freeipa

#8203 User page on WebUi only has half the information in CA-less install
Closed: fixed by frenaud. Opened by thinkl33t.

Closed: fixed
Reopen Issue

Issue

In a CA-less install of freeipa 4.8.4 (also confirmed in 4.8.0), a javascript error while the page loads stops all the data from loading. Reformatting the app.js, and setting break on exceptions gives an error:

TypeError: record is undefined

This is happening in the following function, when we are trying to get the CA information as part of usercertificate

load: function (data) {
            var record = this.get_record(data);
            for (var i = 0; i < record.length; i++) {
              this.normalize_object(record[i])
            }
            return record
          }

Having a look at the data['result'] array

element 0 appears to be my user details - looks fine, contains usercertificate as expected
element 1 appears to be an error: 4001 - None: password policy not found
element 2 appears to be another copy of my user details
element 3 appears to be another error: 4001 - CA is not configured

I think the actual error is in the get_record function:

get_record: function (data) {
            if (data.id === undefined || data.result === undefined || data.error === undefined) {
              return data
            }
            var dr = data.result;
            var record = null;
            if (dr) {
              if (IPA.defined(dr[this.result_name])) record = dr[this.result_name];
               else if (dr.results) {
                var result = dr.results[this.result_index];
                if (result) record = result[this.result_name];
                var res_type = typeof record;
                var obj_in_type = typeof this.object_index;
                if (record && res_type === 'object' && obj_in_type === 'number') record = record[this.object_index]
              }
            }
            return record
          },

the line thats breaking here is:

if (result) record = result[this.result_name];

When we're trying to get the CA details - result_index is set to 3, so we get data['result'][3]['result'] - but data['result'][3] is actually an error message:

error: "CA is not configured"
​​​​error_code: 4001
​​​​error_kw: {…}
​​​error_name: "NotFound"
​<prototype>: {…}

so undefined gets returned, and the javascript stops running when we try to access undefined.length

We have a pair of freeipa 4.5.4 servers in the same domain, and can confirm that the issue doesn't occur on them.

Steps to Reproduce

  1. have freeipa 4.8.4 in a ca-less environment
  2. open a user's details page

Actual behavior

only half the user's data is displayed correctly - all boxes after 'Certificates' are empty / editable. This means that if you hit 'Save', the contents of these fields is wiped!

Expected behavior

User data to be displayed as previously

Version/Release/Distribution

$ rpm -q freeipa-server freeipa-client ipa-server ipa-client 389-ds-base pki-ca krb5-server

freeipa-server-4.8.4-2.fc31.x86_64
freeipa-client-4.8.4-2.fc31.x86_64
package ipa-server is not installed
package ipa-client is not installed
389-ds-base-1.4.2.7-1.fc31.x86_64
pki-ca-10.7.3-3.fc31.noarch
krb5-server-1.17-46.fc31.x86_64

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1835853

Issue linked to Bugzilla: Bug 1835853

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4831
- Issue assigned to stsymbal

The issue was fixed in cert plugin:

https://pagure.io/freeipa/c/32c64a78cef499c05e4ffa71d033692571297dca

Since it is old fix it is already in older FreeIPA version branches. So no backport is needed.

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1835853, https://bugzilla.redhat.com/show_bug.cgi?id=1884819 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1835853)

Issue linked to Bugzilla: Bug 1884819

The issue is also seen in RHEL 7.9, meaning it's present on ipa-4-6 branch.

@frenaud

The issue fixed here https://pagure.io/freeipa/issue/8369

I've updated BZ issue.

Commits ref for 8369:
master:

  • 19544d53aeada733eb63d596be0a8576b17b9d04 fix cert-find errors in CA-less deployment

ipa-4-6:

  • eb8cb4d941ed8d4d76772a7a7d65c018497cb615 fix cert-find errors in CA-less deployment

ipa-4-8:

  • 60a58eac02ed2c0741fbce3c1fb3acceef61fdbc fix cert-find errors in CA-less deployment

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

master:

  • a0d11517f8482b79bccea6f3fa73e02db3024e98 WebUI: test_user: test if user is enabled by default

ipa-4-9:

  • b3488b21319ad6ec800796313fdb7cd23ae17c23 WebUI: test_user: test if user is enabled by default

ipa-4-8:

  • 6737790b34e6a7b7bf7f522cb673d9662a23d10b WebUI: test_user: test if user is enabled by default
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.