#10679 cannot log into any staging instance due to authentication failures on id.stg.fp.o
Closed: Invalid 2 years ago by decathorpe. Opened 2 years ago by decathorpe.

I've been trying to debug switching my bodhi-rs bindings for the bodhi REST API to explicitly use the "legacy" OpenID endpoint that I'll have to use with bodhi 6.0.0. However, I can't really debug the login process (or confirm that falling back to the "legacy" OpenID method works at all), since I seem to be unable to log into any staging instance of Fedora web services:

  • bodhi.stg.fedoraproject.org, koschei.stg.fedoraproject.org: pushing "Login" button takes me to id.stg.fedoraproject.org, where logging in fails, and I get "400 - Bad Request" response page on id.stg.fedoraproject.org

  • src.stg.fedoraproject.org, stg.pagure.io: pusing "Login" button takes me to id.stg.fedoraproject.org, where logging in fails, and I get an "OpenID request was cancelled" plaintext response from src.stg.fedoraproject.org

  • bodhi.stg.fedoraproject.org/login?method=openid: takes me to id.stg.fedoraproject.org, where I enter my username and password, but confirming just throws me back to bodhi.stg.fedoraproject.org without having been logged in

  • badges.stg.fedoraproject.org: logging in takes me to a login form on id.stg.fedoraproject.org, but any form input (except empty fields) takes me to an empty login form on id.stg.fedoraproject.org again, without any error message

  • accounts.stg.fedoraproject.org: logging in fails with "Unauthorized: bad credentials" (whatever that means) despite using the correct username and password (confirmed by pasting them from my password manager)

I am not using OTP now, nor have I ever set up using OTPs for my FAS account, so I am leaving the OTP field in the login form empty.


So, just to make sure you are aware: our staging infrastructure has a completely seperate database/instance. So, your password for production will likely not be the same as your password in staging.

Can you go to https://accounts.stg.fedoraproject.org/ and use the 'forgot password' link to reset your password there and then retry things?

Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-gain, low-trouble, ops

2 years ago

Ah. Interesting. No, I was not aware that the passwords are different. I change it with the password reset, and now I can log in.

Still strange that I was getting all those weird-and-broken-in-different-ways failures when trying to log in with different Fedora services :)

Metadata Update from @decathorpe:
- Issue close_status updated to: Invalid
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog