https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/AAA-121 aaa <p>Creating a user, delete the user, and recreate the same user fails with:</p> <p>Aborting due to IDMStoreException (use -X to see full stack trace): org.opendaylight.aaa.h2.persistence.StoreException: SQL Exception : org.h2.jdbc.JdbcSQLException: Unique index or primary key violation: "PRIMARY_KEY_7 ON PUBLIC.GRANTS(GRANTID) VALUES ('tim@sdn@user@sdn@sdn', 1)"; SQL statement:<br/> insert into grants (grantid,domainid,userid,roleid) values(?,?,?,?) <span class="error">&#91;23505-191&#93;</span></p> <p>Please see attachment for full trace.</p> <p>Operating System: All<br/> Platform: All</p> AAA-121

Deleting a user and recreating it fails using the aaa-cli-jar

Bug Resolved Done Michael Vorburger Tim Rozet Tue, 4 Apr 2017 21:19:25 +0000 Thu, 21 Mar 2019 11:56:47 +0000 Wed, 5 Apr 2017 20:56:05 +0000 General 0 1 <p>Attachment aaa_bug.txt has been added with description: log</p> <p>+Ryan</p> <p>Confirming (just reproduced) that this appears to be a bug in AAA</p> <p>It's not actually in the ("my") aaa-cli-jar code, but in the underlying aaa-h2-store code that calls into... it looks like users actually aren't cleaned out properly on delete - the entry/ies in the grant table would have to be deleted too?</p> <p>I'll try to propose a change that fixes this...</p> <p>&gt; in the underlying aaa-h2-store code that calls into... it looks like <br/> &gt; users actually aren't cleaned out properly on delete - the entry/ies</p> <p>turns out this was kinda specific to aaa-cli-jar actually... the aaa-cli for the Karaf commands is slightly "lower level", and while its remove-user would suffer from the same exception, the design choice there seems to be to let administrators have to do remove-grant manually. </p> <p>In aaa-cli-jar this is, intentionally, simplified (you just say -a to get an admin user, without being exposed to grants &amp; roles), it made sense to make the --deleteUser automatically clear out the role grants, because the --newUser originally implicitly created them also.</p> <p><a href="https://wiki.opendaylight.org/view/AAA:Changing_Account_Passwords#aaa-cli-jar" class="external-link" target="_blank" rel="nofollow noopener">https://wiki.opendaylight.org/view/AAA:Changing_Account_Passwords#aaa-cli-jar</a></p> <p>&gt; I'll try to propose a change that fixes this...</p> <p>==&gt; <a href="https://git.opendaylight.org/gerrit/#/c/54350/" class="external-link" target="_blank" rel="nofollow noopener">https://git.opendaylight.org/gerrit/#/c/54350/</a></p> Development External issue ID 8157 External issue URL Issue Type Rank 0|i02487: