Project

General

Profile

Actions

Bug #32660

closed

katello assumes GET params in repo url are SLES auth tokens, but may not be

Added by Justin Sherrill almost 3 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Repositories
Target version:
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

when trying to sync a mirror repo like:

http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock

get params are specified. Katello interprets these as sles auth tokens: https://github.com/Katello/katello/blob/master/app/services/katello/pulp3/repository/yum.rb#L20-L25

but in this case they are not. This doesn't actually cause a problem, as usually they are ignored, except its not exactly 100% correct, and exposed another bug in pulp: https://pulp.plan.io/issues/8816

Actions

Also available in: Atom PDF