Project

General

Profile

Bug #7059

CN.getSubjectInfo() fails with ServiceFailure for some DNs

Added by Matthew Jones over 9 years ago. Updated over 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Ben Leinfelder
Category:
d1_identity_manager
Target version:
-
Start date:
2015-04-22
Due date:
% Done:

100%

Story Points:
Sprint:

Description

Trying to call the CN.getSubjectInfo() fails for at least one DN, and its unclear how it differs from others for which the service works fine. The request that fails is:

https://cn.dataone.org/cn/v1/accounts/CN=Matt%20Jones%20A19141,O=Google,C=US,DC=cilogon,DC=org

whereas a similar DN (a different Google account of mine) works fine:

https://cn.dataone.org/cn/v1/accounts/CN=Matt%20Jones%20A729,O=Google,C=US,DC=cilogon,DC=org

The failure for the first URL can produce one of two error messages. Its unclear to me why different error messages are returned on each invocation:

@

Problem looking up entry: CN=Matt Jones A19141,O=Google,C=US,DC=cilogon,DC=org : localhost:389; socket closed

@

and sometimes:

@

Internal Server Error: The server encountered an unexpected condition which prevented it from fulfilling the request.

@

Note that the DN that fails is present in LDAP, and is also referenced as an equivalentIdentity in the SubjectInfo records for the DN that succeeds.

History

#1 Updated by Ben Leinfelder over 9 years ago

  • Status changed from New to Closed
  • % Done changed from 0 to 100

I modified the recursion to only lookup one level of equivalent identities rather than following every link (potentially infinitely). This is now on https://cn-sandbox-2.test.dataone.org/cn/v1/accounts

#2 Updated by Ben Leinfelder over 9 years ago

FYI: I modified the recursion algorithm to follow all links, but only if the node had not been visited before.

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)