#7459 fedpkg new-sources fails
Closed: Fixed 5 years ago by kevin. Opened 5 years ago by lberk.

  • Describe what you need us to do:
    fedpkg new-sources $source-files fails for packages I have admin rights for (or any level of rights at all). I have a valid krb5 ticket

$ klist
Ticket cache: KEYRING:persistent:1000:1000
Default principal: lberk@FEDORAPROJECT.ORG

Valid starting Expires Service principal
2018-12-21 12:52:39 2018-12-22 12:52:37 krbtgt/FEDORAPROJECT.ORG@FEDORAPROJECT.ORG
renew until 2018-12-28 12:52:37

~/.fedora.upn has my fedora username in it as required.

$ fedpkg -v new-sources ${files}
Creating repo object from /home/lberk/src/dist-git/fedora-scm/pcp
Could not execute new_sources: Request is unauthorized.
Traceback (most recent call last):
File "/usr/bin/fedpkg", line 11, in <module>
load_entry_point('fedpkg==1.35', 'console_scripts', 'fedpkg')()
File "/usr/lib/python3.7/site-packages/fedpkg/main.py", line 94, in main
sys.exit(client.args.command())
File "/usr/lib/python3.7/site-packages/pyrpkg/cli.py", line 2199, in new_sources
self.cmd.upload(self.args.files, replace=self.args.replace)
File "/usr/lib/python3.7/site-packages/pyrpkg/init.py", line 2776, in upload
f, file_hash)
File "/usr/lib/python3.7/site-packages/pyrpkg/lookaside.py", line 289, in upload
if self.remote_file_exists(name, filename, hash):
File "/usr/lib/python3.7/site-packages/pyrpkg/lookaside.py", line 256, in remote_file_exists
self.raise_upload_error(status)
File "/usr/lib/python3.7/site-packages/pyrpkg/lookaside.py", line 127, in raise_upload_error
raise UploadError(message, http_status=http_status)
pyrpkg.errors.UploadError: Request is unauthorized.
When do you need this? (YYYY/MM/DD)
NA
When is this no longer needed or useful? (YYYY/MM/DD)
NA
* If we cannot complete your request, what is the impact?
I won't be able to package anymore for fedora


Make sure you have 'rdns = false' in /etc/krb5.conf and that you have a new/valid kerberos ticket (klist -A should tell you)

If the issue persists please attach output of:

KRB5_TRACE=/dev/stdout fedpkg -v new-sources ${files}

and

rpm -q curl

Thanks in advance.

Metadata Update from @kevin:
- Issue priority set to: Waiting on Reporter (was: Needs Review)

5 years ago

Please reopen this if you are still seeing it and add the info from the last comment... thanks!

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

5 years ago

For those who might be hitting the same issue as me later;

strace'ing the fedpkg command showed that a read was occuring on ~/.k5identity (which included the different id/realm being used after the kinit and why fedoraproject was denying creating a new session).

Removing the offending entry in .k5identity fixed things.

Login to comment on this ticket.

Metadata