/changeset/1af36da933cd3c788e3a48257e2f5c286e985e22
Verified using ipa-server.x86_64 0:3.0.0-21.el6 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: ipaconfig_addaddtr negative test - ipacertificatesubjectbase only one allowed :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [16:13:08] :: Executing: ipa config-mod --addattr=ipacertificatesubjectbase=O=DOMAIN.COM ipa: ERROR: invalid 'ipacertificatesubjectbase': attribute is not configurable :: [16:13:09] :: "ipa config-mod --addattr=ipacertificatesubjectbase=O=DOMAIN.COM" failed as expected. :: [ PASS ] :: Error message as expected: ipa: ERROR: invalid 'ipacertificatesubjectbase': attribute is not configurable :: [ PASS ] :: Verify expected error message. :: [16:13:10] :: Verifies bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=807018 'f470a471-0e82-4a1a-ac50-621c66ecb702' ipaconfig-addaddtr-negative-test-ipacertificatesubjectbase-only-one-allowed result: PASS
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2013-0528.html