← Back to team overview

canonical-ubuntu-qa team mailing list archive

[Bug 1999584] Re: requests.cgi returns 403 even when logged in

 

My impression here is that we're doing something wrong with the session
cookie. I checked the haproxy configuration on cookies and it looks
good.

We could verify this by skipping haproxy, submitting requests directly
to the autopkgtest-web/* machines. Another possibility is to take down
one autopkgtest-web unit at a time and check if 100% of the requests
succeed. If they do then it's very likely that we're mixing
sessions/cookies up.

-- 
You received this bug notification because you are a member of
Canonical's Ubuntu QA, which is subscribed to Auto Package Testing.
https://bugs.launchpad.net/bugs/1999584

Title:
  requests.cgi returns 403 even when logged in

Status in Auto Package Testing:
  Confirmed

Bug description:
  I've recently modified the way I use retry-autopkgtest-regressions and
  now pass it to curl and print the url the and http_code of the
  request. I've been quite surprised by the number of 403s I'm getting
  even though I'm logged in and my cookie is still valid. Here's an
  example from 2022-12-13:

   $ ./retry-autopkgtest-regressions --log-regex "ERROR: testbed failure: cannot send to testbed" | vipe | xargs -rn1 -P10 curl --cookie ~/.c
  ache/autopkgtest.cookie -o /dev/null --silent --head --write-out '%{url_effective}: %{http_code}\n'
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=arm64&package=node-imagemagick&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=arm64&package=netplan.io&trigger=iproute2%2F6.0.0-1ubuntu1: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=arm64&package=courier&trigger=exim4%2F4.96-9ubuntu1: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=ruby-mini-magick&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=golang-github-containernetworking-plugins&trigger=iproute2%2F6.0.0-1ubuntu1: 403
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=ruby-mojo-magick&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=arm64&package=osk-sdl&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 403
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=auto-multiple-choice&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 403
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=sqldeveloper-package&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 403
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=arm64&package=nat-rtsp&trigger=linux-meta-raspi%2F5.19.0.1006.7: 200
  https://autopkgtest.ubuntu.com/request.cgi?release=lunar&arch=s390x&package=recoverjpeg&trigger=graphicsmagick%2F1.4%2Breally1.3.38%2Bhg16870-1: 403

  This bears further investigation as we shouldn't be dropping any test
  requests.

To manage notifications about this bug go to:
https://bugs.launchpad.net/auto-package-testing/+bug/1999584/+subscriptions



References