freeipa

#9794 Unable to modify IPA config; --ipaconfigstring="" causes internal error
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

This ticket has been cloned from https://issues.redhat.com/browse/RHEL-93483

Attempting to modify IPA configuration using ipa config-mod --ipaconfigstring="" results in an internal server error.

This prevents resetting the "Password plugin features" configuration.

Steps to Reproduce

[root@master ~]# ipa config-mod --ipaconfigstring=""
ipa: ERROR: an internal error has occurred

Version/Release/Distribution

rpm -qa ipa-server
ipa-server-4.12.2-16.el9.x86_64

Additional info:

error log:

[Mon May 26 01:37:10.274578 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616] ipa: ERROR: non-public: TypeError: 'NoneType' object is not iterable
[Mon May 26 01:37:10.274595 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616] Traceback (most recent call last):
[Mon May 26 01:37:10.274599 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipaserver/rpcserver.py", line 417, in wsgi_execute
[Mon May 26 01:37:10.274602 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]     result = command(*args, **options)
[Mon May 26 01:37:10.274614 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 477, in __call__
[Mon May 26 01:37:10.274617 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]     return self.__do_call(*args, **options)
[Mon May 26 01:37:10.274621 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 544, in __do_call
[Mon May 26 01:37:10.274624 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]     ret = self.run(*args, **options)
[Mon May 26 01:37:10.274627 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipalib/frontend.py", line 885, in run
[                               ]
[Mon May 26 01:37:10.274633 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipaserver/plugins/baseldap.py", line 1523, in execute
[Mon May 26 01:37:10.274636 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]     entry_attrs.dn = callback(
[Mon May 26 01:37:10.274639 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]   File "/usr/lib/python3.9/site-packages/ipaserver/plugins/config.py", line 693, in pre_callback
[Mon May 26 01:37:10.274643 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616]     if 'SubID:Disable'.lower() in map(str.lower, configstring):
[Mon May 26 01:37:10.274646 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616] TypeError: 'NoneType' object is not iterable
[Mon May 26 01:37:10.274751 2025] [wsgi:error] [pid 32890:tid 33391] [remote 10.0.192.47:40616] ipa: INFO: [jsonserver_kerb] admin@IPADOMAIN.TEST: config_mod/1(ipaconfigstring=None, ipakrbauthzdata=None, version='2.254'): InternalError

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-93483, https://issues.redhat.com/browse/RHEL-93484

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/7827

master:

  • e4a3d46e89a49e18fa437723370988b165ded4b5 ipa config-mod: fix internalerror when setting an empty ipaconfigstring

ipa-4-12:

  • 1c069653806ce8224132a35d6d3bd01ac53098b6 ipa config-mod: fix internalerror when setting an empty ipaconfigstring

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

easyfix

None
None
None
https://github.com/freeipa/freeipa/pull/7827
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.