[BlueOnyx:15352] Re: Unable to delete site

[Michael Stauber]

Hi Jim,

> I get this error in /var/log/messages when I attempt to delete
> the virtual site and that is all.
> 
> AUTHKEY to user “” failed
> 
> In GUI the UI comes up showing the progress bar to remove the site but nothing happens.

This is most likely related to your ccewrap problem mentioned in
[BlueOnyx:15350]. For Vsite deletion a script is run through CCEWrap
with elevated privileges. If the CCEWrap binary has the wrong UID/GID,
then this won't work.

As for 'AUTHKEY to user “” failed' ... you'll see that a few times
during normal operation and it doesn't necessarily indicate a problem.
It's just an info, not an error.

GUI pages and handlers/constructors authenticate to CCEd when they run.
Handlers and constructors use a method that doesn't report the username
of who runs it, which is OK and also produces this message in the logs.

GUI pages use either AUTH or AUTHKEY to authenticate with CCE.

A typical AUTH looks like this:

$sessionId = cceClient->auth("username", "password");

The return value is a valid session ID if the authentication succeeded,
or it's empty if it failed. This session-ID can then be used to further
authenticate with CCE via AUTHKEY:

$ok = cceClient->authkey("sessionId", "username");

The return value is "1" for successful authentication and anything else
for a failed authentication.

SessionId's expire after a certain amount of non-usage. But they are
pretty useful in so far that we don't have to know a users password past
the login form, which prevents accidental leakage of it.

In certain places both auth() and authkey() are used in quick succession
by GUI pages or underlying libraries such as serverScriptHelper(). If
one fails, the other is used. That's why you might see the respective
info in /var/log/message that either an AUTHKEY or AUTH attempt failed.
Which - again - is usually fine.

-- 
With best regards

Michael Stauber