2017-10-01

• Peter emailed to point out that many items in the ILRI archive collection have multiple handles:

http://hdl.handle.net/10568/78495||http://hdl.handle.net/10568/79336

• There appears to be a pattern but I'll have to look a bit closer and try to clean them up automatically, either in SQL or in OpenRefine
• Add Katherine Lutz to the groups for content sumission and edit steps of the CGIAR System collections

2017-10-02

• Peter Ballantyne said he was having problems logging into CGSpace with "both" of his accounts (CGIAR LDAP and personal, apparently)
• I looked in the logs and saw some LDAP lookup failures due to timeout but also strangely a "no DN found" error:

2017-10-01 20:24:57,928 WARN  org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=CA0AA5FEAEA8805645489404CDCE9594:ip_addr=41.204.190.40:ldap_attribute_lookup:type=failed_search javax.naming.CommunicationException\colon; svcgroot2.cgiarad.org\colon;3269 [Root exception is java.net.ConnectException\colon; Connection timed out (Connection timed out)]
2017-10-01 20:22:37,982 INFO  org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=CA0AA5FEAEA8805645489404CDCE9594:ip_addr=41.204.190.40:failed_login:no DN found for user pballantyne

• I thought maybe his account had expired (seeing as it's was the first of the month) but he says he was finally able to log in today
• The logs for yesterday show fourteen errors related to LDAP auth failures:

$ grep -c "ldap_authentication:type=failed_auth" dspace.log.2017-10-01
14

• For what it's worth, there are no errors on any other recent days, so it must have been some network issue on Linode or CGNET's LDAP server
• Linode emailed to say that linode578611 (DSpace Test) needs to migrate to a new host for a security update so I initiated the migration immediately rather than waiting for the scheduled time in two weeks

2017-10-04

• Twice in the last twenty-four hours Linode has alerted about high CPU usage on CGSpace (linode2533629)
• Communicate with Sam from the CGIAR System Organization about some broken links coming from their CGIAR Library domain to CGSpace
• The first is a link to a browse page that should be handled better in nginx:

http://library.cgiar.org/browse?value=Intellectual%20Assets%20Reports&type=subject → https://cgspace.cgiar.org/browse?value=Intellectual%20Assets%20Reports&type=subject

• We'll need to check for browse links and handle them properly, including swapping the subject parameter for systemsubject (which doesn't exist in Discovery yet, but we'll need to add it) as we have moved their poorly curated subjects from dc.subject to cg.subject.system
• The second link was a direct link to a bitstream which has broken due to the sequence being updated, so I told him he should link to the handle of the item instead