Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 577949
| Summary: | clone from a clone requires contacting original security domain master | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | [Retired] Dogtag Certificate System | Reporter: | Rob Crittenden <rcritten> | ||||||||||
| Component: | Cloning | Assignee: | Ade Lee <alee> | ||||||||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Chandrasekar Kannan <ckannan> | ||||||||||
| Severity: | medium | Docs Contact: | |||||||||||
| Priority: | high | ||||||||||||
| Version: | 1.3 | CC: | awnuk, benl, jgalipea, smohan | ||||||||||
| Target Milestone: | --- | ||||||||||||
| Target Release: | --- | ||||||||||||
| Hardware: | All | ||||||||||||
| OS: | Linux | ||||||||||||
| Whiteboard: | |||||||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||||||
| Doc Text: | Story Points: | --- | |||||||||||
| Clone Of: | Environment: | ||||||||||||
| Last Closed: | 2012-06-04 20:22:52 UTC | Type: | --- | ||||||||||
| Regression: | --- | Mount Type: | --- | ||||||||||
| Documentation: | --- | CRM: | |||||||||||
| Verified Versions: | Category: | --- | |||||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||||
| Embargoed: | |||||||||||||
| Bug Depends On: | |||||||||||||
| Bug Blocks: | 445047, 541012 | ||||||||||||
| Attachments: |
|
||||||||||||
|
Description
Rob Crittenden
2010-03-29 20:01:08 UTC
Created attachment 409191 [details]
patch to fix
patch contains changes needed to allow clone to be a domain master as well.
With these changes, clone of a clone need not contact the original master.
awnuk, please review.
attachment (id=409191) +awnuk checked into 8.1 [builder@goofy-vm4 base]$ svn ci -m "Bug 577949 - clone from a clone requires contacting original security domain master" Sending base/common/src/com/netscape/cms/servlet/csadmin/CreateSubsystemPanel.java Sending base/common/src/com/netscape/cms/servlet/csadmin/DonePanel.java Sending base/common/src/com/netscape/cms/servlet/csadmin/WizardPanelBase.java Sending base/common/src/com/netscape/cmscore/apps/CMSEngine.java Transmitting file data .... Committed revision 1079. checked into tip: [builder@dhcp231-70 base]$ svn ci -m "Bug 577949 - clone from a clone requires contacting original security domain master" Sending base/common/src/com/netscape/cms/servlet/csadmin/CreateSubsystemPanel.java Sending base/common/src/com/netscape/cms/servlet/csadmin/DonePanel.java Sending base/common/src/com/netscape/cms/servlet/csadmin/WizardPanelBase.java Sending base/common/src/com/netscape/cmscore/apps/CMSEngine.java Transmitting file data .... Committed revision 1080. On tip: [builder@dhcp231-70 dogtag]$ svn ci -m "update release numbers for 584917 and 577949" Sending dogtag/ca/pki-ca.spec Sending dogtag/common/pki-common.spec Sending dogtag/kra/pki-kra.spec Sending dogtag/ocsp/pki-ocsp.spec Sending dogtag/selinux/pki-selinux.spec Sending dogtag/tks/pki-tks.spec Transmitting file data ...... Committed revision 1081. Able to select clone CA security domain url, while providing Subsystem Type details for clone of clone CA. But in the subject names of clone of clone CA, it is pointing to Master CA Security domain URL. Please find the screen shots attached. Created attachment 412234 [details]
Screen Shots
Created attachment 414955 [details]
patch to fix part 2
fixes problem in dogtag (due to fix for latest 389 package)
and well as hard-codedness in pkisilent.
tested by Rob.
awnuk, please review
attachment (id=414955) +awnuk Created attachment 415045 [details]
patch to fix part 3
Just fixed small UI issue reported by bhaskar.
Simple fix added to WizardPanelBase.java,
awnuk, please review
checked into dogtag: [builder@dhcp231-70 pki]$ svn ci -m "Bug 577949 - clone from a clone requires contacting original security domain master - additional fixes" Sending base/common/src/com/netscape/cms/servlet/csadmin/WizardPanelBase.java Sending base/silent/src/ca/ConfigureCA.java Sending base/silent/templates/pki_silent.template Transmitting file data ... Committed revision 1103. checked into 8.1 [builder@goofy-vm4 pki]$ svn ci -m "Bug 577949 - clone from a clone requires contacting original security domain master - additional fixes" Sending base/common/src/com/netscape/cms/servlet/csadmin/WizardPanelBase.java Sending base/silent/src/ca/ConfigureCA.java Sending base/silent/templates/pki_silent.template Transmitting file data ... Committed revision 1104. Note to QE/ Docs: when creating a clone using pkisilent, the following parameter is now required: -clone_uri https://<hostname of ca to be cloned>:<EE port of ca to be cloned> attachment (id=415045) +awnuk Tested on RHEL5.4 and it is working fine. Version : pki-ca-8.1.0-1.el5pki redhat-pki-ca-ui-8.1.0-1.el5pki *+ 1 /usr/lib/jvm/jre-1.6.0-openjdk.x86_64/bin/java 2 /usr/lib/jvm/jre1-4.2-gcj/bin/java Verification: Create a clone of a clone CA. Actual results: Able to select clone CA security domain url. Expected Results: Should be able to select Clone CA security domain url. |