Add wait loop for web server readiness#112
Open
atodorov wants to merge 5 commits into
Open
Conversation
The verify-web-login step sometimes fails because curl attempts a Negotiate/Kerberos handshake before the web server inside the container is ready to accept connections, resulting in an empty response. Add a simple retry loop that waits for the login page to return HTTP 200 before proceeding with the Kerberos login test.
- Add -v flag to curl to capture full HTTP exchange details - Dump container logs before verify-web-login - Check keytab contents inside container - Dump krb5.conf from container This will help diagnose why the Negotiate handshake fails even though the web server is responding to plain HTTP requests.
- Add -v flag to curl in verify-web-login to capture full HTTP exchange - Dump container logs, keytab, krb5.conf, httpd error log, and container status to stdout (instead of /tmp/*.log files) so they appear in CI output - This will help diagnose why Negotiate auth fails even though the web server is responding to plain HTTP requests
Add krb5-workstation package which provides the klist command. This allows running 'docker exec web_kiwitcms_org klist -k /Kiwi/application.keytab' to verify the keytab is correctly set up during CI debugging.
/login/kerberos/ is POST-only with Django 6 + latest social-auth. curl defaults to GET which returns 405 Method Not Allowed, preventing the Kerberos Negotiate handshake from completing.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The verify-web-login step sometimes fails because curl attempts a
Negotiate/Kerberos handshake before the web server inside the container
is ready to accept connections, resulting in an empty response (0 bytes).
Add a simple retry loop that waits for the login page to return HTTP 200
before proceeding with the Kerberos login test.