673107 - LDAP permissions in production breaking account-portal "Delete Account"

Status: RESOLVED DUPLICATE of bug 673244

(Cloud Services :: Operations: Miscellaneous, task)

Description

[:ibai]

Steps to reproduce:

1- Go to https://account.services.mozilla.com/account/delete
2- Enter Password and confirm
3- Message appear: "Oh dear.

Looks like one of the dinosaurs escaped again. We keep them away from the data, so that should be safe.

Please try again later when we've wrestled him back onto the treadmill.
"

Expected behavior on #3: Account is deleted and confirmed with an appropriate UI.

I've tested this with [e-mail] if you can track something. 

They are several users complaining in the forum too. 

The behavior is the same as this old bug but I'm not sure if it's related: https://bugzilla.mozilla.org/show_bug.cgi?id=655282

Thanks

Comment 1

[Philipp von Weitershausen [:philikon]]

atoll saw this yesterday, too. He said he wanted to file it, so I'm CCing him to see if we can dupe it to an existing bug.

Comment 2

[Tarek Ziadé (:tarek)]

Atoll, do you have any TB we can chew on ? thx

Toby, are we not displaying the crash id on the web dinosaur UI yet in AP ? that'd be useful to find the issue in the log. let me know and I'll create another issue for this

Comment 3

[Toby Elliott [:telliott]]

Crashid will be going out when account portal gets pushed. There's an issue and I'll get error logs from atoll.

Comment 4

[:Atoll]

This is a sample traceback from a p01, there are more like it.

2011-07-21 09:40:16,625 ERROR [accountportal] Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/services/util.py", line 484, in __call__
    return self.app(environ, start_response)
  File "/usr/lib/python2.6/site-packages/beaker/middleware.py", line 152, in __call__
    return self.wrap_app(environ, session_start_response)
  File "/usr/lib/python2.6/site-packages/webob/dec.py", line 147, in __call__
    resp = self.call_func(req, *args, **self.kwargs)
  File "/usr/lib/python2.6/site-packages/webob/dec.py", line 208, in call_func
    return self.func(req, *args, **kwargs)
  File "/usr/lib/python2.6/site-packages/accountportal/wsgiapp.py", line 171, in __call__
    result = function(request, **params)
  File "/usr/lib/python2.6/site-packages/accountportal/controllers/account.py", line 185, in delete_account
    if not self.auth.delete_user(uid, pwd):
  File "/usr/lib/python2.6/site-packages/services/auth/mozilla_sreg.py", line 182, in delete_user
    raise BackendError()
BackendError

Comment 5

[:Atoll]

and there is no traceback on sreg associated with this timestamp.

Comment 6

[Tarek Ziadé (:tarek)]

We need to re-raise the back end error here, adding a bug for this

Comment 7

[:Atoll]

python26-services-1.7-2

python26-accountportal-1.1.1-3

Comment 8

[Tarek Ziadé (:tarek)]

filed in bug 673144

Comment 9

[Tracy Walker [:tracy]]

upping severity and adding regression keyword.

Comment 10

[:Atoll]

this was determined to be an ldap issue, over to Pete for status update

Comment 11

[Pete Fritchman [:petef]]

The LDAP request isn't even making it to the master.

sreg is returning a 400:
10.10.11.198 - - [28/Jul/2011:11:42:49 -0700] "DELETE /yvfwggpgqen5vdqfcgjjx3sxsn4gcfmx HTTP/1.1" 400 1 "-" "Python-urllib/2.6" XFF="10.10.10.242" TIME=0.005

Comment 12

[Pete Fritchman [:petef]]

After some more digging:

* we're getting back error "6", invalid JSON.
* tcpdump shows we're sending valid JSON.
* some logging shows request.body is empty in delete_user().

Comment 13

[Toby Elliott [:telliott]]

This is a regression in Webob 1.0.8. It doesn't read delete bodies.