[Freeipa-devel] general error message at the attempt to set domain level to 0

[Tomas Babej]

On 07/20/2015 01:32 PM, Martin Basti wrote:
> On 20/07/15 13:21, Oleg Fayans wrote:
>> Hi Martin,
>>
>> [Mon Jul 20 06:41:09.540097 2015] [wsgi:error] [pid 15186] ipa: ERROR:
>> non-public: ValueError: non-generic 'InvalidDomainLevelError' needs
>> format=None; got format=Gettext('Domain Level cannot be lowered.',
>> domain='ipa', localedir=None)
>> [Mon Jul 20 06:41:09.540118 2015] [wsgi:error] [pid 15186] Traceback
>> (most recent call last):
>> [Mon Jul 20 06:41:09.540121 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 347,
>> in wsgi_execute
>> [Mon Jul 20 06:41:09.540122 2015] [wsgi:error] [pid 15186] result =
>> self.Command[name](*args, **options)
>> [Mon Jul 20 06:41:09.540124 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 443, in
>> __call__
>> [Mon Jul 20 06:41:09.540125 2015] [wsgi:error] [pid 15186]     ret =
>> self.run(*args, **options)
>> [Mon Jul 20 06:41:09.540127 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 760, in run
>> [Mon Jul 20 06:41:09.540128 2015] [wsgi:error] [pid 15186] return
>> self.execute(*args, **options)
>> [Mon Jul 20 06:41:09.540129 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipalib/plugins/domainlevel.py", line
>> 123, in execute
>> [Mon Jul 20 06:41:09.540131 2015] [wsgi:error] [pid 15186] raise
>> errors.InvalidDomainLevelError(message)
>> [Mon Jul 20 06:41:09.540132 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipalib/errors.py", line 248, in
>> __init__
>> [Mon Jul 20 06:41:09.540133 2015] [wsgi:error] [pid 15186]
>> messages.process_message_arguments(self, format, message, **kw)
>> [Mon Jul 20 06:41:09.540135 2015] [wsgi:error] [pid 15186]   File
>> "/usr/lib/python2.7/site-packages/ipalib/messages.py", line 52, in
>> process_message_arguments
>> [Mon Jul 20 06:41:09.540136 2015] [wsgi:error] [pid 15186] name, format)
>>
> Can you please file this as a bug?
> We need fix it in 4.3
> 
> Thank you.
>>
>> On 07/20/2015 01:04 PM, Martin Basti wrote:
>>> On 20/07/15 12:47, Oleg Fayans wrote:
>>>> Hi everybody,
>>>>
>>>> I keep receiving the same non-specific error message during attepts
>>>> to set domain level to 0:
>>>> $ ipa domainlevel-set 0
>>>> ipa: ERROR: an internal error has occurred
>>>>
>>>> This error does not get recorded in the directory server errors log.
>>>> Real-time observations on the access log show that only the
>>>> following lines get added:
>>>>
>>>> [20/Jul/2015:06:45:07 -0400] conn=151 op=0 BIND dn="" method=sasl
>>>> version=3 mech=GSSAPI
>>>> [20/Jul/2015:06:45:07 -0400] conn=2 op=984 RESULT err=0 tag=101
>>>> nentries=1 etime=0
>>>> [20/Jul/2015:06:45:07 -0400] conn=151 op=0 RESULT err=14 tag=97
>>>> nentries=0 etime=0, SASL bind in progress
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=1 BIND dn="" method=sasl
>>>> version=3 mech=GSSAPI
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=2 BIND dn="" method=sasl
>>>> version=3 mech=GSSAPI
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=3 SRCH
>>>> base="cn=ipaconfig,cn=etc,dc=pesen,dc=net" scope=0
>>>> filter="(objectClass=*)" attrs=ALL
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=2 RESULT err=0 tag=97
>>>> nentries=0 etime=0 dn="uid=admin,cn=users,cn=accounts,dc=pesen,dc=net"
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=3 RESULT err=0 tag=101
>>>> nentries=1 etime=0
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=4 SRCH base="cn=Domain
>>>> Level,cn=ipa,cn=etc,dc=pesen,dc=net" scope=0
>>>> filter="(objectClass=*)" attrs=ALL
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=4 RESULT err=0 tag=101
>>>> nentries=1 etime=0
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=1 RESULT err=14 tag=97
>>>> nentries=0 etime=0, SASL bind in progress
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=5 UNBIND
>>>> [20/Jul/2015:06:45:08 -0400] conn=151 op=5 fd=102 closed - U1
>>>>
>>>> According to Ludwig, decreasing of the domain level is not
>>>> supported, so we should provide some meaningfull error message in
>>>> this case
>>>>
>>>> P. S.
>>>> $ rpm -q freeipa-server
>>>> freeipa-server-4.2.90.201507171036GITf1f3ef4-0.fc22.x86_64
>>>> The packages were built on Friday from the upstream master.
>>>>
>>> Can you paste apache error log here please?
>>>
>>
> 
> 

This is just an incorrect initialization of the InvalidDomainLevelError.

Pushed to master: 37b1af9a7cea72f41ac468ab80259f39b0a7b3db
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-tbabej-0341-domainlevel-Fix-incorrect-initializations-of-Invalid.patch
Type: text/x-patch
Size: 2282 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150720/eeb4deb0/attachment.bin>