freeipa

#7029 Fix inconsistent reporting of server roles/attributes in *config-show commands
Closed: fixed Opened by mbabinsk.

Closed: fixed
Reopen Issue

In FreeIPA 4.4.x, *config-show commands were not returning anything for empty server attributes (DNSSec key master, CA renewal master) and returned empty list when no server role such as CA, KRA was enabled in topology (or the requestor had not read privilege for the service entries).

In other plugin, however, if the optional attribute is not set or the requestor has no read access to it, it was not sent at all in the response. We should amend the behavior of this component to conform to intended semantics of output parameters.

Metadata Update from @mbabinsk:
- Issue assigned to mbabinsk

Regression in 4.5

Metadata Update from @mbasti:
- Issue set to the milestone: FreeIPA 4.5.3

master:

  • f4d77533f5e0cb306da2aeb9548d891c5264c088 *config-show: Do not show empty roles/attributes
  • e2e380e83be8bafd8cf23e0a395edf065b1ae961 Do not remove the old masters when setting the attribute fails

ipa-4-5:

  • 2431c76775a1e314a3a03f608bb7aa776d3c8bf2 *config-show: Do not show empty roles/attributes
  • 03a30c0fb2748d5724112e702567c71cbd19d624 Do not remove the old masters when setting the attribute fails

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.