[OPEN-ILS-DEV] Staff Client authentication woes

[Don McMorris]

On 6/20/07, Sperr, Edwin <sperr at nelinet.net> wrote:
> Don --
>
> The client built from 1.1.5 source does indeed have a "hostname" box at
> the top left.  I tried using the downloadable client off of open-ils.org
> (both from a Windows machine as well as from the Ubuntu box), but I get
> a consistent "this server does not support your version of the staff
> client" error. This is the case even if I modify application.ini and
> BUILD_ID.
This is fixed by creating the symlink in web/xul for the staff client
BUILD_ID.  The Apache error logs will tell you exactly what it's
lookin' for, and the wiki/mailing list archives/etc. contain the exact
requirements.  You can also build a "versionless" staff client.

>
> Not sure what is meant by "database server settings".  Is that the
> server/username/password stuff in the conf files?  I pointed everything
> at eg-server.nelinet.lan with [myevergreenuser] [mypassword] wherever I
> saw "postgresql" -- didn't see a specific pointer to do that in the
> install instructions, but it seemed to fit with everything else.  Should
> I have kept the database username as "postgresql" instead?
>
> I'm not sure how to troubleshoot memcached.  /var/log/memcached exists,
> but it's empty.
>
> I don't see any kind of auth log under /openils/var/log (other log bits
> are appended below).  Anyplace else I can look?
>
>
> Thanks for all your help!!!
>
> Ed
>
>
> Various log snippets:
>
> router.log:
>
> router 2007-06-20 10:53:06
> [INFO:5128:osrf_router.c:334:1182348562112110] Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/1182348562__1182348562.816599_11211]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_listener__1182270488.5296
> 04_5157]
> router 2007-06-20 10:53:06
> [INFO:5128:osrf_router.c:334:1182348562112111] Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/1182348562__1182348562.816599_11211]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_listener__1182270488.5296
> 04_5157]
> router 2007-06-20 10:53:07
> [INFO:5128:osrf_router.c:334:1182348562112111] Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_
> 5191]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.cstore_listener__1182270488.85
> 5554_5158]
> router 2007-06-20 10:53:08
> [INFO:5128:osrf_router.c:334:1182348562112111] Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_
> 5191]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.storage_listener_at_eg-server.
> nelinet.lan_5180]
> router 2007-06-20 11:29:38 [INFO:5128:osrf_router.c:334:118226909049311]
> Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/1182269090__1182269090.766500_4931]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_listener__1182270488.5296
> 04_5157]
> router 2007-06-20 11:29:45 [INFO:5128:osrf_router.c:334:118226909049431]
> Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/1182269090__1182269090.879104_4943]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_listener__1182270488.5296
> 04_5157]
> router 2007-06-20 11:29:45 [INFO:5128:osrf_router.c:334:118226909049431]
> Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_
> 5191]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.cstore_listener__1182270488.85
> 5554_5158]
> router 2007-06-20 11:29:45 [INFO:5128:osrf_router.c:334:118226909049431]
> Routing message:
> from:
> [evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_
> 5191]
> to:
> [evergreen at eg-server.nelinet.lan/open-ils.storage_listener_at_eg-server.
> nelinet.lan_5180]
>
>
> osrfsys.log
>
> open-ils.auth 2007-06-20 11:29:38
> [INFO:5191:oils_auth.c:85:118226909049311] CALL:open-ils.auth
> open-ils.auth.authenticate.init - ["admin"]
> open-ils.auth 2007-06-20 11:29:38
> [INFO:5191:osrf_app_session.c:522:118226909049311] [open-ils.auth] sent
> 400 bytes of data to
> evergreen at eg-server.nelinet.lan/1182269090__1182269090.766500_4931
> open-ils.auth 2007-06-20 11:29:38
> [INFO:5191:osrf_stack.c:103:118226909049311] Message processing duration
> 0.025546
> open-ils.auth 2007-06-20 11:29:45
> [INFO:5191:oils_auth.c:350:118226909049431] CALL:open-ils.auth
> open-ils.auth.authenticate.complete -
> [{"username":"admin","password":"f3eeca012cd6085af27863b7b2919c2d","type
> ":"temp"}]
> open-ils.auth 2007-06-20 11:29:45
> [INFO:5191:osrf_app_session.c:522:118226909049431] [open-ils.cstore]
> sent 215 bytes of data to router at eg-server.nelinet.lan/open-ils.cstore
> open-ils.cstore 2007-06-20 11:29:45
> [INFO:5190:oils_cstore.c:553:118226909049431] CALL:open-ils.cstore
> open-ils.cstore.direct.actor.user.search - [{"usrname":"admin"}]
> open-ils.cstore 2007-06-20 11:29:45
> [INFO:5190:osrf_app_session.c:522:118226909049431] [open-ils.cstore]
> sent 564 bytes of data to
> evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_5
> 191
> open-ils.cstore 2007-06-20 11:29:45
> [INFO:5190:osrf_app_session.c:522:118226909049431] [open-ils.cstore]
> sent 192 bytes of data to
> evergreen at eg-server.nelinet.lan/open-ils.auth_drone__1182270489.453548_5
> 191
> open-ils.cstore 2007-06-20 11:29:45
> [INFO:5190:osrf_stack.c:103:118226909049431] Message processing duration
> 0.022339
> open-ils.auth 2007-06-20 11:29:45
> [INFO:5191:osrf_stack.c:103:118226909049431] Message processing duration
> 0.000022
> open-ils.auth 2007-06-20 11:29:45
> [WARN:5191:osrf_cache.c:73:118226909049431] No cache data exists with
> key oils_auth_admin
> open-ils.auth 2007-06-20 11:29:45
> [WARN:5191:osrf_application.c:358:118226909049431] Returning method
> exception with message: No authentication seed found.
> open-ils.auth.authenticate.init must be called first
> open-ils.auth 2007-06-20 11:29:45
> [INFO:5191:osrf_app_session.c:522:118226909049431] [open-ils.auth] sent
> 262 bytes of data to
> evergreen at eg-server.nelinet.lan/1182269090__1182269090.879104_4943
> open-ils.auth 2007-06-20 11:29:45
> [INFO:5191:osrf_app_session.c:522:118226909049431] [open-ils.storage]
> sent 214 bytes of data to router at eg-server.nelinet.lan/open-ils.storage
> open-ils.auth 2007-06-20 11:29:50
> [INFO:5191:osrf_stack.c:103:118226909049431] Message processing duration
> 0.000022
> open-ils.auth 2007-06-20 11:29:50
> [INFO:5191:oils_event.c:11:118226909049431] Creating new event:
> LOGIN_FAILED
> open-ils.auth 2007-06-20 11:29:50
> [INFO:5191:oils_auth.c:457:118226909049431] failed login:
> username=admin, barcode=(null), workstation=
> open-ils.auth 2007-06-20 11:29:50
> [INFO:5191:osrf_app_session.c:522:118226909049431] [open-ils.auth] sent
> 478 bytes of data to
> evergreen at eg-server.nelinet.lan/1182269090__1182269090.879104_4943
> open-ils.auth 2007-06-20 11:29:50
> [INFO:5191:osrf_stack.c:103:118226909049431] Message processing duration
> 4.258313
> evergreen-admin at eg-server:/openils/var/log$
>
> opensrf.reporter_unix.log:
>
> 2007/06/19-18:39:13 Server closing!
> 2007/06/19-12:12:12 OpenSRF::UnixServer (type OpenSRF) starting!
> pid(5036)
> Binding to UNIX socket file /openils/var/sock/opensrf.reporter_unix.sock
> using SOCK_STREAM
> Group Not Defined.  Defaulting to EGID '1001 1001'
> User Not Defined.  Defaulting to EUID '1001'
> 2007/06/19-12:22:09 Server closing!
> 2007/06/19-12:27:54 OpenSRF::UnixServer (type OpenSRF) starting!
> pid(5169)
> Binding to UNIX socket file /openils/var/sock/opensrf.reporter_unix.sock
> using SOCK_STREAM
> Group Not Defined.  Defaulting to EGID '1001 1001'
> User Not Defined.  Defaulting to EUID '1001'
>
>
>
>
>
> -----Original Message-----
> From: open-ils-dev-bounces at list.georgialibraries.org
> [mailto:open-ils-dev-bounces at list.georgialibraries.org] On Behalf Of Don
> McMorris
> Sent: Wednesday, June 20, 2007 2:02 PM
> To: open-ils-dev at list.georgialibraries.org
> Subject: Re: [OPEN-ILS-DEV] Staff Client authentication woes
>
> How 'bout those logs Ed?  Specifically, /openils/var/log/open-ils.auth
> (if I'm remembering correctly) and perhaps the router/opensrf?
>
> Also, can/did you make sure your database server settings are correct
> for .auth?
>
> http://www.open-ils.org/dokuwiki/doku.php?id=open-ils_auth_api:open-ils.
> auth
> explains the authentication process.  Knowing how it works may help you
> diagnose the issue.  Basically, it performs authenticate.init to get the
> hash, then md5_hex's this with the password which it then passes through
> to authenticate.complete.  It looks to me that .init may be completing,
> but losing the hash before .complete is run.  I suppose it could me a
> memcached issue too?
>
> I also have a concern about ...connection to undefined...".  What staff
> client are you using? The current one should ask for a hostname at the
> top left.  The old one _may_ still exist in the source tree, which will
> not work (I found that out the hard way a while back).  It may be worth
> trying the staff client at the Open-ILS download page (it will require
> you to create a symlink in the web/xul directory, which you should be
> able to figure out after the staff client throws an error at you).
>
> You're almost there! Good luck!
> --Don
>
> On 6/20/07, Sperr, Edwin <sperr at nelinet.net> wrote:
> > So I'm attempting to use the staff client to connect to my brand-new
> > Evergreen (v.1.1.5) server.  I built the staff client from source --
> > it loads up okay, and I even get a successful server check when I
> > point it at the new host.  However, when I attempt to login with the
> > default username and password, I get:
> >
> >         s = Network/server failure.  Please check your Internet
> > connection to undefined and choose Retry Network.  If you need to
> > enter Offline Mode, choose Ignore Errors in this and subsequent
> > dialogs.  If you believe this error is due to a bug in Evergreen and
> > not network problems, please contact your helpdesk or friendly
> > Evergreen admins, and give them this information:
> > method=open-ils.auth.authenticate.complete
> > params=[{"username":"admin","password":"8cdaeb93a45701ee70950924eb9620
> > ce
> > ","type":"temp"}]
> > THROWN:
> > {"payload":[],"debug":"osrfMethodException : No authentication seed
> > found. open-ils.auth.authenticate.init must be called
> > first","status":404}
> > STATUS:
> >
> >         title = Network Failure
> >         b1 = Retry Network
> >         b2 = Ignore Errors
> >         b3 = null
> >         c = Check here to confirm this message
> >
> > I sense that I'm missing a build step here, but I'm not sure what it
> > is...
> >
> > Thanks!!!
> >
> > Ed Sperr
> > Digital Services Consultant
> > NELINET, Inc.
> > 153 Cordaville Rd. Suite 200  Southborough, MA
> > (508) 597-1931  |  (800) 635-4638 x1931
> >
>

Lets get that "version not supported" thing fixed, and we'll go from there ;)
--Don