Bug 872305 – When importing manifest, Katello doesn't scope the client certificate to access CDN by owner

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 872305 - When importing manifest, Katello doesn't scope the client certificate to access CDN by owner

Summary:	When importing manifest, Katello doesn't scope the client certificate to acce...

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Satellite 6
Classification:	Red Hat
Component:	Content Management (Show other bugs)
Sub Component:
Version:	6.0.1
Hardware:	Unspecified Unspecified

Priority	unspecified Severity high (vote)
Target Milestone:	Unspecified
Target Release:	Unused
Assigned To:	Ivan Necas
QA Contact:	Corey Welton
Docs Contact:

URL:
Whiteboard:
Keywords:	Triaged

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2012-11-01 14:42 EDT by Ivan Necas
Modified:	2013-08-16 14:20 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:	When there were two organizations or more in System Engine, importing a corrupted manifest in one organization stopped repositories from the other organizations to be imported, eventhough the manifest from the second organization is valid. Changes have been made to the process so that when a manifest is imported, the product id is now paired with the organization. Other organizations should have access to their repositories regardless of another organization's corrupted manifest.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2012-12-04 14:57:42 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2012:1543	normal	SHIPPED_LIVE	Important: CloudForms System Engine 1.1 update	2012-12-04 19:39:57 EST

Groups: None (edit)

Description Ivan Necas 2012-11-01 14:42:57 EDT

Description of problem:
Instead of using owner specific client certificate to access CDN, the first certificate for the product is used (across all owners). This break the multi-tenancy.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. create 2 organizations
2. import manifest from https://bugzilla.redhat.com/show_bug.cgi?id=852910
   this manifest has certificates not acceptable by cdn = no repositories are included after import
3. import ordinary simple manifest with RHEL into the second organization
  
Actual results:
No repositories are imported into the second repository

Expected results:
The second organization should have access to their repositories, no matter what happens in other orgs

Additional info:

Comment 1 Ivan Necas 2012-11-02 05:53:15 EDT

Fix in PR https://github.com/Katello/katello/pull/982

Comment 3 Ivan Necas 2012-11-02 09:23:56 EDT

Fixed in commit

  Branch: refs/heads/master
  Commit: ad5b565ac2f367d07b4d969ae62828adc6992ffd
  Author: Ivan Necas <inecas@redhat.com>
  Date:   2012-11-01 (Thu, 01 Nov 2012)

  Changed paths:
    M src/app/models/glue/candlepin/product.rb
    M src/lib/resources/candlepin.rb

  Log Message:
  -----------
  872305 - scope product certificate search by organization

Comment 6 Corey Welton 2012-11-06 12:41:28 EST

QE Verified - after attempting to import the aforementioned "bad" manifest in Org1, I then successfully imported a valid manifest into org2 and was able to see relevant repos.

CloudForms System Engine Version: 1.1.12-20.el6cf

Comment 8 errata-xmlrpc 2012-12-04 14:57:42 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-1543.html

Comment 9 Mike McCune 2013-08-16 14:20:45 EDT

getting rid of 6.0.0 version since that doesn't exist

Note You need to log in before you can comment on or make changes to this bug.