-
Bug
-
Resolution: Done-Errata
-
Minor
-
None
-
389-ds-base-3.1.3-2.el10
-
No
-
Low
-
ZStream
-
rhel-idm-ds
-
22
-
0
-
False
-
False
-
-
Yes
-
Red Hat Directory Server
-
None
-
Regression Exception
-
Bug Fix
-
-
Done
-
Unspecified
-
Unspecified
-
Unspecified
-
None
Description of a problem
RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" The documentation states that it should be possible: "--allow-host, --deny-host, --allow-ip, and --deny-ip for host-based access controls. These are all multi-valued attributes and you can use wild cards to allow or deny IP ranges or domains." However, when we try to add an IP with a wildcard octet, it says: [root@rhds ~]# dsconf -D "cn=Directory Manager" ldaps://localhost:3012 plugin root-dn set --allow-ip 10.10.10.* Enter password for cn=Directory Manager on ldaps://localhost:3012: Error: Invalid IP address (10.10.10.*) for '--allow-ip'
Version :
- RHDS 12.5
- 389-ds-base-2.5.2-2.el9_5.x86_64
Steps to reproduce
- Try to add an IP with wildcard for rootDN Access Control with below command on RHDS and it throws an error : [root@rhds ~]# dsconf -D "cn=Directory Manager" ldaps://localhost:3012 plugin root-dn set --allow-ip 10.10.10.*
Actual results
- It fails with an error "Invalid IP address" [root@rhds ~]# dsconf -D "cn=Directory Manager" ldaps://localhost:3012 plugin root-dn set --allow-ip 10.10.10.* Enter password for cn=Directory Manager on ldaps://localhost:3012: Error: Invalid IP address (10.10.10.*) for '--allow-ip'
Expected results
- All the IP address specified with wildcard should get added
Additional information
- Adding single IP's works as expected, it's just the wildcard that doesn't: ~~~ [root@rhds ~]# dsconf -D "cn=Directory Manager" ldaps://localhost:3012 plugin root-dn set --allow-ip 10.10.10.30 Enter password for cn=Directory Manager on ldaps://localhost:3012: Successfully changed the cn=RootDN Access Control,cn=plugins,cn=config ~~~
- links to
-
RHBA-2025:151590
389-ds-base update