#7014 OSBS buildroot container fails to authenticate using kerberos in STG environment
Closed: Upstream 5 years ago Opened 5 years ago by cverna.

  • Describe what you need us to do:

I have update the buildroot container image to use an f28 base image. I know have the following error in the build logs.

PS : I edited koji code to log the exception.

2018-06-04 12:01:26,835 platform:- - atomic_reactor.plugin - INFO - running plugin instance with args: '{u'hub': u'https://koji.stg.fedoraproject.org/kojihub'}'
2018-06-04 12:01:26,836 platform:- - atomic_reactor.koji_util - INFO - Using Kerberos for Koji authentication
No handlers could be found for logger "koji"
2018-06-04 12:01:26,885 platform:- - atomic_reactor.plugin - DEBUG - Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/atomic_reactor/plugin.py", line 236, in run
    plugin_instance = self.create_instance_from_plugin(plugin_class, plugin_conf)
  File "/usr/lib/python2.7/site-packages/atomic_reactor/plugin.py", line 390, in create_instance_from_plugin
    plugin_instance = plugin_class(self.dt, self.workflow, **plugin_conf)
  File "/usr/lib/python2.7/site-packages/atomic_reactor/plugins/pre_bump_release.py", line 54, in __init__
    self.xmlrpc = get_koji_session(self.workflow, self.koji_fallback)
  File "/usr/lib/python2.7/site-packages/atomic_reactor/plugins/pre_reactor_config.py", line 77, in get_koji_session
    return create_koji_session(config['hub_url'], auth_info)
  File "/usr/lib/python2.7/site-packages/atomic_reactor/koji_util.py", line 109, in create_koji_session
    koji_login(session, **auth_info)
  File "/usr/lib/python2.7/site-packages/atomic_reactor/koji_util.py", line 89, in koji_login
    result = session.krb_login(**kwargs)
  File "/usr/lib/python2.7/site-packages/koji/__init__.py", line 2131, in krb_login
    if self.gssapi_login(principal, keytab, ccache, proxyuser=proxyuser):
  File "/usr/lib/python2.7/site-packages/koji/__init__.py", line 2278, in gssapi_login
    raise AuthError('unable to obtain a session')
AuthError: unable to obtain a session
  • When do you need this? (YYYY/MM/DD)
    Would be nice to have this done today.

  • When is this no longer needed or useful? (YYYY/MM/DD)
    never

  • If we cannot complete your request, what is the impact?
    Impact the flatpak build testing


Looking at your log and https://kojipkgs.stg.fedoraproject.org//work/tasks/638/90000638/orchestrator.log, you are not passing either the principal or the keytab to atomic-reactor, which means it has no means of authenticating.
Make sure those arguments get passed through.

Ok so this related to some changes in atomic-reactor that has broken koji kerberos authentication.

Therefore I ll close this ticket

Thanks for helping

Metadata Update from @cverna:
- Issue close_status updated to: Upstream
- Issue status updated to: Closed (was: Open)

5 years ago

Login to comment on this ticket.

Metadata