688121 - Something Went Wrong when editing a user profile on mozillians-dev.allizom.org

Status: VERIFIED INVALID

(Participation Infrastructure :: Phonebook, defect, P1)

Description

[Mark Goodwin [:mgoodwin]]

I logged in, went to 'Profile', clicked on 'Edit my Profile' and got the 'We're Sorry, but Something Went Wrong' page (complete with green tumblebeast running away with unspecified piece of hardware).

This is slightly problematic as it's part of the functionality I'm supposed to be performing security review on.

Comment 1

[Mark Goodwin [:mgoodwin]]

This also happens for other accounts I've tried; it's not limited to a single user profile.

Comment 2

[Aakash Desai [:aakashd]]

This happens when changing a password as well.

Comment 3

[Austin King [:ozten]]

On stage
STR
1) login
2) edit profile

Expected:
Can edit profile

Actual:
Traceback (most recent call last):

  File "/data/www/mozillians.allizom.org/mozillians/vendor/src/django/django/core/handlers/base.py", line 111, in get_response
    response = callback(request, *callback_args, **callback_kwargs)

  File "/data/www/mozillians.allizom.org/mozillians/apps/phonebook/views.py", line 102, in edit_profile
    return _edit_profile(request, unique_id, False)

  File "/data/www/mozillians.allizom.org/mozillians/apps/phonebook/views.py", line 123, in _edit_profile
    ldap.update_person(unique_id, form.cleaned_data)

  File "/data/www/mozillians.allizom.org/mozillians/apps/larper/__init__.py", line 238, in update_person
    conn = self._ensure_conn(WRITE)

  File "/data/www/mozillians.allizom.org/mozillians/apps/larper/__init__.py", line 118, in _ensure_conn
    self.conn.bind_s(dn, password)

  File "/usr/lib/python2.6/site-packages/ldap/ldapobject.py", line 221, in bind_s
    return self.result(msgid,all=1,timeout=self.timeout)

  File "/usr/lib/python2.6/site-packages/ldap/ldapobject.py", line 436, in result
    res_type,res_data,res_msgid = self.result2(msgid,all,timeout)

  File "/usr/lib/python2.6/site-packages/ldap/ldapobject.py", line 440, in result2
    res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)

  File "/usr/lib/python2.6/site-packages/ldap/ldapobject.py", line 446, in result3
    ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)

  File "/usr/lib/python2.6/site-packages/ldap/ldapobject.py", line 96, in _ldap_call
    result = func(*args,**kwargs)

INVALID_CREDENTIALS: {'desc': 'Invalid credentials'}

Comment 4

[Austin King [:ozten]]

After fixing an unrelated issue (http://git.io/goGAQg), this does not repro in dev.

Looking at stack trace to figure out if this is a config issue...

Comment 5

[Austin King [:ozten]]

A possible issue is the dn/password which we pull out of the signed cookie isn't working properly. The stacktrace is saying it couldn't bind as the user.

Comment 6

[Austin King [:ozten]]

This no longer reproduces with stage config fixed in Bug#688204.

Comment 7

[Tobias (:Tobbi) Markus]

I can not reproduce this either. Verifying.