Project Moonshot

ui: fails after first use from a given process

Bug #1116680 reported by Sam Hartman
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Moonshot ID Selector
Fix Released
Critical
Unassigned
Project Moonshot
Invalid
Critical
Sam Hartman
Project Moonshot service-pilot

Bug Description

The first time gss_init_sec_context is called it calls out to libmoonshot and the UI is invoked.
However any additional call to gss_init_sec_context from the same process results in falling through to the default credentials logic.
This is fairly critical as it means you cannot use moonshot from a web browser with the UI. This will soon be a blocker for trust router as well.

Revision history for this message
Kevin Wasserman (krwasserman) wrote :

Fixed with ui restructuring

Changed in moonshot:
assignee: nobody → Kevin Wasserman (krwasserman)
status: New → Fix Released
Revision history for this message
Sam Hartman (hartmans) wrote :

What seems to be happening is that after the moonshot ui displays an id and sends one, it exits. So, the dbus name is unbound, so messages sent to that name fail. The libmoonshot code needs to restart the service if needed. The UI may also need to stick around for a bit (without window) to avoid huge churn under high load.

What I suspect happened when we tested is that the ui was run manually and didn't exit when the ID card was sent.

Changed in moonshot:
assignee: Kevin Wasserman (krwasserman) → Sam Hartman (hartmans)
status: Fix Released → Confirmed
Trish Zagarella (trishzag)
Changed in moonshot-ui:
status: New → Confirmed
importance: Undecided → Critical
Changed in moonshot:
status: Confirmed → Invalid
Revision history for this message
Dan Breslau (dbreslau) wrote :

This was apparently re-opened by mistake.

If this were still a bug, then running a command such as

gss-client -ccount 4 -mech "{1.3.6.1.5.5.15.1.1.17}" localhost test@localhost "FooBar"

would succeed on the first attempt, but fail on the next three (probably with an error indicating invalid credentials.) However, it succeeds on all four attempts.

Changed in moonshot-ui:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.