-
Notifications
You must be signed in to change notification settings - Fork 4.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[release/5.0] accept empty realm for digest auth (#56369) #61203
Conversation
Tagging subscribers to this area: @dotnet/ncl Issue DetailsBackport of #56455 to release/5.0 Customer ImpactTestingRisk
|
@danmoseley can you please check the request? Any concerns? |
Test failures are unrelated (re-running them):
|
Approved once customer verifies fix. Curious why this didn't show up when customer used #50598 fix? |
It was different reporter so perhaps different server with different behavior @danmoseley. When the original fix was done, we really just fix the reported issue. AFAIK we did not do any extensive search through RFC for similar cases. |
(marking it NO MERGE to block on customer validation) |
Rerun test failures are again unrelated:
It is the same machine DDARM64-179 as above in #61203 (comment) - @dotnet/dncenghot is that a known machine problem perhaps? |
Removing NO MERGE as customer validated the bits, see #56369 (comment) |
I'll take a look at that machine. |
I have put that machine offline and created an issue to track further work: https://github.com/dotnet/core-eng/issues/14861 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
The remaining CI failure is unrelated -- Build Analysis warns that image of Ubuntu 16.04 is not available for "runtime-libraries enterprise-linux":
It is not related to this PR and would not help if it worked. @danmoseley the PR is ready for merge now. |
This is definitely worth fixing, since that error means an entire pipeline didn't run. Images are listed here: https://github.com/actions/virtual-environments and Ubuntu 16.04 was removed because it is past its end-of-life support window. Simply changing |
@Anipik please see Matt's note above. Seems like we need a yaml tweak in this branch |
Backport of #56455 to release/5.0
Fixes #56369
/cc @karelz @camillo-toselli
Customer Impact
This breaks web app managing telephone system of the University of Bologna (10K phone lines) - see details in #56369 (comment)
Upgrade to .NET 6.0 (where the issue is fixed) is blocked by missing Oracle EF Core 6 provider.
Note: It is similar to backport of similar issue about empty domain for digest auth - see #50598 which brought that one into 5.0.6 release.
Testing
New targeted test case was added.
Customer validated on Windows10/x64 (on private build locally built).
Risk
Small, because: