September 2017 - 389-devel - Fedora mailing-lists

Please review: Issue #77 - Refactor docstrings in rST format - part 1
by Simon Pichugin 15 Nov '17

15 Nov '17

Hi team, please, check out the new docs. https://fedorapeople.org/~spichugi/html/index.html https://pagure.io/lib389/issue/77 https://pagure.io/lib389/issue/raw/files/2e181d5321f194587899b1cbb37455d86d… Thanks, Simon

1 2

Please review 48085: CI tests - replication - mmr state tests
by Sankar Ramalingam 12 Oct '17

12 Oct '17

https://pagure.io/389-ds-base/issue/48085 https://pagure.io/389-ds-base/issue/raw/files/335c138fefedfe99173c0b1902ffe…

1 4

please review: Ticket 49038 - Remove legacy replication
by Mark Reynolds 04 Oct '17

04 Oct '17

https://pagure.io/389-ds-base/issue/49038 https://pagure.io/389-ds-base/issue/raw/fd4fec903b65d4a7cb32861012f24f5be76…

2 3

please review: Ticket 49385 - Fix coverity warnings
by Mark Reynolds 02 Oct '17

02 Oct '17

https://pagure.io/389-ds-base/issue/49385 https://pagure.io/389-ds-base/issue/raw/files/ee9f6ff34fcd4d54094c8b4883397…

1 2

PR_ASSERT problem
by Carsten Grzemba 30 Sep '17

30 Sep '17

my build on OpenIndiana with the IllumOS provided NSPR cores on startup of some commands: $ pwdhash Assertion failure: 0 == lock->notified.length, at /jenkins/jobs/oi-userland/workspace/components/library/mozilla-nspr/nspr-4.12/nspr/pr/src/pthreads/ptsynch.c:159 /usr/bin/pwdhash: line 60: 5993: Abort(coredump) $ pstack core core 'core' of 5993: /usr/bin/amd64/pwdhash-bin fffffd7fff2b4eda _lwp_kill () + a fffffd7fff2480e0 raise (6) + 20 fffffd7fff220818 abort () + 98 fffffd7ff943fda2 ???????? () fffffd7ff9457828 PR_DestroyLock () + d8 fffffd7ff978bc2a slapi_entry_free () + 11a 0000000000402888 init_config () + 2d8 0000000000402d43 main () + 353 000000000040235c _start () + 6c Before I dive in the source code, has anyone a hint where I can start to search what happens here? <signaturebeforequotedtext></signaturebeforequotedtext><signatureafterquotedtext></signatureafterquotedtext>

2 5

Build failed in Jenkins: NIGHTLY #92
by mareynol＠redhat.com 29 Sep '17

29 Sep '17

See <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/92/display/re…> ------------------------------------------ [...truncated 6809 lines...] File "/usr/lib64/python2.7/threading.py", line 804, in __bootstrap_inner self.run() File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…",> line 51, in run conn = self.openConnection(self.inst) File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…",> line 45, in openConnection server.open() File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…",> line 1127, in open raise e SERVER_DOWN: {'\''desc'\'': "Can'\''t contact LDAP server"} INFO:dirsrvtests.tests.suites.replication.cleanallruv_test:test_stress_clean: put master 4 into read-only mode... CRITICAL:dirsrvtests.tests.suites.replication.cleanallruv_test:test_stress_clean: Failed to put master 4 into read-only mode: error Can'\''t contact LDAP server ________________________ test_multiple_tasks_with_force ________________________ topology_m4 = <lib389.topologies.TopologyMain object at 0x7fd2beb69f50> def test_multiple_tasks_with_force(topology_m4): """Check that multiple tasks with a '\''force'\'' option work properly :ID: eb76a93d-8d1c-405e-9f25-6e8d5a781098 :feature: CleanAllRUV :setup: Replication setup with four masters :steps: 1. Stop master 3 2. Add a bunch of updates to master 4 3. Disable replication on master 4 4. Start master 3 5. Remove agreements to master 4 from other masters 6. Run a cleanallruv task on master 1 with a '\''force'\'' option '\''on'\'' 7. Run one more cleanallruv task on master 1 with a '\''force'\'' option '\''off'\'' 8. Check that everything was cleaned and no hanging tasks left :expectedresults: Everything was cleaned and no hanging tasks left """ log.info('\''Running test_multiple_tasks_with_force...'\'') # Stop master 3, while we update master 4, so that 3 is behind the other masters topology_m4.ms["master3"].stop(timeout=10) # Add a bunch of updates to master 4 m4_add_users = AddUsers(topology_m4.ms["master4"], 1500) m4_add_users.start() m4_add_users.join() # Disable master 4 log.info('\''test_multiple_tasks_with_force: disable master 4...'\'') > topology_m4.ms["master4"].replica.disableReplication(DEFAULT_SUFFIX) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:817: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:453: in disableReplication mtents = self.conn.mappingtree.list(suffix=nsuffix) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:70: in list filt) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:597: in search_s return self.search_ext_s(base,scope,filterstr,attrlist,attrsonly,None,None,timeout=self.timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:590: in search_ext_s msgid = self.search_ext(base,scope,filterstr,attrlist,attrsonly,serverctrls,clientctrls,timeout,sizelimit) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:586: in search_ext timeout,sizelimit, <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <lib389.DirSrv object at 0x7fd2bf00c650> func = <built-in method search_ext of LDAP object at 0x7fd2c8c57e18> args = ('\''cn=mapping tree,cn=config'\'', 1, '\''(cn=dc=example,dc=com)'\'', None, 0, None, ...) kwargs = {}, diagnostic_message_success = None e = SERVER_DOWN({'\''desc'\'': "Can'\''t contact LDAP server"},) def _ldap_call(self,func,*args,**kwargs): """ Wrapper method mainly for serializing calls into OpenLDAP libs and trace logs """ self._ldap_object_lock.acquire() if __debug__: if self._trace_level>=1: self._trace_file.write('\''*** %s %s - %s\n%s\n'\'' % ( repr(self), self._uri, '\''.'\''.join((self.__class__.__name__,func.__name__)), pprint.pformat((args,kwargs)) )) if self._trace_level>=9: traceback.print_stack(limit=self._trace_stack_limit,file=self._trace_file) diagnostic_message_success = None try: try: > result = func(*args,**kwargs) E SERVER_DOWN: {'\''desc'\'': "Can'\''t contact LDAP server"} /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:106: SERVER_DOWN ----------------------------- Captured stderr call ----------------------------- INFO:dirsrvtests.tests.suites.replication.cleanallruv_test:Running test_multiple_tasks_with_force... Exception in thread Thread-67: Traceback (most recent call last): File "/usr/lib64/python2.7/threading.py", line 804, in __bootstrap_inner self.run() File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…",> line 51, in run conn = self.openConnection(self.inst) File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…",> line 45, in openConnection server.open() File "<http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…",> line 1127, in open raise e SERVER_DOWN: {'\''desc'\'': "Can'\''t contact LDAP server"} INFO:dirsrvtests.tests.suites.replication.cleanallruv_test:test_multiple_tasks_with_force: disable master 4... _____________________________ test_mail_attr_repl ______________________________ topo_r = <lib389.topologies.TopologyMain object at 0x7fd2beb69b50> test_user = None def test_mail_attr_repl(topo_r, test_user): """Check that no crash happens during mail attribute replication :ID: 959edc84-05be-4bf9-a541-53afae482052 :feature: Single master replication :setup: Replication setup with master and consumer instances, test user on master :steps: 1. Check that user was replicated to consumer 2. Back up mail database file 3. Remove mail attribute from the user entry 4. Restore mail database 5. Search for the entry with a substring '\''mail=user*'\'' 6. Search for the entry once again to make sure that server is alive :expectedresults: No crash happens """ master = topo_r.ms["master1"] consumer = topo_r.cs["consumer1"] log.info("Wait for a user to be replicated") time.sleep(3) log.info("Check that replication is working") entries = consumer.search_s(DEFAULT_SUFFIX, ldap.SCOPE_SUBTREE, "uid={}".format(TEST_USER_NAME), ["uid"]) assert entries, "User {} wasn'\''t replicated successfully".format(TEST_USER_NAME) entries = consumer.backend.list(DEFAULT_SUFFIX) db_dir = entries[0]["nsslapd-directory"] mail_db = filter(lambda fl: fl.startswith("mail"), os.listdir(db_dir)) assert mail_db, "mail.* wasn'\''t found in {}" mail_db_path = os.path.join(db_dir, mail_db[0]) backup_path = os.path.join(DEFAULT_BACKUPDIR, mail_db[0]) consumer.stop() log.info("Back up {} to {}".format(mail_db_path, backup_path)) shutil.copyfile(mail_db_path, backup_path) consumer.start() log.info("Remove '\''mail'\'' attr from master") try: master.modify_s(TEST_USER_DN, [(ldap.MOD_DELETE, '\''mail'\'', '\''{}(a)redhat.com'\''.format(TEST_USER_NAME))]) except ldap.LDAPError as e: log.error('\''Failed to delete att user {}: error {}'\''.format(TEST_USER_DN, e.message['\''desc'\''])) raise e log.info("Wait for the replication to happen") time.sleep(5) consumer.stop() log.info("Restore {} to {}".format(backup_path, mail_db_path)) shutil.copyfile(backup_path, mail_db_path) > consumer.start() <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:133: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:1180: in start "dirsrv@%s" % self.serverid]) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ popenargs = (['\''/usr/bin/systemctl'\'', '\''start'\'', '\''dirsrv@consumer1'\''],), kwargs = {} retcode = 1, cmd = ['\''/usr/bin/systemctl'\'', '\''start'\'', '\''dirsrv@consumer1'\''] def check_call(*popenargs, **kwargs): """Run command with arguments. Wait for command to complete. If the exit code was zero then return, otherwise raise CalledProcessError. The CalledProcessError object will have the return code in the returncode attribute. The arguments are the same as for the Popen constructor. Example: check_call(["ls", "-l"]) """ retcode = call(*popenargs, **kwargs) if retcode: cmd = kwargs.get("args") if cmd is None: cmd = popenargs[0] > raise CalledProcessError(retcode, cmd) E CalledProcessError: Command '\''['\''/usr/bin/systemctl'\'', '\''start'\'', '\''dirsrv@consumer1'\'']'\'' returned non-zero exit status 1 /usr/lib64/python2.7/subprocess.py:186: CalledProcessError ---------------------------- Captured stdout setup ----------------------------- OK group dirsrv exists OK user dirsrv exists OK group dirsrv exists OK user dirsrv exists ('\''Update succeeded: status '\'', '\''0 Total update succeeded'\'') ---------------------------- Captured stderr setup ----------------------------- INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39201, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''consumer1'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}Su2JJHV1gnmfuj9r4aBSVuhCu+cBCPkbrsrZ5qvNy8YjloaOOb6ygdaSDEbtTwYvRoMiyS8WUTK/YqDHKV2GM0jIWOYHq3Mj INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39001, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master1'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}lWE9XevV1srQKk05+U6I78KeAgCA6+os9FtH7CkhHjlKu+cO3fJZ22EJ1lSZezrz+r74GtTRS+EF9PQg26cNRPnP1moqg9nI INFO:Replica:Starting async replication cn=meTo_localhost:39201,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config INFO:dirsrvtests.tests.suites.replication.single_master_test:Adding user uid=smrepl_test,dc=example,dc=com ----------------------------- Captured stderr call ----------------------------- INFO:dirsrvtests.tests.suites.replication.single_master_test:Wait for a user to be replicated INFO:dirsrvtests.tests.suites.replication.single_master_test:Check that replication is working INFO:lib389:List backend with suffix=dc=example,dc=com INFO:dirsrvtests.tests.suites.replication.single_master_test:Back up /var/lib/dirsrv/slapd-consumer1/db/userRoot/mail.db to /tmp/mail.db INFO:dirsrvtests.tests.suites.replication.single_master_test:Remove '\''mail'\'' attr from master INFO:dirsrvtests.tests.suites.replication.single_master_test:Wait for the replication to happen INFO:dirsrvtests.tests.suites.replication.single_master_test:Restore /tmp/mail.db to /var/lib/dirsrv/slapd-consumer1/db/userRoot/mail.db Job for dirsrv(a)consumer1.service failed because a fatal signal was delivered to the control process. See "systemctl status dirsrv(a)consumer1.service" and "journalctl -xe" for details. ======== 10 failed, 573 passed, 1 skipped, 33 error in 11631.25 seconds ========' + '[' 1 -ne 0 ']' + echo CI Tests 'FAILED!' CI Tests FAILED! + MSG=FAILED + RC=1 + sudo /usr/sbin/sendmail mreynolds(a)redhat.com firstyear(a)redhat.com + sudo rm -rf /var/tmp/slapd.vg.51356 /var/tmp/slapd.vg.78052 /var/tmp/slapd.vg.78194 /var/tmp/slapd.vg.95273 + exit 1 Build step 'Execute shell' marked build as failure

1 1

Please review: 49387 pkbdf rounds too high
by William Brown 29 Sep '17

29 Sep '17

https://pagure.io/389-ds-base/issue/49387 https://pagure.io/389-ds-base/issue/raw/files/dcb804622ee5fb5606ddd03ee59c6… -- Sincerely, William Brown Software Engineer Red Hat, Australia/Brisbane

1 0

please review: Ticket 100 - lib389 - Add ENV variable for preserving core files
by Mark Reynolds 28 Sep '17

28 Sep '17

https://pagure.io/lib389/issue/100 https://pagure.io/lib389/issue/raw/files/520cb8277ae20eff1f5b791976d696d324…

1 1

Please review, /49372
by William Brown 28 Sep '17

28 Sep '17

Fixes to the filter optimiser, https://pagure.io/389-ds-base/issue/49372 https://pagure.io/389-ds-base/issue/raw/files/60d7f2c562f8e4d2f2ac2b1a3dd61… -- Sincerely, William Brown Software Engineer Red Hat, Australia/Brisbane

1 0

I'm back! Please review 49378
by William Brown 28 Sep '17

28 Sep '17

In typical fashion, I'm taking it slow on my return. Which means I have two patches for review. https://pagure.io/389-ds-base/issue/49378 https://pagure.io/389-ds-base/issue/raw/files/9f43e2d45818aa9adba4bea8a41f7… -- Sincerely, William Brown Software Engineer Red Hat, Australia/Brisbane

1 0

please review: Ticket 49305 - Need to wrap atomic functions for certain platforms
by Mark Reynolds 27 Sep '17

27 Sep '17

https://pagure.io/389-ds-base/issue/49305 https://pagure.io/389-ds-base/issue/raw/files/cc4ec2d39d7beeb323184e53ae04a…

2 2

Please review 48973: Indexing a ExactIA5Match attribute with a IgnoreIA5Match matching rule triggers a warning
by thierry bordaz 27 Sep '17

27 Sep '17

https://pagure.io/389-ds-base/issue/48973 https://pagure.io/389-ds-base/issue/raw/files/e9c88aa920e588d5fd279b2671c58…

1 0

Please review 48085: CI tests - replication - encryption changelog
by Sankar Ramalingam 27 Sep '17

27 Sep '17

https://pagure.io/389-ds-base/issue/48085 https://pagure.io/389-ds-base/issue/raw/files/fbabcd04dff4ee4043341fddb2939…

1 4

Opportunist for Outreachy
by M.S. 27 Sep '17

27 Sep '17

Hello everyone, I'm a research student pursuing my Masters in IIIT-Hyderabad. I am keen on working on the 389 Directory Server project for Outreachy. I have prior experience in configuring, maintaining and managing systems in an MHRD(Ministry of Human Resource Development, India) funded project. I have completed the required course credits towards my degree and am working on my Thesis currently. This would be great a opportunity for me to learn and start contributing to the open source community at Fedora. As I am a bit new to the community it would be nice if anyone could guide me to a few useful resources to get me started. I started reading the documentation [1]. [1] http://www.port389.org/ Cheers, Soumya

2 1

email
by Alisha Aneja 26 Sep '17

26 Sep '17

anejaalisha37(a)gmail.com

1 0

Please review: Issue 99 - Fix typo in create_topology
by Simon Pichugin 25 Sep '17

25 Sep '17

Hi team, please review two line patch. https://pagure.io/lib389/issue/99 https://pagure.io/lib389/issue/raw/files/f3e504a5779b08eedf743645be3ab3af60… Thanks, Simon

1 0

Build failed in Jenkins: NIGHTLY #84
by mareynol＠redhat.com 24 Sep '17

24 Sep '17

See <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/84/display/re…> ------------------------------------------ [...truncated 5415 lines...] :assert: Should return error code 19 """ suffix = DEFAULT_SUFFIX subtree = "ou=people" userid = "inactusr" nousrs = 3 log.info('\''AccountInactivityLimit set to 10. Account will be inactivated if not accessed in 10 secs'\'') add_users(topology_st, suffix, subtree, userid, nousrs, 0) log.info('\''Sleep for 9 secs to check if account is not inactivated, expected value 0'\'') time.sleep(9) log.info('\''Account should not be inactivated since AccountInactivityLimit not exceeded'\'') account_status(topology_st, suffix, subtree, userid, 3, 2, "Enabled") log.info('\''Sleep for 2 more secs to check if account is inactivated'\'') time.sleep(2) account_status(topology_st, suffix, subtree, userid, 2, 0, "Disabled") log.info('\''Sleep +9 secs to check if account {}3 is inactivated'\''.format(userid)) time.sleep(9) account_status(topology_st, suffix, subtree, userid, 3, 2, "Disabled") log.info('\''Add lastLoginTime attribute to all users and check if its activated'\'') add_time_attr(topology_st, suffix, subtree, userid, nousrs, '\''lastLoginTime'\'') > account_status(topology_st, suffix, subtree, userid, nousrs, 0, "Enabled") <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:883: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ topology_st = <lib389.topologies.TopologyMain object at 0x7f60926d5850> suffix = '\''dc=example,dc=com'\'', subtree = '\''ou=people'\'', userid = '\''inactusr'\'' nousrs = 3, ulimit = 0, tochck = '\''Enabled'\'' def account_status(topology_st, suffix, subtree, userid, nousrs, ulimit, tochck): """Check account status for the given suffix, subtree, userid and nousrs""" while (nousrs > ulimit): usrrdn = '\''{}{}'\''.format(userid, nousrs) userdn = '\''uid={},{},{}'\''.format(usrrdn, subtree, suffix) if (tochck == "Enabled"): try: topology_st.standalone.simple_bind_s(userdn, USER_PASW) except ldap.LDAPError as e: log.error('\''User {} failed to login, expected 0'\''.format(userdn)) > raise e E CONSTRAINT_VIOLATION: {'\''info'\'': '\''Account inactivity limit exceeded. Contact system administrator to reset.'\'', '\''desc'\'': '\''Constraint violation'\''} <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:306: CONSTRAINT_VIOLATION ---------------------------- Captured stderr setup ----------------------------- INFO:lib389.utils:Adding Local account policy plugin configuration entries ----------------------------- Captured stderr call ----------------------------- INFO:lib389.utils:AccountInactivityLimit set to 10. Account will be inactivated if not accessed in 10 secs INFO:lib389.utils:add_users: Pass all of these as parameters suffix, subtree, userid and nousrs INFO:lib389.utils:Sleep for 9 secs to check if account is not inactivated, expected value 0 INFO:lib389.utils:Account should not be inactivated since AccountInactivityLimit not exceeded INFO:lib389.utils:Sleep for 2 more secs to check if account is inactivated INFO:lib389.utils:Sleep +9 secs to check if account inactusr3 is inactivated INFO:lib389.utils:Add lastLoginTime attribute to all users and check if its activated INFO:lib389.utils:Enable account by replacing lastLoginTime/createTimeStamp/ModifyTimeStamp attribute ERROR:lib389.utils:User uid=inactusr3,ou=people,dc=example,dc=com failed to login, expected 0 _____________________________ test_locinact_modrdn _____________________________ topology_st = <lib389.topologies.TopologyMain object at 0x7f60926d5850> accpol_local = None def test_locinact_modrdn(topology_st, accpol_local): """Verify if user account is inactivated when moved from ou=groups to ou=people subtree. :ID: 5f25bea3-fab0-4db4-b43d-2d47cc6e5ad1 :feature: Account Policy Plugin :setup: Standalone instance, ou=people subtree configured for Local account policy plugin configuration, set accountInactivityLimit to few secs. :steps: 1. Add few users to ou=groups subtree in the default suffix 2. Plugin configured to ou=people subtree only. 3. Wait for few secs before it reaches accountInactivityLimit and check users. 4. Run ldapsearch as normal user, expected 0 5. Wait till accountInactivityLimit exceeded 6. Move users from ou=groups subtree to ou=people subtree 7. Check if users are inactivated, expected error 19 :assert: Should return error code 0 and 19 """ suffix = DEFAULT_SUFFIX subtree = "ou=groups" userid = "nolockusr" nousrs = 1 log.info('\''Account should not be inactivated since the subtree is not configured'\'') > add_users(topology_st, suffix, subtree, userid, nousrs, 0) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:909: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:278: in add_users users.create(properties=user_properties) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:833: in create return co.create(rdn, properties, self._basedn) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:640: in create self._instance.add_s(e) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:158: in inner return f(ent.dn, ent.toTupleList(), *args[2:]) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:210: in add_s return self.result(msgid,all=1,timeout=self.timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:130: in inner objtype, data = f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:503: in result resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:507: in result2 resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:514: in result3 resp_ctrl_classes=resp_ctrl_classes <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:521: in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <lib389.DirSrv object at 0x7f60926d58d0> func = <built-in method result4 of LDAP object at 0x7f609f229260> args = (14, 1, -1, 0, 0, 0), kwargs = {}, diagnostic_message_success = None e = INSUFFICIENT_ACCESS({'\''info'\'': "Insufficient '\''add'\'' privilege to the '\''userPassword'\'' attribute", '\''desc'\'': '\''Insufficient access'\''},) def _ldap_call(self,func,*args,**kwargs): """ Wrapper method mainly for serializing calls into OpenLDAP libs and trace logs """ self._ldap_object_lock.acquire() if __debug__: if self._trace_level>=1: self._trace_file.write('\''*** %s %s - %s\n%s\n'\'' % ( repr(self), self._uri, '\''.'\''.join((self.__class__.__name__,func.__name__)), pprint.pformat((args,kwargs)) )) if self._trace_level>=9: traceback.print_stack(limit=self._trace_stack_limit,file=self._trace_file) diagnostic_message_success = None try: try: > result = func(*args,**kwargs) E INSUFFICIENT_ACCESS: {'\''info'\'': "Insufficient '\''add'\'' privilege to the '\''userPassword'\'' attribute", '\''desc'\'': '\''Insufficient access'\''} /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:106: INSUFFICIENT_ACCESS ----------------------------- Captured stderr call ----------------------------- INFO:lib389.utils:Account should not be inactivated since the subtree is not configured INFO:lib389.utils:add_users: Pass all of these as parameters suffix, subtree, userid and nousrs ______________________________ test_locact_modrdn ______________________________ topology_st = <lib389.topologies.TopologyMain object at 0x7f60926d5850> accpol_local = None def test_locact_modrdn(topology_st, accpol_local): """Verify if user account is inactivated when users moved from ou=people to ou=groups subtree. :ID: e821cbae-bfc3-40d3-947d-b228c809987f :feature: Account Policy Plugin :setup: Standalone instance, ou=people subtree configured for Local account policy plugin configuration, set accountInactivityLimit to few secs. :steps: 1. Add few users to ou=people subtree in the default suffix 2. Wait for few secs and check if users not inactivated, expected 0. 3. Move users from ou=people to ou=groups subtree 4. Wait till accountInactivityLimit is exceeded 5. Check if users are active in ou=groups subtree, expected 0 :assert: Should return error code 0 """ suffix = DEFAULT_SUFFIX subtree = "ou=people" userid = "lockusr" nousrs = 1 log.info('\''Account should be inactivated since the subtree is configured'\'') > add_users(topology_st, suffix, subtree, userid, nousrs, 0) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:950: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:278: in add_users users.create(properties=user_properties) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:833: in create return co.create(rdn, properties, self._basedn) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:640: in create self._instance.add_s(e) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:158: in inner return f(ent.dn, ent.toTupleList(), *args[2:]) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:210: in add_s return self.result(msgid,all=1,timeout=self.timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:130: in inner objtype, data = f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:503: in result resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:507: in result2 resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:514: in result3 resp_ctrl_classes=resp_ctrl_classes <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:521: in result4 ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/lib…>:162: in inner return f(*args, **kwargs) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ self = <lib389.DirSrv object at 0x7f60926d58d0> func = <built-in method result4 of LDAP object at 0x7f609f229260> args = (15, 1, -1, 0, 0, 0), kwargs = {}, diagnostic_message_success = None e = INSUFFICIENT_ACCESS({'\''info'\'': "Insufficient '\''add'\'' privilege to the '\''userPassword'\'' attribute", '\''desc'\'': '\''Insufficient access'\''},) def _ldap_call(self,func,*args,**kwargs): """ Wrapper method mainly for serializing calls into OpenLDAP libs and trace logs """ self._ldap_object_lock.acquire() if __debug__: if self._trace_level>=1: self._trace_file.write('\''*** %s %s - %s\n%s\n'\'' % ( repr(self), self._uri, '\''.'\''.join((self.__class__.__name__,func.__name__)), pprint.pformat((args,kwargs)) )) if self._trace_level>=9: traceback.print_stack(limit=self._trace_stack_limit,file=self._trace_file) diagnostic_message_success = None try: try: > result = func(*args,**kwargs) E INSUFFICIENT_ACCESS: {'\''info'\'': "Insufficient '\''add'\'' privilege to the '\''userPassword'\'' attribute", '\''desc'\'': '\''Insufficient access'\''} /usr/lib64/python2.7/site-packages/ldap/ldapobject.py:106: INSUFFICIENT_ACCESS ----------------------------- Captured stderr call ----------------------------- INFO:lib389.utils:Account should be inactivated since the subtree is configured INFO:lib389.utils:add_users: Pass all of these as parameters suffix, subtree, userid and nousrs ============= 11 failed, 597 passed, 1 skipped in 12728.25 seconds =============' + '[' 1 -ne 0 ']' + echo CI Tests 'FAILED!' CI Tests FAILED! + MSG=FAILED + RC=1 + sudo /usr/sbin/sendmail mreynolds(a)redhat.com firstyear(a)redhat.com + sudo rm -rf /var/tmp/slapd.vg.124754 /var/tmp/slapd.vg.20629 /var/tmp/slapd.vg.20771 /var/tmp/slapd.vg.36027 + exit 1 Build step 'Execute shell' marked build as failure

1 4

[lib389] Issue #98: Improve dbscan output
by Sankar Ramalingam 22 Sep '17

22 Sep '17

https://pagure.io/lib389/issue/98 https://pagure.io/lib389/issue/raw/files/b240188a582e4d6c094e3eea30cef4b028…

1 5

please review: Ticket 49327 - Add CI test for password expiration controls
by Mark Reynolds 21 Sep '17

21 Sep '17

https://pagure.io/389-ds-base/issue/49327 https://pagure.io/389-ds-base/issue/raw/files/29d1d8592045b32fe8a7f5a0e6541…

1 1

Please review 48085: CI tests - replication cl5 tests
by Sankar Ramalingam 20 Sep '17

20 Sep '17

https://pagure.io/389-ds-base/issue/48085 https://pagure.io/389-ds-base/issue/raw/files/feafa7591adf08944d689e1f4f9e0…

1 11

Please review: Issue 49381 - Refactor numerous suite docstrings
by Simon Pichugin 19 Sep '17

19 Sep '17

Hi team, please, review the patch for suite docs. https://pagure.io/389-ds-base/issue/49381 https://pagure.io/389-ds-base/issue/raw/files/5e909fe03f497ebad570a73364de1… Thanks, Simon

1 2

please review: Ticket 49379 - Allowed sasl mechanisms get truncated at server restart
by Mark Reynolds 18 Sep '17

18 Sep '17

This addresses three issues: [1] Adding/removing an allowed sasl mechanism from a preexisting list requires a restart to take effect [2] Restarting the server twice causes the allowed sasl mech list to get truncated [3] Crash when using sasl PLAIN mechanism https://pagure.io/389-ds-base/issue/49379 https://pagure.io/389-ds-base/issue/raw/files/888f686d3c35ab4c7e960e45b2f5e…

1 0

Build failed in Jenkins: NIGHTLY #80
by mareynol＠redhat.com 17 Sep '17

17 Sep '17

See <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/80/display/re…> ------------------------------------------ [...truncated 4484 lines...] suites/password/pwdPolicy_warning_test.py::test_default_behavior PASSED suites/password/pwdPolicy_warning_test.py::test_when_maxage_and_warning_are_the_same PASSED suites/password/pwdPolicy_warning_test.py::test_with_local_policy PASSED suites/password/pwd_algo_test.py::test_pwd_algo_test PASSED suites/password/pwd_lockout_bypass_test.py::test_lockout_bypass PASSED suites/password/pwp_history_test.py::test_pwp_history_test PASSED suites/password/regression_test.py::test_trivial_passw_check[UIDpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[MAILpwtest1@redhat.com] PASSED suites/password/regression_test.py::test_trivial_passw_check[GNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[CNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[SNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[CNpwtest1ZZZZ] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZZZZCNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZCNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[CNpwtest1Z] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZCNpwtest1Z] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZCNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[CNpwtest1ZZ] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZCNpwtest1ZZ] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZZCNpwtest1] PASSED suites/password/regression_test.py::test_trivial_passw_check[CNpwtest1ZZZ] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZZCNpwtest1ZZZ] PASSED suites/password/regression_test.py::test_trivial_passw_check[ZZZZZZCNpwtest1ZZZZZZZZ] PASSED suites/password/regression_test.py::test_global_vs_local[UIDpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[MAILpwtest1@redhat.com] PASSED suites/password/regression_test.py::test_global_vs_local[GNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[CNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[SNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[CNpwtest1ZZZZ] PASSED suites/password/regression_test.py::test_global_vs_local[ZZZZZCNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[ZCNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[CNpwtest1Z] PASSED suites/password/regression_test.py::test_global_vs_local[ZCNpwtest1Z] PASSED suites/password/regression_test.py::test_global_vs_local[ZZCNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[CNpwtest1ZZ] PASSED suites/password/regression_test.py::test_global_vs_local[ZZCNpwtest1ZZ] PASSED suites/password/regression_test.py::test_global_vs_local[ZZZCNpwtest1] PASSED suites/password/regression_test.py::test_global_vs_local[CNpwtest1ZZZ] PASSED suites/password/regression_test.py::test_global_vs_local[ZZZCNpwtest1ZZZ] PASSED suites/password/regression_test.py::test_global_vs_local[ZZZZZZCNpwtest1ZZZZZZZZ] PASSED suites/plugins/accpol_test.py::test_glact_inact PASSED suites/plugins/accpol_test.py::test_glremv_lastlogin PASSED suites/plugins/accpol_test.py::test_glact_login PASSED suites/plugins/accpol_test.py::test_glinact_limit PASSED suites/plugins/accpol_test.py::test_glnologin_attr PASSED suites/plugins/accpol_test.py::test_glnoalt_stattr PASSED suites/plugins/accpol_test.py::test_glattr_modtime PASSED suites/plugins/accpol_test.py::test_glnoalt_nologin PASSED suites/plugins/accpol_test.py::test_glinact_nsact PASSED suites/plugins/accpol_test.py::test_glinact_acclock PASSED suites/plugins/accpol_test.py::test_glnact_pwexp PASSED suites/plugins/accpol_test.py::test_locact_inact PASSED suites/plugins/accpol_test.py::test_locinact_modrdn PASSED suites/plugins/accpol_test.py::test_locact_modrdn PASSED suites/plugins/attr_uniqueness_test.py::test_attr_uniqueness_init PASSED suites/plugins/attr_uniqueness_test.py::test_attr_uniqueness PASSED suites/plugins/dna_test.py::test_basic PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_001 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_003 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_004 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_005 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_006 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_007 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_008 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_009 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_010 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_011 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_012 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_013 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_014 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_015 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_016 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_017 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_018 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_019 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_020 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_021 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_022 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_023 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_024 PASSED suites/plugins/memberof_test.py::test_memberof_MultiGrpAttr_025 PASSED suites/plugins/memberof_test.py::test_memberof_auto_add_oc PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_init PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_specific_time PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_day_of_week PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_denied_ip PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_denied_host PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_allowed_ip PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_access_allowed_host PASSED suites/plugins/rootdn_plugin_test.py::test_rootdn_config_validate PASSED suites/psearch/psearch_test.py::test_psearch PASSED suites/replication/acceptance_test.py::test_add_entry PASSED suites/replication/acceptance_test.py::test_modify_entry PASSED suites/replication/acceptance_test.py::test_delete_entry PASSED suites/replication/acceptance_test.py::test_modrdn_entry[0] PASSED suites/replication/acceptance_test.py::test_modrdn_entry[1] PASSED suites/replication/acceptance_test.py::test_modrdn_after_pause PASSED suites/replication/acceptance_test.py::test_modify_stripattrs PASSED suites/replication/acceptance_test.py::test_new_suffix PASSED suites/replication/acceptance_test.py::test_many_attrs PASSED suites/replication/acceptance_test.py::test_double_delete PASSED suites/replication/acceptance_test.py::test_password_repl_error PASSED suites/replication/acceptance_test.py::test_invalid_agmt PASSED suites/replication/cleanallruv_test.py::test_clean PASSED suites/replication/cleanallruv_test.py::test_clean_restart PASSED suites/replication/cleanallruv_test.py::test_clean_force PASSED suites/replication/cleanallruv_test.py::test_abort PASSED suites/replication/cleanallruv_test.py::test_abort_restart PASSED suites/replication/cleanallruv_test.py::test_abort_certify PASSED suites/replication/cleanallruv_test.py::test_stress_clean PASSED suites/replication/cleanallruv_test.py::test_multiple_tasks_with_force PASSED suites/replication/single_master_test.py::test_mail_attr_repl PASSED suites/replication/single_master_test.py::test_lastupdate_attr_before_init PASSED suites/replication/tombstone_test.py::test_purge_success PASSED suites/replication/wait_for_async_feature_test.py::test_not_int_value PASSED suites/replication/wait_for_async_feature_test.py::test_multi_value PASSED suites/replication/wait_for_async_feature_test.py::test_value_check[waitfor_async_attr0] PASSED suites/replication/wait_for_async_feature_test.py::test_value_check[waitfor_async_attr1] PASSED suites/replication/wait_for_async_feature_test.py::test_value_check[waitfor_async_attr2] PASSED suites/replication/wait_for_async_feature_test.py::test_value_check[waitfor_async_attr3] PASSED suites/replication/wait_for_async_feature_test.py::test_behavior_with_value[waitfor_async_attr0] PASSED suites/replication/wait_for_async_feature_test.py::test_behavior_with_value[waitfor_async_attr1] PASSED suites/replication/wait_for_async_feature_test.py::test_behavior_with_value[waitfor_async_attr2] PASSED suites/replication/wait_for_async_feature_test.py::test_behavior_with_value[waitfor_async_attr3] PASSED suites/schema/test_eduperson.py::test_account_locking PASSED suites/schema/test_schema.py::test_schema_comparewithfiles PASSED suites/setup_ds/setup_ds_test.py::test_slapd_InstScriptsEnabled[true] PASSED suites/setup_ds/setup_ds_test.py::test_slapd_InstScriptsEnabled[false] PASSED =================================== FAILURES =================================== _______________________________ test_ticket49008 _______________________________ T = <lib389.topologies.TopologyMain object at 0x7fe2874e4f90> def test_ticket49008(T): A = T.ms['\''master1'\''] B = T.ms['\''master2'\''] C = T.ms['\''master3'\''] A.enableReplLogging() B.enableReplLogging() C.enableReplLogging() AtoB = A.agreement.list(suffix=DEFAULT_SUFFIX)[0].dn AtoC = A.agreement.list(suffix=DEFAULT_SUFFIX)[1].dn CtoA = C.agreement.list(suffix=DEFAULT_SUFFIX)[0].dn CtoB = C.agreement.list(suffix=DEFAULT_SUFFIX)[1].dn # we want replication in a line A <==> B <==> C A.agreement.pause(AtoC) C.agreement.pause(CtoA) # Enable memberOf on Master B B.plugins.enable(name=PLUGIN_MEMBER_OF) # Set the auto OC to an objectclass that does NOT allow memberOf B.modify_s('\''cn=MemberOf Plugin,cn=plugins,cn=config'\'', [(ldap.MOD_REPLACE, '\''memberofAutoAddOC'\'', '\''referral'\'')]) B.restart(timeout=10) # add a few entries allowing memberof for i in range(1, 6): name = "userX{}".format(i) dn = "cn={},{}".format(name, DEFAULT_SUFFIX) A.add_s(Entry((dn, {'\''objectclass'\'': "top person inetuser".split(), '\''sn'\'': name, '\''cn'\'': name}))) # add a few entries not allowing memberof for i in range(1, 6): name = "userY{}".format(i) dn = "cn={},{}".format(name, DEFAULT_SUFFIX) A.add_s(Entry((dn, {'\''objectclass'\'': "top person".split(), '\''sn'\'': name, '\''cn'\'': name}))) time.sleep(15) A_entries = A.search_s(DEFAULT_SUFFIX, ldap.SCOPE_SUBTREE, '\''(objectClass=person)'\'') B_entries = B.search_s(DEFAULT_SUFFIX, ldap.SCOPE_SUBTREE, '\''(objectClass=person)'\'') C_entries = C.search_s(DEFAULT_SUFFIX, ldap.SCOPE_SUBTREE, '\''(objectClass=person)'\'') log.debug("A contains: %s", A_entries) log.debug("B contains: %s", B_entries) log.debug("C contains: %s", C_entries) assert len(A_entries) == len(B_entries) > assert len(B_entries) == len(C_entries) E assert 10 == 9 E + where 10 = len([dn: cn=userX1,dc=example,dc=com\ncn: userX1\nobjectClass: top\nobjectClass: person\nobjectClass: inetuser\nsn: userX1\n\n, d...etuser\nsn: userX5\n\n, dn: cn=userY1,dc=example,dc=com\ncn: userY1\nobjectClass: top\nobjectClass: person\nsn: userY1\n\n, ...]) E + and 9 = len([dn: cn=userX1,dc=example,dc=com\ncn: userX1\nobjectClass: top\nobjectClass: person\nobjectClass: inetuser\nsn: userX1\n\n, d...etuser\nsn: userX5\n\n, dn: cn=userY1,dc=example,dc=com\ncn: userY1\nobjectClass: top\nobjectClass: person\nsn: userY1\n\n, ...]) <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:73: AssertionError ---------------------------- Captured stdout setup ----------------------------- OK group dirsrv exists OK user dirsrv exists OK group dirsrv exists OK user dirsrv exists OK group dirsrv exists OK user dirsrv exists ('\''Update succeeded: status '\'', '\''0 Total update succeeded'\'') ('\''Update succeeded: status '\'', '\''0 Total update succeeded'\'') ---------------------------- Captured stderr setup ----------------------------- INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39001, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master1'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}rycuhcZr7zKqq/4EY0y6X8kN+cpyRabWB3Ih0vPwCehMgVZtTjEvU+ZaVggtRzR4L/R+pB4TrxNgpTNvCUDfeWUkPdkcJKdx INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39002, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master2'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}w0RRNwRdjI1JgO4rj058YMozMybb5bf8seiudggHVB7iDhF8BcDBb+tdlu6tZksNnbIFcZJiAuJ3TwUZteJ71fO+GmtK6I36 INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39003, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master3'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}G04pu5779mDYQnEt7xVR5dYzYFZmYS7xdP3TbsmOnQ+zJHEiTmANtQuzHSWr8TsMGASbL/MwoUvAS4PKAGS/oStM/YA2/Oz1 INFO:Replica:Starting async replication cn=meTo_localhost:39002,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config INFO:Replica:Starting async replication cn=meTo_localhost:39003,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config ----------------------------- Captured stderr call ----------------------------- INFO:lib389:Pausing replication cn=meTo_localhost:39003,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config INFO:lib389:Pausing replication cn=meTo_localhost:39001,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config ============= 1 failed, 604 passed, 1 skipped in 12664.86 seconds ==============' + '[' 1 -ne 0 ']' + echo CI Tests 'FAILED!' CI Tests FAILED! + MSG=FAILED + RC=1 + sudo /usr/sbin/sendmail mreynolds(a)redhat.com firstyear(a)redhat.com + sudo rm -rf /var/tmp/slapd.vg.32283 /var/tmp/slapd.vg.59031 /var/tmp/slapd.vg.59177 /var/tmp/slapd.vg.74320 + exit 1 Build step 'Execute shell' marked build as failure

1 1

Build failed in Jenkins: NIGHTLY #71
by mareynol＠redhat.com 15 Sep '17

15 Sep '17

See <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/71/display/re…> ------------------------------------------ [...truncated 4714 lines...] tickets/ticket47462_test.py:155: _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ ../../../lib389/lib389/__init__.py:2588: in upgrade DirSrvTools.runUpgrade(self.prefix, online) _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ prefix = '\''/usr'\'', online = True @staticmethod def runUpgrade(prefix, online=True): '\'''\'''\'' Run "setup-ds.pl --update" We simply pass in one DirSrv isntance, and this will update all the instances that are in this prefix. For the update to work we must fix/adjust the permissions of the scripts in: /prefix/lib[64]/dirsrv/slapd-INSTANCE/ '\'''\'''\'' libdir = os.path.join(_ds_paths.lib_dir, '\''dirsrv'\'') # Gather all the instances so we can adjust the permissions, otherwise servers = [] path = os.path.join(_ds_paths.sysconf_dir, '\''dirsrv'\'') for files in os.listdir(path): if files.startswith('\''slapd-'\'') and not files.endswith('\''.removed'\''): servers.append(os.path.join(libdir, files)) if len(servers) == 0: # This should not happen log.fatal('\''runUpgrade: no servers found!'\'') assert False '\'''\'''\'' The setup script calls things like /lib/dirsrv/slapd-instance/db2bak, etc, and when we run the setup perl script it gets permission denied as the default permissions are 750. Adjust the permissions to 755. '\'''\'''\'' for instance in servers: for files in os.listdir(instance): os.chmod(os.path.join(instance, files), 755) # Run the "upgrade" try: prog = os.path.join(_ds_paths.sbin_dir, PATH_SETUP_DS) process = subprocess.Popen([prog, '\''--update'\''], shell=False, stdin=subprocess.PIPE) # Answer the interactive questions, as "--update" currently does # not work with INF files process.stdin.write('\''yes\n'\'') if(online): process.stdin.write('\''online\n'\'') for x in servers: process.stdin.write(DN_DM + '\''\n'\'') process.stdin.write(PW_DM + '\''\n'\'') else: process.stdin.write('\''offline\n'\'') process.stdin.close() process.wait() if process.returncode != 0: log.fatal('\''runUpgrade failed! Error: %s '\'' % process.returncode) > assert(False) E assert False ../../../lib389/lib389/tools.py:952: AssertionError ---------------------------- Captured stdout setup ----------------------------- OK group dirsrv exists OK user dirsrv exists OK group dirsrv exists OK user dirsrv exists ('\''Update succeeded: status '\'', '\''0 Total update succeeded'\'') ---------------------------- Captured stderr setup ----------------------------- INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39001, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master1'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}f6aZQxcJAMoeRJTIEGkMpmi0vRWkeZvZiLcgMJSG5eEbcB7gyp5C0Fcc5ACw72vjMAJauFL3uf3tIVsPP67LSkTPEXM3yYJg INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 39002, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''master2'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}5rZlhk81VphZK7fGesS76HZHgAKlJB+3T8u7OmqsKDDABGUHmhMa85PZ6sY1w6xM3eRkIlDS0u1sy8plFRBE06ayi82Y0t+n INFO:Replica:Starting async replication cn=meTo_localhost:39002,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config ----------------------------- Captured stdout call ----------------------------- ============================================================================== This program will update the 389 Directory Server. It is recommended that you have "root" privilege to perform the update. Tips for using this program: - Press "Enter" to choose the default and go to the next screen - Type "Control-B" or the word "back" then "Enter" to go back to the previous screen - Type "Control-C" to cancel the update Would you like to continue with update? [yes]: ============================================================================== The update process can work in one of two modes: - Online: The changes are made to the running directory servers using LDAP. The operations must be performed as an administrative user. You must provide the name and password, for each instance if there is more than one instance of directory server. Some operations may require a directory server restart to take effect. The update script will notify you if you need to restart the server. - Offline: The changes are made to the server configuration files. The servers MUST FIRST BE SHUTDOWN BY YOU. The script will not shutdown the servers for you. You MUST shutdown the servers in order to use this mode. A username and password are not required to use Offline mode. If the servers are not shutdown, CHANGES WILL BE LOST. To summarize: Online - servers remain running - you must provide admin name and password for each server - servers may need to be restarted Offline - servers must be shutdown - no username or password required Which update mode do you want to use? [quit]: ============================================================================== Please specify the authentication data for '\''slapd-master1'\'' Full DN of administrative user [cn=Directory Manager]: Password for this user: ============================================================================== Please specify the authentication data for '\''slapd-master2'\'' Full DN of administrative user [cn=Directory Manager]: Password for this user: Could not open the LDIF template file '\''/usr/share/dirsrv/data/template-pampta.ldif'\''. Error: No such file or directory Error: could not update the directory server. Exiting . . . Log file is '\''/tmp/setuppZKy_F.log'\'' ----------------------------- Captured stderr call ----------------------------- INFO:dirsrvtests.tests.tickets.ticket47462_test:Found agmt dn (cn=meTo_localhost:39002,cn=replica,cn=dc\3Dexample\2Cdc\3Dcom,cn=mapping tree,cn=config) INFO:dirsrvtests.tests.tickets.ticket47462_test:Successfully modified replication agreement INFO:dirsrvtests.tests.tickets.ticket47462_test:Replication test passed INFO:lib389:List backend with suffix=o=empty INFO:lib389:Creating a local backend INFO:lib389:List backend cn=empty,cn=ldbm database,cn=plugins,cn=config INFO:lib389:Found entry dn: cn=empty,cn=ldbm database,cn=plugins,cn=config cn: empty nsslapd-cachememsize: 512000 nsslapd-cachesize: -1 nsslapd-directory: /var/lib/dirsrv/slapd-master1/db/empty nsslapd-dncachememsize: 16777216 nsslapd-readonly: off nsslapd-require-index: off nsslapd-suffix: o=empty objectClass: top objectClass: extensibleObject objectClass: nsBackendInstance /bin/stty: '\''standard input'\'': Inappropriate ioctl for device /bin/stty: '\''standard input'\'': Inappropriate ioctl for device /bin/stty: '\''standard input'\'': Inappropriate ioctl for device /bin/stty: '\''standard input'\'': Inappropriate ioctl for device Updating instance (slapd-master1)... CRITICAL:lib389.tools:runUpgrade failed! Error: 1 CRITICAL:lib389.tools:runUpgrade failed! _______________________ test_lastupdate_attr_before_init _______________________ topo_nr = <lib389.topologies.TopologyMain object at 0x7f0ecad6f310> replica_without_init = '\''cn=meTo_localhost:38902,cn=replica,cn=dc\\3Dexample\\2Cdc\\3Dcom,cn=mapping tree,cn=config'\'' def test_lastupdate_attr_before_init(topo_nr, replica_without_init): """Check that LastUpdate replica attributes show right values :ID: bc8ce431-ff65-41f5-9331-605cbcaaa887 :feature: Single master replication :setup: Replication setup with master and consumer instances without initialization :steps: 1. Check nsds5replicaLastUpdateStart, nsds5replicaLastUpdateEnd, nsds5replicaLastUpdateStatus attrs :expectedresults: nsds5replicaLastUpdateStart: 0, nsds5replicaLastUpdateEnd: 0 and nsds5replicaLastUpdateStatus is not equal to "0 Replica acquired successfully: Incremental update started" """ master = topo_nr.ins["standalone1"] consumer = topo_nr.ins["standalone2"] assert not master.testReplication(DEFAULT_SUFFIX, consumer) agmt = master.search_s(replica_without_init, ldap.SCOPE_BASE, "(objectClass=*)", ["nsds5replicaLastUpdateStart", "nsds5replicaLastUpdateEnd", "nsds5replicaLastUpdateStatus"])[0] assert agmt["nsds5replicaLastUpdateStart"] == "19700101000000Z" assert agmt["nsds5replicaLastUpdateEnd"] == "19700101000000Z" > assert "Replica acquired successfully" not in agmt["nsds5replicaLastUpdateStatus"] E assert '\''Replica acq...successfully'\'' not in '\''Error (0) Re...date started'\'' E '\''Replica acquired successfully'\'' is contained here: E Error (0) Replica acquired successfully: Incremental update started <http://vm-166.abc.idm.lab.eng.brq.redhat.com:8080/job/NIGHTLY/ws/source/389…>:170: AssertionError ---------------------------- Captured stdout setup ----------------------------- OK group dirsrv exists OK user dirsrv exists OK group dirsrv exists OK user dirsrv exists ---------------------------- Captured stderr setup ----------------------------- INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 38901, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''standalone1'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389.topologies:Instance with parameters {'\''ldap-port'\'': 38902, '\''suffix'\'': '\''dc=example,dc=com'\'', '\''krb5_realm'\'': None, '\''deployed-dir'\'': '\''/usr'\'', '\''inst-backupdir'\'': '\''/tmp'\'', '\''hostname'\'': '\''localhost'\'', '\''server-id'\'': '\''standalone2'\'', '\''root-pw'\'': '\''password'\'', '\''root-dn'\'': '\''cn=Directory Manager'\'', '\''group-id'\'': None, '\''InstScriptsEnabled'\'': None, '\''user-id'\'': None, '\''ldap-secureport'\'': None} was created. INFO:lib389:List backend with suffix=dc=example,dc=com INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}fSVgiwmjzWOsGKZZ1a3igvjLrXAtzvviaoqQJxjTCOxq/50irwUXg1uSGGRQlku1eKvg3atsFhADux2dVWHGikmnIhpyDCHZ INFO:lib389:List backend with suffix=dc=example,dc=com INFO:lib389:Found entry dn: cn=replrepl,cn=config cn: bind dn pseudo user cn: replrepl objectClass: top objectClass: person sn: bind dn pseudo user userPassword: {SSHA512}jRRQmpXrtZYjcClT8h0WxbDXSWrOabFbllVqEU7IL7OTMNISaeGCHrOxC8aHhWHXqw7gm8VM+14TR7PEKzTJRYWxpcdPbCow ----------------------------- Captured stderr call ----------------------------- CRITICAL:lib389:Replication is not in sync with replica server (standalone2) ============= 2 failed, 580 passed, 1 skipped in 13789.67 seconds ==============' + '[' 1 -ne 0 ']' + echo CI Tests 'FAILED!' CI Tests FAILED! + MSG=FAILED + RC=1 + sudo /usr/sbin/sendmail mreynolds(a)redhat.com firstyear(a)redhat.com + sudo rm -rf /var/tmp/slapd.vg.121587 /var/tmp/slapd.vg.121743 /var/tmp/slapd.vg.5621 /var/tmp/slapd.vg.96805 + exit 1 Build step 'Execute shell' marked build as failure

4 11

please review: Ticket 49327 - password expired control not sent if within grace login limit
by Mark Reynolds 14 Sep '17

14 Sep '17

https://pagure.io/389-ds-base/issue/49327 https://pagure.io/389-ds-base/issue/raw/files/f247b3545fab542b24f88aae6dbd3…

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-devel September 2017