Page MenuHomePhabricator

Login to phabricator.wikimedia.org via LDAP fails with 503 Service Unavailable
Closed, DeclinedPublic

Description

Request: POST http://phabricator.wikimedia.org/auth/login/ldap:self/, from 10.64.0.172 via cp1044 cp1044 ([10.64.0.172]:80), Varnish XID 1060355216
Forwarded for: [my IP], 10.64.0.172
Error: 503, Service Unavailable at Mon, 09 Mar 2015 11:45:02 GMT

Was getting this last week as well (didn't try again until today). Login via OAuth works.

Event Timeline

Jarry1250 raised the priority of this task from to Needs Triage.
Jarry1250 updated the task description. (Show Details)
Jarry1250 added projects: Phabricator, LDAP.
Jarry1250 subscribed.

Also mentioned in T91944

Aklapper renamed this task from Login to phabricator.wikimedia.org via LDAP fails with Wikimedia Error to Login to phabricator.wikimedia.org via LDAP fails with 503 Service Unavailable.Mar 9 2015, 12:01 PM
Aklapper set Security to None.
Aklapper added a subscriber: chasemp.

I could login via LDAP right now.

hmmm labs may have had an issue but yeah it works for me atm. @coren, anything in labs over the weekend that would have affected ldap weirdly?

chasemp lowered the priority of this task from High to Medium.Mar 9 2015, 2:03 PM

Nothing with LDAP that I could see. As far as I know, the only outage this weekend was an issue with the tools proxies for a couple of hours late Sunday but that was unrelated.

Can reproduce. Might it be something with the way my account is configured? https://phabricator.wikimedia.org/p/Jarry1250/ does not show me as having an associated LDAP User

Well it shouldn't be using an HTTP url there at all. So that is weird. We have this happen a few times pre-https-all-phab and I'm not sure how this is happening now. If you can still reproduce could you screenshot the process?

I'm not sure it would be much to look at! The page just hangs for around 30 seconds, then finally displays https://phabricator.wikimedia.org/auth/login/ldap:self/ (not http://) as the URL, but a Wikimedia Error with those details as the body. I'm at work at the moment (so potential interaction with proxies and firewalls and lord knows what else), but my previous problems were at home.

Aklapper changed the task status from Open to Stalled.Mar 10 2015, 2:17 PM

Is this constantly reproducible?
Just noting that your account does not link to your LDAP account on https://phabricator.wikimedia.org/p/Jarry1250/ (is it listed on https://phabricator.wikimedia.org/settings/panel/external/ ?).
Just wondering which factors could be related to the specific situation in order to reproduce... need somehow conditions to reproduce, hence setting as stalled for the time being.

chasemp claimed this task.

can't repro and no further reports

FWIW I can still reproduce this (just did):

Request: POST http://phabricator.wikimedia.org/auth/login/ldap:self/, from 10.64.0.171 via cp1043 cp1043 ([10.64.0.171]:80), Varnish XID 979979380
Forwarded for: [my id], 10.64.0.171
Error: 503, Service Unavailable at Mon, 23 Mar 2015 17:43:05 GMT

503 should never be the right answer...

If I enter "http://phabricator.wikimedia.org/auth/login/ldap:self/" I get redirected to https://phabricator.wikimedia.org/auth/login/ldap:self/

@Jarry1250, In which exact URL are you when you trigger this problem? http or https?

Hmm? This is just from the regular login page accessible from the top right of https://phabricator.wikimedia.org/ . So https.

Still reproducible by me. Can someone check if there's something weird about the way my LDAP account is(n't) set up?

Request: POST http://phabricator.wikimedia.org/auth/login/ldap:self/, from 10.64.32.133 via cp1056 cp1056 ([10.64.32.133]:80), Varnish XID 748489956
Forwarded for: [my id], 10.64.32.133
Error: 503, Service Unavailable at Sat, 03 Oct 2015 18:25:54 GMT
Restricted Application added a subscriber: scfc. · View Herald TranscriptOct 3 2015, 6:29 PM