#foswiki 2015-05-12,Tue

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)

WhoWhatWhen
***ChanServ sets mode: +o CDot
ChanServ sets mode: +o MichaelDaum
[06:16]
................. (idle for 1h24mn)
andrei_tI'm strill struggling with solr search and apparently I can't even switch back to the normal search
I disabled solr and also removed solr from the SKIN-configuration in Main.SitePreferences but whenever I search a term it still tries to put me back to the wrong search
[07:44]
jastAutoTemplatePlugin configuration? [07:47]
***Colas has quit IRC (Quit: Ex-Chat) [08:01]
........................... (idle for 2h13mn)
ChanServ sets mode: +o MichaelDaum [10:14]
.... (idle for 17mn)
andrei_tjast: thank you that solved it
sadly it also made me remember how bad the default search is in comparison to solr :/
[10:31]
...................... (idle for 1h46mn)
***ChanServ sets mode: +o Lynnwood [12:17]
.................................. (idle for 2h45mn)
ChanServ sets mode: +o CDot [15:02]
GithubBot[distro] FoswikiBot pushed 15 new commits to master: http://git.io/vU2g1
distro/master e0b041d Lieven L. Litaer: Item13252: Translations updated using Weblate (German)...
distro/master 3ad385b Christian Kern: Item13252: Translations updated using Weblate (German)...
distro/master c312cd6 Lieven L. Litaer: Item13252: Translations updated using Weblate (German)...
[15:16]
***GithubBot has left [15:16]
........... (idle for 51mn)
jomoCDot? [16:07]
CDotaye [16:07]
jomoIn the closed Item13399 (I18N.pm) need patch one more line ;(
+ print LANGUAGE Encode::encode_utf8("$tag=$name\n") if $cache_open;
e.g. encode at the cache rebuild... - i will add it into ite Item13399 - but don't want reopen it - or i should?
[16:08]
CDotany clues as to where that line is supposed to go? or can I just put it anywhere in the file? ;-) [16:09]
jomo:)
jomo added it into Item13399 - the question is - should i reopen it or not?
[16:09]
CDotnah
do it under 13378
[16:14]
jomook - ty [16:14]
..................... (idle for 1h43mn)
WinsonHuangHi Tarbox, are you there?
I commented out the wikiName= in LdapContrib.pm and restart the apache
[17:57]
TarboxHow'd it go? [17:58]
WinsonHuangNice! Now I saw some error like [warn] [client 192.168.25.160] mod_fcgid: stderr: - LdapContrib - processing clash of loginName=a on wikiName=A, dn=CN=aalajlan@tvtc.gov.sa,OU=users,O=Partners, resolves to newWikiName=A1 .... [18:00]
***ChanServ sets mode: +o Lynnwood__ [18:00]
TarboxIs that one of the people who can't log in? [18:00]
WinsonHuangI am not sure if this will block the importing from ldap or just failed on particular users
no, these users are the users in ldap but we don't want them to access foswiki so we did not set the wikiName for them
[18:00]
TarboxWhich means the LdapContrib is trying to make something up for them.
So if they all have a null wikiname it comes up with the same idea for every one, and then has to modify its idea because it clashes with the other people that have a null wikiname
[18:03]
WinsonHuangcan we restrict to import only users that have wikiName setup in ldap (diaplayName)? [18:05]
TarboxYou can set {Ldap}{LoginFilter} to any request you want.
But it took me an hour to write ours because I had to look up every detail.
https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters
So the short answer is I don't know but I'm very hopeful.
[18:06]
WinsonHuangbut why this is not working for only one group and all the other groups are okay? [18:10]
TarboxI don't think this is related.
I think it's one more thing we have to get through to find a real error message.
[18:10]
WinsonHuangwe have 7000+ ldap users and 30+ wiki groups [18:11]
TarboxMaybe you could perl pie some lines away from your error log
If they're all identical.
Or sed if you prefer.
[18:11]
WinsonHuangcan you show me how to? tks [18:14]
Tarboxperl -pi -e 's/^.*processing clash of loginName=.*$//' error.log
but that may leave a bunch of blank lines.
http://technosophos.com/2009/05/21/perl-pie-if-you-only-learn-how-do-one-thing-perl-it.html
maybe sed '/^.*processing clash of loginName=.*$/ d' error.log > output.log
[18:16]
WinsonHuangso the perl pie is replacing the text in a text file. but this is the Apache log file and the error.log does not have many lines now as we commented the wikiName= out
I am not sure if it still need to do this?
[18:24]
TarboxThe error message you gave me likely isn't the cause of your problem if it only refers to people who never had a right to foswiki in the first place. Can you find another error in there? [18:25]
WinsonHuangHere are some more errors:[Mon May 11 15:27:48 2015] [warn] [client 192.168.25.160] mod_fcgid: stderr: Use of uninitialized value $loginName in substitution (s///) at /var/lib/foswiki/lib/Foswiki/Contrib/LdapContrib.pm line 1189
[Mon May 11 15:27:48 2015] [warn] [client 192.168.25.160] mod_fcgid: stderr: - LdapContrib - no loginName for CN=xxx@company.com,OU=users,O=Partners ... skipping
[18:37]
TarboxCan you get into the source and quote line 1189 to me? [18:38]
WinsonHuangline 1188: my $loginName = $entry->get_value($this->{loginAttribute});
line 1189: $loginName =~ s/^\s+//o;
line 1190: $loginName =~ s/\s+$//o;
[Mon May 11 15:27:48 2015] [warn] [client 192.168.25.160] mod_fcgid: stderr: - LdapContrib - WARNING: no WikiNameAttributes found for CN=xxx@company.com,OU=users,O=Partners ... ignoring
but those users are not the *not working group* users
I replaced the real email with xxx@company.com in the error
[18:41]
TarboxCan you search on the username of a not working user in the error log? [18:46]
WinsonHuangsearched, they don't have any error logged [18:47]
TarboxHow about the group name of the misbehaving group? [18:47]
WinsonHuangthe only two lines for this group are here:
[Tue May 12 10:52:02 2015] [warn] [client 192.168.25.160] mod_fcgid: stderr: - LdapContrib - caching group for CN=EndUserTrainingOnlyGroup,CN=Roles,O=Partners
[Tue May 12 10:52:02 2015] [warn] [client 192.168.25.160] mod_fcgid: stderr: - LdapContrib - adding groupName='EndUserTrainingOnlyGroup', dn=CN=EndUserTrainingOnlyGroup,CN=Roles,O=Partners
just like all the other groups
[18:49]
TarboxOkay if you got a caching group for CN=EndUserTrainingOnlyGroup, several of the following messages should relate to it. Can you just paste me the log between that message and the equivalent message for the next group? Or if it's too large just give me the first few. [18:53]
WinsonHuangdummy question, can I paste a file here? [18:56]
Tarboxdummy answer: I don't know! >_>
My client has a send file option for you so I bet you can send it to me.
[18:56]
jomojomo think, it is better to use pastebin [18:56]
GithubBot[distro] FoswikiBot pushed 1 new commit to master: http://git.io/vUVlt
distro/master ab74194 Lieven L. Litaer: Item13252: Translations updated using Weblate (Klingon)...
[19:00]
***GithubBot has left [19:00]
WinsonHuangI paste all the logs to pastebin, how can i sent it to you? [19:04]
TarboxPaste the link in here. [19:04]
WinsonHuanghttp://pastebin.com/akCniEhU
that is all logs in error.log after I ran the refreshldap=1
[19:05]
TarboxMay I have the name of a user that doesn't work? [19:14]
.... (idle for 17mn)
WinsonHuang, do you have http://foswiki.org/Extensions/LdapNgPlugin installed on your foswiki? [19:31]
......... (idle for 40mn)
WinsonHuangone of example is rs-schisler@wiu.edu
which is in the not working group only and can't find in the error log
I don't think we have LdapNgPlugin installed
[20:11]
TarboxWell your error file seems normal, so I want to start poking downstream, for example: Are your users in the DB and just not in the group, or are your users completely missing? If you installed LdapNgPlugin you could put %LDAPUSERS{format="$wikiName $loginName" hideunknown="off"}% in a page in the sandbox for a dump. [20:16]
WinsonHuangusers are in ldap with the specific members.. [20:18]
TarboxDespite being called %LDAPUSER%, %LDAPUSER% only searches foswiki's cache.
So I'm testing to see if they made it from Ldap to the cache.
i.e. they survived the conversion process.
[20:18]
WinsonHuangIf the user are in the non-working group only, then he won't get imported into foswiki [20:19]
TarboxWhere are you checking that? [20:19]
WinsonHuangif the users are in both working and non-working group, I can see him in the working group in foswiki
the non working group shows "no members" in foswiki Main/WikiGroups
I checked it in Main/WikiGroups
[20:20]
TarboxYeah. That's why I want to dump all users, not just users that you can reach from wikigroups [20:21]
WinsonHuangI deleted the cache.db and recreated by running refreshldap and not working [20:26]
TarboxThe error file you gave me freaks out a lot about the peopel who don't have wiki access, but otherwise it seems okay. That makes me think the users are in foswiki and just not put in the appropriate group.
whether in Ldap or by Foswiki, either way.
have any of them tried to log in?
[20:29]
WinsonHuangyes, they tried and got access denied error [20:30]
TarboxFrom foswiki? [20:31]
WinsonHuangyes
those users are fine as they shouldn't have wiki access
but the users we want to have wiki access did not show up in the error log file which means they imported okay but actually not
[20:31]
Tarboxthose are the ones I meant. Have any of *them* tried to log in? Or are those the people getting the access denied from foswiki? [20:33]
WinsonHuangthose users get access denied from foswiki [20:33]
TarboxThen they might be in WikiUsers
Can you look for their wikinames there?
Just to confirm.
[20:33]
WinsonHuangthe wiki name does not exist in the WikiUsers
Hi Tarbox, I found some new stuff
[20:46]
TarboxGood, cuz I was running dry. [20:49]
WinsonHuangI tried to log in foswiki using the user's credential which in the no working group
only
I can log into the foswiki webhome but got access denied when I tried to go to most of the pages
[20:49]
Tarboxokay that means the user converted fine but the group failed for some reason. [20:51]
WinsonHuangexactly
when I go to the WikiGroups and go to the no working group and tried to add member into it
it gave me an error saying "You cannot add users to a missing group unless the create option is set"
Create not specified and group does not exist
so that sounds to me the group is not created in foswiki but why I can still see the group in foswiki
[20:51]
Tarbox:\ well now that you've pointed it out, is the EndUserTrainingOnlyGroup on the list in Main.WikiGroups ? [20:54]
WinsonHuangyes
I can see the group but no members
[20:54]
TarboxA part of me wants to move the wiki page for the group to the trash
in case it's magically stale somehow and getting in the way.
[20:55]
WinsonHuanghow to move it to the trash?
I believe we are almost there
[20:57]
Tarboxoh is it one of those special pages where they've hidden the delete link? [20:58]
WinsonHuangI am in the /Main/EndUserTrainingOnlyGroup but can't see the delete link [20:59]
TarboxHack your URL to read /bin/rename/Main/EndUserTrainingOnlyGroup instead of /Main/EndUserTrainingOnlyGroup
Then rename it to the Trash web
[21:00]
For me the next step would be adding debug between caching groupName= and adding groupname=, but I like debug a lot. Maybe just stare really hard at the groupAttribute, primaryGroupAttribute, memberAttribute, and other things referenced in that function in the code, make sure they're set right in configure and that the matching entries in the LDAP db are what you think they are.
I have to go now, I'm sorry.
[21:11]
WinsonHuangSure, thanks a lot for your great help!
I will try later and back here to update the status
[21:18]
............................... (idle for 2h31mn)
***ChanServ sets mode: +o gac410 [23:49]

↑back Search ←Prev date Next date→ Show only urls(Click on time to select a line by its url)