Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-23049

cbq-engine constantly re-validates empty credentials

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Critical
    • 5.0.0
    • 5.0.0
    • query

    Description

      Query throughput has dramatically decreased after infamous changes from ns_server changes that got merged on Saturday.

      Although all queries succeed, I noticed that HTTP access logs are spammed with records like this:

      127.0.0.1 - - [27/Feb/2017:15:19:48 -0800] "POST /_cbauth HTTP/1.1" 401 0 - Go-http-client/1.1
      

      Then I noticed that each query triggers two cbauth requests:

      POST /_cbauth HTTP/1.1
      Host: 127.0.0.1:8091
      User-Agent: Go-http-client/1.1
      Content-Length: 0
      Authorization: Basic YnVja2V0LTE6cGFzc3dvcmQ=
      Accept-Encoding: gzip
       
      HTTP/1.1 200 OK
      Server: Couchbase Server
      Pragma: no-cache
      Date: Mon, 27 Feb 2017 22:57:08 GMT
      Content-Type: application/json
      Content-Length: 37
      Cache-Control: no-cache
      {"user":"bucket-1","source":"bucket"}
      

      and

      POST /_cbauth HTTP/1.1
      Host: 127.0.0.1:8091
      User-Agent: Go-http-client/1.1
      Content-Length: 0
      Authorization: Basic Og==
      Accept-Encoding: gzip
       
      HTTP/1.1 401 Unauthorized
      WWW-Authenticate: Basic realm="Couchbase Server Admin / REST"
      Server: Couchbase Server
      Pragma: no-cache
      Date: Mon, 27 Feb 2017 22:57:08 GMT
      Content-Length: 0
      Cache-Control: no-cache
      

      The first request corresponds to "bucket-1:password" credentials (base64 encoded), the second requests correspond to empty ":" credentials (again, base64 encoded).

      Here is my query:

      curl -XPOST -H "Content-type: application/json" http://bucket-1:password@172.23.132.16:8093/query -d '{"args": ["80e1ef-000000000001"], "prepared": "feb60501-1f6c-4767-b161-57d74814cf9a"}'
      

      I have no idea where those empty creds come from.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            pavelpaulau Pavel Paulau (Inactive)
            pavelpaulau Pavel Paulau (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty