| Time |
Nick |
Message |
| 07:23 |
|
collum joined #evergreen |
| 08:42 |
|
jmurray-isl joined #evergreen |
| 08:51 |
|
Dyrcona joined #evergreen |
| 08:54 |
|
mantis joined #evergreen |
| 09:08 |
Dyrcona |
Forgot that I was going to install firmware updates this morning. |
| 09:20 |
|
redavis joined #evergreen |
| 09:22 |
|
Dyrcona joined #evergreen |
| 09:22 |
|
mmorgan joined #evergreen |
| 09:29 |
|
dguarrac joined #evergreen |
| 10:50 |
|
dguarrac_ joined #evergreen |
| 11:06 |
|
jihpringle joined #evergreen |
| 11:22 |
|
collum joined #evergreen |
| 11:58 |
Dyrcona |
Is there a separate sign up page for the hackfest? |
| 12:08 |
Dyrcona |
Ok. I found it in the email. |
| 12:12 |
|
Christineb joined #evergreen |
| 12:39 |
|
redavis joined #evergreen |
| 15:21 |
|
jihpringle joined #evergreen |
| 15:25 |
|
jihpringle69 joined #evergreen |
| 15:25 |
|
mantis left #evergreen |
| 15:55 |
Bmagic |
for purposes of clearning out memcached of all previous login attempts for a given staff/SIP account, what's the memcached object name? Looking at the code, it's "oils_auth_" + authkey? |
| 15:56 |
berick |
that seems right |
| 15:57 |
Bmagic |
buuuut, how do I figure out the "authkey" - I have logs that indicate that a SIP machine has been corrected, but it still can't login because of all of the previous failures, and I think it's going to conintue to be denied indefinitely, at least until: 1) I delete the memcached entries or 2) it stops attempting to login for a few hours |
| 15:58 |
|
mmorgan left #evergreen |
| 15:59 |
berick |
Bmagic: activity log (or similar) logs the username/barcode and the generated authtoken on success |
| 15:59 |
berick |
can search back for it |
| 15:59 |
Bmagic |
in the DB, or osrfsys.log? |
| 16:00 |
berick |
grep "successful login: username=<whatever>" |
| 16:00 |
berick |
osrfsys.log |
| 16:01 |
Bmagic |
The login logs around the user I'm looking for, never make it to that stage |
| 16:01 |
berick |
oh, duh, they're all failed logins |
| 16:02 |
Bmagic |
instead of that log line, I have this one: oils_auth.c:847:xxxxxxx] failed login: username=yyyyyyy, barcode=(none), workstation= |
| 16:03 |
Bmagic |
and before that: ilsAuth found too many recent failures for 'yyyyy' : 2197, forcing failure state. |
| 16:03 |
berick |
key would be oils_auth_$USERNAME_OR_BARCODE_count |
| 16:03 |
berick |
i think |
| 16:04 |
Bmagic |
the $USERNAME doesn't appear in results from this command: memcdump | grep <username> |
| 16:04 |
Bmagic |
so, instead, I used this command: memcdump | grep oils_auth_ |less |
| 16:05 |
Bmagic |
and discovered that all* of the auth keys are oils_auth_<appears to be login tokens> |
| 16:07 |
Bmagic |
maybe it's what's in actor.usr.passwd? |
| 16:08 |
berick |
the "found too many recent failures" is based on what open-ils.auth finds in memcache |
| 16:08 |
berick |
there has to be a oils_auth_$WHATEVER_count key to trigger that |
| 16:10 |
Bmagic |
right |
| 16:10 |
Bmagic |
it's the $WHATEVER that i'm trying to figure out |
| 16:10 |
Bmagic |
because it's clearly not saved in memcached with the username |
| 16:10 |
berick |
username or barcode are the only options |
| 16:10 |
Bmagic |
run this on your memcached server: memcdump | grep oils_auth_ |less |
| 16:13 |
berick |
Bmagic: are you passing --servers= ? |
| 16:13 |
Bmagic |
I setup the env variable to my server |
| 16:13 |
berick |
iow, are you get *any* keys? |
| 16:14 |
Bmagic |
yep, tons of keys |
| 16:14 |
berick |
k |
| 16:14 |
Bmagic |
none of them have anything to do with usernames |
| 16:14 |
Bmagic |
all hashes |
| 16:14 |
berick |
the _count ones do |
| 16:14 |
Bmagic |
example: oils_auth_b3e271f8a356a9dd99484f0css95fde0 |
| 16:14 |
berick |
do | grep _count |
| 16:15 |
Bmagic |
lots of this: open-ils.search_5b3acddc43fb44afbbaadf0ef155af_counter |
| 16:15 |
berick |
ok that's different |
| 16:15 |
Bmagic |
right |
| 16:15 |
berick |
i have a smattering of oils_auth_$BARCODE_count entries |
| 16:16 |
Bmagic |
so weird, nothing in mine |
| 16:17 |
Bmagic |
that's not true, there are 3 |
| 16:17 |
Bmagic |
none of which bear the name I'm looking for. So somewhere, somehow, OpenSRF/Evergreen is deciding that this account is locked |
| 16:18 |
Bmagic |
just checked actor.usr_activity for my usr ID number, zero rows |
| 16:22 |
berick |
if you have the password, i'd say try logging in yourself. |
| 16:23 |
Bmagic |
I've been logging in via SIP over telnet. Which is where I started, and captured that login failed message about too many recent failures |
| 16:24 |
berick |
any chance the sip server is pointing at a different memcache instance? |
| 16:25 |
Bmagic |
I thought that, but alas, no |
| 16:29 |
Bmagic |
maybe I'll restart memcached in the night |
| 16:30 |
berick |
i assume this is classic SIPServer, yeah, no Mediator? |
| 16:30 |
Bmagic |
yep, classic |
| 17:24 |
|
jihpringle joined #evergreen |
| 17:35 |
|
Guest57 joined #evergreen |
| 19:01 |
jeff |
did you already try to retrieve and/or delete the key? memcache does not guarantee that you can list all keys with memcdump. |
| 19:08 |
jeff |
(memcexist, or memccat, memcrm, etc.) |
| 19:32 |
|
jihpringle joined #evergreen |