fedora-infrastructure

#6892 I cannot log in to staging Bodhi with GSSAPI
Closed: Upstream Opened by bowlofeggs.

Closed: Upstream
Reopen Issue
  • Describe what you need us to do:
    I am not 100% sure where the problem is, but when I attempt to authenticate with staging Bodhi it seems that the OpenID protocol might not be sending Bodhi my e-mail address when I use GSSAPI. When I use a password to authenticate with id.fpo things work as expected.
  File "/usr/lib/python2.7/site-packages/bodhi/server/security.py", line 149, in remember_me
    email = info['sreg']['email']
KeyError: 'email'

  • When do you need this? (YYYY/MM/DD)
    Not really a need, just a bug report.

  • When is this no longer needed or useful? (YYYY/MM/DD)
    N/A

  • If we cannot complete your request, what is the impact?
    Users cannot log in to stg Bodhi via GSSAPI (so not large impact I'd say).

I just edited the ticket to note that this seems to happen if I use GSSAPI to authenticate to staging Bodhi, but does not happen if I use a password to authenticate. That makes this ticket less important, so feel free to put it on the back burner as I'm sure there are more important concerns.

So, this is known to ipsilon upstream. The problem seems to be when fas returns some data and then also 500's. ipsilon currently just goes on with the data it has, which may not be enough to actually log you in. So the fix is to patch ipsilon to error better when this happens so you can try again.

As a workaround you can also nuke any cookies from id*fedoraproject.org.

Closing this in favor of upstream ipsilon...

Metadata Update from @kevin:
- Issue close_status updated to: Upstream
- Issue status updated to: Closed (was: Open)
Metadata
None

authentication

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.