Bug 1505922 - Auth External Auth - FreeIPA - Users get 400 /auth/api error message upon login to classic UI.
Summary: Auth External Auth - FreeIPA - Users get 400 /auth/api error message upon log...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance
Version: 5.9.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: GA
: 5.10.0
Assignee: Joe Vlcek
QA Contact: Matt Pusateri
URL:
Whiteboard: auth:externalauth
Depends On:
Blocks: 1509416
TreeView+ depends on / blocked
 
Reported: 2017-10-24 14:51 UTC by Matt Pusateri
Modified: 2018-06-21 20:28 UTC (History)
7 users (show)

Fixed In Version: 5.10.0.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1509416 (view as bug list)
Environment:
Last Closed: 2018-06-21 20:28:42 UTC
Category: ---
Cloudforms Team: ---
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
API Error message screenshot (125.99 KB, image/png)
2017-10-24 14:52 UTC, Matt Pusateri
no flags Details


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1507534 0 unspecified CLOSED [RFE] Should have on/off mechanism for notification modal-dialogs 2021-02-22 00:41:40 UTC

Internal Links: 1507534

Description Matt Pusateri 2017-10-24 14:51:08 UTC
Description of problem:
Once logged in Users get /auth/api 400 error message when logging into classic ui 


Version-Release number of selected component (if applicable):
5.9.0.2 

How reproducible:


Steps to Reproduce:
1. Setup External Auth (FreeIPA, but maybe other too)
2. Log into classic UI, with valid user.
3.

Actual results:
User gets 400 /auth/api error message (see screenshot)

Expected results:

No error message

Additional info:

Comment 2 Matt Pusateri 2017-10-24 14:52:26 UTC
Created attachment 1342807 [details]
API Error message screenshot

Comment 3 Matt Pusateri 2017-10-24 14:54:08 UTC
Firefox version 55.0.3, I originally thought this was related to Firefox beta 57. But it happens in older Firefox as well. Firefox version 55.0.3, I originally thought this was related to Firefox beta 57. But it happens in older Firefox as well.

Comment 4 Matt Pusateri 2017-10-24 17:21:20 UTC
Also appears to happen on logout and a 401 on session timeout.  Session timeout kind of makes sense, but seems like we should trap that error if possible and display a better error message.

Comment 5 Allen W 2017-10-24 18:39:50 UTC
Can confirm this occurs in all browsers, (tested chrome, safari)

Comment 6 Joe Vlcek 2017-10-26 21:39:02 UTC
Matt,

I the user logged in and able to user the appliance?

Is the only issue that the "Server Error (API) pop-up shows up?

Once the pop-up is dismissed do things work OK?

JoeV

Comment 7 Matt Pusateri 2017-10-27 13:27:27 UTC
As far as I know yes, it's only the pop-up error.  Though on SSUI you can't even log in. But I think that's being worked in another ticket.  I didn't extensively test that everything works...

Comment 10 CFME Bot 2017-11-02 22:56:39 UTC
New commit detected on ManageIQ/manageiq/master:
https://github.com/ManageIQ/manageiq/commit/20dd38d0606e3708d473744148445d197101fbfb

commit 20dd38d0606e3708d473744148445d197101fbfb
Author:     Joe VLcek <jvlcek>
AuthorDate: Thu Nov 2 17:05:27 2017 -0400
Commit:     Joe VLcek <jvlcek>
CommitDate: Thu Nov 2 17:05:27 2017 -0400

    External auth lookup_by_identity should handle missing request parameter
    
    https://bugzilla.redhat.com/show_bug.cgi?id=1505922

 app/models/authenticator/httpd.rb       | 12 +++++++-----
 spec/models/authenticator/httpd_spec.rb |  4 ++++
 2 files changed, 11 insertions(+), 5 deletions(-)


Note You need to log in before you can comment on or make changes to this bug.