Hi @Pascal , sorry you have a problem.

If you try to whitelist your IP address, does it work?

Regards,

Hi Laurent,

If I add my desktop IP to the whitelist, I have this error :

Missing Login Attribute

Regards

Hi @Pascal , What is your Login Attribute from headers?

My Login attribute from headers is HTTP_AUTH_USER

It works fine when I use my SSO gateway (LemonLDAP) because this information is setted by my SSO.

But It does not work with a direct connexion.

What do you mean by "direct connection"?

When I connect directly to the IP of the Central and therefore without going through my SSO.

OK so when you try to access directly to Centreon, with the SSO in mixed mode, you can’t login using login/password.

Do you have errors in /var/log/php-fpm/centreon-error.log?

Yes, that’s it.

I have this error in centreon-error.log

e26-May-2022 09:02:32 Europe/Paris] CRITICAL: Your IP is not whitelisted {"context":":object] (Core\\Domain\\Security\\Authentication\\SSOAuthenticationException(code: 0): Your IP is not whitelisted at /usr/share/centreon/src/Core/Domain/Security/Authentication/SSOAuthenticationException.php:107)"}

And I have another issue : I can't access the plugins pack page using SSO login

Configuration  >  Plugin Packs
Unknown user theme :

Ok we will check your issue soon

Hi,

Is there any news for this case, we got exactly the same problem after upgrading to 22.04.

Another problem when accessing “Ressource Status” page, I got an empty webpage. Using dev tab of edge, I can see this message.

Refused to execute script from 'https://data.eu.pendo.io/data/guide.js/……

' because its MIME type ('') is not executable, and strict MIME type checking is enabled.

Thank you.

Same problem here just after updated plugin pack. I’ve a SSO configured but not used. I can’t access to centreon with direct login.

How I can in console mode add a whitelistIP to restore service?

I have the same issue. “

can’t access to centreon with direct login.

How I can in console mode add a whitelistIP to restore service?”

have you found a solution and how can I ddisable sso without having access to the http.s interface?

Hi,

Unfortunately, I have no feedback on this topic as for all the other topic that I have put up in thewatch.

Actually, I am not able to connect directly over SSO.

So I have to identify myself twice in websso only or in mixed mode.

Regarding your problem, it seems to be possible to execute this sql query on the centreon database:

UPDATE centreon.provider_configuration SET is_forced=0 WHERE type="web-sso"

This issue is present in 22.04 and 22.10.

For disable every method except local login, I think it is possible to do :

UPDATE centreon.provider_configuration SET is_forced=0, is_active=0  WHERE type != "local"