Question: User logged in as '(null)' externally, but has a cookie as .... invalidating session
0
gravatar for Jeremy Leipzig
3.1 years ago by
United States
Jeremy Leipzig50 wrote:

I can't upload files to Galaxy - tried logging out, deleting cookies, purging histories.

I am using LDAP authentication.

galaxy.web.framework.webapp WARNING 2015-10-28 16:01:13,951 User logged in as '(null)' externally, but has a cookie as 'leipzigj@email.chop.edu' invalidating session

galaxy.web.framework.decorators ERROR 2015-10-28 16:01:13,975 Uncaught exception in exposed API method:

Traceback (most recent call last):

  File "/home/cbmi_bioinf/galaxy-python/galaxy-dist/lib/galaxy/web/framework/decorators.py", line 140, in decorator

    rval = func( self, trans, *args, **kwargs)

  File "/home/cbmi_bioinf/galaxy-python/galaxy-dist/lib/galaxy/webapps/galaxy/api/tools.py", line 235, in create

    target_history = self.history_manager.get_owned( decoded_id, trans.user, current_history=trans.history )

  File "/home/cbmi_bioinf/galaxy-python/galaxy-dist/lib/galaxy/managers/secured.py", line 93, in get_owned

    return self.error_unless_owner( item, user, **kwargs )

  File "/home/cbmi_bioinf/galaxy-python/galaxy-dist/lib/galaxy/managers/secured.py", line 103, in error_unless_owner

    raise exceptions.ItemOwnershipException( "%s is not owned by user" % ( self.model_class.__name__ ) )

ItemOwnershipException: History is not owned by user
galaxy • 948 views
ADD COMMENTlink modified 3.1 years ago by Dannon Baker3.7k • written 3.1 years ago by Jeremy Leipzig50

Hi Jeremy

This rings a bell.... I am in the process of 'activating' the API (i.e. making the corresponding changes in the apache config to allow the API calls going through) on one of our servers with LDAP authentication. And I am running into similar issues. Dannon and I are currently looking into the problems

Based on previous posts from you, I assume you are also allowing the API calls to go through?

Sorry, no solution yet (but hopefully soon)

Hans-Rudolf

 

ADD REPLYlink written 3.1 years ago by Hotz, Hans-Rudolf1.8k

if I explicitly set  

RequestHeader add REMOTE_USER leipzigj

it works, so apparently %{AUTHENTICATE_sAMAccountName}e  isn't working anymore. Maybe this is a not a galaxy problem?

ADD REPLYlink written 3.1 years ago by Jeremy Leipzig50

The pull request linked below should resolve the issue of null REMOTE_USER headers.

ADD REPLYlink written 3.1 years ago by Dannon Baker3.7k
2
gravatar for Dannon Baker
3.1 years ago by
Dannon Baker3.7k
United States
Dannon Baker3.7k wrote:

Thanks for the report.  I think I have a fix for this that we're testing right now, here:  https://github.com/galaxyproject/galaxy/pull/1003

ADD COMMENTlink modified 3.1 years ago • written 3.1 years ago by Dannon Baker3.7k

this solved the problem. thanks!

ADD REPLYlink written 3.1 years ago by Jeremy Leipzig50

Great, happy to help!

ADD REPLYlink written 3.1 years ago by Dannon Baker3.7k
Please log in to add an answer.

Help
Access

Use of this site constitutes acceptance of our User Agreement and Privacy Policy.
Powered by Biostar version 16.09
Traffic: 171 users visited in the last hour