[Bug 807901] New: bugreporter crashes with 403 forbidden for xmlrpc.cgi
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c0
Summary: bugreporter crashes with 403 forbidden for xmlrpc.cgi
Classification: openSUSE
Product: openSUSE 12.3
Version: RC 2
Platform: Other
OS/Version: openSUSE 12.2
Status: NEW
Severity: Major
Priority: P5 - None
Component: Basesystem
AssignedTo: mihneadb@gmail.com
ReportedBy: suse-beta@cboltz.de
QAContact: qa-bugs@suse.de
Found By: Beta-Customer
Blocker: ---
(using factory from 2013-02-20, probably also affects 12.3)
The screen log says it all...
# bugreporter
Welcome to the submit bug report module!
The user has stored credentials.
Connecting to Novell's Bugzilla...
If you don't know which package you want to file a bug to, you can use the
susebugreport aid command to get some help.
Which is the package you want to file a report against?
If you are not sure, you can just type the beginning of the name and use a '*'
to invoke globbing.
Also, you can type '?' to start the aid_user module that helps finding the
correct package name.
Package name (or '?'): libqt4-x11
Package selected: libqt4
Please enter the bug summary (should be short!)
--> test bug
Summary entered: test bug
Looking for similar existing bug reports...
Traceback (most recent call last):
File "/usr/bin/bugreporter", line 353, in <module>
main()
File "/usr/bin/bugreporter", line 343, in main
do_submit()
File "/usr/bin/bugreporter", line 152, in do_submit
bug_list = bz.query({'summary': name})
File "/usr/lib/python2.7/site-packages/bugzilla/base.py", line 530, in query
r = self._query(query)
File "/usr/lib/python2.7/site-packages/bugzilla/bugzilla3.py", line 177, in
_query
return self._proxy.Bug.search(query)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1224, in __call__
return self.__send(self.__name, args)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1578, in __request
verbose=self.__verbose
File "/usr/lib64/python2.7/xmlrpclib.py", line 1264, in request
return self.single_request(host, handler, request_body, verbose)
File "/usr/lib/python2.7/site-packages/bugzilla/base.py", line 1044, in
single_request_with_cookies
response.msg,
xmlrpclib.ProtocolError:
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c1
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c2
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c3
--- Comment #3 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c4
--- Comment #4 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c
Mihnea Dobrescu-Balaur
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c5
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c6
--- Comment #6 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c7
Michal Vyskocil
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c8
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c9
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c10
--- Comment #10 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c11
Jan Matejek
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c12
Christian Boltz
python-bugzilla is NOT using cookies at all for NovellBugzilla, we're using Basic Auth instead of IChain. Reason is that the IChain craziness is hard to maintain, whereas the Basic Auth is easy and designed for automated access.
In the meantime, the iChain craziness was replaced by AccessManager craziness ;-) Could that change cause this bug?
Re the original bugreport: i can't reproduce the issue. Christian, did Werner's update solve your problem?
With Werner's patch, I get (using Factory):
# bugreporter
Welcome to the submit bug report module!
The user has stored credentials.
Connecting to Novell's Bugzilla...
Bugzilla error. Maybe check Internet connection?
# bugzilla login
Username: cboltz
Password:
Logging in... Traceback (most recent call last):
[...]
File "/usr/lib/python2.7/site-packages/bugzilla/base.py", line 1045, in
single_request_with_cookies
response.msg,
xmlrpclib.ProtocolError:
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c13
Jan Matejek
(In reply to comment #11)
python-bugzilla is NOT using cookies at all for NovellBugzilla, we're using Basic Auth instead of IChain. Reason is that the IChain craziness is hard to maintain, whereas the Basic Auth is easy and designed for automated access.
In the meantime, the iChain craziness was replaced by AccessManager craziness ;-) Could that change cause this bug?
i don't really think so. but are you saying that back when we had iChain, this worked, and now it doesn't?
Logging in... INFO:bugzilla:login successful <----- failed. <-----
well :e)) that's the bugzilla tool being too smart for its own good. anyways, this is weird. what happens when you do this? bugzilla query -b 807901 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c14
--- Comment #14 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c15
--- Comment #15 from Dr. Werner Fink
Oh, and a funny one (without Werner's patch):
# bugzilla --verbose login INFO:bugzilla:Connecting to http://rudin.suse.de:8888/xmlrpc.cgi INFO:bugzilla:Autodetecting Bugzilla type INFO:bugzilla:Bugzilla v0.6.2 initializing INFO:bugzilla:Chose subclass NovellBugzilla v0.2 Username: cboltz Password: Logging in... INFO:bugzilla:login successful <----- failed. <-----
Note the fun in the last two lines... ;-)
IMHO the line return super(NovellBugzilla, self)._login(user, password) in _login() of nvlbugzilla.py is missed -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c16
--- Comment #16 from Jan Matejek
Even is I'm not Christian
well thanks, that at least rules out the possibility that bugzilla deliberately blocks other users than me. (and no i'm not joking, there was an issue like this when we were starting with NovellBugzilla implementations) (In reply to comment #15)
IMHO the line
return super(NovellBugzilla, self)._login(user, password)
in _login() of nvlbugzilla.py is missed
that's by design, but it should at least be replaced by return '' i'm trying to merge our changes with upstream python-bugzilla 0.8.0, maybe that will help things. Werner, you said that you have your own patched version, care to send a submitreq? Or a pull request on gitorious? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c17
--- Comment #17 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c18
--- Comment #18 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c19
--- Comment #19 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c20
Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c21
Christian Boltz
(In reply to comment #12) but are you saying that back when we had iChain, this worked, and now it doesn't?
I'm quite sure I tested "bugreporter" long time ago and it worked.
bugzilla query -b 807901
Probably nothing you'll like ;-)
bugzilla query -b 807901
Traceback (most recent call last):
File "/usr/bin/bugzilla", line 801, in <module>
main()
File "/usr/bin/bugzilla", line 572, in main
buglist = bz.query(q)
File "/usr/lib/python2.7/site-packages/bugzilla/base.py", line 530, in query
r = self._query(query)
File "/usr/lib/python2.7/site-packages/bugzilla/bugzilla3.py", line 177, in
_query
return self._proxy.Bug.search(query)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1224, in __call__
return self.__send(self.__name, args)
File "/usr/lib64/python2.7/xmlrpclib.py", line 1578, in __request
verbose=self.__verbose
File "/usr/lib64/python2.7/xmlrpclib.py", line 1264, in request
return self.single_request(host, handler, request_body, verbose)
File "/usr/lib/python2.7/site-packages/bugzilla/base.py", line 1044, in
single_request_with_cookies
response.msg,
xmlrpclib.ProtocolError:
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c22
Jan Matejek
Could it be that xmlrpc access is limited to users in the "novellonly" group?
possibly, but more like the apibugzilla access is limited this way. can you log in to http://apibugzilla.novell.com/ with your AccessManager user/pw? if not, i'm going to bounce this bug to ACS folks -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c23
--- Comment #23 from Jan Matejek
Created an attachment (id=540905) --> (http://bugzilla.novell.com/attachment.cgi?id=540905) [details] python-bugzilla-0.8.0-backtraces.patch -- with working cookies
With this patch the current cookie is used if not expired. The difference between using a cookie and direct login is about 4-6 seconds versus 10-14 seconds.
good to know if we have to go this route, but with Basic Auth login, it's around 2.5 seconds versus 4-6 for AccessManager login with a cookie (and 10-14 without cookie) in the meantime, I prepared python-bugzilla 0.8.0 with Basic Auth patches in my home project [1], i'll push to d:l:py if/when i manage to squash more bugs that you reported in this thread. of course, you're both welcome to test this version - Christian, can you check it? I don't think it will help, but if it does, all the better. [1] https://build.opensuse.org/package/show?package=python-bugzilla&project=home%3Amatejcik%3Abranches%3Adevel%3Alanguages%3Apython -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c24
Christian Boltz
(In reply to comment #21)
Could it be that xmlrpc access is limited to users in the "novellonly" group?
possibly, but more like the apibugzilla access is limited this way. can you log in to https://apibugzilla.novell.com/ with your AccessManager user/pw?
I get a nice page saying Zugriff verweigert Access denied to this resource. :-( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c25
Jan Matejek
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c26
--- Comment #26 from Dr. Werner Fink
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c27
Jan Matejek
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c28
--- Comment #28 from Christian Boltz
https://bugzilla.novell.com/show_bug.cgi?id=807901
https://bugzilla.novell.com/show_bug.cgi?id=807901#c29
--- Comment #29 from Christian Boltz
participants (1)
-
bugzilla_noreply@novell.com