[11:14:06] andrewbogott: just got the error myself, and I know I'm using the right capitalization. Guess I need to ask the cas folks [11:14:11] hey moritzm.... [11:14:45] n case you have a clue, or can redirect me: login to cas gets me viewing icinga but not auth to actually run commands. I know capitalization to be correct [11:16:11] apergos: does the capitalization matches the one in the icinga config in puppet? [11:16:16] the cgi file IIRC [11:17:31] yes, it specifically matches that one [11:17:51] that's the one I'f always used, it's got some upper case in it [11:18:16] can it be that cas does some sort of case normalization? [11:19:17] apergos: all I know is from backlog from Thu. in #wikimedia-sre-foundations [11:19:54] I don't hang out there, I'll look at the logs though, thanks [11:19:57] apergos: https://bots.wmflabs.org/browser/index.php?start=07%2F09%2F2020&end=07%2F09%2F2020&display=%23wikimedia-sre-foundations [11:20:11] and thanks for the handy link! [11:20:41] LDAP case-normalises the attribute [11:22:12] time up update the cgi file I guess, thanks much [11:24:19] apergos: ack, indeed. if you want I can add a workaround similar to https://gerrit.wikimedia.org/r/c/operations/puppet/+/610699 [11:24:37] until we eventually reach the 21st century and ditch Icinga :-) [11:25:35] background is https://phabricator.wikimedia.org/T256656#6266825 [11:25:57] https://gerrit.wikimedia.org/r/c/operations/puppet/+/612181 yeah it was already in progress [11:27:04] I hope that will get it, I've added the upper case (?) but so does cas not lowercase everything? [11:27:15] * apergos rereads that comment [11:27:59] ah yes I see [11:28:29] care to +1 me, moritzm? [11:29:21] looking [11:30:41] +1d [11:30:43] lol [11:32:39] apergos: CAS maintains the case as you enter it when you first login and for icinga this needs to match exactly the case in the cgi.cfg file. looking at the logs you logged in to cas with ArielGlenn but icinga had arielglenn. you can either login to cas with arielglenn or apply the patch above to add ArielGlenn to icinga [11:32:50] already applied [11:33:02] I think I usually remember the right icinga case but today I didn't [11:33:09] and honestly why should I have to [11:33:57] how hard would it be for upstream to ... nm. so not even worth discussing :-D [11:34:52] a hardcoded list of contacts anyways... you know, I'll just get some chocolate and forget all about this :-D [11:35:15] there is a task (https://phabricator.wikimedia.org/T256656) and a possible way forward but its low prio [11:35:51] we could of course also patch icinga :D [11:35:55] * jbond42 gets his coat [11:36:39] yeano [11:36:47] just what we need is to maintain local patches... [11:37:20] task opened for later "light reading", heh [13:49:32] andrewbogott: do we have an instance of labtestwiki on eqiad? [13:49:37] (the database I mean) [13:49:54] no [13:49:59] ok! thanks [13:50:10] it's only on clouddb2001-dev [13:50:26] cool, thanks for confirming