#7439 Could not execute new_sources: Request is unauthorized.
Closed: Upstream 5 years ago Opened 5 years ago by ignatenkobrain.

Describe what you need us to do:

⋊> ~/P/f/r/sgmanager on master ⨯ env KRB5_TRACE=/dev/stdout fedpkg new-sources ./sgmanager-2.0.0~git+146.861aa67.tar.gz             15:14:57
[5997] 1544710510.327892: ccselect module realm chose cache KCM:1000 with client principal ignatenkobrain@FEDORAPROJECT.ORG for server principal HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG
[5997] 1544710510.327893: Getting credentials ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG using ccache KCM:1000
[5997] 1544710510.327894: Retrieving ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG from KCM:1000 with result: 0/Success
[5997] 1544710510.327896: Creating authenticator for ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG, seqnum 464276291, subkey aes256-cts/C430, session key aes256-cts/F64B
Could not execute new_sources: Request is unauthorized.
⋊> ~/P/f/r/sgmanager on master ⨯ kdestroy -A                                                                                        15:15:12
⋊> ~/P/f/r/sgmanager on master ⨯ kinit ignatenkobrain@FEDORAPROJECT.ORG                                                             15:16:30
Password for ignatenkobrain@FEDORAPROJECT.ORG: 
⋊> ~/P/f/r/sgmanager on master ⨯ env KRB5_TRACE=/dev/stdout fedpkg new-sources ./sgmanager-2.0.0~git+146.861aa67.tar.gz             15:16:36
[6126] 1544710600.31215: ccselect module realm chose cache KCM:1000 with client principal ignatenkobrain@FEDORAPROJECT.ORG for server principal HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG
[6126] 1544710600.31216: Getting credentials ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG using ccache KCM:1000
[6126] 1544710600.31217: Retrieving ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG from KCM:1000 with result: -1765328243/Matching credential not found
[6126] 1544710600.31218: Retrieving ignatenkobrain@FEDORAPROJECT.ORG -> krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG from KCM:1000 with result: 0/Success
[6126] 1544710600.31219: Starting with TGT for client realm: ignatenkobrain@FEDORAPROJECT.ORG -> krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
[6126] 1544710600.31220: Requesting tickets for HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG, referrals on
[6126] 1544710600.31221: Generated subkey for TGS request: aes256-cts/709F
[6126] 1544710600.31222: etypes requested in TGS request: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
[6126] 1544710600.31224: Encoding request body and padata into FAST request
[6126] 1544710600.31225: Sending request (1015 bytes) to FEDORAPROJECT.ORG
[6126] 1544710600.31226: Resolving hostname id.fedoraproject.org
[6126] 1544710600.31227: TLS certificate name matched "id.fedoraproject.org"
[6126] 1544710600.31228: Sending HTTPS request to https 185.141.165.254:443
[6126] 1544710600.31229: Received answer (986 bytes) from https 185.141.165.254:443
[6126] 1544710600.31230: Terminating TCP connection to https 185.141.165.254:443
[6126] 1544710600.31231: Sending DNS URI query for _kerberos.FEDORAPROJECT.ORG.
[6126] 1544710600.31232: URI answer: 10 1 "krb5srv:m:kkdcp:https://id.fedoraproject.org/KdcProxy/"
[6126] 1544710600.31233: Response was from master KDC
[6126] 1544710600.31234: Decoding FAST response
[6126] 1544710600.31235: FAST reply key: aes256-cts/5FB3
[6126] 1544710600.31236: TGS reply is for ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG with session key aes256-cts/88D0
[6126] 1544710600.31237: TGS request result: 0/Success
[6126] 1544710600.31238: Received creds for desired service HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG
[6126] 1544710600.31239: Storing ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG in KCM:1000
[6126] 1544710600.31241: Creating authenticator for ignatenkobrain@FEDORAPROJECT.ORG -> HTTP/src.fedoraproject.org@FEDORAPROJECT.ORG, seqnum 212900023, subkey aes256-cts/6870, session key aes256-cts/88D0
Could not execute new_sources: Request is unauthorized.

When do you need this? (YYYY/MM/DD)

ASAP.

If we cannot complete your request, what is the impact?

Not possible to update packages.


⋊> ~/P/f/r/sgmanager on master ⨯ koji hello                             15:29:34
こんにちは, ignatenkobrain!

You are using the hub at https://koji.fedoraproject.org/kojihub
Authenticated via GSSAPI

Authentication works, httpd access log indicates that @ignatenkobrain was authenticated:

10.5.126.52 - ignatenkobrain@FEDORAPROJECT.ORG [13/Dec/2018:14:16:41 +0000] "POST /repo/pkgs/upload.cgi HTTP/1.1" 200 88 "-" "PycURL/7.43.0.2 libcurl/7.63.0 OpenSSL/1.1.1 zlib/1.2.11 brotli/1.0.7 libidn2/2.0.5 libpsl/0.20.2 (+libidn2/2.0.5) libssh/0.8.5/openssl/zlib nghttp2/1.35.1"

Metadata Update from @mizdebsk:
- Issue priority set to: Waiting on Assignee (was: Needs Review)

5 years ago

This seems to be a curl bug to me... I filed https://bugzilla.redhat.com/show_bug.cgi?id=1659329 about it.

Downgrading to curl-7.62.0-1.fc30 and it works fine again.

:curly_loop:

Metadata Update from @kevin:
- Issue close_status updated to: Upstream
- Issue status updated to: Closed (was: Open)

5 years ago

Login to comment on this ticket.

Metadata