Description of problem:
[yi@i386a(101) ~] ipa selfservice-find "User Self service"  --raw
ipa: ERROR: an internal error has occurred

the permission "User Self service" does exist
[yi@i386a(101) ~] ipa selfservice-find "User Self service"
---------------------
1 selfservice matched
---------------------
  Self-service name: User Self service
  Permissions: write
  Attributes: givenname, sn, cn, displayname, title, initials, loginshell,
gecos, homephone, mobile, pager, facsimiletelephonenumber, telephonenumber,
street,
              roomnumber, l, st, postalcode, manager, secretary, description,
carlicense, labeleduri, inetuserhttpurl, seealso, employeetype,
businesscategory,
              ou
----------------------------
Number of entries returned 1
----------------------------


Version-Release number of selected component (if applicable):
ipa-server-2.1.3-2.el6.i686

[yi@i386a(101) ~] rpm -qi ipa-server
Name        : ipa-server                   Relocations: (not relocatable)
Version     : 2.1.3                             Vendor: Red Hat, Inc.
Release     : 2.el6                         Build Date: Tue 18 Oct 2011
11:12:34 AM PDT
Install Date: Thu 20 Oct 2011 10:39:05 AM PDT      Build Host:
x86-002.build.bos.redhat.com
Group       : System Environment/Base       Source RPM: ipa-2.1.3-2.el6.src.rpm
Size        : 3355311                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://www.freeipa.org/
Summary     : The IPA authentication server


How reproducible: always


Steps to Reproduce:
1. install ipa-server
2. kinit as admin
3. run command :  ipa selfservice-find "User Self service"  --raw

Actual results:
internal error returned

Expected results: list raw data of permission


Additional info: /var/log/http/error_log:

[Thu Oct 20 12:30:34 2011] [error] ipa: ERROR: non-public: KeyError:
'aciprefix'
[Thu Oct 20 12:30:34 2011] [error] Traceback (most recent call last):
[Thu Oct 20 12:30:34 2011] [error]   File
"/usr/lib/python2.6/site-packages/ipaserver/rpcserver.py", line 223, in
wsgi_execute
[Thu Oct 20 12:30:34 2011] [error]     result = self.Command[name](*args,
**options)
[Thu Oct 20 12:30:34 2011] [error]   File
"/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 432, in __call__
[Thu Oct 20 12:30:34 2011] [error]     ret = self.run(*args, **options)
[Thu Oct 20 12:30:34 2011] [error]   File
"/usr/lib/python2.6/site-packages/ipalib/frontend.py", line 738, in run
[Thu Oct 20 12:30:34 2011] [error]     return self.execute(*args, **options)
[Thu Oct 20 12:30:34 2011] [error]   File
"/usr/lib/python2.6/site-packages/ipalib/plugins/selfservice.py", line 189, in
execute
[Thu Oct 20 12:30:34 2011] [error]     del aci['aciprefix']     # do not
include prefix in result
[Thu Oct 20 12:30:34 2011] [error] KeyError: 'aciprefix'
[Thu Oct 20 12:30:34 2011] [error] ipa: INFO: admin@YZHANG.REDHAT.COM:
selfservice_find(u'User Self service', all=False, raw=True, version=u'2.13'):
KeyError



klist shows
[yi@i386a(101) ~] klist
Ticket cache: FILE:/tmp/krb5cc_500
Default principal: admin@YZHANG.REDHAT.COM

Valid starting     Expires            Service principal
10/20/11 12:25:15  10/21/11 12:25:15
krbtgt/YZHANG.REDHAT.COM@YZHANG.REDHAT.COM
10/20/11 12:25:49  10/21/11 12:25:15
HTTP/i386a.yzhang.redhat.com@YZHANG.REDHAT.COM