This is on Apache on FastCGI.  There's a weird issue with us hosting
WSGI because the server is running an older version of Ubuntu
(something we should correct, but can't at the moment).

On Sep 27, 5:48 pm, Christian Hammond <chip...@chipx86.com> wrote:
> Hi Jeff,
>
> Thanks for sending me that info.
>
> So this actually has nothing to do with LDAP. I've seen this before once, on
> Python 2.7 only. My guess is there's something that prevented the right
> headers from reaching the server. Some sort of regression on their end (we
> already know they broke uploading of binary content).
>
> First off, can you let me know whether you're using the dev server, or
> Apache? If Apache, is it mod_wsgi? And if so, is there a
> "WSGIPassAuthorization On" line in the config?
>
> Christian
>
> --
> Christian Hammond - chip...@chipx86.com
> Review Board -http://www.reviewboard.org
> VMware, Inc. -http://www.vmware.com
>
>
>
>
>
>
>
> On Tue, Sep 27, 2011 at 11:02 AM, Jeff Ward <j...@fuzzybinary.com> wrote:
> > Yes this is using post-review as the client.  Here's the output when I
> > disable anonymous reads:
> > C:\Python27\Scripts\post-review --server=http://server:9999--debug --
> > repository=repo_name
> > >>> RBTools 0.3.3
> > >>> Home = <redacted>
> > >>> hg showconfig
> > >>> hg root
> > >>> p4 info
> > >>> repository info: Path: <redacted>, Base path: None, Supports
> > changesets: True
> > >>> HTTP GETting api/
> > >>> HTTP GETtinghttp://server:9999/api/info/
> > ==> HTTP Authentication Required
> > Enter authorization information for "Web API" at server:9999
> > Username: jeffw
> > Password:
> > >>> Got API Error 103 (HTTP code 401): You are not logged in
> > >>> Error data: {u'stat': u'fail', u'err': {u'msg': u'You are not logged
> > in', u'code': 103}}
> > >>> Using the deprecated Review Board 1.0 web API
> > >>> Generating diff for changenum default
> > >>> p4 opened -c default
> > >>> Processing edit of <redacted>
> > >>> Writing "<redacted>" to "<redacted>"
> > >>> p4 print -o <redacted> -q <redacted>
> > >>> diff -urNp <redacted> <redacted>
> > Traceback (most recent call last):
> >  File "C:\Python27\Scripts\post-review-script.py", line 8, in
> > <module>
> >    load_entry_point('rbtools==0.3.3', 'console_scripts', 'post-
> > review')()
> >  File "C:\Python27\lib\site-packages\rbtools-0.3.3-py2.7.egg\rbtools
> > \postreview.py", line 3988, in main
> > AttributeError: 'ReviewBoardServer' object has no attribute
> > 'rb_version'
>
> > /api doesn't require auth in this scenereo, but /api/info does.  I can
> > not log in to /api/info from a web browser in this situation either.
>
> > If I turn on anonymous read I get this:
> > >>> RBTools 0.3.3
> > >>> Home = <redacted>
> > >>> hg showconfig
> > >>> hg root
> > >>> p4 info
> > >>> repository info: Path: <redacted>, Base path: None, Supports
> > changesets: True
> > >>> HTTP GETting api/
> > >>> HTTP GETtinghttp://server:9999/api/info/
> > >>> Using the new web API
> > >>> Generating diff for changenum default
> > >>> p4 opened -c default
> > >>> Processing edit of <redacted>
> > >>> Writing "<redacted>" to "<redacted>"
> > >>> p4 print -o <redacted> -q <redacted>
> > >>> diff -urNp <redacted> <redacted>
> > >>> Attempting to create review request on repo_name for None
> > >>> HTTP POSTing tohttp://server:9999/api/review-requests/:
> > {'repository': 'repo_name'}
> > ==> HTTP Authentication Required
> > Enter authorization information for "Web API" at server:9999
> > Username: jeffw
> > Password:
> > >>> Got API Error 103 (HTTP code 401): You are not logged in
> > >>> Error data: {u'stat': u'fail', u'err': {u'msg': u'You are not logged
> > in', u'code': 103}}
> > >>> Attempting to create review request on repo_name for None
> > >>> HTTP POSTing tohttp://server:9999/api/review-requests/:
> > {'repository': 'repo_name'}
> > >>> Got API Error 103 (HTTP code 401): You are not logged in
> > >>> Error data: {u'stat': u'fail', u'err': {u'msg': u'You are not logged
> > in', u'code': 103}}
> > >>> Attempting to create review request on repo_name for None
> > >>> HTTP POSTing tohttp://server:9999/api/review-requests/:
> > {'repository': 'repo_name'}
> > >>> Got API Error 103 (HTTP code 401): You are not logged in
> > >>> Error data: {u'stat': u'fail', u'err': {u'msg': u'You are not logged
> > in', u'code': 103}}
> > >>> Attempting to create review request on repo_name for None
> > >>> HTTP POSTing tohttp://server:9999/api/review-requests/:
> > {'repository': 'repo_name'}
> > >>> Got API Error 103 (HTTP code 401): You are not logged in
> > >>> Error data: {u'stat': u'fail', u'err': {u'msg': u'You are not logged
> > in', u'code': 103}}
> > Error creating review request: You are not logged in (HTTP 401, API
> > Error 103)
>
> > My LDAP does not allow anonymous binds, which I think may be the
> > issue.  Authentication from the main page works though, and since both
> > are supposed to go through the same code path, I have no idea what's
> > killing the API auth.
>
> > --
> > Jeff
>
> > On Sep 26, 4:12 pm, Christian Hammond <chip...@chipx86.com> wrote:
> > > Hi Jeff,
>
> > > Sorry for the late reply.
>
> > > Our authentication for both the web UI and API go through the same place.
> > > However, you may be hitting other bugs.
>
> > > Is this using post-review as the client? Can you run with --debug and
> > show
> > > me the output?
>
> > > I'm curious what's prompting for a password on /api/, because we don't
> > > actually require one there (necessary so that /api/info/ can be accessed
> > to
> > > determine what version works in order to be able to authenticate).
>
> > > Christian
>
> > > --
> > > Christian Hammond - chip...@chipx86.com
> > > Review Board -http://www.reviewboard.org
> > > VMware, Inc. -http://www.vmware.com
>
> > > On Mon, Sep 26, 2011 at 11:22 AM, Jeff Ward <j...@fuzzybinary.com>
> > wrote:
> > > > So, in lack of a response, I've moved my review board server in an
> > > > attempt to fix this.  I still can't host on a subdomain, but I'm now
> > > > using root plus a port (in this case 9999).
>
> > > > LDAP authentication still doesn't work with the API, and it looks like
> > > > no query for authentication is being sent to the LDAP server, no error
> > > > in the logs.
>
> > > > Is there anywhere I can look to diagnose this issue / potentially get
> > > > it to work?
>
> > > > --
> > > > Jeff
>
> > > > On Sep 22, 6:59 pm, Jeff Ward <j...@fuzzybinary.com> wrote:
> > > > > I'm having more trouble getting LDAP authentication.
>
> > > > > I'll admit up front, I'm working with a web server where dedicating a
> > > > > portion of apache just to review board was not possible. I had to
> > > > > append the rules to the default site, at the directory root/reviews.
> > > > > This is a hard requirement.
>
> > > > > I am also using FastCGI.  This is because of other issues with WSGI
> > on
> > > > > the server.
>
> > > > > The problem is root/reviews/api/ is not accepting LDAP
> > > > > authentication.  So far as I can tell, it's not even attempting to
> > > > > query LDAP for the information, and the logs have no information.  Is
> > > > > there something I should look for to have the API authenticate
> > > > > properly, especially in this weird setup?
>
> > > > --
> > > > Want to help the Review Board project? Donate today at
> > > >http://www.reviewboard.org/donate/
> > > > Happy user? Let us know athttp://www.reviewboard.org/users/
> > > > -~----------~----~----~----~------~----~------~--~---
> > > > To unsubscribe from this group, send email to
> > > > reviewboard+unsubscr...@googlegroups.com
> > > > For more options, visit this group at
> > > >http://groups.google.com/group/reviewboard?hl=en
>
> > --
> > Want to help the Review Board project? Donate today at
> >http://www.reviewboard.org/donate/
> > Happy user? Let us know athttp://www.reviewboard.org/users/
> > -~----------~----~----~----~------~----~------~--~---
> > To unsubscribe from this group, send email to
> > reviewboard+unsubscr...@googlegroups.com
> > For more options, visit this group at
> >http://groups.google.com/group/reviewboard?hl=en

-- 
Want to help the Review Board project? Donate today at 
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~----------~----~----~----~------~----~------~--~---
To unsubscribe from this group, send email to 
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/reviewboard?hl=en

Reply via email to