OneSwarm Forum

User forum for the OneSwarm Friend-to-Friend data sharing network

1. Rafa
   Member

   Many users on the 'private' CS report HTTP 403 errors.

   HTTP ERROR: 403
   User not in required role
   RequestURI=/logon.jsp
   Powered by Jetty://

   But one user is not able to publish *one* swarm and get this message when he tries : "Publishing failed: Server responded with bad status code: 400
   Curiously, there is the same "incorrect role" !

   Here is the log of the standard output of the CS :

   2009-11-28 15:04:48.865::WARN: AUTH FAILURE: incorrect role for *Bozo*
   [INFO] 28/11/09 15:04 SwarmPublishServlet: field name: commentstr name: null 24
   [INFO] 28/11/09 15:04 SwarmPublishServlet: field name: categorystr name: null 5
   [INFO] 28/11/09 15:04 SwarmPublishServlet: field name: torrentbin name: osul7415939122056389623.torrent 129189
   [INFO] 28/11/09 15:04 SwarmPublishServlet: field name: previewpng name: osul5467836978369389620png 814030
   [WARNING] 28/11/09 15:04 CommunityDAO: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Out of range value adjusted for column 'total_size' at row 1
   [WARNING] 28/11/09 15:04 SwarmPublishServlet: java.io.IOException: Insert failed (see previous errors)
   java.io.IOException: Insert failed (see previous errors)
   at edu.washington.cs.oneswarm.community2.server.CommunityDAO.publish_swarm(CommunityDAO.java:1576)
   at edu.washington.cs.oneswarm.community2.server.SwarmPublishServlet.doPost(SwarmPublishServlet.java:114)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
   at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
   at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:487)
   at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1097)
   at edu.washington.cs.oneswarm.community2.utils.IPServletFilter.doFilter(IPServletFilter.java:67)
   at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1088)
   at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:360)
   at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
   at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:729)
   at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
   at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
   at org.mortbay.jetty.Server.handle(Server.java:324)
   at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:505)
   at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:843)
   at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:647)
   at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:205)
   at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:380)
   at org.mortbay.jetty.bio.SocketConnector$Connection.run(SocketConnector.java:228)
   at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:635)
   at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)

   /HTH

   Posted 3 years ago #

2. piatek
   Administrator

   Did you recreate your tables a few versions back when I changed the total_size column from INT to BIGINT(20) ? It looks like this is the problem. You can also change this manually, without recreating everything, by using the MySQL Administrator tool and editing the published_swarms table.

   Posted 3 years ago #

3. Rafa
   Member

   Can i simply delete the database and re-launch CS ?
   I will just loose the swarms submitted, i suppose.

   Posted 3 years ago #

4. piatek
   Administrator

   Yes, that's right.

   Posted 3 years ago #

5. Rafa
   Member

   Wrong Piatek ! We loose also all the user accounts created ... :)
   Anyway, i wait & see for codes now.

   Posted 3 years ago #

6. Rafa
   Member

   HTTP 403 => 2009-11-28 22:38:04.619::WARN: AUTH FAILURE: incorrect role for admin

   I'm trying to reproduce the HTTP 400 ...

   Posted 3 years ago #

7. piatek
   Administrator

   Can you say a little bit more about this? Does it only happen when publishing swarms, or also when users log in? Does it always happen, or only sometimes? (If so, how often?) Is there anything you can do to cause it to happen reliably?

   Posted 3 years ago #

8. Rafa
   Member

   Yeah . I could ... But I will not.

   May be one day across some beers, when you will travel over the old Europe for preach The Good Words ("Believe in your friends !"), I will talk you about my mistake (as you feel). For now I am to shamed ...

   Posted 3 years ago #

9. Rafa
   Member

   Arg ! The http error code 403 "User not in required role" reapers ... :(

   Use for hours the Admin-UI and stop for a moment ( 10, 20 or 30 mins) & do something else.
   Come back in the CS page (inside the Oneswarm client or using the Https link) and hit any link : you will have an error code 403 here.

   The only way i have to reproduce this systematically is simply to let the browser in its corner. The only way i found to solve is to clear the Web History ...

   Seems to be session cookie related ...

   Posted 3 years ago #

10. piatek
    Administrator

    Definitely sounds like a session key issue. The werid thing is that the session key timeout is 1 day by default, so I'm surprised to hear that issues are arising after just a few hours. I'll try to reproduce this tomorrow.

    Does this happen in multiple browsers? Are you using any addons that might impact cookeis or javascript? Thanks!

    Posted 3 years ago #

11. Rafa
    Member

    Not few hours, few ten minutes max.

    We (me and many users) get it without any remarkable reason in fact.
    Let it in standby mode or use it, you will have the error code systematically.

    Posted 3 years ago #

12. piatek
    Administrator

    I've been running a test private server here all day, and tried accessing it from a few different computers, but haven't been able to reproduce this issue.

    My best guess as to why this is happening is some sort of browser add-on and/or proxy. Are you using any special firefox addons that influence javascript and/or cookies? If so, you might want to try disabling them. Or, try using some other browser and see if it manifests using that as well.

    Another issue might be the DB schema not getting properly upgraded between the (many) versions you've tried 8). If you notice this happening with the latest community server across multiple browsers, you might try emailing me a mysqldump of just the schema of your DB. (You can use mysqldump --no-data to produce this -- check out the docs here: http://dev.mysql.com/doc/refman/5.1/en/mysqldump.html )

    Posted 3 years ago #

13. Rafa
    Member

    Comments on CSpre09 :

    * No "next" link ! :)
    * Preview seems to work fine (i will do more tests all the day).
    * Possible to hide the categories menu in "private CS" mode ?
    * What do you think about the fact to add some HTML tags as HTTP link or image ?
    Security & anonymity can be concerned, isn't it ? This will need to add a "bloom filter" ?

    For the http error code 403 :
    * I will see quickly if the totally "fresh" installation helps.
    * The MySQL database was drop & re-created on CSpre08.
    * All the CS users have different browsers and OS : every one that tried the CS browsing got many times the 403 errors.

    If i still get errors, i will upgrade the MySQL server from 5.0.75 to 5.1 before email you the MySQL dump.

    Posted 3 years ago #

14. Rafa
    Member

    Upgrading MySQL ... ;)

    Posted 3 years ago #

15. Rafa
    Member

    Was not a MySQL server related problem.
    Looking for MysqlDump ...

    Posted 3 years ago #

16. Rafa
    Member

    @Piatek : Datadump link in PM

    Posted 3 years ago #

17. piatek
    Administrator

    thanks -- btw, what OS are you using to host?

    Posted 3 years ago #

18. Rafa
    Member

    Ubuntu 9.04

    Posted 3 years ago #

19. piatek
    Administrator

    Can you send me a snippet from the server's output log that has a few dozen lines before the AUTH FAILURE message when you see the 403?

    Posted 3 years ago #

20. Rafa
    Member

    Output log sent by PM.

    ^C when the Auth failed ...

    Posted 3 years ago #

21. piatek
    Administrator

    okay, I have a working theory for this. are you giving users multiple roles?

    I'm cooking up a new version of the community server with some new logging that might help debug. thanks for all the help with this!

    Posted 3 years ago #

22. Rafa
    Member

    Nope. Simple role : User or Moderator or Admin.

    Posted 3 years ago #

23. piatek
    Administrator

    I've tweaked a few things. A test of pre10 is posted, but you'll need to change the logging.properties file a bit to get more verbose output. Replace the one in the archive with the one posted here:

    http://www.cs.washington.edu/homes/piatek/logging.properties

    This should provide a bit more information about what's happening when authentication fails.

    edit actually, scratch that. there's a bug in the version I posted. will update tomorrow.

    Posted 3 years ago #

24. piatek
    Administrator

    okay, posted. give it a shot and let me know if the problem recurs, and what the log output is. thanks!

    Posted 3 years ago #

25. Rafa
    Member

    The server is running now.

    I may did an error because the CS is still reachable on localhost:8081 but no more with domaine:8081 ...

    Posted 3 years ago #

26. piatek
    Administrator

    I changed the way the host configuration option is used. If you set it before, that might be causing the problem. You might want to comment that line out in your config, and it should work as before.

    Posted 3 years ago #

27. Rafa
    Member

    Ok. Working !

    Posted 3 years ago #

28. Rafa
    Member

    2009-12-02 19:52:23.816::WARN: AUTH FAILURE: incorrect role for admin

    Posted 3 years ago #

29. piatek
    Administrator

    right, but did you change the logging.properties? I need to see the rest of the info to figure out why this is happening.

    Posted 3 years ago #

30. Rafa
    Member

    Oups, yeah ! :)
    Sorry.

    [INFO] 02/12/09 20:09 PreviewImageServlet: Started PreviewImageServlet
    [FINEST] 02/12/09 20:10 CommunityDAO: Query string: SELECT swarmid, name, num_files, total_size, category, date_uploaded, category, infohash, removed, uploaded_by, needs_moderated, has_torrent FROM published_swarms WHERE category = ? ORDER BY date_uploaded ASC LIMIT ?
    [FINEST] 02/12/09 20:10 CommunityDAO: com.mysql.jdbc.JDBC4PreparedStatement@1a3bc8c: SELECT swarmid, name, num_files, total_size, category, date_uploaded, category, infohash, removed, uploaded_by, needs_moderated, has_torrent FROM published_swarms WHERE category = 'eBooks' ORDER BY date_uploaded ASC LIMIT 30
    2009-12-02 20:10:21.205::WARN: AUTH FAILURE: incorrect role for admin

    Posted 3 years ago #

RSS feed for this topic

Reply »

You must log in to post.