#50464 DES to AES conversion does not work without the update perl script.
Closed: wontfix 4 years ago by vashirov. Opened 4 years ago by aadhikari.

Issue Description

DES to AES conversion does not work without the update perl script. This was observed while fixing a test: dirsrvtests/tests/tickets/ticket47462_test.py

Package Version and Platform

389-ds-base-1.4.0.23-1.fc29.x86_64

Steps to reproduce

  1. Run the test by applying the PR: https://pagure.io/389-ds-base/pull-request/50287

Actual results

Should not fail, internal upgrade system in ns-slapd should handle this.

Expected results

Passing of the test case without the upgrade perl script as it will be deprecated in the future.


@aadhikari A PR in general is subject to change (via rebases or mere commits) - could you attach a file with the actual test that is to be run to reproduce to this issue? Also, I believe this comment contains a traceback of a failed run if I am not mistaken. Thanks.

Metadata Update from @mhonek:
- Custom field origin adjusted to None
- Custom field reviewstatus adjusted to None

4 years ago

@aadhikari A PR in general is subject to change (via rebases or mere commits) - could you attach a file with the actual test that is to be run to reproduce to this issue? Also, I believe this comment contains a traceback of a failed run if I am not mistaken. Thanks.

@mhonek Yes that's the traceback, and sure I will put a file which can be used as a patch to reproduce this, Thanks!

@mhonek Let me know if the provided details are sufficient and if you need anything else, Thanks!

I am wondering if this test should be removed. We moved the reversible password storage scheme from DES to AES quite some time ago (389-ds-base-1.3.3 --> RHEL 7.0). So the only case where this is still needed is when migrating from DS 9 (RHEL 6).

I know there is a new bootstrap configuration process that was built into the server that is triggered at startup. So the perl scripts functionality could be moved into the bootstrap code, or we just update the migration docs to say you must migrate to DS 10 before migrating to DS 11. In fact the two documented migration paths: export/import and replication, make this code obsolete anyway.

My point is that we are testing something that has not changed in years, and it is antiquated/obsolete now and perhaps should be removed from the code sooner than later (see dameon.c - convert_pbe_des_to_aes()).

Metadata Update from @mreynolds:
- Issue set to the milestone: 1.4.1

4 years ago

Metadata Update from @vashirov:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

4 years ago

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/3521

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: fixed)

3 years ago

Login to comment on this ticket.

Metadata
Attachments 3
Attached 4 years ago View Comment
Attached 4 years ago View Comment
Attached 4 years ago View Comment