Also make sure that all the redirect URLs are correct and that the certificate
chains are configured correctly. (I can't remember if it's OSCP that needs to
be able to verify the sso cert, vice versa, or both.)
----- Original Message -----
> Do you have the master logs available? Did you previously log in with that
> same username using the htpasswd auth method? If you have the same username
> in htpasswd and rh-sso, you might need to set the mappingMethod to "add" to
> allow identities from either provider to be associated with the same
> OpenShift user (see
> https://docs.openshift.org/latest/install_config/configuring_authentication.html#mapping-identities-to-users
> )
> On Wed, Sep 28, 2016 at 10:15 AM, Mustafa Musaji < [email protected] >
> wrote:
> > Hi team
>
> > I asked the below over at [email protected] and was advised that
>
> > perhaps I should ask the Openshift sme's. I'm adding the devtools
>
> > (CDK) team can also perhaps help.
>
> > I'm trying to basically do [1] where I want to authenticate against
>
> > RH-SSO for access to the OCP console using the CDK.
>
> > Everything works up to seeing the two options "htpasswd_auth" and
>
> > "rh-sso" on the OCP login page. Selecting the rh-sso correctly takes
>
> > me to me to the RH-SSO pod to login.
>
> > I have a user set up and I know this part is working as I see a
>
> > session in RH-SSO created but I get an error logging in saying "An
>
> > authentication error occurred" [See attached screenshot] If I use
>
> > another user than isn't on there I get the expected "username or
>
> > password not correct".
>
> > What am I missing here? Is this a limitation of CDK (configuring and
>
> > using the existing openshift-dev username also doesn't work)? Any
>
> > ideas at all as I know I'm almost there and I can't figure this last
>
> > bit out. I'm sure there is some extra logging I can look at, can
>
> > someone tell me what I need to increase logging to as there is nothing
>
> > in the sense of errors in rh-sso log.
>
> > Much appreciated, thanks.
>
> > Mus
>
> > [1]
> > https://access.redhat.com/documentation/en/red-hat-xpaas/0/single/red-hat-xpaas-sso-image/#OSE-SSO-AUTH-TUTE
>
> > --
>
> > Mustafa Musaji
>
> > Solution Architect
>
> > Red Hat UK
>
> > Mobile: +447342087240
>
> > Our mission is to be the catalyst in communities of customers,
>
> > contributors, and partners creating better technology the open source
>
> > way.
>
> > Have a question?
>
> > First, check the FAQ: https://mojo.redhat.com/docs/DOC-943081
>
> > Next, check the archives:
> > http://post-office.corp.redhat.com/archives/openshift-sme/
>
> Have a question?
> First, check the FAQ: https://mojo.redhat.com/docs/DOC-943081
> Next, check the archives:
> http://post-office.corp.redhat.com/archives/openshift-sme/
_______________________________________________
Devtools mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/devtools
