Re: problems of running koji on CentOS with EPEL packages

[Chen Baozi]

>  This is happening because kojid is authenticating as a user that is not
>  associated with a build host (or perhaps not authenticating at all). You
>  can't run kojid as a regular user (or anonymously). The hub is trying to
>  determine which host is calling the function and is not finding one. Certain
>  calls can only be executed by build hosts.
>
>  When you created the host entry (koji add-host ...), an associated user was
>  created with the same name. This is the user that kojid should authenticate
>  as.
>
>  And just to clarify, the users I'm talking about are the ones internal to
>  koji, not the system users. 

Thanks. However, how can I associate the kojid user with a build host? Does
it mean that I have to configure a DNS to make all this names associate
together? Or is there something that I need to configure which I may not
have done?

At the beginning of wiki "
https://fedoraproject.org/wiki/Koji/ServerHowToProposed";, it is mentioned
that - "

>  Builders
>       By default these will be referred to as *kojibuilderX*, but can also
>  be the hostname(s) of the boxes that will be setup as builders. TODO: can
>  also or should ?
>  
"
I think this may be why I can't make it correctly. What I'm confused now is
what the mentioned "hostname(s)".

problems of running koji on CentOS with EPEL packages

[Greg Swift]

On Tue, Feb 10, 2009 at 19:28, 陈鲍孜 <chenbaozi(a)gmail.com&gt; wrote:

>  This is happening because kojid is authenticating as a user that is
> not
> > associated with a build host (or perhaps not authenticating at all). You
> > can't run kojid as a regular user (or anonymously). The hub is trying to
> > determine which host is calling the function and is not finding one. Certain
> > calls can only be executed by build hosts.
> >
> > When you created the host entry (koji add-host ...), an associated user
> > was created with the same name. This is the user that kojid should
> > authenticate as.
> >
> > And just to clarify, the users I'm talking about are the ones internal to
> > koji, not the system users.
>
>
>  Thanks. However, how can I associate the kojid user with a build host? Does
>  it mean that I have to configure a DNS to make all this names associate
>  together? Or is there something that I need to configure which I may not
>  have done?
>
>  At the beginning of wiki "
>  https://fedoraproject.org/wiki/Koji/ServerHowToProposed";, it is mentioned
>  that - "
>
> > Builders
> >      By default these will be referred to as *kojibuilderX*, but can also
> > be the hostname(s) of the boxes that will be setup as builders. TODO: can
> > also or should ?
> >
>  "
>  I think this may be why I can't make it correctly. What I'm confused now is
>  what the mentioned "hostname(s)".
>  
Yeah, as you can tell I was even a bit confused by that section (thus the
TODO with the question, I was hoping for some input).  The impression I got
from the original box was that kojibuilder1, kojibuilder2 etc was the naming
they were using on their hosts, so by having the username be the same it
helped you tie the koji user to the build box.  When I implemented this on
my network I used the name of the box as the koji userid.  This does not
cause koji to automatically associate the two, but allows you as the admin
to make the association.   If someone has a better explanation i'm open to
suggestions since my attempt at clarification didn't quite hit the mark.

Anyways, in the Builder Setup section you add the host to koji's database
and then on the builder you specify the host as the user in
/etc/kojid/kojid.conf, these should match.  It was my impression that this
should match the user name that you created in the SSL configuration.  I'm
not sure if you are using SSL, and that might be adding to the confusion if
you are not *shrug*

-greg

problems of running koji on CentOS with EPEL packages

[Mike McLean]

Greg Swift wrote:
>  On Tue, Feb 10, 2009 at 19:28, 陈鲍孜 <chenbaozi(a)gmail.com&gt;
> wrote:
> > At the beginning of wiki "
> > https://fedoraproject.org/wiki/Koji/ServerHowToProposed";, it is mentioned
> > that - "
> >
> >> Builders
> >>      By default these will be referred to as *kojibuilderX*, but can also
> >> be the hostname(s) of the boxes that will be setup as builders. TODO: can
> >> also or should ?
> >>
> > "
> > I think this may be why I can't make it correctly. What I'm confused now is
> > what the mentioned "hostname(s)".
>  
>  Yeah, as you can tell I was even a bit confused by that section (thus the
>  TODO with the question, I was hoping for some input).  The impression I got
>  from the original box was that kojibuilder1, kojibuilder2 etc was the naming
>  they were using on their hosts, so by having the username be the same it
>  helped you tie the koji user to the build box.  When I implemented this on
>  my network I used the name of the box as the koji userid.  This does not
>  cause koji to automatically associate the two, but allows you as the admin
>  to make the association.   If someone has a better explanation i'm open to
>  suggestions since my attempt at clarification didn't quite hit the mark. 
The koji database has tables for both hosts and users. Each host has an
associated user that the host authenticates as. Due to a bad choice on
my part, both the host table and user table have a 'name' column, so it
is theoretically possible (if you muck around in the db manually) to
create a situation where the name of the host entry is not the same as
the name of the associated user entry. /However/ the cli (and the api)
do not facilitate this. In all normal situations the name of the host
and the name of the associated user will be the same.

When you run 'koji add-host', the hub will create both the host and user
entries. There is no need to manually add a user for the host, the
add-host command will do it for you. If a user of the same name already
exists (host or not) the command will fail.

You are free to name the hosts anything you like. You do not have to use
the fqdn or anything.

The user kojid authenticates as determines which host it represents. The
machine it is running on is not a direct factor.

>  Anyways, in the Builder Setup section you add the host to koji's
> database
>  and then on the builder you specify the host as the user in
>  /etc/kojid/kojid.conf, these should match.  It was my impression that this
>  should match the user name that you created in the SSL configuration.  I'm
>  not sure if you are using SSL, and that might be adding to the confusion if
>  you are not *shrug* 
Authentication in koji can get messy. Sometimes when getting started, it
is easier to start out using password auth and tackle ssl/krb later.
Note that you should not use password auth in production.

problems of running koji on CentOS with EPEL packages

[Greg Swift]

2009/2/11 Mike McLean <mikem(a)redhat.com&gt;

>  Greg Swift wrote:
>  > On Tue, Feb 10, 2009 at 19:28, 陈鲍孜 <chenbaozi(a)gmail.com&gt; wrote:
>  >> At the beginning of wiki "
>  >> https://fedoraproject.org/wiki/Koji/ServerHowToProposed";, it is
>  mentioned
>  >> that - "
>  >>
>  >>> Builders
>  >>>      By default these will be referred to as *kojibuilderX*, but can
>  also
>  >>> be the hostname(s) of the boxes that will be setup as builders. TODO:
>  can
>  >>> also or should ?
>  >>>
>  >> "
>  >> I think this may be why I can't make it correctly. What I'm confused
> now
>  is
>  >> what the mentioned "hostname(s)".
>  >
>  > Yeah, as you can tell I was even a bit confused by that section (thus the
>  > TODO with the question, I was hoping for some input).  The impression I
>  got
>  > from the original box was that kojibuilder1, kojibuilder2 etc was the
>  naming
>  > they were using on their hosts, so by having the username be the same it
>  > helped you tie the koji user to the build box.  When I implemented this
>  on
>  > my network I used the name of the box as the koji userid.  This does not
>  > cause koji to automatically associate the two, but allows you as the
>  admin
>  > to make the association.   If someone has a better explanation i'm open
>  to
>  > suggestions since my attempt at clarification didn't quite hit the mark.
>
>  The koji database has tables for both hosts and users. Each host has an
>  associated user that the host authenticates as. Due to a bad choice on
>  my part, both the host table and user table have a 'name' column, so it
>  is theoretically possible (if you muck around in the db manually) to
>  create a situation where the name of the host entry is not the same as
>  the name of the associated user entry. /However/ the cli (and the api)
>  do not facilitate this. In all normal situations the name of the host
>  and the name of the associated user will be the same.
>
>  When you run 'koji add-host', the hub will create both the host and user
>  entries. There is no need to manually add a user for the host, the
>  add-host command will do it for you. If a user of the same name already
>  exists (host or not) the command will fail.
>
>  You are free to name the hosts anything you like. You do not have to use
>  the fqdn or anything.
>  
so in the example:

admin-user-name@kojihub$ koji add-host kojibuilder1.example.com i386 x86_64

You could actually just put kojibuilder1 and then in
/etc/koji/kojid.conf do this:

user = kojibuilder1

If that is the case, awesome.. that through me off because the
original documentation used the kojibuilder1.example.com.  Should I
adjust that to take that into consideration in the Proposed doc?



>  The user kojid authenticates as determines which host it represents. The
>  machine it is running on is not a direct factor.
>
>  > Anyways, in the Builder Setup section you add the host to koji's database
>  > and then on the builder you specify the host as the user in
>  > /etc/kojid/kojid.conf, these should match.  It was my impression that
>  this
>  > should match the user name that you created in the SSL configuration.
>   I'm
>  > not sure if you are using SSL, and that might be adding to the confusion
>  if
>  > you are not *shrug*
>
>  Authentication in koji can get messy. Sometimes when getting started, it
>  is easier to start out using password auth and tackle ssl/krb later.
>  Note that you should not use password auth in production.
>  
I guess i can see that point since the ssl certificates were one of the
first things I got hung up on.

-greg

problems of running koji on CentOS with EPEL packages

[Mike McLean]

陈鲍孜 wrote:
>  Thanks. However, how can I associate the kojid user with a build
> host? 
>  Does it mean that I have to configure a DNS to make all this names 
>  associate together? Or is there something that I need to configure which 
>  I may not have done? 
Build hosts need to be tracked in the koji database. You create these 
entries with the 'koji add-host' command. As I wrote before, this 
command will also create the associated user of the same name.

Whatever name you used when you ran koji add-host, that is the user that 
kojid needs to authenticate as.

>  At the beginning of wiki 
>  "https://fedoraproject.org/wiki/Koji/ServerHowToProposed", it is 
>  mentioned that - "
>  
>      Builders
>           By default these will be referred to as /kojibuilderX/, but can
>      also be the hostname(s) of the boxes that will be setup as builders.
>      TODO: can also or should ?
>  
>  "
>  I think this may be why I can't make it correctly. What I'm confused now 
>  is what the mentioned "hostname(s)". 
When you add build hosts in the koji db (with 'koji add-host'), you can 
give them any name you like. The document linked above presumes you will 
use names like kojibuilder1, kojibuild2, etc. However it notes that 
using the hostname (i.e. fqdn) of the machine that kojid will run on is 
also a reasonable choice.