oauth reply URL:Port

71 views
Skip to first unread message

Frederico Paulo

unread,
Apr 6, 2021, 9:33:04 AM4/6/21
to Thruk
Hello,

oauth redirect/reply-URL returns the port of the own apache :5000 which is wrong since we have another apache doing the proxy forward to port 5000.

Is there a way to omit the :port in the redirect_uri / Reply Url ?

BTw, thanks for the great piece of SW you did here. Unbelievable awesome.

Greetings,
Fred




Sven Nierlein

unread,
Apr 6, 2021, 10:09:47 AM4/6/21
to th...@googlegroups.com, Frederico Paulo
When using a reverse proxy, you need to set X-Forwarded-Port header, ex. like here:

https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77


Am 06.04.21 um 15:33 schrieb Frederico Paulo:
> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>.

Frederico Paulo

unread,
Apr 6, 2021, 10:46:43 AM4/6/21
to Thruk
Thanks for the reply Sven,

the module is already mentioned in /omd/sites/../etc/apache/proxy-port.conf 

  <Location /winnagio>
    # set protocol/port hint, ex.: if system apache is https but site apache is not
    <IfModule mod_headers.c>
      # apache 2.4 only
      <IfModule mod_authz_core.c>
        <If "-z %{req:X-Forwarded-Proto} && -z %{req:X-Forwarded-Port}">
          RequestHeader set X-Forwarded-Proto "%{REQUEST_SCHEME}s"
          RequestHeader set X-Forwarded-Port  "%{SERVER_PORT}s"
        </If>
      </IfModule>
    </IfModule>


or do you mean we should also enable this module in the company managed apache ?

Greetings,
Fred

Sven Nierlein

unread,
Apr 6, 2021, 10:57:09 AM4/6/21
to th...@googlegroups.com, Frederico Paulo
Yes, that part lives in the system apache on :80/:443.



Am 06.04.21 um 16:46 schrieb Frederico Paulo:
> Thanks for the reply Sven,
>
> the module is already mentioned in /omd/sites/../etc/apache/proxy-port.conf 
>
>   <Location /winnagio>
>     # set protocol/port hint, ex.: if system apache is https but site apache is not
>     <IfModule mod_headers.c>
>       # apache 2.4 only
>       <IfModule mod_authz_core.c>
>         <If "-z %{req:X-Forwarded-Proto} && -z %{req:X-Forwarded-Port}">
>           RequestHeader set X-Forwarded-Proto "%{REQUEST_SCHEME}s"
>           RequestHeader set X-Forwarded-Port  "%{SERVER_PORT}s"
>         </If>
>       </IfModule>
>     </IfModule>
>
>
> or do you mean we should also enable this module in the company managed apache ?
>
> Greetings,
> Fred
>
> On Tuesday, April 6, 2021 at 3:09:47 PM UTC+1 Sven Nierlein wrote:
>
> When using a reverse proxy, you need to set X-Forwarded-Port header, ex. like here:
>
> https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77>
>
>
> Am 06.04.21 um 15:33 schrieb Frederico Paulo:
> > Hello,
> >
> > oauth redirect/reply-URL returns the port of the own apache :5000 which is wrong since we have another apache doing the proxy forward to port 5000.
> >
> > Is there a way to omit the :port in the redirect_uri / Reply Url ?
> >
> > BTw, thanks for the great piece of SW you did here. Unbelievable awesome.
> >
> > Greetings,
> > Fred
> >
> >
> >
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>.

Frederico Paulo

unread,
Apr 21, 2021, 6:32:32 AM4/21/21
to Thruk
Hi Sven, 

Late reply as I was in Holidays. 
It´s working with X-Forwarded-Port added to the system apache.

Now I get "cannot get oauth data"

Where does the oauth plugin crosses login data with ? From the AuthUserFile ?

Currently I am using apache authorization AuthType Basic and AuthUserFile.
If i disable this option, i will not be able to access thruk, it returns 401 unauthorized with the native Thruk Login.
Is there a way to use only Thruks native login without apache authorization file?

Fred

Sven Nierlein

unread,
Apr 21, 2021, 7:03:26 AM4/21/21
to th...@googlegroups.com, Frederico Paulo
Hi,

What do you mean with "thruk native login"? You could increase the log level to get some more
details about the oauth data issue. There are a couple of different ways to authenticate. First
there is plain apache vs. thruk cookie auth. Plain apache means you configure the authentication
in apache and thruk simply uses the remote user env variable as is. The cookie auth moves the
apache authentication to the thruk/cgi-bin/restricted.cgi only. You can still do whatever apache
allows you to, from authfile to ldap. Then Thruk uses the supplied user/password from the login
mask and tries to login for the restricted url. If that works, it uses the username from that page
and sets a session cookie and saves the username in the servers session data.
Now with oauth, Thruk does the 2way oauth handshake with the oauth server instead of using the credentials
and log into the restricted url. At the end of that, Thruk gets the username from the oauth server
and sets a session cookie just like with local apache based cookie auth. From there on all
authentication ways are the same, you got a session and a username.
After that, Authorization is done based on the username and the cgi roles and host/service contacts.

Cheers,
Sven


Am 21.04.21 um 12:32 schrieb Frederico Paulo:
> > https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77> <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77>>
> >
> >
> > Am 06.04.21 um 15:33 schrieb Frederico Paulo:
> > > Hello,
> > >
> > > oauth redirect/reply-URL returns the port of the own apache :5000 which is wrong since we have another apache doing the proxy forward to port 5000.
> > >
> > > Is there a way to omit the :port in the redirect_uri / Reply Url ?
> > >
> > > BTw, thanks for the great piece of SW you did here. Unbelievable awesome.
> > >
> > > Greetings,
> > > Fred
> > >
> > >
> > >
> > >
> > > --
> > > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com>> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>>>.
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>.

Frederico Paulo

unread,
Apr 28, 2021, 7:38:00 AM4/28/21
to Thruk
Hi Sven,

Finally made it to work, helpful was to increase the loglevel and then look inside .../var/log/thruk.log for the output of oauth authentication.
In the end the oauth api url was wrongly set.

Now i have another issue.
If I remove the default_user_name=[value] in cgi.cfg i lose access to .../thruk/r/

{
   "code" : 403,
   "description" : "It seems like you are not authorized.",
   "details" : "",
   "failed" : true,
   "message" : "You are not authorized."
}

Not sure what the correlation here, anyway it is how it behaves, and I need the /r/ interface to set downtimes, etc, so it is crucial it works.

Thank you,
Fred

Sven Nierlein

unread,
Apr 29, 2021, 3:10:07 AM4/29/21
to th...@googlegroups.com, Frederico Paulo
The default_user_name=... should almost always be empty and not set. It's the last fallback when looking for authentication
sources and will always match, so if you are not authenticated, Thruk will use the default username and then you are authenticated.

Best thing is to use api keys for the rest api.
> > > https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77> <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77>> <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77> <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77 <https://github.com/ConSol/omd/blob/labs/packages/apache-omd/APACHE_TCP_PORT.hook#L76-L77>>>
> > >
> > >
> > > Am 06.04.21 um 15:33 schrieb Frederico Paulo:
> > > > Hello,
> > > >
> > > > oauth redirect/reply-URL returns the port of the own apache :5000 which is wrong since we have another apache doing the proxy forward to port 5000.
> > > >
> > > > Is there a way to omit the :port in the redirect_uri / Reply Url ?
> > > >
> > > > BTw, thanks for the great piece of SW you did here. Unbelievable awesome.
> > > >
> > > > Greetings,
> > > > Fred
> > > >
> > > >
> > > >
> > > >
> > > > --
> > > > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > > > To unsubscribe from this group and stop receiving emails from
it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > > > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com>> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com>>> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer> <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/945809a8-485c-4ecf-9703-978beb56a15an%40googlegroups.com?utm_medium=email&utm_source=footer>>>>.
> > >
> > > --
> > > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>>.
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Thruk" group.
> > To unsubscribe from this group and stop receiving emails from it,
send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> > To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com> <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk+un...@googlegroups.com>.
> To view this discussion on the web visit https://groups.google.com/d/msgid/thruk/6f89568a-0019-45cc-9d69-2dd8d1a8e5ean%40googlegroups.com <https://groups.google.com/d/msgid/thruk/6f89568a-0019-45cc-9d69-2dd8d1a8e5ean%40googlegroups.com?utm_medium=email&utm_source=footer>.


OpenPGP_signature

Frederico

unread,
May 21, 2021, 10:57:24 AM5/21/21
to Sven Nierlein, th...@googlegroups.com
Hey Sven, 

you have the comment
# oauth configuration block (can have multiple provider)
How can I add multiple providers ?

I tried to double the <auth_oauth> function but it did not work.

<auth_oauth>
  <provider name>
    login         = "Login with Github"
    client_id     = <required>
    client_secret = <required>
    scopes        = openid profile email
    auth_url      = https://oauthserver/oauth2/v1/authorize
    token_url     = https://oauthserver/oauth2/v1/token
    api_url       = https://oauthserver/oauth2/v1/userinfo
    login_field   = login
  </provider>
</auth_oauth>

<auth_oauth>
  <provider name>
    login         = "Login with Login with something else"
    client_id     = <required>
    client_secret = <required>
    scopes        = openid profile email
    auth_url      = https://oauthserver/oauth2/v1/authorize
    token_url     = https://oauthserver/oauth2/v1/token
    api_url       = https://oauthserver/oauth2/v1/userinfo
    login_field   = login
  </provider>
</auth_oauth>

Thanks,
Fred



Sven Nierlein

unread,
May 21, 2021, 11:27:07 AM5/21/21
to th...@googlegroups.com, Frederico
Hi,

this should work:

<auth_oauth>
<provider name1>
...
</provider>
<provider name2>
...
</provider>
</auth_oauth>

Having 2 <auth_oauth> blocks works as well, but the "name" must be different.

Cheers,
Sven


On 21.05.21 16:57, Frederico wrote:
> Hey Sven,
>
> you have the comment
> # oauth configuration block (can have multiple provider)
> How can I add multiple providers ?
>
> I tried to double the <auth_oauth> function but it did not work.
>
> <auth_oauth>
>   <provider name>
>     login         = "Login with Github"
>     client_id     = <required>
>     client_secret = <required>
>     scopes        = openid profile email
>     auth_url      = https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize>
>     token_url     = https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token>
>     api_url       = https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo>
>     login_field   = login
>   </provider>
> </auth_oauth>
>
> <auth_oauth>
>   <provider name>
>     login         = "Login with Login with something else"
>     client_id     = <required>
>     client_secret = <required>
>     scopes        = openid profile email
>     auth_url      = https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize>
>     token_url     = https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token>
>     api_url       = https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo>
> it, send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk+un...@googlegroups.com
> <mailto:thruk%2Bun...@googlegroups.com>>.
> <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com>>.
> >     > > To view this discussion on the web visit
> https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>>>.
> >     >
> >     > --
> >     > You received this message because you are subscribed to the Google Groups "Thruk" group.
> >     > To unsubscribe from this group and stop receiving emails from it,
> send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk+un...@googlegroups.com
> <mailto:thruk%2Bun...@googlegroups.com>>.
> <mailto:thruk%2Bunsu...@googlegroups.com> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bunsu...@googlegroups.com>>.
> <https://groups.google.com/d/msgid/thruk/6f89568a-0019-45cc-9d69-2dd8d1a8e5ean%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/thruk/6f89568a-0019-45cc-9d69-2dd8d1a8e5ean%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
>
> --
> You received this message because you are subscribed to the Google Groups "Thruk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com
> <mailto:thruk+un...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com
> <https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com?utm_medium=email&utm_source=footer>.

Frederico

unread,
May 24, 2021, 3:05:00 AM5/24/21
to Sven Nierlein, th...@googlegroups.com
Hi Sven, 

Does not work.
If i use in thruk_local.conf:

<auth_oauth>
    <provider Github>
    ...
    </provider>
    <provider Something>
    ...
    </provider>
</auth_oauth>

It falls back to the single oauth from the main thruk.conf

Thanks,
Fred

Sven Nierlein

unread,
Jun 28, 2021, 10:41:57 AM6/28/21
to Frederico, th...@googlegroups.com
Hi,

should be fixed with the next release. There was an issue with parsing this style of configuration.

Cheers,
 Sven
> >      auth_url      = https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize> <https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize>>
> >      token_url     = https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token> <https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token>>
> >      api_url       = https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo> <https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo>>
> >      login_field   = login
> >    </provider>
> > </auth_oauth>
> >
> > <auth_oauth>
> >    <provider name>
> >      login         = "Login with Login with something else"
> >      client_id     = <required>
> >      client_secret = <required>
> >      scopes        = openid profile email
> >      auth_url      = https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize> <https://oauthserver/oauth2/v1/authorize <https://oauthserver/oauth2/v1/authorize>>
> >      token_url     = https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token> <https://oauthserver/oauth2/v1/token <https://oauthserver/oauth2/v1/token>>
> >      api_url       = https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo> <https://oauthserver/oauth2/v1/userinfo <https://oauthserver/oauth2/v1/userinfo>>
> >     it, send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com>
> >     <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>>>.
> >     <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>>>.
> >      >     > > To view this discussion on the web visit
> > https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com>>>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/41f87aeb-7be5-48ce-a4c6-e4c0a7816e32n%40googlegroups.com?utm_medium=email&utm_source=footer>>>>>.
> >      >     >
> >      >     > --
> >      >     > You received this message because you are subscribed to the Google Groups "Thruk" group.
> >      >     > To unsubscribe from this group and stop receiving emails from it,
> >     send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com> <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bun...@googlegroups.com>
> >     <mailto:thruk%2Bun...@googlegroups.com <mailto:thruk%252Bun...@googlegroups.com>>>.
> >      >     > To view this discussion on the web visit
> > https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com>>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com>>>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>
> >     <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/be61e2be-47c5-485e-9f1d-88f378fbf14cn%40googlegroups.com?utm_medium=email&utm_source=footer>>>>.
> >      >
> >      > --
> >      > You received this message because you are subscribed to the Google Groups "Thruk" group.
> >      > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bunsu...@googlegroups.com>
> >     <mailto:thruk%2Bunsu...@googlegroups.com <mailto:thruk%252Buns...@googlegroups.com>> <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bunsu...@googlegroups.com> <mailto:thruk%2Bunsu...@googlegroups.com <mailto:thruk%252Buns...@googlegroups.com>>>.
> > To unsubscribe from this group and stop receiving emails from it, send an email to thruk+un...@googlegroups.com <mailto:thruk%2Bunsu...@googlegroups.com>
> > <mailto:thruk+un...@googlegroups.com <mailto:thruk%2Bunsu...@googlegroups.com>>.
> > To view this discussion on the web visit
> > https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com <https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com>
> > <https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com?utm_medium=email&utm_source=footer <https://groups.google.com/d/msgid/thruk/CAHYWuiKSwVuJir2CFdnrazCJHBPsQzRUrXynevxs2rJ4h0gSmQ%40mail.gmail.com?utm_medium=email&utm_source=footer>>.
>


OpenPGP_signature
Reply all
Reply to author
Forward
0 new messages