#4121 KeyError on permission-show --all --rights for some system permissions
Closed: Fixed None Opened 10 years ago by pvoborni.

Fail:

[user@ipa ~]$ ipa permission-show 'Add Automember Rebuild Membership Task' --all --rights
ipa: ERROR: an internal error has occurred

OK:

[user@ipa ~]$ ipa permission-show 'Add Automember Rebuild Membership Task' --all 
  dn: cn=Add Automember Rebuild Membership Task,cn=permissions,cn=pbac,dc=modified,dc=test
  Permission name: Add Automember Rebuild Membership Task
  Granted to Privilege: Automember Task Administrator
  ipapermissiontype: SYSTEM
  objectclass: ipapermission, groupofnames, top
[user@ipa ~]$ ipa permission-show 'Add Automember Rebuild Membership Task' --rights 
  Permission name: Add Automember Rebuild Membership Task
  Granted to Privilege: Automember Task Administrator
[user@ipa ~]$ ipa permission-show 'Add Automember Rebuild Membership Task' 
  Permission name: Add Automember Rebuild Membership Task
  Granted to Privilege: Automember Task Administrator

Log:

[Thu Jan 16 16:14:28.750042 2014] [:error] [pid 10503] ipa: DEBUG: raw: permission_show(u'Add Automember Rebuild Membership Task', rights=True, all=True, raw=False, version=u'2.74', no_members=False)
[Thu Jan 16 16:14:28.750264 2014] [:error] [pid 10503] ipa: DEBUG: permission_show(u'Add Automember Rebuild Membership Task', rights=True, all=True, raw=False, version=u'2.74', no_members=False)
[Thu Jan 16 16:14:28.779105 2014] [:error] [pid 10503] ipa: ERROR: non-public: KeyError: 'ipapermtargetfilter'
[Thu Jan 16 16:14:28.779282 2014] [:error] [pid 10503] Traceback (most recent call last):
[Thu Jan 16 16:14:28.779362 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 337, in wsgi_execute
[Thu Jan 16 16:14:28.779449 2014] [:error] [pid 10503]     result = self.Command[name](*args, **options)
[Thu Jan 16 16:14:28.779521 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 436, in __call__
[Thu Jan 16 16:14:28.779596 2014] [:error] [pid 10503]     ret = self.run(*args, **options)
[Thu Jan 16 16:14:28.779702 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipalib/frontend.py", line 755, in run
[Thu Jan 16 16:14:28.779865 2014] [:error] [pid 10503]     result = self.execute(*args, **options)
[Thu Jan 16 16:14:28.779975 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipalib/plugins/baseldap.py", line 1218, in execute
[Thu Jan 16 16:14:28.780054 2014] [:error] [pid 10503]     dn = callback(self, ldap, dn, entry_attrs, *keys, **options)
[Thu Jan 16 16:14:28.780130 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipalib/plugins/permission.py", line 949, in post_callback
[Thu Jan 16 16:14:28.780255 2014] [:error] [pid 10503]     self.obj.postprocess_result(entry, options)
[Thu Jan 16 16:14:28.780368 2014] [:error] [pid 10503]   File "/usr/lib/python2.7/site-packages/ipalib/plugins/permission.py", line 296, in postprocess_result
[Thu Jan 16 16:14:28.780453 2014] [:error] [pid 10503]     rights['memberof'] = rights['ipapermtargetfilter']
[Thu Jan 16 16:14:28.780523 2014] [:error] [pid 10503] KeyError: 'ipapermtargetfilter'
[Thu Jan 16 16:14:28.781165 2014] [:error] [pid 10503] ipa: INFO: [jsonserver_session] admin@MODIFIED.TEST: permission_show(u'Add Automember Rebuild Membership Task', rights=True, all=True, raw=False, version=u'2.74', no_members=False): KeyError

master:

  • 773e006 permission plugin: Do not assume attribute-level rights for new attributes are present

Metadata Update from @pvoborni:
- Issue assigned to pviktori
- Issue set to the milestone: FreeIPA 4.0 - 2014/02

7 years ago

Login to comment on this ticket.

Metadata