2019-11-02T00:22:37  *** boombatower <boombatower!~boombatow@drupal.org/user/214218/view> has quit IRC (Quit: Konversation terminated!)
2019-11-02T03:43:36  *** okurz <okurz!~okurz@ppp-46-244-196-27.dynamic.mnet-online.de> has quit IRC (Ping timeout: 240 seconds)
2019-11-02T03:44:59  *** okurz <okurz!~okurz@ppp-46-244-207-172.dynamic.mnet-online.de> has joined #opensuse-admin
2019-11-02T17:17:20  *** ldevulder_ <ldevulder_!~ldevulder@176.167.114.206> has joined #opensuse-admin
2019-11-02T17:20:43  *** ldevulder__ <ldevulder__!~ldevulder@176.167.122.238> has quit IRC (Ping timeout: 268 seconds)
2019-11-02T17:56:28  *** cboltz <cboltz!~cb@opensuse/member/Cboltz> has joined #opensuse-admin
2019-11-02T18:05:44  <cboltz> kbabioch: do you have a minute to confirm that a change I'd like to do on daffy* (aka login2.o.o) does what I expect?
2019-11-02T18:07:07  <kbabioch> cboltz, i can offer 5 minutes now, or more in an hour or so ... need to go shopping before shops close @ 8 o'clock
2019-11-02T18:07:33  <cboltz> should be done in 5 minutes ;-)
2019-11-02T18:07:50  <cboltz> maybe you've seen the report on the factory ML that logging in to OBS triggers a logout from the wikis
2019-11-02T18:08:11  <cboltz> the problem is that login.o.o (OBS) and login2.o.o (wikis etc.) both use "openSUSE_session" as cookie name
2019-11-02T18:08:19  <cboltz> and therefore overwrite each other's cookies
2019-11-02T18:08:31  <cboltz> according to grep, the thing to change is
2019-11-02T18:08:43  <cboltz>  /etc/apache2/vhosts.d/1_macro_memcheaders.conf:              Auth_memCookie_CookieName openSUSE_session
2019-11-02T18:09:22  <cboltz> my proposal is to change the cookie name to   openSUSE_session2   so that it no longer conflicts with the cookies from login.o.o
2019-11-02T18:09:35  <cboltz> does that sound right, or do I overlook something?
2019-11-02T18:09:35  <kbabioch> hm, im not familiar with the login proxies, to be honest
2019-11-02T18:09:37  <kbabioch> makes sense to me
2019-11-02T18:10:14  <cboltz> that makes two persons who are not familiar with it ;-)
2019-11-02T18:10:15  <kbabioch> i'm fine with "testing" it, based on what you've already investigated and said
2019-11-02T18:10:42  <cboltz> yeah, in worst case I can revert this simple change
2019-11-02T18:10:43  <kbabioch> in the worst case we can turn it back after a couple of minutes ...
2019-11-02T18:11:01  <cboltz> the change will for sure log out some people once, but that's a price we have to pay
2019-11-02T18:11:12  <kbabioch> however im not sure if it will work ... do the applications somehow interact with those cookies?
2019-11-02T18:11:20  <kbabioch> because they might be "surprised" by the changed name
2019-11-02T18:12:44  <cboltz> the wikis don't care about the   openSUSE_session   cookie - actually, it's useless for the wiki because the session data is only available to login2.o.o
2019-11-02T18:12:57  <cboltz> the wiki gets the username etc. as a HTTP header
2019-11-02T18:16:41  <kbabioch> so, let's give it a try
2019-11-02T18:16:54  <kbabioch> try all the use cases we know about (login to wiki, login to build service, etc. pp.)
2019-11-02T18:16:59  <kbabioch> and verify that nothing is broken
2019-11-02T18:17:06  <cboltz> I just applied the change, and get the new cookie name for the wiki
2019-11-02T18:17:07  <kbabioch> otherwise let's revert and investigate some more ;-)
2019-11-02T18:17:43  <cboltz> OBS login still works
2019-11-02T18:17:56  <cboltz> and I'm still logged in to the wiki
2019-11-02T18:18:07  <cboltz> so it looks like that change works as expected :-)
2019-11-02T18:19:26  <cboltz> I now have two cookies - openSUSE_session (from login.o.o / OBS) and openSUSE_session2 (from login2.o.o / wiki) which is what I expected
2019-11-02T18:21:03  <cboltz> I also applied the change to daffy2 so that it still works if login.oo switches over to it
2019-11-02T19:59:04  <kbabioch> cboltz: I've dropped out in IRC @ 1941 ... anything happened since then ;-)?
2019-11-02T19:59:10  <kbabioch> does your fix work as expected?
2019-11-02T19:59:34  <kbabioch> according to your mail it does :-)
2019-11-02T20:05:25  <cboltz> I haven't seen any complaints, only a thank you from Axel ;-)