geosolutions-it / ckanext-provbz-auth

SPID authentication for prov BZ
Other
0 stars 1 forks source link

Error logging in #4

Open etj opened 2 years ago

etj commented 2 years ago

Old py2 version, some configuration seems outdated (idp side?).

2022-05-26 16:59:52,079 DEBUG [ckanext.provbzauth] ProvBzIdentifierPlugin :: identify ------------------------------------------------------------
2022-05-26 16:59:52,124 INFO  [ckan.lib.base]  /dataset render time 0.044 seconds
2022-05-26 16:59:56,974 DEBUG [ckanext.provbzauth] ProvBzIdentifierPlugin :: identify ------------------------------------------------------------
2022-05-26 16:59:56,977 INFO  [ckanext.provbzauth] User does not exists, creating new one.
2022-05-26 16:59:56,977 DEBUG [ckanext.provbzauth]  ENV CKAN_CURRENT_URL -> /
2022-05-26 16:59:56,977 DEBUG [ckanext.provbzauth]  ENV CKAN_LANG -> it
2022-05-26 16:59:56,977 DEBUG [ckanext.provbzauth]  ENV CKAN_LANG_IS_DEFAULT -> False
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV CONTENT_LENGTH -> 0
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV CONTENT_TYPE -> 
[...]
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_HOST -> test-data.civis.bz.it
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_REFERER -> https://test-idp5.civis.bz.it/
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_REMOTE_USER -> 
[...]
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_APPLICATION_ID -> test-sp1
[...]
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_AUTHENTICATION_METHOD -> SPID
2022-05-26 16:59:56,978 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_AUTHNCONTEXT_CLASS -> SPID
[...]
2022-05-26 16:59:56,979 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_HANDLER -> https://test-data.civis.bz.it/Shibboleth.sso
2022-05-26 16:59:56,979 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_IDENTITY_PROVIDER -> https://test-idp5.civis.bz.it/idp/shibboleth
[...]
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport
2022-05-26 16:59:56,980 DEBUG [ckanext.provbzauth]  ENV HTTP_SHIB_ORIGINAL_IDENTITY_PROVIDER -> http://fs.siag.it/adfs/services/trust
[...]
2022-05-26 16:59:56,981 DEBUG [ckanext.provbzauth]  ENV wsgi.version -> (1, 0)
2022-05-26 16:59:56,981 INFO  [ckanext.provbzauth] Creating user via profile manager, key exetajar@SIAG.IT
Traceback (most recent call last):
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/httpserver.py", line 1068, in process_request_in_thread
    self.finish_request(request, client_address)
  File "/usr/lib64/python2.7/SocketServer.py", line 334, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/usr/lib64/python2.7/SocketServer.py", line 649, in __init__
    self.handle()
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/httpserver.py", line 442, in handle
    BaseHTTPRequestHandler.handle(self)
  File "/usr/lib64/python2.7/BaseHTTPServer.py", line 340, in handle
    self.handle_one_request()
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/httpserver.py", line 437, in handle_one_request
    self.wsgi_execute()
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/httpserver.py", line 287, in wsgi_execute
    self.wsgi_start_response)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/cascade.py", line 130, in __call__
    return self.apps[-1](environ, start_response)
  File "/usr/lib/ckan/default/src/ckan/ckan/config/middleware.py", line 228, in __call__
    return self.app(environ, start_response)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/paste/registry.py", line 379, in __call__
    app_iter = self.application(environ, start_response)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/repoze/who/middleware.py", line 76, in __call__
    identity = api.authenticate()
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/repoze/who/api.py", line 129, in authenticate
    ids = self._identify()
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/repoze/who/api.py", line 308, in _identify
    identity = plugin.identify(self.environ)
  File "/usr/lib/ckan/default/src/ckanext-provbz-auth/ckanext/provbzauth/repoze/ident.py", line 193, in identify
    user = self._get_or_create_user(environ)
  File "/usr/lib/ckan/default/src/ckanext-provbz-auth/ckanext/provbzauth/repoze/ident.py", line 279, in _get_or_create_user
    user = self._get_user_profile(userkey, env)
  File "/usr/lib/ckan/default/src/ckanext-provbz-auth/ckanext/provbzauth/repoze/ident.py", line 343, in _get_user_profile
    return self._get_user_profile_from_profilemanager(userkey, env)
  File "/usr/lib/ckan/default/src/ckanext-provbz-auth/ckanext/provbzauth/repoze/ident.py", line 364, in _get_user_profile_from_profilemanager
    r = requests.get(self.pm_url, auth=(self.pm_user, self.pm_pw), headers=headers)  # type: Response
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/requests/api.py", line 55, in get
    return request('get', url, **kwargs)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/requests/api.py", line 44, in request
    return session.request(method=method, url=url, **kwargs)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/requests/sessions.py", line 279, in request
    resp = self.send(prep, stream=stream, timeout=timeout, verify=verify, cert=cert, proxies=proxies)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/requests/sessions.py", line 374, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/ckan/default/lib/python2.7/site-packages/requests/adapters.py", line 213, in send
    raise SSLError(e)
SSLError: [Errno 1] _ssl.c:504: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed