1233170 - Slave health page: details page opens several/multiple http auth requests

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

If I open https://secure.pub.build.mozilla.org/builddata/reports/slave_health/slave.html?class=test&type=t-w732-ix&name=t-w732-ix-241 , an LDAP http auth prompt gets opened:

A username and password are being requested by https://secure.pub.build.mozilla.org. The site says: "Mozilla Contributors - LDAP Authentication"

After entering the correct credentials, the next one gets opened, then another one, and so on. Pressing the Esc key makes it stop after 8 prompts or so.

Comment 1

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Correction: One has to kill three auth popups after giving up.

Comment 2

[Justin Wood (:Callek)]

The trick here is that it connects to some restricted environments as well via http, and uses multiple sources to go into one place.

This is likely primarily the slaveapi ldap login to gather the slaveapi history. And the multiple popups for it is that your provided login is not valid for the resource. Sadly I'm not personally sure how to represent that in web-dev in a better way.

If you do know how, I'd welcome patches to the repo https://hg.mozilla.org/build/slave_health/

Comment 4

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Some info from a helpful chat with Callek on 2016-10-06:

I can't access these:
https://secure.pub.build.mozilla.org/slavealloc/api/slaves/bld-lion-r5-001
https://secure.pub.build.mozilla.org/slaveapi/slaves/bld-lion-r5-001

But can access:
https://secure.pub.build.mozilla.org/buildapi/recent/bld-lion-r5-001

[2016-10-06 20:50:27] * philor * Callek: what ldap group do we need to add Aryx to so he can manage slaves?
[2016-10-06 20:50:39] * Callek * should be the sheriff ldap group iirc
[2016-10-06 20:53:28] * Aryx * console log: https://pastebin.mozilla.org/8916420

Request log (excerpt):

19:23:28.638 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Bold-webfont.892667349c5c.woff [HTTP/1.1 401 Authorization Required 215ms]
19:23:28.641 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Light-webfont.963eb3290774.woff [HTTP/1.1 401 Authorization Required 294ms]
19:23:28.738 OPTIONS 
XHR 
https://bugzilla.mozilla.org/rest/bug/t-w732-spot-249 [HTTP/1.1 200 OK 640ms]
19:23:28.743 GET 
XHR 
https://secure.pub.build.mozilla.org/slavealloc/api/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 204ms]
19:23:28.747 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 202ms]
19:23:28.751 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249/actions/shutdown_buildslave [HTTP/1.1 401 Authorization Required 202ms]
19:23:29.487 GET 
XHR 
https://bugzilla.mozilla.org/rest/bug/t-w732-spot-249 [HTTP/1.1 400 Bad Request 398ms]
19:23:46.710 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Regular-webfont.55b8ce1f9a32.woff [HTTP/1.1 404 Not Found 538ms]
19:23:46.711 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Bold-webfont.892667349c5c.woff [HTTP/1.1 404 Not Found 548ms]
19:23:46.712 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Light-webfont.963eb3290774.woff [HTTP/1.1 404 Not Found 557ms]
19:23:46.713 GET 
XHR 
https://secure.pub.build.mozilla.org/slavealloc/api/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 545ms]
19:23:46.714 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 561ms]
19:23:46.715 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249/actions/shutdown_buildslave [HTTP/1.1 401 Authorization Required 568ms]
19:23:47.370 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Regular-webfont.3cbf4d3ed22e.ttf [HTTP/1.1 404 Not Found 178ms]
19:23:47.382 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Bold-webfont.5a100916f94b.ttf [HTTP/1.1 401 Authorization Required 179ms]
19:23:47.390 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Light-webfont.ecb4572a5e47.ttf [HTTP/1.1 401 Authorization Required 180ms]
19:23:59.319 GET 
XHR 
https://secure.pub.build.mozilla.org/slavealloc/api/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 175ms]
19:23:59.320 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 183ms]
19:23:59.325 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249/actions/shutdown_buildslave [HTTP/1.1 401 Authorization Required 183ms]
19:23:59.326 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Bold-webfont.5a100916f94b.ttf [HTTP/1.1 404 Not Found 556ms]
19:23:59.327 GET 
https://secure.pub.build.mozilla.org/media/fonts/OpenSans-Light-webfont.ecb4572a5e47.ttf [HTTP/1.1 404 Not Found 553ms]
19:24:10.408 GET 
XHR 
https://secure.pub.build.mozilla.org/slavealloc/api/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 178ms]
19:24:10.410 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 183ms]
19:24:10.411 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249/actions/shutdown_buildslave [HTTP/1.1 401 Authorization Required 189ms]
19:24:13.909 GET 
XHR 
https://secure.pub.build.mozilla.org/slaveapi/slaves/t-w732-spot-249/actions/reboot [HTTP/1.1 401 Authorization Required 187ms]
19:24:16.831 GET 
XHR 
https://secure.pub.build.mozilla.org/buildapi/recent/t-w732-spot-249 [HTTP/1.1 401 Authorization Required 180ms]

Comment 5

[Kim Moir [:kmoir] ET]

reassigning to Andrei since he is working on the machine status tool

Comment 6

[Andrei Obreja [:aobreja NOT AVAILABLE][:buildduty]]

I don't have much experience here either but from what I can see ,as Callek mentioned in Comment2 you will need some ldap credentials to login,this is also seen above (HTTP/1.1 401 Authorization Required).
The reason you get 3 popups is because the page use multiple sources to load different informations on this page,you can notice that the page is a bit different from the first to last popup even if you didn't put the correct password.
In order to be able to see this page you will need ldap credentials since this is a restricted page.

Requesting NI from Callek,maybe he can point you to the right people who can give you ldap credentials if is the case,if not you will not be able to see all the informations from the page.

Comment 7

[Justin Wood (:Callek)]

(In reply to Sebastian Hengst [:aryx][:archaeopteryx] (needinfo on intermittent or backout) from comment #4)
> Some info from a helpful chat with Callek on 2016-10-06:
> 
> I can't access these:
> https://secure.pub.build.mozilla.org/slavealloc/api/slaves/bld-lion-r5-001
> https://secure.pub.build.mozilla.org/slaveapi/slaves/bld-lion-r5-001
> 
> But can access:
> https://secure.pub.build.mozilla.org/buildapi/recent/bld-lion-r5-001
> 
> [2016-10-06 20:50:27] * philor * Callek: what ldap group do we need to add
> Aryx to so he can manage slaves?
> [2016-10-06 20:50:39] * Callek * should be the sheriff ldap group iirc
> [2016-10-06 20:53:28] * Aryx * console log:
> https://pastebin.mozilla.org/8916420
> 


:jabba, can you confirm that Aryx is in the sheriff ldap group(s)?

Comment 8

[Justin Dow [:jabba]]

I've added Aryx to the vpn_sheriffs group.

Comment 9

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

Thank you. I can access a page about the health of a specific slave without issues.