[Freeipa-devel] DN patch and documentation

[Petr Vobornik]

On 08/09/2012 02:44 PM, Martin Kosek wrote:
> On 08/08/2012 11:02 PM, John Dennis wrote:
>> All the issues Martin discovered (except for the ip-address parameter) are now
>> fixed and pushed to the dn repo. Also now the dn repo is fully rebased against
>> master (except for one commit for ticket 2954 which I had to revert, see ticket
>> for details).
>>
>> Thank you for the continued testing.
>>
>> FYI: to use the dn repo:
>>
>> git clone git://fedorapeople.org/~jdennis/freeipa.dn.git
>> git checkout dn
>>
>
> Good. I see that all issues except the ipa-replica-prepare are now fixed. I
> verified that this is indeed an issue caused by the DN refactoring, I am
> attaching a patch fixing the issue. With this patch, ipa-replica-prepare issue
> disappears.
>
> Petr Vobornik also noticed an issue with trust-show command. I am attaching a
> patch with fix as well. We push the patches when we are pushing your work.
>
> I have not found any more show-stopping issues, so I will just continue my
> testing, and also give space to other testers in case they discover something else.
>
> Martin
>

I found another issue while adding external member to a group:

freeipa-server-3.0.0GIT675d841-0.fc17.x86_64

  [Fri Aug 10 06:48:45 2012] [error] ipa: ERROR: non-public: 
AssertionError:
  [Fri Aug 10 06:48:45 2012] [error] Traceback (most recent call last):
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 332, in 
wsgi_execute
  [Fri Aug 10 06:48:45 2012] [error]     result = 
self.Command[name](*args, **options)
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 435, in __call__
  [Fri Aug 10 06:48:45 2012] [error]     ret = self.run(*args, **options)
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 747, in run
  [Fri Aug 10 06:48:45 2012] [error]     return self.execute(*args, 
**options)
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py", line 
1568, in execute
  [Fri Aug 10 06:48:45 2012] [error]     **options)
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipalib/plugins/group.py", line 342, in 
post_callback
  [Fri Aug 10 06:48:45 2012] [error]     if 
domain_validator.is_trusted_sid_valid(sid):
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipaserver/dcerpc.py", line 148, in 
is_trusted_sid_valid
  [Fri Aug 10 06:48:45 2012] [error]     self._domains = 
self.get_trusted_domains()
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipaserver/dcerpc.py", line 119, in 
get_trusted_domains
  [Fri Aug 10 06:48:45 2012] [error] 
attrs_list=[self.ATTR_TRUSTED_SID, 'dn'])
  [Fri Aug 10 06:48:45 2012] [error]   File 
"/usr/lib/python2.7/site-packages/ipaserver/plugins/ldap2.py", line 
1087, in find_entries
  [Fri Aug 10 06:48:45 2012] [error]     assert isinstance(base_dn, DN)
  [Fri Aug 10 06:48:45 2012] [error] AssertionError
  [Fri Aug 10 06:48:45 2012] [error] ipa: INFO: 
admin at IDM.LAB.BOS.REDHAT.COM: group_add_member(u'external', 
ipaexternalmember=u'S-1-5-21-2085708479-1865276630-1146473440-1'): 
AssertionError

-- 
Petr Vobornik