with LDAP Plugin unable to authenticate using XMLRPC

[sandeep.nadkarni@…]

HI,

We are trying to get details of tickets from trac through xmlrpc / json. we are not able to use ​https://example.com/test/login/rpc or jsonrpc

anonymous user works just fine..

normal ldap auth is working fine.

TRAC 1.2.3 python 2.7.5 CentOS 7.4 TracLdapAuth 1.2.2

[sandeep.nadkarni@…]

Error is: {"error": {"message": "Authentication information not available", "code": -32603, "name": "JSONRPCError"}, "result": null, "id": null}.

[Ryan J Ollos]

Did you try?: XmlRpcPlugin#ProblemswhenAccountManagerPluginisenabled

[anonymous]

yes

[account_manager]
environ_auth_overwrite = false

[components] 
trac.web.auth.LoginModule = disabled 

are already exist in trac.ini.

[sandeep.nadkarni@…]

Any Pointer ?

[Jun Omae]

Replying to anonymous:

yes

[account_manager]
environ_auth_overwrite = false

The section should be [account-manager], not [account_manager].

However, the environ_auth_overwrite option just sets the username via form authentication to environ['REMOTE_USER']. I think the option cannot solve the issue when XMLRPC request without form authentication.

I guess HttpAuthPlugin is needed to solve it.

Anyway, please post entire of [account-manager] and [components] sections in trac.ini.

[sandeep.nadkarni@…]

requested contents of trac.ini file

[sandeep.nadkarni@…]

file is attached containing requested details for your reference

[Jun Omae]

1. Try to install HttpAuthPlugin and enable httpauth.* in components section.

[components]
httpauth.* = enabled

2. Confirm that /login/jsonrpc responds 401 Unauthorized status line:

   $ curl -sv -o /dev/null http://your-host/path-to-env/login/jsonrpc
   > ...
   >
   < HTTP/1.1 401 Unauthorized
   < ....
   < Date: Wed, 26 Sep 2018 10:02:37 GMT
   < WWW-Authenticate: Basic realm="auth"
   < ...
   

3. Try to call system.getAPIVersion() via JSON-RPC using curl.

   $ curl -s -u YOUR-USERNAME \
     -H 'Content-Type: application/json' \
     --data '{"params":[], "method":"system.getAPIVersion", "id":42}' \
     http://your-host/path-to-env/login/jsonrpc
   Enter host password for user 'YOUR-USERNAME':
   {"id": 42, "result": [1, 1, 7], "error": null}
   

[Jun Omae]

See also: HttpAuthPlugin#Troubleshooting.

[sandeep.nadkarni@…]

when executed this after setting httpauth.* = enable and executing

$ curl -s -u YOUR-USERNAME \
  -H 'Content-Type: application/json' \
  --data '{"params":[], "method":"system.getAPIVersion", "id":42}' \
  http://your-host/path-to-env/login/jsonrpc

{"id": 42, "result": [1, 1, 8], "error": null}

this is the result

[sandeep.nadkarni@…]

my url is https and not http

[Jun Omae]

Okay. It seems that your JSONRPC with authenticated user works fine.

If you want to use https://example.com/test/login/rpc instead of https://example.com/test/login/jsonrpc, add /login/rpc to [httpauth] paths to require HTTP authentication:

[httpauth]
paths = /login/rpc,/xmlrpc,/login/xmlrpc,/jsonrpc,/login/jsonrpc

[sandeep.nadkarni@…]

It worked .. thanks

[Jun Omae]

Thanks for the feedback. Closing cantfix since that's a configuration issue.