freeipa

#7111 Incorrect attribute level rights (ipaallowedtoperform) of service object
Closed: fixed Opened by pvoborni.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1477531

Description of problem:
In WebUI tables for "Allowed for retrieve/create keytab"
user/host/hostgroups/usergroups on service details page are shown as read-only
- it is not possible to add anything. This state is there until the first
user/usergroup/host/hostgroup is added over CLI. Then tables become writable.
Before adding user/usergroup/host/hostgroup in CLI the API response does not
contain 'ipaallowedtoperform' in attributelevelrights at all. After that the
attribute level right is added into response and WebUI is shown correctly.
Version-Release number of selected component (if applicable):
ipa-4.5.0-21.el7_4.1
How reproducible:
Always
Steps to Reproduce:
1. Install ipa server
2. Go to WebUI Identity - Services
3. Choose any service
4. Scroll down to 'Allow to retrieve/create keytab'
5. It is not possible to add any user/usergroup/host/hostgroup
6. Open command line and add a user to the particular service
$ ipa service-allow-create-keytab
7. Go back to WebUI
8. Add button is now not grayed out
Actual results:
step 5
Expected results:
It should be possible to add user/usergroup/host/hostgroup right away, not only
after first add.
Additional info:

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1477531

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1477531

Metadata Update from @tkrizek:
- Issue set to the milestone: FreeIPA 4.5.5 (was: FreeIPA 4.5.4)

@pvomacka this might be fixable by 'w_if_no_aci'

Metadata Update from @pvoborni:
- Issue priority set to: important
- Issue tagged with: bug, regression, webui

Metadata Update from @pvoborni:
- Issue priority set to: critical (was: important)

Metadata Update from @pvomacka:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/1402

The PR is ready for review, but during developing the fix, I found new issue reported here: https://pagure.io/freeipa/issue/7324

master:

  • cf2d171d0c7ec4d3d212eef42007cea392265895 WebUI: make keytab tables on service and host pages writable

ipa-4-6:

  • b9dc5697f4b15561aa94e103bad6e9153239065a WebUI: make keytab tables on service and host pages writable

ipa-4-5:

  • 4304b80184e9cdafb222f6cd7a6fa84cd99bcb63 WebUI: make keytab tables on service and host pages writable

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None

bug regression webui

None
None
Lowest
https://github.com/freeipa/freeipa/pull/1402
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.