Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Ryan H
Just tried with the 1.1.0-SNAPSHOT build with same result; but with a new warning now (might not be relevant, but including anyways). Same error as before if going incognito browser. Here is the error that I now get: 2018-03-04 20:37:50,653 ERROR engine.DefaultCallbackLogic (DefaultCallbackLogic.

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Sandeep Moré
Thanks for the update, I have a hunch that the "state" param is not getting passed to Pac4J via the SessionStore (Error 1). Keep us posted. Thanks ! On Sun, Mar 4, 2018 at 7:40 PM, Ryan H wrote: > Hey Guys, > > I will pull 1.1.0 this evening and give it a go. > > A little more information on th

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Ryan H
Hey Guys, I will pull 1.1.0 this evening and give it a go. A little more information on the flow for the error(s): When I log in with regular browser (not incognito), I get the following error: ERROR engine.DefaultCallbackLogic (DefaultCallbackLogic.java:renewSession(123)) - Unable to renew the

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Sandeep Moré
Hello Ryan, Can you check the value of the State parameter ? you should see it in the request and response. The state attribute is stored in the session so if is not getting properly passed we might have an issue there (KNOX-1190 is tracking this), the current implementation of SessionStore for P

Re: KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread larry mccay
There was an issue found with the google oidc integration recently. This may be the same issue, I will need to dig that up in the dev@ or user@ list and verify. On Sun, Mar 4, 2018 at 11:47 AM, Ryan H wrote: > Hi Knox Users, > > I am rethreading this error I am getting as I mentioned it in a di

KnoxSSO OpenID Error: Unable to renew the session. The session store may not support this feature

2018-03-04 Thread Ryan H
Hi Knox Users, I am rethreading this error I am getting as I mentioned it in a different thread that was about a different error (sorry to those active on the other email thread). I am running into an issue with KnoxSSO with the pac4j OIDC federation provider. When accessing the gateway, I am cor

Re: Knox 1.0.0 Unknown Host Exception for KnoxSSO Config

2018-03-04 Thread Ryan H
Hi, Thanks for the Proxy direction, that is what I was looking for. I wasn't sure if there was a config file that supported this, or if it needed to be done with the Java args. I thought I found an older JIRA related to this, but after looking at it again it wasn't related. The issue that I am no