Bug 2298843 - Recent update of httpd caused authentication to stop working for some services in Fedora
Summary: Recent update of httpd caused authentication to stop working for some service...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: httpd
Version: 39
Hardware: Unspecified
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Luboš Uhliarik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-19 12:32 UTC by Michal Konecny
Modified: 2024-08-19 12:53 UTC (History)
7 users (show)

Fixed In Version: httpd-2.4.62-2.fc40 httpd-2.4.62-2.fc39
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2024-08-17 01:51:02 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Michal Konecny 2024-07-19 12:32:50 UTC
After today update of httpd to version 2.4.61-1.fc39 the authentication server ipsilon01.iad2.fedoraproject.org didn't redirect correctly SSO login attempts from pagure.io, src.fedoraproject.org and copr.fedorainfracloud.org.

This was fixed after downgrading to version 2.4.57-3.fc39 and also downgrading mod_http2 to 2.0.18-2.fc39 to prevent startup error.

There wasn't any error in the httpd error log related to that.

Reproducible: Always

Comment 1 Michal Konecny 2024-07-22 09:11:16 UTC
We tried to update to 2.4.62-1.fc39 yesterday, but it still causes the same issues.

Comment 2 Joe Orton 2024-07-22 11:30:41 UTC
Can you give us more of a clue what was failing? Any unusual 403 errors logged?

If there were redirects with embedded URLs (quite possible with SSO) it is likely https://bz.apache.org/bugzilla/show_bug.cgi?id=69197

Comment 3 Michal Konecny 2024-07-22 12:44:48 UTC
The issue was either TOO_MANY_REDIRECTS on copr.fedorainfracloud.org and in case of pagure.io and src.fedoraproject.org Strange state: failure.

I didn't saw any unusual 403 errors. But looking at the login procedure there is a redirect with embedded URL containing %3F, so it seems that this is https://bz.apache.org/bugzilla/show_bug.cgi?id=69197.

Comment 4 Kevin Fenzi 2024-07-23 21:00:46 UTC
Is there likely to be a new release with that fix in it soon?

Comment 5 Michal Konecny 2024-07-26 11:20:30 UTC
It's now also happening with the latest update of package on el9.

Comment 6 Fedora Update System 2024-08-01 13:12:14 UTC
FEDORA-2024-e83af0855e (httpd-2.4.62-2.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-e83af0855e

Comment 7 Fedora Update System 2024-08-01 13:12:15 UTC
FEDORA-2024-6d34b6045f (httpd-2.4.62-2.fc40) has been submitted as an update to Fedora 40.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-6d34b6045f

Comment 8 Fedora Update System 2024-08-02 03:35:34 UTC
FEDORA-2024-e83af0855e has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-e83af0855e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-e83af0855e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2024-08-02 03:40:07 UTC
FEDORA-2024-6d34b6045f has been pushed to the Fedora 40 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-6d34b6045f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-6d34b6045f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2024-08-03 01:50:04 UTC
FEDORA-2024-6d34b6045f (httpd-2.4.62-2.fc40) has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Michal Konecny 2024-08-05 07:30:04 UTC
The issue is not solved yet, but I tested only the F39 version.

Comment 12 Fedora Update System 2024-08-17 01:51:02 UTC
FEDORA-2024-e83af0855e (httpd-2.4.62-2.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.