Project

General

Profile

Actions

Incident #12134

closed

Missing SVN user "svn.d4science" in D4Science LDAP causes block of automatic DataMiner algorithms deployment on production

Added by Massimiliano Assante almost 7 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
_InfraScience Systems Engineer
Category:
Other
Start date:
Jul 09, 2018
Due date:
Jul 09, 2018
% Done:

100%

Estimated time:
Infrastructure:
Production

Description

The automatic deployment of DataMiner algorithms on production is stuck because in the cose it is used the "svn.d4science" SVN user in SVN for the job. This user was not exported to the new LDAP.

Actions #1

Updated by Massimiliano Assante almost 7 years ago

  • Tracker changed from Task to Incident
Actions #2

Updated by Andrea Dell'Amico almost 7 years ago

  • Target version changed from No to Dismiss the old ldap server
Actions #3

Updated by Andrea Dell'Amico almost 7 years ago

  • Status changed from New to In Progress
Actions #4

Updated by Andrea Dell'Amico almost 7 years ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

I've added the user, with the password used by the dm pool manager.

Actions #5

Updated by Massimiliano Assante almost 7 years ago

according to @g.panichi@isti.cnr.it the issue isn't solved, either the password is not the previous one (unlikely) or the solution adopted is not the correct one. I think we should either contact ENG or find who followed this work CNR side.

@paolo.fabriani@eng.it @ciro.formisano@eng.it could you help us here? Which is the SVN user (and how it is retrieved in the code) involved in the DataMiner algorithms auto deployment on production?

Actions #6

Updated by Giancarlo Panichi almost 7 years ago

There is an authentication problem for the svn.d4science user, on dm-pool-manager-* service:

gcube@dm-pool-manager-proto:~$ svn list https://svn.d4science.research-infrastructures.eu/gcube/trunk/data-analysis/DataMinerConfiguration/algorithms
Authentication realm: <https://svn.d4science.research-infrastructures.eu:443> D4Science SVN
Password for 'svn.d4science': **********

Authentication realm: <https://svn.d4science.research-infrastructures.eu:443> D4Science SVN
Username:
Actions #8

Updated by Andrea Dell'Amico almost 7 years ago

I've found the problem. The ldap users were filtered using the posixAccount objectclass. I did not add that object class to the svn.d4science user, as it's not a real user.
Now subversion authenticates against inetorgPerson.
I just tried on the proto dm pool manager and it works.

Actions #9

Updated by Giancarlo Panichi almost 7 years ago

  • Status changed from Feedback to Closed

Ok, now it works. I close the ticket.

Actions #10

Updated by Ciro Formisano almost 7 years ago

Folks, I have modified the version of DM pool manager in dev environment to get SVN credentials from the IS. In particular, on the Generic Resource DMPMConfigurator of NextNext I have included the elements:

<svn.repository.username>svn.d4science</svn.repository.username>

<svn.repository.password>D4U534_5vN</svn.repository.password>

And it seems to work.
Please, make more tests if you can: if everything will be OK I will prepare the new version for the next release.

PS: it is backward compliant with the previous version, so if you remove the elements from the IS it will get the credentials from local svn config files.

Actions

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 8.91 MB)