Time
S
Nick
Message
01:17 bjonnh
pdurbin: it works now (on demo.data…)
01:21 pdurbin
bjonnh: nice!!!!
01:22 pdurbin
thanks for testing. much appreciate
01:22 pdurbin
d
01:24 pdurbin
nice, I can see the demo server (and beta and production) at https://www.incommon.org/federation/info/all-entity-categories.html#SPs now
01:24 pdurbin
all is going according to plan
01:24 pdurbin
MUHAHAHAHAHAH!
05:05 garnett joined #dataverse
12:33 andrewSC joined #dataverse
13:13 bsilverstein joined #dataverse
13:18 donsizemore joined #dataverse
13:25 donsizemore
@pdurbin ring ring? i've got some hopefully short / yes/no questions to run by you, UNLESS you're preparing to go on vacay
14:00 pdurbin
donsizemore: heh. I'm here all day. Gone next week. Sorry I missed you yesterday. How can I help?
14:31 jo-pol joined #dataverse
14:31 jo-pol left #dataverse
14:37 donsizemore joined #dataverse
14:41 pdurbin
donsizemore: did you seem my message a bit ago?
14:44 donsizemore
@pdurbin: hopefully quick question about migration... i know gustavo is coordinating via meeting next week but you're mr. shib, so =)
14:45 pdurbin
donsizemore: Mr. Shib wants you to try logging into https://demo.dataverse.org :)
14:45 donsizemore
@pdurbin: i don't see the migrate_users.sql query doing anything with the "old" user passwords, so in the 4.4 database the builtinuser encrpyptedpassword fields are blank for all except dataverseAdmin
14:46 donsizemore
@pdurbin so when Sophia tries to login, Dataverse dutifully offers to convert her to Shib, but it wants her existing password, and that's when things go south
14:46 pdurbin
Shibboleth conversion requires you to know your local account password.
14:48 donsizemore
@pdurbin: correct... but i don't see where the old passwords are handled in the migration scripts
14:48 pdurbin
donsizemore: if memory serves, migrating the passwords was the last thing we did
14:48 pdurbin
We had the new site running with all the migrated data but didn't want people to log in.
14:48 donsizemore
@pdurbin the old encrypted passwords are present in _dvn3_vdcuser
14:48 pdurbin
We wanted people to tell us that the data looked good before we let them in.
14:49 donsizemore
@pdurbin any chance the SQL / script is up anywhere? don't see it in https://github.com/IQSS/dataverse/tree/develop/scripts/migration
14:52 donsizemore
@pdurbin: and this and tworavens being unhappy after multiple redeploys are really the two "big" issues we have left... the rest are a bunch of details
14:56 pameyer joined #dataverse
15:09 pdurbin
donsizemore: I thought I heard that it's part of a script but commented out or something. Let me go ask.
15:11 donsizemore
@pdurbin: urgh, i should've figured. sorry =(
15:13 donsizemore
@pdurbin: #12 here https://github.com/IQSS/dataverse/blob/develop/scripts/migration/migration_instructions.txt just has a [how]?
15:13 pdurbin
donsizemore: no problem! Kevin and Leonid says that everyone has trouble with this step. I wonder if there's an open issue.
15:13 pdurbin
donsizemore: wow, that "how" is, um, suboptimal
15:13 donsizemore
@pdurbin: i've got other questions for kevin and leonid, so i can pester them through dataverse_support. was pestering you here because you're Mr. Shib!
15:14 pdurbin
donsizemore: Mr. Shib wants you to try logging into https://demo.dataverse.org with you UNC creds. :)
15:14 pdurbin
your
15:15 donsizemore
@pdurbin demo.dataverse.org likes my UNC credentials!
15:16 pdurbin
donsizemore: nice! We *just* got our servers added to R&S yesterday: https://incommon.org/federation/info/all-entity-categories.html#SPs
15:16 donsizemore
@pdurbin looks good from here
15:16 pdurbin
we still need to configure beta and production though
15:17 donsizemore
@pdurbin so on passwords... can they point me anywhere, or should i follow up through dataverse_support? we've got a call next week but i'd love to figure out this password bit, it's the only one that really bugs me
15:24 pdurbin
donsizemore: I just opened an issue for you: https://github.com/IQSS/dataverse/issues/3240
15:24 donsizemore
@pdurbin I thank you for your charitable choice of the word, "confused" =)
15:25 pdurbin
donsizemore: you're not the only one, I hear
15:26 pdurbin
In Slack I pinged someone who can help.
15:30 donsizemore
@pdurbin: thank you! and ENJOY YOUR VACATION!
15:31 pdurbin
donsizemore: thanks. Want to help bsilverstein answer questions in here next week? :)
15:31 pdurbin
pameyer: same question :)
15:31 donsizemore
@pdurbin: i can certainly help with the things i've broken in the past...
15:32 pdurbin
donsizemore: you know where some of the bodies are buried
15:33 pameyer
pdurbin: for things I can actually provide useful info about, sure
15:33 pameyer
and enjoy the vacation :)
15:33 pdurbin
Thanks. I'll think of you all every day.
15:41 pdurbin
donsizemore: Mr. Shib will have another server for you to test soon.
15:42 pdurbin
donsizemore: and please email support
15:43 donsizemore
@pdurbin I just fixed it =) though the last thing I tried was also the first thing I tried, several times. I did find a setting in I believe rooksource.R which should've prevented it from working all along, but... it was a good exercise in reminding me what to look for
15:45 pdurbin
donsizemore: cool. On a related note, Leonid left you some feedback at https://github.com/IQSS/dataverse/pull/3211
15:49 pdurbin
donsizemore: we're ready for you to test with your UNC login at https://beta.dataverse.org please.
15:49 donsizemore
"UNC-Chapel Hill Single Sign-On - Message Security Error The request cannot be fulfilled because the message received does not meet the security requirements of the login service."
15:49 donsizemore
perhaps we're waiting for metadata to refresh out to UNC's IdP?
15:51 pdurbin
donsizemore: huh. Weird. Maybe you could ask Jan for me.
15:54 pdurbin
in your copious free time :)
15:56 donsizemore
@pdurbin: i'm pulling 'id' lists from the dataverse, dataset and datafile tables so i can run 'comm' against similar lists from vdc, study and studyfile to try and figure out why are numbers are different
15:57 donsizemore
@pdurbin smarter methods welcome, but it should give us a starting point. i'll definitely ping Jan about beta.dataverse.org; federation is something he doesn't get to mess with very often, and to him it's fun
15:57 donsizemore
*our
15:58 pdurbin
donsizemore: can you please try a different browser on https://beta.dataverse.org ? UNC had been in an old local list of IPs.
15:58 * pdurbin
looks at `man comm`
15:59 donsizemore
@pdurbin: same error from safari: "UNC-Chapel Hill Single Sign-On - Message Security Error The request cannot be fulfilled because the message received does not meet the security requirements of the login service."
16:00 donsizemore
@pdurbin: and from chrome
16:02 pdurbin
hmm. maybe Jan knows
17:57 donsizemore joined #dataverse
18:59 pdurbin
donsizemore: still there?
19:00 donsizemore
@pdurbin: full of sriracha chicken philly cheesesteak, but yes =)
19:00 pdurbin
yum
19:01 pdurbin
donsizemore: at https://github.com/IQSS/dataverse/pull/3242 can you please edit the description to mention the issue you fixing (under "Related Issues")
19:30 bsilverstein
pdurbin: any chance I could swing one last deploy to shibtest before you venture out to NH? :)
19:35 donsizemore
@pdurbin: Jan sees "ERROR [org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler:75] - SPSSODescriptor for entity ID 'https://beta.dataverse.org/sp' indicates AuthnRequests must be signed, but inbound message was not signed"
19:35 donsizemore
@pdurbin he's disabled signed authentication requests but that'll take ~20 minutes to take effect (and you're supposed to be on vacation!)
19:36 pdurbin
bsilverstein: maybe but I'm going to eat my sandwich outside first. Haven't had lunch yet.
19:37 pdurbin
donsizemore: can you please email that error to support
19:38 bsilverstein
pdurbin: by all means do! it's not hugely urgent, just pushed my latest commit. also if you don't find the time it's totally no problem.
19:38 bsilverstein
and enjoy the sandwich / weather first & foremost
20:01 pdurbin
bsilverstein: thanks. https://shibtest.dataverse.org now has v. 4.4 build 2170-confirm-email-8799e9f
20:02 pdurbin
at standup next week just let folks know if you need another deployment
20:02 donsizemore
@pdurbin: Jan's change to UNC's IdP signing requirement allowed me to log in to beta.dataverse.org =) but once I approved my account creation I got:
20:02 donsizemore
"Error – Couldn't create user. Please contact Dataverse Support for assistance."
20:03 pdurbin
bleh!
20:04 pdurbin
donsizemore: Internal Exception: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "authenticateduser_email_key"
20:04 pdurbin
Call: INSERT INTO AUTHENTICATEDUSER (AFFILIATION, EMAIL, FIRSTNAME, LASTNAME, MODIFICATIONTIME, POSITION, SUPERUSER, USERIDENTIFIER) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
20:04 donsizemore
@pdurbin: delete me. i ain't worth nothin anyway
20:05 pdurbin
donsizemore: gimme 5 or 10 minutes
20:05 donsizemore
@pdurbin: you should go on vacation! i'm about to head to the gym. i can try to sign in again once i get back?
20:06 pdurbin
donsizemore: I'm assuming there's an old entry for a test IdP or something
20:06 pdurbin
a test IdP from UNC
20:13 pdurbin
donsizemore: so your existing persistentUserId on the beta server is https://sso.unc.edu/idp |REDACTED
20:15 pdurbin
donsizemore: the email on file is REDACTED
20:15 pdurbin
I'm looking at this output: curl -H "X-Dataverse-key: $API_TOKEN" http://localhost:8080/api/admin/authenticatedUsers
20:16 pdurbin
donsizemore: basically, you shouldn't be prompted to create a new user. The existing Shib user should be found.
20:18 pdurbin
donsizemore: all I can think to do is turn up debugging and have you try again
20:21 pdurbin
you should have fallen into State.REGULAR_LOGIN_INTO_EXISTING_SHIB_ACCOUNT
20:36 pdurbin
Ok, I'll be back on the 15th. See ya. :)
20:36 pdurbin left #dataverse
21:41 donsizemore joined #dataverse
