[Bug 36134] New: Elasticsearch authentication using userinfo parameter crashes about.pl
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Bug ID: 36134 Summary: Elasticsearch authentication using userinfo parameter crashes about.pl Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: About Assignee: koha-bugs@lists.koha-community.org Reporter: lari.taskula@hypernova.fi QA Contact: testopia@bugs.koha-community.org Following Bug 33563, if you enable Elasticsearch authentication using "userinfo" parameter in koha-conf (David's method in comment 3 of Bug 33563), about.pl page breaks and gives an internal server error. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Lari Taskula <lari.taskula@hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #1 from Lari Taskula <lari.taskula@hypernova.fi> --- Created attachment 162286 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=162286&action=edit Bug 36134: Read complete Elasticsearch configuration in about.pl When enabling Elasticsearch authentication in Koha using userinfo parameter of Search::Elasticsearch, about.pl breaks and gives an internal server error. This patch reads the complete Elasticsearch configuration for about.pl including userinfo causing about.pl to recover. To test: 1. In Elasticsearch 7 settings, set "xpack.security.enabled: true" 2. Add <userinfo>elastic:password</userinfo> to KOHA_CONF elasticsearch settings 3. Restart plack and navigate to about.pl 4. Observe internal server error 5. Apply patch 6. Refresh about.pl 7. Observe it working again -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #2 from Lari Taskula <lari.taskula@hypernova.fi> --- Above patch should not change about.pl behavior for Kohas using Basic authentication or no authentication at all for Elasticsearch, but helps those using the "userinfo" setting. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #3 from Lari Taskula <lari.taskula@hypernova.fi> --- Above patch should not change about.pl behavior for Kohas using Basic authentication within "server" setting or no authentication at all for Elasticsearch, but helps those using the "userinfo" setting. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs@lists.koha-commun |lari.taskula@hypernova.fi |ity.org | CC| |dcook@prosentient.com.au -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #4 from David Cook <dcook@prosentient.com.au> --- The test plan needs some modifications for koha-testing-docker: 1. In the docker-compose.yml file, change xpack.security.enabled=false to xpack.security.enabled=true 2. In the docker-compose.yml file, add another environment variable for the "es" container like the following: ELASTIC_PASSWORD=awesomepassword You'll end up with a koha-conf.xml element like the following then: <userinfo>elastic:awesomepassword</userinfo> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #5 from David Cook <dcook@prosentient.com.au> --- Good catch, Lari. Thanks for taking the time to do this. QA tools look good too. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #162286|0 |1 is obsolete| | --- Comment #6 from David Cook <dcook@prosentient.com.au> --- Created attachment 162287 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=162287&action=edit Bug 36134: Read complete Elasticsearch configuration in about.pl When enabling Elasticsearch authentication in Koha using userinfo parameter of Search::Elasticsearch, about.pl breaks and gives an internal server error. This patch reads the complete Elasticsearch configuration for about.pl including userinfo causing about.pl to recover. To test: 1. In Elasticsearch 7 settings, set "xpack.security.enabled: true" 2. Add <userinfo>elastic:password</userinfo> to KOHA_CONF elasticsearch settings 3. Restart plack and navigate to about.pl 4. Observe internal server error 5. Apply patch 6. Refresh about.pl 7. Observe it working again Signed-off-by: David Cook <dcook@prosentient.com.au> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|enhancement |minor -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #162287|0 |1 is obsolete| | --- Comment #7 from Julian Maurice <julian.maurice@biblibre.com> --- Created attachment 162366 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=162366&action=edit Bug 36134: Read complete Elasticsearch configuration in about.pl When enabling Elasticsearch authentication in Koha using userinfo parameter of Search::Elasticsearch, about.pl breaks and gives an internal server error. This patch reads the complete Elasticsearch configuration for about.pl including userinfo causing about.pl to recover. To test: 1. In Elasticsearch 7 settings, set "xpack.security.enabled: true" 2. Add <userinfo>elastic:password</userinfo> to KOHA_CONF elasticsearch settings 3. Restart plack and navigate to about.pl 4. Observe internal server error 5. Apply patch 6. Refresh about.pl 7. Observe it working again Signed-off-by: David Cook <dcook@prosentient.com.au> Signed-off-by: Julian Maurice <julian.maurice@biblibre.com> -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Julian Maurice <julian.maurice@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |julian.maurice@biblibre.com Status|Signed Off |Passed QA -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to master Version(s)| |24.05.00 released in| | -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 --- Comment #8 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Pushed for 24.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Fridolin Somers <fridolin.somers@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fridolin.somers@biblibre.co | |m Version(s)|24.05.00 |24.05.00,23.11.04 released in| | Status|Pushed to master |Pushed to stable --- Comment #9 from Fridolin Somers <fridolin.somers@biblibre.com> --- Pushed to 23.11.x for 23.11.04 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Lucas Gass <lucas@bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable Version(s)|24.05.00,23.11.04 |24.05.00,23.11.04,23.05.10 released in| | CC| |lucas@bywatersolutions.com --- Comment #10 from Lucas Gass <lucas@bywatersolutions.com> --- Backported to 23.05.x for upcoming 23.05.10 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Aleisha Amohia <aleisha@catalyst.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |33563 CC| |aleisha@catalyst.net.nz Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33563 [Bug 33563] Document Elasticsearch secure mode -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36134 Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |RESOLVED CC| |wainuiwitikapark@catalyst.n | |et.nz Resolution|--- |FIXED --- Comment #11 from Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz> --- Not backporting to 22.11 -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org