[OPEN-ILS-DEV] Duplicate authtokens

2017-02-08 Thread Bill Ott
I'm not sure this if this is a bug, as I haven't totally wrapped my mind around it, but we've had some bizarre behavior that I wanted to put on the radar. Ever since we upgraded to 2.11 in Dec., we've had occasional situations where our automated book drops would start reporting the wrong OU

Re: [OPEN-ILS-DEV] Duplicate authtokens

2017-02-08 Thread Bill Ott
Unfortunately, at the time I caught this in the logs, we were only logging warn, so I don't see the init call. The method we were using to call init was not using nonce. I've located a nice example in SIP.pm and will make a code change to use it in our init call going forward! On

Re: [OPEN-ILS-DEV] Duplicate authtokens

2017-02-08 Thread Mike Rylander
Bill, Can you find the log entries for the offending sessions (should all be around 6am, obv) for calls to open-ils.auth.authenticate.init? The first parameter is the username and the second is the nonce (http://stackoverflow.com/questions/5050932/nonce-usage-in-authentication) used to

Re: [OPEN-ILS-DEV] Duplicate authtokens

2017-02-08 Thread Mike Rylander
Ah! I assumed that your bookdrops were using SIP2. There you go, nonce to the rescue! Thanks, -- Mike Rylander | President | Equinox Open Library Initiative | phone: 1-877-OPEN-ILS (673-6457) | email: mi...@equinoxinitiative.org | web: http://equinoxinitiative.org On Wed, Feb 8, 2017

[OPEN-ILS-DEV] Upcoming 2.12 release

2017-02-08 Thread Kathy Lussier
Hi all, Thanks to everyone who applied the 2.12beta targets to their bugs and who talked with me over the past few days on the status of their code. We have many LP bugs now with the 2.12 target applied - http://bit.ly/2kSdVdG. At this time, I'm putting out a general call to core committers