Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Unable to debug SAM...
 
Notifications
Clear all

Unable to debug SAML authentication error

12 Posts
4 Users
0 Reactions
6,760 Views
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Topic starter
 
[#6109]

HI,
Tried to setup SAML authentication against LemonLDAP::NG with no success. Does anyone have some screenshots especially what to enter in the X509 certificate path. I have copy-pasted the public key my SAML idp uses to sign responses but that doesn't seem to be the correct answer.
TIA


 
Posted : 06 Jul 2019 16H11
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

what to enter in the X509 certificate path. I have copy-pasted the public key my SAML idp uses to sign responses but that doesn't seem to be the correct answer.

It should.

Here is an example of some correct configuration

Note that in order to work, you have to define the SP on your IDP serveur, with XML description that you can get throught the button "get Metadata"


 
Posted : 08 Jul 2019 13H15
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Topic starter
 

Hello @babynus,
I already filled the corresponding form like shown here after

. Also, I copy-pasted the projeqtor metadata url in lemonldap (as just cliquing the button didn't gave the same result), which then pulled the corresponding data and filled its internals as shown here

. But at login, projeqtor sometimes seems to redirect to itself like shown here

instead of the saml idp url, and when it connects to the correct url, it returns a message like the following

.
There is also another situation ( and the corresponding screenshot) that i could not reproduce now.
TIA.


 
Posted : 08 Jul 2019 15H17
Fathi Ben Nasr
(@fathibn)
Posts: 59
Active Member
Topic starter
 

Maybe this could help. In the idp server I have the following error message:
command sent is not an octet sequence in the native encoding (Latin-1).


 
Posted : 08 Jul 2019 15H35
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Just try and remove the comment on the certificate.
The comment line is valid when key is stored in a file, here we have a single line string, so there must be only the key, not the hole content of the file.

NB : if you get the Metadata of your IDP, you dshould get the correct value for the certificate.


 
Posted : 09 Jul 2019 16H10
(@bob86)
Posts: 4
Active Member
 

Hi Everybody!

I use also LemonLdap but when i configure saml configuration in Projeqtor i have an error when i watch a metadata

Invalid array settings: contact_not_enought_data

I have not error in lemoldap and i not find error in projeqtor but i don't know where is the log.

Sébastien
Sorry for my english i learn actually, i am begginner


 
Posted : 12 Nov 2019 19H34
(@bob86)
Posts: 4
Active Member
 

Hi Everybody,
I also have LemonLdap and i want configure saml in projeqtor i have an error when i want receive a metadata ERROR : Invalid array settings: contact_not_enought_data

Séb


 
Posted : 13 Nov 2019 16H31
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Just enter a valid email is "email of administrator" on tab "emailing"


 
Posted : 13 Nov 2019 16H38
(@bob86)
Posts: 4
Active Member
 

thank you for your reply. i have write administrator adresse but i have now a other message when i want view metadata

Invalid SP metadata: invalid_xml

Bob86


 
Posted : 10 Dec 2019 11H54
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Do you have any error logged in projeqtor log file ?


 
Posted : 14 Dec 2019 20H59
 Mima
(@mima123)
Posts: 2
New Member
 

Hello hope you're doing good i'm facing a problem too saying i have duplicate values in html/ww/.../response.php , can you give help me fix this
thanks in advance


 
Posted : 09 Jun 2024 20H48
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

If you have error in logs, please post the error


 
Posted : 18 Jun 2024 18H33
Share:

Scroll to Top