Hello
I'm using:
RHEL 7.5 with IPA server 4.5.4
RHEL 7.5 with IPA client 4.5.4 for installing Ipsilon from RHEL repositories (v1.0.0).
After installation I can log in using my IPA credentials and manage the configuration.
Everything seems OK.
So now I'm configuring Jira (with add-on: SAML Single Sign On (SSO) Jira,
SAML/SSO<https://marketplace.atlassian.com/apps/1212130/saml-single-si...).
After configuration on both sides, when I try to login on Jira, it redirects to the
ipsilon web page and I login with any user (IPA users or even using admin with the
testauth plugin enabled) but the answer is always the same:
500 - Internal Server Error
Ipsilon encountered an unexpected internal error while trying to fulfill your request.
Please retry again.
If the error persists, contact the server administrator to resolve the problem.
The passwords are OK because I can login on ipsilon with those users.
SAML2 transactions:
https://pastebin.com/0zz8unRE
The httpd logs are:
#### ssl_request_log #######
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST
/idp/saml2/SSO/POST HTTP/1.1" 238
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/login?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 248
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/img/logo.svg HTTP/1.1" 3560
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/login/form?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1"
2600
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/css/ipsilon.css HTTP/1.1" 55959
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/img/brand-lg.png HTTP/1.1" 3753
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/img/bg-login.jpg HTTP/1.1" 114191
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/fonts/open-sans/OpenSans-Regular.ttf HTTP/1.1" 217360
[21/Jun/2018:12:42:28 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/fonts/open-sans/OpenSans-Semibold.ttf HTTP/1.1" 221328
[21/Jun/2018:12:42:37 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "POST
/idp/login/form HTTP/1.1" 264
[21/Jun/2018:12:42:38 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/ui/css/ipsilon.css HTTP/1.1" 55959
[21/Jun/2018:12:42:38 +0200] 10.82.98.37 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 "GET
/idp/saml2/SSO/Continue?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18
HTTP/1.1" 1054
#### ssl_access_log ####
- - [21/Jun/2018:12:42:28 +0200] "POST /idp/saml2/SSO/POST HTTP/1.1" 303 238
- - [21/Jun/2018:12:42:28 +0200] "GET
/idp/login?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1" 303
248
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/logo.svg HTTP/1.1" 200 3560
- - [21/Jun/2018:12:42:28 +0200] "GET
/idp/login/form?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18 HTTP/1.1"
200 2600
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/css/ipsilon.css HTTP/1.1" 200
55959
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/brand-lg.png HTTP/1.1" 200
3753
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/img/bg-login.jpg HTTP/1.1" 200
114191
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/fonts/open-sans/OpenSans-Regular.ttf
HTTP/1.1" 200 217360
- - [21/Jun/2018:12:42:28 +0200] "GET /idp/ui/fonts/open-sans/OpenSans-Semibold.ttf
HTTP/1.1" 200 221328
- user [21/Jun/2018:12:42:37 +0200] "POST /idp/login/form HTTP/1.1" 303 264
- - [21/Jun/2018:12:42:38 +0200] "GET /idp/ui/css/ipsilon.css HTTP/1.1" 200
55959
- - [21/Jun/2018:12:42:38 +0200] "GET
/idp/saml2/SSO/Continue?ipsilon_transaction_id=5edf02a1-7421-4314-b433-846f9b448c18
HTTP/1.1" 500 1054
#### error_log ####
https://pastebin.com/YuajMfdX
I dont see any cause on the logs for not working, and the configuration on Jira side seems
good as on the other configuration I explain below is working. Can you please give me any
clue?
2nd attempt
--------------------------------------------------------------------------------
Then I tried to use the newest version of Ipsilon: 2.1.0
I installed ipsilon server with the same attributes (including ipa=yes), I changed only
the metadata configuration on the JIRA configuration and I was able to log in on Jira but
just with "admin/ipsilon" credentials (using testauth plugin), no other user is
accepted by Ipsilon (seems it doesn't connect to IPA) also I have tried to login on
ipsilon for the management and only works with "admin/ipsilon".
I made the installation with the following parameters:
ipsilon-server-install --ipa=yes --info-sssd=yes --form=yes --saml2=yes
The log of the installation:
https://pastebin.com/y6xYnZr7
The error_log:
https://pastebin.com/bEX7Rpmt
No logs on sssd (with debug_level = 9) on the client nor the IPA server.
Can you please let me know where can I check why is not working with the IPA users?
Thanks & Regards.
______________________________