[Freeipa-devel] upstream build failure

2015-06-15 Thread Oleg Fayans 

Hi guys,

The attempt to build the latest upstream branch fails with the following 
error:


 aci: (targetattr = krblastpwdchange || krbpasswordexpiration || 
krbprincipalkey || userpassword)(target = ldap:///uid=*,cn=deleted 
users,cn=accounts,cn=provisioning,dc=ipa,dc=example)(targetfilter = 
(objectclass=posixaccount))(version 3.0;acl permission:System: Reset 
Preserved User password;allow (read,search,write) groupdn = 
ldap:///cn=System: Reset Preserved User 
password,cn=permissions,cn=pbac,dc=ipa,dc=example;)

 dn: dc=ipa,dc=example
 aci: (target_to = 
ldap:///cn=users,cn=accounts,dc=ipa,dc=example;)(target_from = 
ldap:///cn=deleted 
users,cn=accounts,cn=provisioning,dc=ipa,dc=example)(targetfilter = 
(objectclass=nsContainer))(version 3.0;acl permission:System: 
Undelete User;allow (moddn) groupdn = ldap:///cn=System: Undelete 
User,cn=permissions,cn=pbac,dc=ipa,dc=example;)

-dn: cn=users,cn=accounts,dc=ipa,dc=example
-aci: (targetattr = uid)(target = 
ldap:///uid=*,cn=users,cn=accounts,dc=ipa,dc=example;)(targetfilter = 
(objectclass=posixaccount))(version 3.0;acl permission:System: Write 
Active Users RDN by administrators;allow (write) groupdn = 
ldap:///cn=System: Write Active Users RDN by 
administrators,cn=permissions,cn=pbac,dc=ipa,dc=example;)

 dn: cn=sudocmds,cn=sudo,dc=ipa,dc=example
 aci: (targetfilter = (objectclass=ipasudocmd))(version 3.0;acl 
permission:System: Add Sudo Command;allow (add) groupdn = 
ldap:///cn=System: Add Sudo 
Command,cn=permissions,cn=pbac,dc=ipa,dc=example;)

 dn: cn=sudocmds,cn=sudo,dc=ipa,dc=example

Managed permission ACI validation failed.
Re-check permission changes and run `makeaci`.
ACI.txt validation failed
Makefile:130: recipe for target 'version-update' failed
make: *** [version-update] Error 1

--
Oleg Fayans
Quality Engineer
FreeIPA team
RedHat.

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Re: [Freeipa-devel] upstream build failure

2015-06-15 Thread Petr Vobornik 

On 06/15/2015 10:16 AM, Oleg Fayans wrote:

Hi guys,

The attempt to build the latest upstream branch fails with the following
error:

  aci: (targetattr = krblastpwdchange || krbpasswordexpiration ||
krbprincipalkey || userpassword)(target = ldap:///uid=*,cn=deleted
users,cn=accounts,cn=provisioning,dc=ipa,dc=example)(targetfilter =
(objectclass=posixaccount))(version 3.0;acl permission:System: Reset
Preserved User password;allow (read,search,write) groupdn =
ldap:///cn=System: Reset Preserved User
password,cn=permissions,cn=pbac,dc=ipa,dc=example;)
  dn: dc=ipa,dc=example
  aci: (target_to =
ldap:///cn=users,cn=accounts,dc=ipa,dc=example;)(target_from =
ldap:///cn=deleted
users,cn=accounts,cn=provisioning,dc=ipa,dc=example)(targetfilter =
(objectclass=nsContainer))(version 3.0;acl permission:System:
Undelete User;allow (moddn) groupdn = ldap:///cn=System: Undelete
User,cn=permissions,cn=pbac,dc=ipa,dc=example;)
-dn: cn=users,cn=accounts,dc=ipa,dc=example
-aci: (targetattr = uid)(target =
ldap:///uid=*,cn=users,cn=accounts,dc=ipa,dc=example;)(targetfilter =
(objectclass=posixaccount))(version 3.0;acl permission:System: Write
Active Users RDN by administrators;allow (write) groupdn =
ldap:///cn=System: Write Active Users RDN by
administrators,cn=permissions,cn=pbac,dc=ipa,dc=example;)
  dn: cn=sudocmds,cn=sudo,dc=ipa,dc=example
  aci: (targetfilter = (objectclass=ipasudocmd))(version 3.0;acl
permission:System: Add Sudo Command;allow (add) groupdn =
ldap:///cn=System: Add Sudo
Command,cn=permissions,cn=pbac,dc=ipa,dc=example;)
  dn: cn=sudocmds,cn=sudo,dc=ipa,dc=example

Managed permission ACI validation failed.
Re-check permission changes and run `makeaci`.
ACI.txt validation failed
Makefile:130: recipe for target 'version-update' failed
make: *** [version-update] Error 1



fixed by [PATCH] 876 regenerate ACI.txt after stage user permission rename
--
Petr Vobornik

--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code