Hi,
What do you mean with "thruk native login"? You could increase the log level to get some more
details about the oauth data issue. There are a couple of different ways to authenticate. First
there is plain apache vs. thruk cookie auth. Plain apache means you configure the authentication
in apache and thruk simply uses the remote user env variable as is. The cookie auth moves the
apache authentication to the thruk/cgi-bin/restricted.cgi only. You can still do whatever apache
allows you to, from authfile to ldap. Then Thruk uses the supplied user/password from the login
mask and tries to login for the restricted url. If that works, it uses the username from that page
and sets a session cookie and saves the username in the servers session data.
Now with oauth, Thruk does the 2way oauth handshake with the oauth server instead of using the credentials
and log into the restricted url. At the end of that, Thruk gets the username from the oauth server
and sets a session cookie just like with local apache based cookie auth. From there on all
authentication ways are the same, you got a session and a username.
After that, Authorization is done based on the username and the cgi roles and host/service contacts.
Cheers,
Sven
Am 21.04.21 um 12:32 schrieb Frederico Paulo:
> >
https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <
https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77> <
https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <
https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77>>
> >
> >
> > Am 06.04.21 um 15:33 schrieb Frederico Paulo:
> > > Hello,
> > >
> > > oauth redirect/reply-URL returns the port of the own apache :5000 which is wrong since we have another apache doing the proxy forward to port 5000.
> > >
> > > Is there a way to omit the :port in the redirect_uri / Reply Url ?
> > >
> > > BTw, thanks for the great piece of SW you did here. Unbelievable awesome.
> > >
> > > Greetings,
> > > Fred
> > >
> > >
> > >
> > >
> > > --
> > > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > > To unsubscribe from this group and stop receiving emails from it, send an email to
thruk+un...@googlegroups.com <mailto:
thruk+un...@googlegroups.com>.
> > > To view this discussion on the web visit
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com> <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com>> <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer> <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <
https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>>>.
> > To view this discussion on the web visit
https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <
https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com> <
https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <
https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <
https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>.