2 27 2023 Tech Team Report

2-27-2023

Logged Tasks

Date	Task	Hours (Main)	Hours (EOLS)	Hours (PII)	Hours (QDAS)
13-Feb-2023	Report, meeting, investigate 504 errors, investigate Drupal Keycloak errors, apply patch and continue debugging	6
14-Feb-2023	Debug ~5 keycloak/oidc errors, update dev/gb-at-request branches to 5.13	4
15-Feb-2023	Investigate Drupal get token failure, install postman, try manual process, try mod-sec, dump_io	5
16-Feb-2023	Explore differences between working dv calls and failing drupal calls using tcpdump, fix next ~3 errors	4
17-Feb-2023	Fix config to get first user login on drupal, try/fix google login, explore adding attributes to /userinfo	3
21-Feb-2023	Coord re: v5.13 (yesterday), open issues, initial investigation of annorep on google doc example		1
23-Feb-2023	Fix annorep #11		1
24-Feb-2023	Investigate/fix Google mobile issues in shib - dev/stage/prod, add oidc changes to github, start removing unnecessary changes, add openid_connect patch, fix account loading, reuse parent authorize method; deploy ARv0.0.4 to prod, create v5.13 branch, merge Seba's PR to dev and 5.13, deploy dev to dev, 5.13 to stage, update payara on stage to 5.2022.5, update mpm_prefork.conf on stage, update citation block and schema.xml for 5.13 on stage, investigate/fix dev offline, remove pg 9.x versions	8

Drupal

• Minor updates to v9.5.3 on dev/stage

SSO

• Deployed patched version of keycloak plugin, debugged/fixed multiple (~8) errors using logging, postman, mod-sec, and dump_io, comparing DV and Drupal processes
• Started looking at config/issues w.r.t. mapping authenticated users to existing accounts
• Also tried/fixed google login on Drupal
• Committed current changes in github, switched to custom keycloak plugin (maintained in our github)
• Started rolling back, consolidating changes to oidc module and keycloak plugin
• Fixed Google-reported accessibility issues in Shib IDP (font-size css, missing viewport)

Dataverse

• Created v5.13 branch, merged @Seba's build-related PR to dev/5.13 branches, deployed to dev(5.13-qdr-dev) and stage (5.13-qdr)

Operations

• Investigated 504 timeouts for Drupal and Keycloak, tested @Seba's fix on dev, deployed to stage
• Updated stage to payara-5.2022.5
• Investigated dev outage on Friday - would not respond, allow login. Rebooted via AWS. Investigated/fixed problem of old postgres versions starting

AnnoRep

• Fixed #11 - a null pointer found with a Google doc example file,
• Deployed v 0.0.4 to dev/stage/prod

Discussion

• FYI: After dev became unresponsive Friday, I rebooted it and discovered that all of the old postgres 9.x versions were starting instead of postgres 13. I removed all of the old 9.x versions.

Plans

• SSO - continue to explore/build OIDC options
  • Configure Keycloak to use a persistent database (weekly reboots remove all info right now)
  • Investigate Keycloak to LDAP connection for new users, ability to handle registration, replace LDAP, etc.
  • Investigate SSO options
  • Investigate ways to simplify user interface (multiple clicks to get through Keycloak)
• Matomo - help with transition from Google
• AnnoRep - explore round-trip
• Dataverse
  • Make PR for guestbook adding datasetversion fix, deploy to stage
  • Continue towards guestbook at request based on ADA's original work
  • Popup info accessibility - IQSS likes the recommendations from the source I linked to, so this can be implemented along those lines.
• Drupal - v10 - review compatibility and start updates.
• QDAS Previewer
  • Updates per request
  • Investigate writing aux file/previewing lower-sensitivity version and/or other write options
• TBD: FRDR Security