[MB-40294] Unauthorised user access to /analytics/service API is throwing internal server error - Couchbase database

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 6.6.0
Fix Version/s: 6.6.0
Component/s: analytics
Labels:
Environment:
CB server version 6.6.0-7861

Triage:
Triaged
Operating System:
Centos 64-bit
Link to Log File, atop/blg, CBCollectInfo, Core dump:
https://cb-jira.s3.us-east-2.amazonaws.com/logs/MB-40294/internal_error.zip
Story Points:
1
Is this a Regression?:
Unknown
Sprint:
CX Sprint 206

Description

curl -v http://10.112.200.104:8095/analytics/service -u data_dcp_reader

Enter host password for user 'data_dcp_reader':

*   Trying 10.112.200.104...

* TCP_NODELAY set

* Connected to 10.112.200.104 (10.112.200.104) port 8095 (#0)

* Server auth using Basic with user 'data_dcp_reader'

> GET /analytics/service HTTP/1.1

> Host: 10.112.200.104:8095

> Authorization: Basic ZGF0YV9kY3BfcmVhZGVyOnBhc3N3b3Jk

> User-Agent: curl/7.64.1

> Accept: */*

< HTTP/1.1 500 Internal Server Error

< connection: keep-alive

< content-type: application/json; charset=UTF-8

< content-length: 291

	"errors": [{

		"code": 20001,		"msg": "User must have permission (cluster.bucket[.].analytics!select)"	}

],

	"status": "fatal",

	"metrics": {

		"elapsedTime": "3.25096ms",

		"executionTime": "0ns",

		"resultCount": 0,

		"resultSize": 0,

		"processedObjects": 0,

		"errorCount": 1

Attachments

Gerrit Reviews

- Issue Only
- Show All Reviews
- Show Open Reviews
- Show All Issues
- Show Open Issues

No reviews matched the request. Check your Options in the drop-down menu of this sections header.

Activity

Descending order - Click to sort in ascending order

Couchbase Build Team added a comment - 11/May/21 1:16 AM

Build couchbase-server-6.6.2-9599 contains cbas-core commit 1bc521f with commit message:
~~MB-40294~~: Return 401 HTTP reponse on unauthorized user error

Couchbase Build Team added a comment - 11/May/21 1:16 AM Build couchbase-server-6.6.2-9599 contains cbas-core commit 1bc521f with commit message: MB-40294 : Return 401 HTTP reponse on unauthorized user error

Couchbase Build Team added a comment - 19/Jul/20 4:17 PM

Build couchbase-server-7.0.0-2640 contains cbas-core commit 1bc521f with commit message:
~~MB-40294~~: Return 401 HTTP reponse on unauthorized user error

Couchbase Build Team added a comment - 19/Jul/20 4:17 PM Build couchbase-server-7.0.0-2640 contains cbas-core commit 1bc521f with commit message: MB-40294 : Return 401 HTTP reponse on unauthorized user error

Umang added a comment - 09/Jul/20 12:18 PM

verified with couchbase server build 6.6.0-7873

Umang added a comment - 09/Jul/20 12:18 PM verified with couchbase server build 6.6.0-7873

Couchbase Build Team added a comment - 08/Jul/20 9:42 AM

Build couchbase-server-6.6.0-7869 contains cbas-core commit 1bc521f with commit message:
~~MB-40294~~: Return 401 HTTP reponse on unauthorized user error

Couchbase Build Team added a comment - 08/Jul/20 9:42 AM Build couchbase-server-6.6.0-7869 contains cbas-core commit 1bc521f with commit message: MB-40294 : Return 401 HTTP reponse on unauthorized user error

Umang added a comment - 07/Jul/20 1:55 AM

https://cb-jira.s3.us-east-2.amazonaws.com/logs/MB-40294/internal_error.zip

Umang added a comment - 07/Jul/20 1:55 AM https://cb-jira.s3.us-east-2.amazonaws.com/logs/MB-40294/internal_error.zip

Till Westmann added a comment - 06/Jul/20 6:33 PM

Umang, I've set up build 7861 for (macOS) and ran

% curl -v -u dcp_user http://localhost:8095/analytics/service

(where dcp_user is actually a Data DCP Reader) and I got

Enter host password for user 'dcp_user':

*   Trying ::1...

* TCP_NODELAY set

* Connection failed

* connect to ::1 port 8095 failed: Connection refused

*   Trying 127.0.0.1...

* TCP_NODELAY set

* Connected to localhost (127.0.0.1) port 8095 (#0)

* Server auth using Basic with user 'dcp_user'

> GET /analytics/service HTTP/1.1

> Host: localhost:8095

> Authorization: Basic ZGNwX3VzZXI6ZGNwX3VzZXI=

> User-Agent: curl/7.64.1

> Accept: */*

< HTTP/1.1 401 Unauthorized

< connection: keep-alive

* Authentication problem. Ignoring this.

< www-authenticate: Basic

< content-length: 70

	"errors": [{

		"code": 20000,

		"msg": "Unauthorized user."	}

]}

* Connection #0 to host localhost left intact

* Closing connection 0

which yielded the expected HTTP status code.

Do you have some logs for the execution that yielded the Internal Server Error?

Till Westmann added a comment - 06/Jul/20 6:33 PM Umang , I've set up build 7861 for (macOS) and ran % curl -v -u dcp_user http://localhost:8095/analytics/service (where dcp_user is actually a Data DCP Reader) and I got Enter host password for user 'dcp_user': * Trying ::1... * TCP_NODELAY set * Connection failed * connect to ::1 port 8095 failed: Connection refused * Trying 127.0.0.1... * TCP_NODELAY set * Connected to localhost (127.0.0.1) port 8095 (#0) * Server auth using Basic with user 'dcp_user' > GET /analytics/service HTTP/1.1 > Host: localhost:8095 > Authorization: Basic ZGNwX3VzZXI6ZGNwX3VzZXI= > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 401 Unauthorized < connection: keep-alive * Authentication problem. Ignoring this. < www-authenticate: Basic < content-length: 70 < { "errors": [{ "code": 20000, "msg": "Unauthorized user." } ]} * Connection #0 to host localhost left intact * Closing connection 0 which yielded the expected HTTP status code. Do you have some logs for the execution that yielded the Internal Server Error?

People

Assignee:: Umang

Reporter:: Umang

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Due:: 08/Jul/20

Created:: 06/Jul/20 5:37 AM

Updated:: 11/May/21 1:16 AM

Resolved:: 08/Jul/20 9:29 AM

Gerrit Reviews

There are no open Gerrit changes

Show There is 1 closed Gerrit change

Hide There is 1 closed Gerrit change

MB-40294: Return 401 HTTP reponse on unauthorized user error: Gerrit Review:

PagerDuty

Couchbase Server

Details

Description

Attachments

Gerrit Reviews

Activity

People

Dates

Gerrit Reviews

PagerDuty