Hello xwiki users,

I would like to allow my users to connect to my XWIKI instance using
their GoogleApp account (email).
If I understood correctly, I have to use the social login application
for this 
(http://extensions.xwiki.org/xwiki/bin/view/Extension/Social+Login+Application).

I tried to set it up but I couldn't get it to work.

 I wanted to know if anybody has been able to set it up for a Google
authentication?
Could anybody please help me on the meaning of the errors I get?

------------------------------------------------------

-> First some details about my installation:

- The whole is installed on a Windows 2012 R2 machine
- Java 1.8.0_73 (32-bit)
- Apache Tomcat8 (32-bit)
- Tomcat details:
    initial memory pool: 512 MB
    maximum memory pool: 1024 MB
    and parameter additional parameter:
        -XX:MaxPermSize=196m
- MySQL 5.7 database
- XWIKI Entreprise 7.4
- Tomcat is accessible behind a local Apache2.4 reverse proxy (hence
the 127.0.0.1 src on requests, I guess)
(I can give more details if necessary)

------------------------------------------------------

-> Here is what I did to install the extension:

    1. I installed the extension using the extension manager.

    2. I followed the guide under "For version 2.0 and above" found on
the extension page:
        a. The formatting I used for  "oauth_consumer.properties" is as such:
            www.google.com.consumer_key =
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.apps.googleusercontent.com
            www.google.com.consumer_secret = xxxxxxxxxxxxxxxxxxxxxxxx
        b. "org.xwiki.social.authentication.internal.SocialAuthServiceImpl"
set as my authclass
        c. The login.vm file went into my
".../webapp/xwiki/skins/flamingo" folder, which corresponds to my
current skin
        d. I have set "Google" as my only provider in the XWIKI Administration

    3. I couldn't find anything to fill into the Google form fields
for the callback (oauth2callback)
       Is this normal? I may not understand this authentication method
enough, feel free to correct me.
        (I also tried with these details: "http://mydomain"; and
"http://mydomain/xwiki/bin/login/XWiki/XWikiLogin";, same result in the
logs)

    4. XWIKI webapp reloaded

------------------------------------------------------

-> Now the issue:
    - My login page looks like this: http://i.imgur.com/UgbWK3o.png
    - A click on "Sign in with Google" only cause the page to reload
with this URI 
"http://mydomain/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=google&xredirect=";,
      but nothing else happens.
    - The login form doesn't work anymore using the administrator credentials

------------------------------------------------------

-> This is what appears in Tomcat's access.log when I try to login
(both using the form with the admin user and clicking on "Sign in with
Google"):

127.0.0.1 - - [26/Feb/2016:12:02:24 +0100] "POST
/xwiki/bin/loginsubmit/XWiki/XWikiLogin HTTP/1.1" 200 11168
127.0.0.1 - - [26/Feb/2016:12:02:27 +0100] "GET
/xwiki/bin/login/XWiki/XWikiLogin?sl_provider=google&xredirect=
HTTP/1.1" 401 11188

------------------------------------------------------

-> Here is the content of the last catalina.log. However I don't think
that those are relevant to this problem.

http://pastebin.com/cUKy52R3

I'll have to look around for the "SEVERE" memory ones.
I also have a lot of "Illegal access: this web application instance
has been stopped already." java errors in my tomcat8-stderr.log file.

------------------------------------------------------

-> More relevant here I guess, this is what appears in the
tomcat8-stdout.log file for each click on "Sign in with Google":

http://pastebin.com/WbewAQmK

Upon some login attempts, the URI contains
"?sl_provider=google&xredirect=/xwiki/bin/view/Main/?srid=xXxXxXxX",
but the logfile shows the same error.

------------------------------------------------------

Would anyone be able help me?

Many thanks
Guillaume
_______________________________________________
users mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to