Bug 47806 - 403 univention.lib.umc.Forbidden in schoolinstaller
403 univention.lib.umc.Forbidden in schoolinstaller
Status: RESOLVED FIXED
Product: UCS@school
Classification: Unclassified
Component: UMC - Installer
UCS@school 4.3
Other Linux
: P5 normal (vote)
: ---
Assigned To: Jürn Brodersen
Sönke Schwardt-Krummrich
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-09-13 08:50 CEST by Daniel Tröder
Modified: 2018-09-18 15:56 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Tröder univentionstaff 2018-09-13 08:50:26 CEST
All 4.3 Jenkins jobs failed today, because of this:

http://jenkins.knut.univention.de:8080/job/UCSschool-4.3/job/Install%20Singleserver/Config=s4,TestGroup=base1/ws/test/autotest-201-ucsschool-singleserver-s4.log

=> Execute: . utils.sh; prevent_ucstest_on_fail /root/schoolinstaller.py -uAdministrator -p univention -o School1 -S -s 4 on [master201-single-s4] at 2018-09-12T23:19:20.927439

[master201-single-s4] 2018-09-12T23:19:20.970714	++ release_update=testing
[master201-single-s4] 2018-09-12T23:19:20.970714	++ errata_update=testing
[master201-single-s4] 2018-09-12T23:19:20.971091	++ ucsschool_release=scope
[master201-single-s4] 2018-09-12T23:19:20.971378	++ JOB_NAME='UCSschool-4.3/Install Singleserver/Config=s4,TestGroup=import3'
[master201-single-s4] 2018-09-12T23:19:20.971378	+ prevent_ucstest_on_fail /root/schoolinstaller.py -uAdministrator -p univention -o School1 -S -s 4
[master201-single-s4] 2018-09-12T23:19:20.971695	+ local rv=0
[master201-single-s4] 2018-09-12T23:19:20.971929	+ /root/schoolinstaller.py -uAdministrator -p univention -o School1 -S -s 4
[master201-single-s4] 2018-09-12T23:19:21.620224	Traceback (most recent call last):
[master201-single-s4] 2018-09-12T23:19:21.620224	  File "/root/schoolinstaller.py", line 122, in <module>
[master201-single-s4] 2018-09-12T23:19:21.620502	    result = client.umc_command('schoolinstaller/install', params).result
[master201-single-s4] 2018-09-12T23:19:21.620502	  File "/usr/lib/pymodules/python2.7/univention/lib/umc.py", line 435, in umc_command
[master201-single-s4] 2018-09-12T23:19:21.639104	    return self.request('POST', 'command/%s' % (path,), data, headers)
[master201-single-s4] 2018-09-12T23:19:21.639104	  File "/usr/lib/pymodules/python2.7/univention/lib/umc.py", line 515, in request
[master201-single-s4] 2018-09-12T23:19:21.639471	    return self.send(request)
[master201-single-s4] 2018-09-12T23:19:21.639832	  File "/usr/lib/pymodules/python2.7/univention/lib/umc.py", line 544, in send
[master201-single-s4] 2018-09-12T23:19:21.639972	    raise HTTPError(request, response, self.hostname)
[master201-single-s4] 2018-09-12T23:19:21.639972	univention.lib.umc.Forbidden
[master201-single-s4] 2018-09-12T23:19:21.640242	: 403 on master201.autotest201.local (command/schoolinstaller/install): {"status": 403, "message": "Verboten", "traceback": null, "location": "https://master201.autotest201.local/univention/command"}                                                                                                                                  
[master201-single-s4] 2018-09-12T23:19:21.643893	+ rv=1
[master201-single-s4] 2018-09-12T23:19:21.644046	+ '[' '!' 1 = 0 ']'
[master201-single-s4] 2018-09-12T23:19:21.653358	+ create_DONT_START_UCS_TEST 'FAILED: prevent_ucstest_on_fail /root/schoolinstaller.py' -uAdministrator -p univention -o School1 -S -s 4
[master201-single-s4] 2018-09-12T23:19:21.653657	+ echo -----------------------------------------------------------------------------------
[master201-single-s4] 2018-09-12T23:19:21.653910	-----------------------------------------------------------------------------------
[master201-single-s4] 2018-09-12T23:19:21.654207	FAILED: prevent_ucstest_on_fail /root/schoolinstaller.py -uAdministrator -p univention -o School1 -S -s 4
[master201-single-s4] 2018-09-12T23:19:21.654540	+ echo 'FAILED: prevent_ucstest_on_fail /root/schoolinstaller.py' -uAdministrator -p univention -o School1 -S -s 4
[master201-single-s4] 2018-09-12T23:19:21.654942	Creating /DONT_START_UCS_TEST
[master201-single-s4] 2018-09-12T23:19:21.655217	+ echo 'Creating /DONT_START_UCS_TEST'
[master201-single-s4] 2018-09-12T23:19:21.655217	+ echo -----------------------------------------------------------------------------------
[master201-single-s4] 2018-09-12T23:19:21.655477	+ touch /DONT_START_UCS_TEST
[master201-single-s4] 2018-09-12T23:19:21.655682	+ return 1
[master201-single-s4] 2018-09-12T23:19:21.655986	-----------------------------------------------------------------------------------
*** Failed 1: . utils.sh; prevent_ucstest_on_fail /root/schoolinstaller.py -uAdministrator -p univention -o School1 -S -s 4


The management-console-server.log stopps at 12.09.18 23:25:06.221, so no idea...
Comment 1 Daniel Tröder univentionstaff 2018-09-14 09:51:11 CEST
Looks like the ucs-school-umc-installer package has not been installed → UMC operation "command/schoolinstaller/install" forbidden.
Investigating why it wasn't installed...
Comment 2 Daniel Tröder univentionstaff 2018-09-17 08:57:11 CEST
The ucsschool app is not being installed:

[master201-single-s4] 2018-09-16T23:23:47.395923	+ univention-app install --noninteractive ucsschool
[master201-single-s4] 2018-09-16T23:23:48.869548	Going to install UCS@school (4.3 v5)
[master201-single-s4] 2018-09-16T23:23:52.252833	(must_have_valid_license) For the installation of this application, a UCS license key
[master201-single-s4] 2018-09-16T23:23:52.252833			with a key identification (Key ID) is required
[master201-single-s4] 2018-09-16T23:23:52.373799	Invalid credentials
[master201-single-s4] 2018-09-16T23:23:52.474401	Invalid credentials
[master201-single-s4] 2018-09-16T23:23:52.574839	Invalid credentials
[master201-single-s4] 2018-09-16T23:23:52.575129	Unable to install ucsschool. Aborting...
Comment 3 Jürn Brodersen univentionstaff 2018-09-17 22:03:34 CEST
[4.3-2 71f38cd4f1] Bug #47806: --noninteractive now needs credentials

The commit should fix the "Invalid credentials" error. Introduced with bug 47619.

The license key issue happened because the listener wasn't started (a listener module sets uuid/license which is used by the appcenter). Introduced and fixed in bug 47783.
Comment 4 Sönke Schwardt-Krummrich univentionstaff 2018-09-18 09:47:24 CEST
(In reply to Jürn Brodersen from comment #3)
> [4.3-2 71f38cd4f1] Bug #47806: --noninteractive now needs credentials
> 
> The commit should fix the "Invalid credentials" error. Introduced with bug
> 47619.

Please revert this change. I discussed this issue on friday with Dirk and he will revert the changes of univention-app (at least this is my last status).
 
> The license key issue happened because the listener wasn't started (a
> listener module sets uuid/license which is used by the appcenter).
> Introduced and fixed in bug 47783.

Good!
Comment 5 Jürn Brodersen univentionstaff 2018-09-18 15:56:48 CEST
(In reply to Sönke Schwardt-Krummrich from comment #4)
> (In reply to Jürn Brodersen from comment #3)
> > [4.3-2 71f38cd4f1] Bug #47806: --noninteractive now needs credentials
> > 
> > The commit should fix the "Invalid credentials" error. Introduced with bug
> > 47619.
> 
> Please revert this change. I discussed this issue on friday with Dirk and he
> will revert the changes of univention-app (at least this is my last status).
>  
> > The license key issue happened because the listener wasn't started (a
> > listener module sets uuid/license which is used by the appcenter).
> > Introduced and fixed in bug 47783.
> 
> Good!

Ok "--noninteractive" should work without credentials again -> Revert

[4.3-2 c21e0066d7] Revert "Bug #47806: --noninteractive now needs credentials"