Bug 996535 - Adding user from IPA with many groups return error but user is added successfully to system.
Summary: Adding user from IPA with many groups return error but user is added successf...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine
Version: 3.2.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: 3.4.0
Assignee: Nobody's working on this, feel free to take it
QA Contact:
URL:
Whiteboard: infra
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-08-13 11:37 UTC by Ondra Machacek
Modified: 2016-02-10 19:16 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-08-26 12:19:15 UTC
oVirt Team: Infra
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Ondra Machacek 2013-08-13 11:37:15 UTC
Description of problem:
When adding user which has many of groups assigned, action fails and user is added to system. (tested on IPA with user who has ~96groups)

Version-Release number of selected component (if applicable):
3.3.0-0.14.master.el6ev

How reproducible:
always

Steps to Reproduce:
1. Add user with many groups to rhevm.

Actual results:
Error while executing action: A Request to the Server failed with the following Status Code: 500

Expected results:
Added successfully and don't return any error.

Additional info:
engine.log

2013-08-13 13:32:13,598 INFO  [org.ovirt.engine.core.bll.AddUserCommand] (pool-5-thread-49) [24ae529b] Running command: AddUserCommand internal: false. Entities affected :  ID: aaa00000-0000-0000-0000-123456789aaa Type: System
2013-08-13 13:32:13,647 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (pool-5-thread-49) [24ae529b] Correlation ID: 24ae529b, Call Stack: null, Custom Event ID: -1, Message: User 'vdcalladmin.LAB.ENG.BRQ.REDHAT.COM' was added successfully to the system.

Comment 1 Yair Zaslavsky 2013-08-14 01:52:30 UTC
manage-domains does not try to perform group population (i.e - calculate the groups of the added user), therefore a user with any number of groups (even way more than 96) will be successfully added to the system.

Engine however has to take into consideration the groups, and checks group membership (as it may change).
Please attach the full engine.log to this bug.

Comment 2 Yair Zaslavsky 2013-08-14 01:54:03 UTC
Suggesting this to 3.4 as part of authentication + user/group information retrieval  rewrite effort.

Comment 3 Ondra Machacek 2013-08-26 12:19:15 UTC
Did not repruduce on is11, closing as current release.


Note You need to log in before you can comment on or make changes to this bug.