22.04 : Bug with SSO mixed mode


Userlevel 2
Badge +7

Following the update of my Centreon to version 22.04, I encounter the following bugs with Web SSO.

When Web SSO is enabled in mixed mode, I am not able to connect directly and this Error is displayed :

Your IP is not whitelisted

Connecting over my SSO (LemonLDAP) is OK but I am not able to access to Plugin pack pages and i have this error :

Unknown user theme :

Only disabling WEB SSO seems to fix these different problems


13 replies

Userlevel 6
Badge +18

Hi @Pascal , sorry you have a problem.

If you try to whitelist your IP address, does it work?

Regards,

Userlevel 2
Badge +7

Hi Laurent,

If I add my desktop IP to the whitelist, I have this error :

Missing Login Attribute

Regards

Badge +5

Hi @Pascal , What is your Login Attribute from headers?

Userlevel 2
Badge +7

My Login attribute from headers is HTTP_AUTH_USER

It works fine when I use my SSO gateway (LemonLDAP) because this information is setted by my SSO.

But It does not work with a direct connexion.

Userlevel 6
Badge +18

What do you mean by "direct connection"?

Userlevel 2
Badge +7

When I connect directly to the IP of the Central and therefore without going through my SSO.

Userlevel 6
Badge +18

OK so when you try to access directly to Centreon, with the SSO in mixed mode, you can’t login using login/password.

Do you have errors in /var/log/php-fpm/centreon-error.log?

Userlevel 2
Badge +7

Yes, that’s it.

I have this error in centreon-error.log

[26-May-2022 09:02:32 Europe/Paris] CRITICAL: Your IP is not whitelisted {"context":"[object] (Core\\Domain\\Security\\Authentication\\SSOAuthenticationException(code: 0): Your IP is not whitelisted at /usr/share/centreon/src/Core/Domain/Security/Authentication/SSOAuthenticationException.php:107)"}

And I have another issue : I can't access the plugins pack page using SSO login

Configuration  >  Plugin Packs
Unknown user theme :

 

Userlevel 6
Badge +18

Ok we will check your issue soon

Badge +1

Hi,

Is there any news for this case, we got exactly the same problem after upgrading to 22.04.

 

Another problem when accessing “Ressource Status” page, I got an empty webpage. Using dev tab of edge, I can see this message.

 

Refused to execute script from 'https://data.eu.pendo.io/data/guide.js/……

' because its MIME type ('') is not executable, and strict MIME type checking is enabled.

 

Thank you.

 

Badge +2

Same problem here just after updated plugin pack. I’ve a SSO configured but not used. I can’t access to centreon with direct login.

How I can in console mode add a whitelistIP to restore service?

Badge +1

I have the same issue. “

can’t access to centreon with direct login.

How I can in console mode add a whitelistIP to restore service?”

have you found a solution and how can I ddisable sso without having access to the http.s interface?

Userlevel 2
Badge +7

Hi,

Unfortunately, I have no feedback on this topic as for all the other topic that I have put up in thewatch.

Actually, I am not able to connect directly over SSO.

So I have to identify myself twice in websso only or in mixed mode.

Regarding your problem, it seems to be possible to execute this sql query on the centreon database:

UPDATE centreon.provider_configuration SET is_forced=0 WHERE type="web-sso"

This issue is present in 22.04 and 22.10.

For disable every method except local login, I think it is possible to do :

UPDATE centreon.provider_configuration SET is_forced=0, is_active=0  WHERE type != "local"

 

Reply