RIR Object auto-update feature no longer functional as of 2026 for RIPE Database #953
Description
ISSUE TYPE
Bug Report
OS
Ubuntu 20.04.1
VERSION
define( 'APPLICATION_VERSION', '6.3.0' );
define( 'APPLICATION_VERDATE', '2022110200' );
ENVIRONMENT
pcdog, [21/01/26 20:02]
root@ftrmanager:/srv/ixpmanager# cat version.php | grep APPLICATION
define( 'APPLICATION_VERSION', '6.3.0' );
define( 'APPLICATION_VERDATE', '2022110200' );
root@ftrmanager:/srv/ixpmanager# php -v
PHP 8.0.21 (cli) (built: Jul 13 2022 08:26:22) ( NTS )
Copyright (c) The PHP Group
Zend Engine v4.0.21, Copyright (c) Zend Technologies
with Zend OPcache v8.0.21, Copyright (c), by Zend Technologies
root@ftrmanager:/srv/ixpmanager# dpkg -l | grep php
ii libapache2-mod-php8.0 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 server-side, HTML-embedded scripting language (Apache 2 module)
ii php-common 2:92+ubuntu20.04.1+deb.sury.org+2 all Common files for PHP packages
ii php-composer-ca-bundle 1.2.6-1 all utility library to find a path to the system CA bundle
ii php-composer-semver 1.5.1-1 all utilities, version constraint parsing and validation
ii php-composer-spdx-licenses 1.5.3-1 all SPDX licenses list and validation library
ii php-composer-xdebug-handler 1.4.0-1 all Restarts a process without Xdebug
ii php-json-schema 5.2.9-1 all implementation of JSON schema
ii php-psr-container 1.0.0-2 all Common Container Interface (PHP FIG PSR-11)
ii php-psr-log 1.1.2-1 all common interface for logging libraries
ii php-symfony-console 4.3.8+dfsg-1ubuntu1 all run tasks from the command line
ii php-symfony-filesystem 4.3.8+dfsg-1ubuntu1 all basic filesystem utilities
ii php-symfony-finder 4.3.8+dfsg-1ubuntu1 all find files and directories
ii php-symfony-process 4.3.8+dfsg-1ubuntu1 all execute commands in sub-processes
ii php-symfony-service-contracts 1.1.8-1 all Generic abstractions related to writing services
ii php8.0 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 all server-side, HTML-embedded scripting language (metapackage)
ii php8.0-bcmath 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 Bcmath module for PHP
ii php8.0-cgi 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 server-side, HTML-embedded scripting language (CGI binary)
ii php8.0-cli 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 command-line interpreter for the PHP scripting language
ii php8.0-common 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 documentation, examples and common module for PHP
ii php8.0-curl 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 CURL module for PHP
ii php8.0-ds 1.4.0-4+ubuntu20.04.1+deb.sury.org+10 amd64 PHP extension providing efficient data structures for PHP 7
ii php8.0-gd 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 GD module for PHP
pcdog, [21/01/26 20:02]
ii php8.0-igbinary 3.2.6+2.0.8-6+ubuntu20.04.1+deb.sury.org+10 amd64 igbinary PHP serializer
ii php8.0-intl 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 Internationalisation module for PHP
ii php8.0-mbstring 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 MBSTRING module for PHP
ii php8.0-memcache 8.0+4.0.5.2+3.0.9~20170802.e702b5f9+-7+ubuntu20.04.1+deb.sury.org+10 amd64 memcache extension module for PHP
ii php8.0-memcached 3.2.0+2.2.0-1+ubuntu20.04.1+deb.sury.org+1 amd64 memcached extension module for PHP, uses libmemcached
ii php8.0-msgpack 1:2.1.2-1+ubuntu20.04.1+deb.sury.org+1 amd64 PHP extension for interfacing with MessagePack
ii php8.0-mysql 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 MySQL module for PHP
ii php8.0-opcache 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 Zend OpCache module for PHP
ii php8.0-readline 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 readline module for PHP
ii php8.0-rrd 2.0.3+1.1.3-6+ubuntu20.04.1+deb.sury.org+10 amd64 PHP bindings to rrd tool system
ii php8.0-snmp 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 SNMP module for PHP
ii php8.0-xml 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 DOM, SimpleXML, XML, and XSL module for PHP
ii php8.0-yaml 2.2.2+2.1.0+2.0.4+1.3.2-5+ubuntu20.04.1+deb.sury.org+10 amd64 YAML-1.1 parser and emitter for PHP
ii php8.0-zip 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 Zip module for PHP
pcdog, [21/01/26 20:02]
ii php8.0-zip 1:8.0.21-1+ubuntu20.04.1+deb.sury.org+1 amd64 Zip module for PHP
CONFIGURATION
root@ftrmanager:/srv/ixpmanager# cat .env | egrep -v '(^#|^\s*$|^DB_|^APP_KEY|^HELPDESK|^IDENTITY|^MAIL_|^IXP_API_RIR_PASSWORD|^IXP_API_PEERING_DB_)'
APP_DEBUG=false
APP_URL="https://ixpmanager.example.com"
APP_TIMEZONE="UTC"
APP_LOG="single"
IXP_RESELLER_ENABLED=false
IXP_AS112_UI_ACTIVE=false
IXP_FE_FRONTEND_DISABLED_LOGO=false
GRAPHER_BACKENDS="mrtg"
GRAPHER_CACHE_ENABLED=false
GRAPHER_BACKEND_MRTG_DBTYPE="rrd"
GRAPHER_BACKEND_MRTG_WORKDIR="/srv/mrtg"
GRAPHER_BACKEND_MRTG_LOGDIR="/srv/mrtg"
IXP_API_JSONEXPORTSCHEMA_PUBLIC=true
CACHE_DRIVER=memcached
IXP_API_RIR_PASSWORD=-redacted-
[email protected]
IXP_API_RIR_EMAIL_FROM=-redacted-
IXP_IRRDB_BGPQ3_PATH=/usr/bin/bgpq3
root@ftrmanager:/srv/ixpmanager#
SUMMARY
We have been using IXPmanager for a while now, but with the recent deprecation of MD5 passwords in the RIPE Database, it is currently no longer possible to use the RIR objects' automatic mailing feature.
This would either have to be updated to include support for PGP, or, alternatively, for Oauth 2.0.
See:
https://docs.db.ripe.net/Authorisation/Authorisation-Model
https://labs.ripe.net/author/adonis_stergiopoulos/oauth-20-available-for-the-ripe-database/
https://mailman.ripe.net/archives/list/[email protected]/thread/FZ4JRVJE34ADF57CA5HO5VZJ77TEWVYB/
STEPS TO REPRODUCE
Set up RIR objects environment variables
Have an update mailed to the RIPE Database
EXPECTED RESULTS
For the update to succeed :)
ACTUAL RESULTS
The update is rejected due to the removal of the md5 password auth attribute from all maintainers.
IMPORTANCE
This issue is currently happening on our production environment.
RELEVANT LOGS
Could not immediately find any related logs, but I think the afforementioned information is enough.