desktopcouch

Admin users in the system couchdb are inherited by desktopcouch couchdbs

Bug #424330 reported by Eric Casteleijn on 2009-09-04

This bug affects 2 people

	Status	Importance	Assigned to	Milestone
CouchDB	Invalid	Undecided	Eric Casteleijn
desktopcouch	Fix Released	High	Eric Casteleijn	desktopcouch w21-karmic-alpha6
couchdb (Ubuntu)	Fix Released	Undecided	Elliot Murphy
Karmic	Fix Released	Undecided	Elliot Murphy

Bug Description

Because of the way desktopcouch currently starts couchdb, it inherits the .ini files from the system couchdb, inluding /etc/couchdb/local.ini, which holds the admin accounts. If someone adds an admin user to the system couchdb, this means users' couchdbs will also have this admin user, and unless they already had another admin user, they are now locked out of their database for all admin activities, notably: creating new admin users, creating databases, and creating/editing design documents. Ungood.

Let's take away the chaining altogether, and generate the entire .ini file ourselves, so that we have complete control, and don't get bitten by shades of implicit acquisition.

Tags:

Related branches

lp:~thisfred/desktopcouch/fix_tests_yet_again

Merged into lp:desktopcouch

John O'Brien (community): Approve on 2009-09-10

Facundo Batista (community): Approve on 2009-09-10

lp:ubuntu/karmic/couchdb

Eric Casteleijn (thisfred) on 2009-09-04

tags:	added: desktop+ karmic-blocker
Changed in desktopcouch:
status:	New → Triaged
importance:	Undecided → Critical
assignee:	nobody → Eric Casteleijn (thisfred)
importance:	Critical → High
milestone:	none → w21-karmic-alpha6

Eric Casteleijn (thisfred) on 2009-09-04

tags:	added: karmic-blockers removed: karmic-blocker
tags:	removed: karmic-blockers

Revision history for this message

Eric Casteleijn (thisfred) wrote on 2009-09-04:

Seems that this behavior persists, even when adjusting the chaining of .ini files. I'm talking to upstream, and will file a bug there, if it is one.

tags:

added: karmic-blocker

Eric Casteleijn (thisfred) on 2009-09-08

Changed in desktopcouch:
status:	Triaged → Confirmed

Revision history for this message

Eric Casteleijn (thisfred) wrote on 2009-09-08:

After more testing, upstream's chaining of .ini files seems to be broken, I've filed a bug in the upstream issue tracker https://issues.apache.org/jira/browse/COUCHDB-498

Changed in couchdb:
assignee:	nobody → Eric Casteleijn (thisfred)
status:	New → Confirmed

Joshua Hoover (joshuahoover) on 2009-09-09

tags:

added: ubuntuone-karmic

Joshua Hoover (joshuahoover) on 2009-09-09

tags:

removed: karmic-blocker

Elliot Murphy (statik) on 2009-09-10

Changed in couchdb:
status:	Confirmed → Invalid
Changed in couchdb (Ubuntu):
assignee:	nobody → Elliot Murphy (statik)
status:	New → In Progress

Revision history for this message

Elliot Murphy (statik) wrote on 2009-09-10:

couchdb_0.10.0~svn813472.orig.tar.gz Edit (805.1 KiB, application/x-tar)

Revision history for this message

Elliot Murphy (statik) wrote on 2009-09-10:

couchdb_0.10.0~svn813472-0ubuntu1.dsc Edit (1.2 KiB, text/plain)

Revision history for this message

Elliot Murphy (statik) wrote on 2009-09-10:

couchdb_0.10.0~svn813472-0ubuntu1.diff.gz Edit (7.3 KiB, text/x-diff)

Revision history for this message

Elliot Murphy (statik) wrote on 2009-09-10:

Attached orig.tar.gz and diff for a new snapshot of the 0.10.x upstream release branch which fixes this bug and a couple of other serious reported bugs, as discussed with slangasek yesterday. I will also be doing some packaging fixes in separate upload today, but that will be handled via bzr and a sourcepackagebranch, so I don't anticipate any trouble with merging.

I've testbuilt the package in my karmic pbuilder, tested upgrade and uninstall, run the desktopcouch test suite against this version and all looks sane.

Eric Casteleijn (thisfred) on 2009-09-10

Changed in desktopcouch:
status:	Confirmed → In Progress

Chad Miller (cmiller) on 2009-09-10

tags:

added: cmiller-k-alpha6

Revision history for this message

Launchpad Janitor (janitor) wrote on 2009-09-15:

This bug was fixed in the package couchdb - 0.10.0~svn813472-0ubuntu1

---------------
couchdb (0.10.0~svn813472-0ubuntu1) karmic; urgency=low

  * New snapshot of couchdb 0.10.x stable prerelease branch
    - pass config reset option to recursed background startup (LP: #424330)
      closes COUCHDB-498
    - Fix for building on snow leopard COUCHDB-490
    - Fix SSL replication (LP: #422178) COUCHDB-491
    - Fix continuous-after-normal replication
    - Use the same password hash calculation for user creation via ini
      file and user db, closes COUCHDB-492
    - Fix for WebKit XHR, closes COUCHDB-483
    - Don't check for response code text, closes COUCHDB-482
    - Remove a debugging leftover

-- Elliot Murphy <email address hidden> Thu, 10 Sep 2009 11:35:54 -0400

Changed in couchdb (Ubuntu Karmic):
status:	In Progress → Fix Released

Eric Casteleijn (thisfred) on 2009-09-17

Changed in desktopcouch:
status:	In Progress → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Bug attachments

Add attachment

Remote bug watches

Bug watches keep track of this bug in other bug trackers.