2020-05-11T02:27:26 -heroes-bot- PROBLEM: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total locks: 59 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-11T02:37:26 -heroes-bot- RECOVERY: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS OK: DB postgres total=39 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-11T02:49:36 *** okurz_ is now known as okurz 2020-05-11T04:44:05 -heroes-bot- PROBLEM: PSQL locks on mirrordb2.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total locks: 324 * total waiting locks: 158 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb2.infra.opensuse.org&service=PSQL%20locks 2020-05-11T04:45:26 -heroes-bot- PROBLEM: PSQL locks on mirrordb1.infra.opensuse.org - POSTGRES_LOCKS CRITICAL: DB postgres total waiting locks: 4 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb1.infra.opensuse.org&service=PSQL%20locks 2020-05-11T04:54:05 -heroes-bot- RECOVERY: PSQL locks on mirrordb2.infra.opensuse.org - POSTGRES_LOCKS OK: DB postgres total=2 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=mirrordb2.infra.opensuse.org&service=PSQL%20locks 2020-05-11T06:27:59 jdsn: as a sidenote, we have jekyll-theme that makes it easier to make sites that follow our existing branding, forking mentoring is probably the worst way to make your own site ;) 2020-05-11T06:28:36 that also probably applies to kl_eisbaer, for when he made the bugzilla.opensuse.org standin 2020-05-11T06:30:13 https://github.com/openSUSE/mentoring/pull/144 would be the complex way to go about it, both news-o-o and doc.o.o are better ways to introduce jekyll-theme 2020-05-11T06:32:10 you might be surprised, but when it comes to branding, there are people that do this stuff on the daily at SUSE and at openSUSE, and we would appreciate if the state of brand was getting better, not worse ;) 2020-05-11T09:55:33 cboltz: can you export me a user list from o.o wikis and forums, so we can make sure they all are imported in our UCS account system? 2020-05-11T09:57:12 I can do that for the wikis - but not for the forums 2020-05-11T09:59:11 Then we start with that :-) 2020-05-11T10:00:59 to keep you somewhat busy - UCS doesn't allow me to set one of my super-secure passwords 2020-05-11T10:02:33 I tried something like 1wWbWA6EYY56VvdtjITIKYbHAb0A0WpgnrFPxUQP when trying to migrate my Abuse_Filter account (which I never use, it only exists to block that username, especially for the wiki) 2020-05-11T10:05:45 error message is Interner Server-Fehler in "passwordreset/set_password". 2020-05-11T10:06:11 actually a list of users might not even require probing the database 2020-05-11T10:06:17 in case of the forums 2020-05-11T10:06:28 let me have a look into the admin control panel again 2020-05-11T10:06:36 (tried again a minute ago, but had the same error message already on the weekend) 2020-05-11T10:14:25 cboltz: we did not import that user yet, because it was not in bugzilla+OBS DBs 2020-05-11T10:14:42 where did you use it? 2020-05-11T10:15:16 it's a technical user for the wiki 2020-05-11T10:16:18 so with the wiki user list, we could import it along the other wiki-only users 2020-05-11T10:19:36 ok 2020-05-11T10:19:51 I'll give you the list after lunch ;-) 2020-05-11T10:40:16 bmwiedemann1: whoops, my street had a power outage, I did prep list for the forums, do you want the list via email? 2020-05-11T11:01:32 cboltz: as a sidenote, only one user with an invalid username according to posix, and it's an email >:D 2020-05-11T11:02:06 which means it's @, and also it's the only user with a dot in their name 2020-05-11T11:16:37 bmwiedemann1: I'm also kinda curious if we could revamp look of https://build-test-1.opensuse.org/ICSLogin/auth-up 2020-05-11T11:16:58 only one username with non-posix characters sounds boring ;-) 2020-05-11T11:17:22 cboltz: well, I am happy it's just one ;) 2020-05-11T11:20:23 bmwiedemann1: I was thinking of something like this 2020-05-11T11:20:31 * lcp uploaded an image: image.png (66KB) < https://matrix.org/_matrix/media/r0/download/matrix.org/LZWiaZdPKUoBhiIbuwNsTawE > 2020-05-11T11:32:36 bmwiedemann1: the wiki userlist is on riesling.i.o.o in /tmp/wiki-users.tgz 2020-05-11T11:33:31 contains one file per wiki, I assume you can cat * | sort -u yourself ;-) 2020-05-11T11:35:33 22 wikis, 164803 unique usernames, 226973 non-unique (for example 22 times "cboltz" because I've done some edits in all wikis ;-) 2020-05-11T11:36:23 as a sidenote: mediawiki changes the first letter to uppercase, even if the login name is lowercase 2020-05-11T11:36:26 3x as many unique usernames as forums 2020-05-11T11:36:31 that's quite a lot 2020-05-11T11:37:34 I do kinda wonder which service has the largest userbase in the infra all things considered 2020-05-11T11:38:20 the interesting thing is - if I exclude old-en.o.o and old-de.o.o, we are down to 61931 unique users 2020-05-11T11:38:49 the wikis in detail: https://paste.opensuse.org/34777695 2020-05-11T11:40:23 wew, I wonder how they managed to bloat it that much 2020-05-11T11:40:46 I fail to believe there were actually that many people editing the wiki back then 2020-05-11T11:41:39 it might be a side effect of the login proxy - these numbers are basically "users who were logged in while visiting the wiki", not "users who did a wiki edit" 2020-05-11T11:42:21 right 2020-05-11T11:42:23 not sure which services counted as being logged in back then (= used what is login.o.o nowadays) 2020-05-11T11:44:23 but the list of non-wiki services is probably quite short - connect, features.o.o, events.o.o, progress, nowadays also elections.o.o and meet.o.o 2020-05-11T11:44:52 all services with a limited amount of users 2020-05-11T11:45:20 cboltz: OK, fetched the .tgz 2020-05-11T11:47:03 just noticed - the first line "user_name" is a header, not an actual user ;-) 2020-05-11T11:48:55 we had that one in other dumps as well :-) 2020-05-11T11:50:12 you might also want to check /tmp/userlist-interesting-names 2020-05-11T11:50:29 that's ~50 users not matching ^[a-zA-Z0-9 _-]*$ 2020-05-11T11:51:12 speaking of that, you'll have to s/ /_/ in the usernames (another mediawiki special case) 2020-05-11T11:51:40 @bmwiedemann sso.opensuse.org is working already? asking because Marco wants try to use it for meet.opensuse.org 2020-05-11T11:52:18 lcp: I am happy to hand you the auth-up html code .... 2020-05-11T11:52:32 adrianS: I didnt do it at least. 2020-05-11T11:52:52 adrianS: please do, I can handle that 2020-05-11T11:53:31 * adrianS wonders if we could find a matching git repo for it ... 2020-05-11T11:54:20 as a sidenote, in the past ICSLogin was proxied to ICSLogin/auth-up, and I wonder if that will cause issue with the new setup 2020-05-11T11:54:22 maybe [a new branch in] https://github.com/openSUSE/openSUSE-login ? 2020-05-11T11:54:55 cboltz: I would just make a `login-o-o` repo for the purpose 2020-05-11T11:55:07 there is no point in making that fork relevant again ;) 2020-05-11T11:55:12 is it actually login.opensuse.org? 2020-05-11T11:55:19 yeah 2020-05-11T11:55:24 it has always been that 2020-05-11T11:55:33 welp 2020-05-11T11:55:40 I guess I've never seen it before :P 2020-05-11T11:56:02 there is also login2 and login3 2020-05-11T11:56:12 this system is confusing >:D 2020-05-11T11:56:32 cboltz: hm, that has nothing to do with this code ... 2020-05-11T11:57:27 right, just looked at it - we can probably replace master there ;-) 2020-05-11T11:57:37 and it is a fork from a private repo? 2020-05-11T11:58:27 cboltz: I think, great wiki also capitalized the first letter. 2020-05-11T11:58:35 as I said, no point in making that relevant 2020-05-11T11:58:40 yes, looks so ("private" as in personal namespace - but still public) 2020-05-11T11:59:11 bmwiedemann: I'm quite sure that in most cases the "real" username starts with a lowercase letter 2020-05-11T11:59:38 cboltz: lcp: https://github.com/adrianschroeter/openSUSE-login-proxy.git 2020-05-11T11:59:39 so if UCS is case-sensitive, I'd recommend lowercase for the first letter 2020-05-11T11:59:42 we can move it later 2020-05-11T11:59:54 same if other services (OBS?) are case sensitive 2020-05-11T11:59:56 lcp: I can add you there directly, if you want 2020-05-11T12:00:10 lcp: and I will prepare the new links to the portal now ... 2020-05-11T12:01:02 UCS/ldap should be case-insensitive 2020-05-11T12:02:24 queries are case insensitive, data is case-sensitive in LDAP 2020-05-11T12:02:34 what about OBS? Not necessarily for the login itsself, but for the home repo names 2020-05-11T12:03:17 if the system follows POSIX LDAP (e.g. not Active Directory), then login names are case sensitive 2020-05-11T12:05:35 OBS is case sensitive, but it should not accept the same user again case insensitive 2020-05-11T12:05:52 * adrianS remebers he wrote some code, but is not eager enough to search for it :) 2020-05-11T12:06:27 I dug through it before, I don't want to figure it out again :P 2020-05-11T12:06:44 adrianS: that sounds like using the first-letter-uppercase usernames from the wiki might break OBS login... 2020-05-11T12:08:19 (please tell me that I'm wrong ;-) 2020-05-11T12:09:01 adrianS: critique welcome https://github.com/adrianschroeter/openSUSE-login-proxy/pull/1 2020-05-11T12:10:48 Conan Kudo: actually, case sensitivity with freeipa is an interesting topic by itself 2020-05-11T12:11:42 but this issue should be an explanation by itself https://github.com/fedora-infra/noggin/issues/255 2020-05-11T12:11:54 LCP: oh? 2020-05-11T12:12:15 as a hint, that's related with how krb5 treats accounts 2020-05-11T12:13:45 lcp: sorry, just created a conflict for you .... could you rebase? 2020-05-11T12:16:30 lcp: I can also revert and get you request first ... 2020-05-11T12:16:35 most likely easier ... 2020-05-11T12:17:39 well, too late now >:D 2020-05-11T12:18:52 great, I can now go back to mentoring revamp in peace :P 2020-05-11T12:19:45 lcp: thanks! 2020-05-11T12:20:20 no worries, I was kinda afraid the proxy was gonna stay that ugly forever :P 2020-05-11T12:23:27 bmwiedemann: ah, also, it might make sense to setup the new login proxy over forums-nbg, since that's gonna be migrating to nbg as soon as possible 2020-05-11T12:24:34 and already pretty much functions as a test server until the data dump 2020-05-11T15:45:23 cboltz: importing ~70000 extra users from wikis now. Will take some minutes. 2020-05-11T18:38:42 bmwiedemann1: is the import still running? I still see the error I mentioned earlier today 2020-05-11T18:42:33 yes, still ongoing. I also forgot the sed / /_/ and that added 5000 users that only just now started to import 2020-05-11T18:42:48 and now I think that it should have been sed s/ /_/g 2020-05-11T18:43:15 we have users with more than one _ in the username? nice ;-) 2020-05-11T18:45:40 yes. 777 of them. 2020-05-11T19:50:27 cboltz: try now 2020-05-11T19:52:01 I got a "token expired" error on the first attempt (I've seen that more than once, maybe worth investigating?) 2020-05-11T19:52:06 but on the second attempt it worked :-) 2020-05-11T20:06:14 then the question is if it is worth debugging that tool which will be obsolete in 7 weeks 2020-05-11T20:06:47 your choice ;-) 2020-05-11T20:07:13 maybe at least add some logging to see how often the "token expired" happens, and decide based on that a day later? 2020-05-11T20:08:39 (I've seen it often enough, so I'd guess it affects quite some people) 2020-05-11T22:42:00 -heroes-bot- PROBLEM: NRPE on olaf.infra.opensuse.org - CHECK_NRPE: Error - Could not connect to 192.168.47.17. Check system logs on 192.168.47.17 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=olaf.infra.opensuse.org&service=NRPE 2020-05-11T22:52:00 -heroes-bot- RECOVERY: NRPE on olaf.infra.opensuse.org - NRPE v3.2.1 ; See https://monitor.opensuse.org/icinga/cgi-bin/extinfo.cgi?type=2&host=olaf.infra.opensuse.org&service=NRPE