Re: SSO Issues
Hmm, it's odd. Anyway, I'm glad that you made it eventually. I'll check what has changed since 1.37. Btw. the mail log is usually /var/log/mail.log or /var/log/maillog. Janos On 2020-04-17 19:41, Robitaille, Cameron wrote: I have it working now. I downgraded the webui code from 1.38 to 1.37 and it magically started working. Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 17, 2020 12:45 PM To: Piler User Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello, look at the mail log file. Piler syslogs all events. For starters, check config-site.php, and verify that you have enabled ldap authentication. Then check the ldap server, port, ldap helper user account settings. Also check if there's any traffic from the archive to the ldap server. Janos On 2020-04-17 18:10, Robitaille, Cameron wrote: Hi: So I reinstalled everything according to documentation and again, I can login as admin@local with no issue but I can't get any LDAP users logged in even though the logs say they are authenticated. Is there any other logging I should be checking or turning on? Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 16, 2020 4:40 PM To: Piler User Cc: Robitaille, Cameron Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: I am hoping there is an easy answer to this as I am about to pull my hair out. I am installing to a new server in the hopes of migrating from an existing install. I have everything installed and I can log in as the admin@local user. I configured the LDAP auth with the SSO configuration and I can run and get good results from manually running ntlm_auth with a valid user. I copied the working config from the other server into my config-site.php. When I try to SSO it just spins although the log says: [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply from helper to KK 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\n [Thu
RE: SSO Issues
I have it working now. I downgraded the webui code from 1.38 to 1.37 and it magically started working. Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 17, 2020 12:45 PM To: Piler User Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello, look at the mail log file. Piler syslogs all events. For starters, check config-site.php, and verify that you have enabled ldap authentication. Then check the ldap server, port, ldap helper user account settings. Also check if there's any traffic from the archive to the ldap server. Janos On 2020-04-17 18:10, Robitaille, Cameron wrote: > Hi: > > So I reinstalled everything according to documentation and again, I > can login as admin@local with no issue but I can't get any LDAP users > logged in even though the logs say they are authenticated. Is there > any other logging I should be checking or turning on? > > Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > action taken in reliance of the contents of this communication by > anyone other than the intended recipient(s) is Strictly Prohibited. > If you have received this communication in error, please notify the > sender at the above email address and delete this email. > > > -Original Message- > From: s...@acts.hu > Sent: April 16, 2020 4:40 PM > To: Piler User > Cc: Robitaille, Cameron > Subject: Re: SSO Issues > > CAUTION: This email originated from outside of the organization. Do > not click links or open attachments unless you recognize the sender > and know the content is safe. If you are unsure, please delete the > message. > > Hello Cameron, > > based on the ntlm logs the authentication is successful, and apache > also says granted. Please check out the mail log as well as apache's > error log for additional clues. > > Also check if you can login by using ldap authentication, ie. not > using sso.php but rather the usual login.php. > > Janos > > > On 2020-04-16 21:49, Robitaille, Cameron wrote: >> >> I am hoping there is an easy answer to this as I am about to pull my >> hair out. I am installing to a new server in the hopes of migrating >> from an existing install. >> >> I have everything installed and I can log in as the admin@local user. >> I configured the LDAP auth with the SSO configuration and I can run >> and get good results from manually running ntlm_auth with a valid >> user. I copied the working config from the other server into my >> config-site.php. When I try to SSO it just spins although the log >> says: >> >> [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm >> auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using >> existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] >> [pid 4441] >> mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply >> from helper to KK >> TlRMTVNTUAADGAAYAIBcAVwBmABYFgAWAFgSABIAbgD0AQAABYKIogoAukcPBEnAms1Y9ke05O4HIhc6wmMAcgBvAGIAaQB0AGEAaQBsAGwAZQBEADQANwA2ADYAMwA1ADAAVgB8kPWCQbl+hlzCxJzjB1b2AQEAAABUXDbtJhTWAV0K8qKcAAGzAAIAFABNAEgAQwBQAC4ATwBOAC4AQwBBAAEAEABNAEEASQBMAEEAUgBDAEgABAAiAHcAYQB5AHAAbwBpAG4AdABjAGUAbgB0AHIAZQAuAGMAYQADADQAbQBhAGkAbABhAHIAYwBoAC4AdwBhAHkAcABvAGkAbgB0AGMAZQBuAHQAcgBl
RE: SSO Issues
Hi: In the hope that there are no stupid questions, what is the path of the mail log file? I can confirm that the config-site.php has ldap enabled (cleaned up for sharing): $config['ENABLE_SSO_LOGIN'] = 1; $config['ENABLE_LDAP_AUTH'] = 1; $config['LDAP_HOST'] = 'dc.domain.com'; $config['LDAP_HELPER_DN'] = 'CN=ADUser,DC=domain,DC=com'; $config['LDAP_HELPER_PASSWORD'] = 'Password'; $config['LDAP_MAIL_ATTR'] = 'mail'; $config['LDAP_BASE_DN'] = 'dc=mhcp,dc=on,dc=ca'; $config['LDAP_AUDITOR_MEMBER_DN'] = 'CN=Mail_Auditors,OU=Security Groups,DC=domain,DC=com'; $config['LDAP_ADMIN_MEMBER_DN'] = 'CN=Mail_Admins,OU=Security Groups,DC=domain,DC=com'; $config['REWRITE_MESSAGE_ID'] = 1; I can see as I shared in the other logs that the user is being authenticated from AD and Apache. The ldap server, port and helper user account are all the same as the current production system that is working with no issues. Thank you for taking the time to look at this with me, I appreciate it! Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 17, 2020 12:45 PM To: Piler User Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello, look at the mail log file. Piler syslogs all events. For starters, check config-site.php, and verify that you have enabled ldap authentication. Then check the ldap server, port, ldap helper user account settings. Also check if there's any traffic from the archive to the ldap server. Janos On 2020-04-17 18:10, Robitaille, Cameron wrote: > Hi: > > So I reinstalled everything according to documentation and again, I > can login as admin@local with no issue but I can't get any LDAP users > logged in even though the logs say they are authenticated. Is there > any other logging I should be checking or turning on? > > Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > action taken in reliance of the contents of this communication by > anyone other than the intended recipient(s) is Strictly Prohibited. > If you have received this communication in error, please notify the > sender at the above email address and delete this email. > > > -Original Message- > From: s...@acts.hu > Sent: April 16, 2020 4:40 PM > To: Piler User > Cc: Robitaille, Cameron > Subject: Re: SSO Issues > > CAUTION: This email originated from outside of the organization. Do > not click links or open attachments unless you recognize the sender > and know the content is safe. If you are unsure, please delete the > message. > > Hello Cameron, > > based on the ntlm logs the authentication is successful, and apache > also says granted. Please check out the mail log as well as apache's > error log for additional clues. > > Also check if you can login by using ldap authentication, ie. not > using sso.php but rather the usual login.php. > > Janos > > > On 2020-04-16 21:49, Robitaille, Cameron wrote: >> >> I am hoping there is an easy answer to this as I am about to pull my >> hair out. I am installing to a new server in the hopes of migrating >> from an existing install. >> >> I have everything installed and I can log in as the admin@local user. >> I configured the LDAP auth with the SSO configuration and I can run >> and get good results from manually running ntlm_auth with a valid >> user. I copied the working config from the other server into my >> config-site.php. When I try to SSO it just spins although the log >> says: >> >> [Thu Apr 16 15:40:47.512194 2020] [:deb
Re: SSO Issues
Hello, look at the mail log file. Piler syslogs all events. For starters, check config-site.php, and verify that you have enabled ldap authentication. Then check the ldap server, port, ldap helper user account settings. Also check if there's any traffic from the archive to the ldap server. Janos On 2020-04-17 18:10, Robitaille, Cameron wrote: Hi: So I reinstalled everything according to documentation and again, I can login as admin@local with no issue but I can't get any LDAP users logged in even though the logs say they are authenticated. Is there any other logging I should be checking or turning on? Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 16, 2020 4:40 PM To: Piler User Cc: Robitaille, Cameron Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: I am hoping there is an easy answer to this as I am about to pull my hair out. I am installing to a new server in the hopes of migrating from an existing install. I have everything installed and I can log in as the admin@local user. I configured the LDAP auth with the SSO configuration and I can run and get good results from manually running ntlm_auth with a valid user. I copied the working config from the other server into my config-site.php. When I try to SSO it just spins although the log says: [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply from helper to KK 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\n [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: AF MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of Require valid-user : granted [Thu Apr 16 15:40:47.519535 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of : granted I would read this that it was successful but the page just spins and nothing ever happens, the search never comes up. I am using version 1.38. Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received
RE: SSO Issues
Hi: So I reinstalled everything according to documentation and again, I can login as admin@local with no issue but I can't get any LDAP users logged in even though the logs say they are authenticated. Is there any other logging I should be checking or turning on? Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 16, 2020 4:40 PM To: Piler User Cc: Robitaille, Cameron Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: > > I am hoping there is an easy answer to this as I am about to pull my > hair out. I am installing to a new server in the hopes of migrating > from an existing install. > > I have everything installed and I can log in as the admin@local user. > I configured the LDAP auth with the SSO configuration and I can run > and get good results from manually running ntlm_auth with a valid > user. I copied the working config from the other server into my > config-site.php. When I try to SSO it just spins although the log > says: > > [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm > auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing > auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply > from helper to KK > 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\n > [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: > AF MHCP.ON.CA\\user > [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated > MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] > [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of Require valid-user : granted [Thu Apr 16 > 15:40:47.519535 2020] [authz_core:debug] [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of : granted > > I would read this that it was successful but the page just spins and > nothing ever happens, the search never comes up. > > I am using version 1.38. Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > action taken in reliance of the contents of this communication by > anyone other than the intended recipient(s) is Strictly Prohibited. > If you have received this communication in error, please notify the > sender at the above email address and delete this email.
RE: SSO Issues
Sorry, I should say that it is the same issue when I try the login.php page as well. Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 16, 2020 4:40 PM To: Piler User Cc: Robitaille, Cameron Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: > > I am hoping there is an easy answer to this as I am about to pull my > hair out. I am installing to a new server in the hopes of migrating > from an existing install. > > I have everything installed and I can log in as the admin@local user. > I configured the LDAP auth with the SSO configuration and I can run > and get good results from manually running ntlm_auth with a valid > user. I copied the working config from the other server into my > config-site.php. When I try to SSO it just spins although the log > says: > > [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm > auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing > auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply > from helper to KK > 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\n > [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: > AF MHCP.ON.CA\\user > [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated > MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] > [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of Require valid-user : granted [Thu Apr 16 > 15:40:47.519535 2020] [authz_core:debug] [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of : granted > > I would read this that it was successful but the page just spins and > nothing ever happens, the search never comes up. > > I am using version 1.38. Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > action taken in reliance of the contents of this communication by > anyone other than the intended recipient(s) is Strictly Prohibited. > If you have received this communication in error, please notify the > sender at the above email address and delete this email.
RE: SSO Issues
Hi: Thanks for the reply! The log I included was actually from the ssl_error_log, there isn't anything else in that log. The mailarchiver-error.log doesn't have anything related to this as well. What is interesting is when I did the installation, the web files weren't copied, I had to manually copy over the webui files and manually create the .htaccess. Is that normal or did something break on the install? I feel like the redirection isn't working quite as expected. Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -Original Message- From: s...@acts.hu Sent: April 16, 2020 4:40 PM To: Piler User Cc: Robitaille, Cameron Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: > > I am hoping there is an easy answer to this as I am about to pull my > hair out. I am installing to a new server in the hopes of migrating > from an existing install. > > I have everything installed and I can log in as the admin@local user. > I configured the LDAP auth with the SSO configuration and I can run > and get good results from manually running ntlm_auth with a valid > user. I copied the working config from the other server into my > config-site.php. When I try to SSO it just spins although the log > says: > > [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm > auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing > auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply > from helper to KK > TlRMTVNTUAADGAAYAIBcAVwBmABYFgAWAFgSABIAbgD0AQAABYKIogoAukcPBEnAms1Y9ke05O4HIhc6wmMAcgBvAGIAaQB0AGEAaQBsAGwAZQBEADQANwA2ADYAMwA1ADAAVgB8kPWCQbl+hlzCxJzjB1b2AQEAAABUXDbtJhTWAV0K8qKcAAGzAAIAFABNAEgAQwBQAC4ATwBOAC4AQwBBAAEAEABNAEEASQBMAEEAUgBDAEgABAAiAHcAYQB5AHAAbwBpAG4AdABjAGUAbgB0AHIAZQAuAGMAYQADADQAbQBhAGkAbABhAHIAYwBoAC4AdwBhAHkAcABvAGkAbgB0AGMAZQBuAHQAcgBlAC4AYwBhAAcACABUXDbtJhTWAQYABAACCAAwADAAAQAgAAD2cE88eSCt3N1kv//zYg08RWAN2pKfP+fpHHmqo/q6ywoAEACb+cMBW3SC6HqWBNugfGr2CQA+AEgAVABUAFAALwBtAGEAaQBsAGEAcgBjAGgALgB3AGEAeQBwAG8AaQBuAHQAYwBlAG4AdAByAGUALgBjAGE=\n > [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: > AF MHCP.ON.CA\\user > [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] > mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated > MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] > [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of Require valid-user : granted [Thu Apr 16 > 15:40:47.519535 2020] [authz_core:debug] [pid 4441] > mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: > authorization result of : granted > > I would read this that it was successful but the page just spins and > nothing ever happens, the search never comes up. > > I am using version 1.38. Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > act
Re: SSO Issues
Hello Cameron, based on the ntlm logs the authentication is successful, and apache also says granted. Please check out the mail log as well as apache's error log for additional clues. Also check if you can login by using ldap authentication, ie. not using sso.php but rather the usual login.php. Janos On 2020-04-16 21:49, Robitaille, Cameron wrote: I am hoping there is an easy answer to this as I am about to pull my hair out. I am installing to a new server in the hopes of migrating from an existing install. I have everything installed and I can log in as the admin@local user. I configured the LDAP auth with the SSO configuration and I can run and get good results from manually running ntlm_auth with a valid user. I copied the working config from the other server into my config-site.php. When I try to SSO it just spins although the log says: [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply from helper to KK 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\n [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: AF MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of Require valid-user : granted [Thu Apr 16 15:40:47.519535 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of : granted I would read this that it was successful but the page just spins and nothing ever happens, the search never comes up. I am using version 1.38. Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email.
SSO Issues
Hi: I am hoping there is an easy answer to this as I am about to pull my hair out. I am installing to a new server in the hopes of migrating from an existing install. I have everything installed and I can log in as the admin@local user. I configured the LDAP auth with the SSO configuration and I can run and get good results from manually running ntlm_auth with a valid user. I copied the working config from the other server into my config-site.php. When I try to SSO it just spins although the log says: [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply from helper to KK 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\n [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: AF MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of Require valid-user : granted [Thu Apr 16 15:40:47.519535 2020] [authz_core:debug] [pid 4441] mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: authorization result of : granted I would read this that it was successful but the page just spins and nothing ever happens, the search never comes up. I am using version 1.38. Thanks, Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email.
