I posted to wireshark-dev but got no response. Sorry for the duplication. I am trying to register with Gerrit using WordPress. It does not work. It appears that the initial POST request is being redirected to use HTTP/S, and the redirect is using a GET instead of a POST. The process stalls at that point. Am I missing something obvious, or is this a known issue? Who would be the contact to get this fixed? asked 10 Feb '15, 17:58  beastham |
One Answer:
Which Wordpress site are you trying to authenticate against (self-hosted, one at wordpress.com, ...)? Do you happen to know which OpenID plugin you're using? I tried installing the simply-named "OpenID" plugin on blog.wireshark.org about a year ago and ran into the same sorts of issues that you're seeing. Unfortunately development on that plugin seems to be abandoned. answered 11 Feb '15, 09:38  Gerald Combs ♦♦ I am using https://code.wireshark.org/review/login/register, and then clicking on the WordPress icon and entering my Wordpress.com user ID. Tracing the flow shows it communicating with WordPress, with the redirect appearing to cause the problem. (11 Feb '15, 10:01) beastham The server logs show the following entries for OpenID: [2015-02-11 20:35:22,886] WARN org.openid4java.consumer.AbstractNonceVerifier : Nonce is too old: 2015-02-11T08:27:20Zfur58z [2015-02-11 20:35:22,887] ERROR com.google.gerrit.httpd.auth.openid.OpenIdServiceImpl : OpenID failure: Nonce verification failed. Likely caused by clock skew on this server, install/configure NTP. (NTP is up and synced. 2015-02-11T08:27:20Zfur58z doesn't appear to be valid ISO 8601, however.) [2015-02-12 09:47:51,030] ERROR com.google.gerrit.httpd.auth.openid.OpenIdServic eImpl : Cannot discover OpenID http:// org.openid4java.discovery.DiscoveryException: 0x500: Cannot parse identifier: ht tp:// at org.openid4java.discovery.Discovery.parseIdentifier(Discovery.java:12 1) at org.openid4java.discovery.Discovery.discover(Discovery.java:129) at org.openid4java.consumer.ConsumerManager.discover(ConsumerManager.jav a:538) at com.google.gerrit.httpd.auth.openid.OpenIdServiceImpl.init(OpenIdServ iceImpl.java:523) at com.google.gerrit.httpd.auth.openid.OpenIdServiceImpl.discover(OpenId ServiceImpl.java:150) at com.google.gerrit.httpd.auth.openid.LoginForm.discover(LoginForm.java :164) at com.google.gerrit.httpd.auth.openid.LoginForm.doPost(LoginForm.java:1 54) Would it be possible to use a different provider? Launchpad.net is probably your best bet at this point. I hate to "solve" the issue that way but it's probably the easiest going forward. Gerrit has limited OpenID configuration options (i.e. enabling and disabling it). If the problem is on our side, fixing it likely involves recompiling Gerrit itself or openid4java. If it's a Wordpress.com issue I have no idea how feasible it would be to try to fix it. (13 Feb '15, 14:18) Gerald Combs ♦♦ |
Gerald Coombs (our fearless leader)is the Admin.
He's quite responsive to Admin issues, so I'm sure he'll respond as soon as he can.
You might also try asking this on a Gerrit forum since this sounds more like a Gerrit issue than a Wireshark issue.