Forum (FR)

Unable to debug SAM...
 
Notifications
Retirer tout

Unable to debug SAML authentication error

12 Posts
4 Utilisateurs
0 Reactions
6,737 Vu
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Début du sujet
 
[#6109]

HI,
Tried to setup SAML authentication against LemonLDAP::NG with no success. Does anyone have some screenshots especially what to enter in the X509 certificate path. I have copy-pasted the public key my SAML idp uses to sign responses but that doesn't seem to be the correct answer.
TIA


 
Posté : 6 Juil PM 16:077
(@babynus)
Posts: 14952
Membre Admin
 

what to enter in the X509 certificate path. I have copy-pasted the public key my SAML idp uses to sign responses but that doesn't seem to be the correct answer.

It should.

Here is an example of some correct configuration

Note that in order to work, you have to define the SP on your IDP serveur, with XML description that you can get throught the button "get Metadata"


 
Posté : 8 Juil PM 13:077
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Début du sujet
 

Hello @babynus,
I already filled the corresponding form like shown here after

. Also, I copy-pasted the projeqtor metadata url in lemonldap (as just cliquing the button didn't gave the same result), which then pulled the corresponding data and filled its internals as shown here

. But at login, projeqtor sometimes seems to redirect to itself like shown here

instead of the saml idp url, and when it connects to the correct url, it returns a message like the following

.
There is also another situation ( and the corresponding screenshot) that i could not reproduce now.
TIA.


 
Posté : 8 Juil PM 15:077
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Début du sujet
 

Maybe this could help. In the idp server I have the following error message:
command sent is not an octet sequence in the native encoding (Latin-1).


 
Posté : 8 Juil PM 15:077
(@babynus)
Posts: 14952
Membre Admin
 

Just try and remove the comment on the certificate.
The comment line is valid when key is stored in a file, here we have a single line string, so there must be only the key, not the hole content of the file.

NB : if you get the Metadata of your IDP, you dshould get the correct value for the certificate.


 
Posté : 9 Juil PM 16:077
(@bob86)
Posts: 4
Active Member
 

Hi Everybody!

I use also LemonLdap but when i configure saml configuration in Projeqtor i have an error when i watch a metadata

Invalid array settings: contact_not_enought_data

I have not error in lemoldap and i not find error in projeqtor but i don't know where is the log.

Sébastien
Sorry for my english i learn actually, i am begginner


 
Posté : 12 Nov PM 19:1111
(@bob86)
Posts: 4
Active Member
 

Hi Everybody,
I also have LemonLdap and i want configure saml in projeqtor i have an error when i want receive a metadata ERROR : Invalid array settings: contact_not_enought_data

Séb


 
Posté : 13 Nov PM 16:1111
(@babynus)
Posts: 14952
Membre Admin
 

Just enter a valid email is "email of administrator" on tab "emailing"


 
Posté : 13 Nov PM 16:1111
(@bob86)
Posts: 4
Active Member
 

thank you for your reply. i have write administrator adresse but i have now a other message when i want view metadata

Invalid SP metadata: invalid_xml

Bob86


 
Posté : 10 Déc AM 11:1212
(@babynus)
Posts: 14952
Membre Admin
 

Do you have any error logged in projeqtor log file ?


 
Posté : 14 Déc PM 20:1212
 Mima
(@mima123)
Posts: 2
New Member
 

Hello hope you're doing good i'm facing a problem too saying i have duplicate values in html/ww/.../response.php , can you give help me fix this
thanks in advance


 
Posté : 9 Juin PM 20:066
(@babynus)
Posts: 14952
Membre Admin
 

If you have error in logs, please post the error


 
Posté : 18 Juin PM 18:066
Share:
Retour en haut