COIs do not seem to work in v3

Bug #1765681 reported by Alejandro Perez
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Moonshot Trust-Router
Fix Committed
High
Jennifer Richards

Bug Description

I have the following testing environment:
* Three organizations with one realm each (o1.org, o2.org, o3.org)
* A TRv3 (tr.org)
* An APC (apc.org)

Now, when everything is set up, I can run:
tidc tr.org o1.org o1.org apc.org

and that works as expected.

However, if I create a simple COI (coi.org) including o1.org as IDP realm and RP realm and try doing:
tidc tr.org o1.org o1.org coi.org

That fails, saying that (on the TR server)
tr_tids_req_handler: no route table entry found for realm (o1.org) in community (coi.org).

This works as expected with TR v1.

Tags: important
affects: moonshot → moonshot-tr
Changed in moonshot-tr:
assignee: nobody → Jennifer Richards (jennifer-k)
importance: Undecided → Critical
Revision history for this message
Jennifer Richards (jennifer-k) wrote :

I see the same behavior here. Investigating.

Changed in moonshot-tr:
status: New → Confirmed
Revision history for this message
Jennifer Richards (jennifer-k) wrote :

This is caused by confusion between the CoI and the APC after translating from the former to the latter. It figures out that o1.org/coi.org is equivalent to o1.org/apc.org, but then tries to look up the AAA server for o1.org/coi.org.

I should be able to sort that out shortly.

Revision history for this message
Jennifer Richards (jennifer-k) wrote :

Dropping from critical to high because Alejandro tells me this is not yet affecting production systems.

Changed in moonshot-tr:
importance: Critical → High
Revision history for this message
Jennifer Richards (jennifer-k) wrote :
Changed in moonshot-tr:
status: Confirmed → Fix Committed
Revision history for this message
Alejandro Perez (alejandro-perez-mendez) wrote : Re: [Bug 1765681] Re: COIs do not seem to work in v3

So the bug is not that new :)

El 21/04/18 a las 02:29, Jennifer Richards escribió:
> Oh dear, look at this: https://bugs.launchpad.net/moonshot-
> tr/+bug/1704184
>
> Oops!
>
> ** Changed in: moonshot-tr
> Status: Confirmed => Fix Committed
>

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.