Skip to main content
Question

OpenID wirh keycloak

  • December 3, 2024
  • 4 replies
  • 85 views

Forum|alt.badge.img+1

Hello,

The 401 error has been resolved, but now I am encountering a 403 error when attempting to make a GET request to http://IPsrv/centreon/api/latest/configuration/users/current/parameters.

Do you have any ideas on how to resolve this issue?

For configuration, please refer to this topic:

For any other configuration details, I will send them upon request.

 

4 replies

lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • December 6, 2024

Hi ​@rbeunier did you enable the login debug (Administration > Parameters > Debug” and check in /var/log/centreon/centreon-web.log to check if Centreon received all needed information from your Keycloack?


Forum|alt.badge.img+1
  • Author
  • Steward *
  • December 9, 2024

Hi ​@rbeunier did you enable the login debug (Administration > Parameters > Debug” and check in /var/log/centreon/centreon-web.log to check if Centreon received all needed information from your Keycloack?

Hi Laurent,

I’ve enabled the login logs as you suggested. In the /var/log/centreon/centreon-web.log file, I found the following entries:

[2024-12-09T11:43:34+0100] [NOTICE] [Security\Domain\Authentication\AuthenticationService:64]: [AUTHENTICATION SERVICE] token not found
[2024-12-09T11:43:34+0100] [NOTICE] [Security\Domain\Authentication\AuthenticationService:64]: [AUTHENTICATION SERVICE] token not found
[2024-12-09T11:43:34+0100] [DEBUG] [EventSubscriber\UpdateEventSubscriber:69]: Checking if route matches updates endpoint
[2024-12-09T11:43:34+0100] [DEBUG] [EventSubscriber\UpdateEventSubscriber:69]: Checking if route matches updates endpoint
[2024-12-09T11:43:34+0100] [DEBUG] [EventSubscriber\UpdateEventSubscriber:69]: Checking if route matches updates endpoint
[2024-12-09T11:43:34+0100] [DEBUG] [EventSubscriber\UpdateEventSubscriber:69]: Checking if route matches updates endpoint
[2024-12-09T11:43:34+0100] [DEBUG] [Core\Infrastructure\Common\Presenter\JsonFormatter:73]: Unauthorized. Generating an error response

I also noticed that my browser is blocking some cookies from Keycloak, which might be related to the issue.

Cookie blocked, value and domain masked for security reasons.

 

 


lpinsivy
Centreonian
Forum|alt.badge.img+21
  • Centreonian
  • December 11, 2024

Ok and do you have logs in /var/log/centreon/login.log?

I suppose if your browser block Keycloak cookies you will not be connected


Forum|alt.badge.img+1
  • Author
  • Steward *
  • December 11, 2024

Ok and do you have logs in /var/log/centreon/login.log?

I suppose if your browser block Keycloak cookies you will not be connected

Yes, I have logs, but nothing related to the connection from Keycloak. My Keycloak user is rbe, but in the logs, I only have local connection tests.