Hello

 

 

I’m using:

RHEL 7.5 with IPA server 4.5.4

RHEL 7.5 with IPA client 4.5.4 for installing Ipsilon from RHEL repositories (v1.0.0).

After installation I can log in using my IPA credentials and manage the configuration. Everything seems OK.

 

So now I’m configuring Jira (with add-on: SAML Single Sign On (SSO) Jira, SAML/SSO). After configuration on both sides, when I try to login on Jira, it redirects to the ipsilon web page and I login with any user (IPA users or even using admin with the testauth plugin enabled) but the answer is always the same:

500 - Internal Server Error

Ipsilon encountered an unexpected internal error while trying to fulfill your request.

Please retry again.

If the error persists, contact the server administrator to resolve the problem.

The passwords are OK because I can login on ipsilon with those users.

 

SAML2 transactions:

https://pastebin.com/0zz8unRE

 

The httpd logs are:

#### ssl_request_log #######

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /idp/saml2/SSO/POST HTTP/1.1" 238

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/login?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 248

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/img/logo.svg HTTP/1.1" 3560

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/login/form?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 2600

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/css/ipsilon.css HTTP/1.1" 55959

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/img/brand-lg.png HTTP/1.1" 3753

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/img/bg-login.jpg HTTP/1.1" 114191

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/fonts/open-sans/OpenSans-Regular.ttf HTTP/1.1" 217360

[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/fonts/open-sans/OpenSans-Semibold.ttf HTTP/1.1" 221328

[21/Jun/2018:12:42:37 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST /idp/login/form HTTP/1.1" 264

[21/Jun/2018:12:42:38 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/ui/css/ipsilon.css HTTP/1.1" 55959

[21/Jun/2018:12:42:38 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET /idp/saml2/SSO/Continue?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 1054

 

#### ssl_access_log ####

- - [21/Jun/2018:12:42:28 +0200] "POST /idp/saml2/SSO/POST HTTP/1.1" 303 238

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/login?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 303 248

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/logo.svg HTTP/1.1" 200 3560

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/login/form?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 200 2600

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/css/ipsilon.css HTTP/1.1" 200 55959

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/brand-lg.png HTTP/1.1" 200 3753

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/bg-login.jpg HTTP/1.1" 200 114191

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/fonts/open-sans/OpenSans-Regular.ttf HTTP/1.1" 200 217360

- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/fonts/open-sans/OpenSans-Semibold.ttf HTTP/1.1" 200 221328

- user [21/Jun/2018:12:42:37 +0200] "POST /idp/login/form HTTP/1.1" 303 264

- - [21/Jun/2018:12:42:38 +0200] "GET /idp/ui/css/ipsilon.css HTTP/1.1" 200 55959

- - [21/Jun/2018:12:42:38 +0200] "GET /idp/saml2/SSO/Continue?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 500 1054

 

#### error_log ####

https://pastebin.com/YuajMfdX

 

I dont see any cause on the logs for not working, and the configuration on Jira side seems good as on the other configuration I explain below is working. Can you please give me any clue?

 

2nd attempt --------------------------------------------------------------------------------

Then I tried to use the newest version of Ipsilon: 2.1.0

I installed ipsilon server with the same attributes (including ipa=yes), I changed only the metadata configuration on the JIRA configuration and I was able to log in on Jira but just with “admin/ipsilon” credentials (using testauth plugin), no other user is accepted by Ipsilon (seems it doesn’t connect to IPA) also I have tried to login on ipsilon for the management and only works with “admin/ipsilon”.

I made the installation with the following parameters:

ipsilon-server-install --ipa=yes --info-sssd=yes --form=yes --saml2=yes

 

The log of the installation:

https://pastebin.com/y6xYnZr7

 

The error_log:

https://pastebin.com/bEX7Rpmt

 

No logs on sssd (with debug_level = 9) on the client nor the IPA server.

 

Can you please let me know where can I check why is not working with the IPA users?

 

 

Thanks & Regards.

______________________________