528342 - Prod Socorro webapp-php only release

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Austin King [:ozten]]

We have a Socorro 1.1. release tonight.

1) svn up on webapp-php
NOTE: Only update webapp-php, trunk contains other code with should not be released.

2) Create and Edit new config values/files
    * Add 'auth' and 'moz_pagination' to the MODPATH

        # In the file webapp-php/application/config/config.php
        $config['modules'] = array
        (
            MODPATH . 'auth',
            MODPATH . 'ezcomponents',
            MODPATH . 'moz_pagination',
        );

        cp application/config/auth.php-dist application/config/auth.php

     * Configure the auth.php file to use LDAP 
          $config['driver'] = 'LDAP';

          -- next you'll need to enter your LDAP settings:
          cp application/config/ldap.php-dist application/config/ldap.php

     * refer to crash-stats.stage.mozilla.com for the LDAP settings.

Comment 1

[Reed Loden [:reed]]

Also need to make sure http://crash-stats.mozilla.com/admin/ redirects to https:// so people aren't sending their LDAP creds across the wire unencrypted.

Comment 2

[Austin King [:ozten]]

(In reply to comment #1)
Great point. We'd love help testing this release
http://crash-stats.mozilla.com/

For testers w/o auth rights, you can still test if all the links to login are via https.

Comment 3

[Austin King [:ozten]]

Set 3
Make sure the vhost is setting $_SERVER['HTTPS'] for port 81

https -> NS -> SetEnv HTTPS on

per Aravind/Oremj we will use $_SERVER['HTTPS'] to detect the protocol.

Comment 4

[Austin King [:ozten]]

stage is verified. Release is ready to go.

Comment 5

[Aravind Gottipati [:aravind]]

http://crash-stats.mozilla.com/login offers a login dialog thats NOT ssl.

http://crash-stats.mozilla.com/login offers a ssl auth dialog box.

Should fix the /login one too.

Comment 6

[Aravind Gottipati [:aravind]]

Sorry, the second link was supposed to be http://crash-stats.mozilla.com/admin.

So the /admin one is fine, but /login one needs to redirect to ssl.

Comment 7

[Austin King [:ozten]]

(In reply to comment #5)
Where is this linked to from the UI?

Comment 8

[Austin King [:ozten]]

Requesting http://crash-stats.mozilla.com/admin will redirect to 
HTTP/1.1 302 Found
Location: https://crash-stats.mozilla.com/login

Comment 9

[Reed Loden [:reed]]

My LDAP creds are not working on https://crash-stats.mozilla.com/login. I'm a member of CrashStatsAdmin, as per bug 523731, so I should have access.

Comment 10

[Reed Loden [:reed]]

(In reply to comment #9)
> My LDAP creds are not working on https://crash-stats.mozilla.com/login. I'm a
> member of CrashStatsAdmin, as per bug 523731, so I should have access.

CrashReportsAdmin, I mean.

Comment 11

[Austin King [:ozten]]

(In reply to comment #10)
Are you able to login on stage?
https://crash-stats.stage.mozilla.com/auth/login

Comment 12

[Reed Loden [:reed]]

(In reply to comment #11)
> (In reply to comment #10)
> Are you able to login on stage?
> https://crash-stats.stage.mozilla.com/auth/login

I am not. What is being used for the AuthLDAPURL in the apache vhost config? Is |o=com| accidentally being included?

Comment 13

[Reed Loden [:reed]]

(In reply to comment #12)
> (In reply to comment #11)
> > (In reply to comment #10)
> > Are you able to login on stage?
> > https://crash-stats.stage.mozilla.com/auth/login
> 
> I am not. What is being used for the AuthLDAPURL in the apache vhost config? Is
> |o=com| accidentally being included?

Ignore that comment. Wrong project.

Is there anything in the logs? Otherwise, I'll go take a look at the code.

Comment 14

[Aravind Gottipati [:aravind]]

Try logging into staging, I will check the logs there.

Comment 15

[Reed Loden [:reed]]

(In reply to comment #14)
> Try logging into staging, I will check the logs there.

Done. 401 Unauthorized at https://crash-stats.stage.mozilla.com/auth/login.

Comment 16

[Reed Loden [:reed]]

Also, can the realm be changed, please? MoCo people aren't the only ones using the admin interface, so "Mozilla Corporation - LDAP Login" doesn't really make sense. Maybe "Mozilla Crash Stats Admin - LDAP Login" or something?

Comment 17

[Aravind Gottipati [:aravind]]

Please file those as app bugs, for now closing this as folks tell me the app is working.

Comment 18

[Aravind Gottipati [:aravind]]

@reed: I see this in staging logs.

2009-11-12 21:59:02 -08:00 --- debug: Auth Library loaded
2009-11-12 21:59:02 -08:00 --- debug: Authorization Failed for mail=[e-mail],o=net,dc=mozilla in group cn=CrashReportsAdmin

Comment 19

[Reed Loden [:reed]]

(In reply to comment #17)
> Please file those as app bugs, for now closing this as folks tell me the app is
> working.

Reading the code, I don't think it's an app bug if it's working for other people.

I'll open another IT bug on this.