Can't get it to work (complex issue - I fear, it's completely my dullness)

chiffafox - March 30, 2008 - 23:41
Project:cosign
Version:5.x-1.3
Component:Code
Category:support request
Priority:normal
Assigned:Unassigned
Status:active
Description

I'm not sure where to write to ask for help. Sorry if chosen incorrent place. :(

I'm trying to make cosign work with drupal. I configured cosign basically, set mysql as auth storage for all users. And tested it - it works on directory access basis. Then I installed drupal and confirmed it works ok. And then I've tried to marry them... :( Important detail - cosign and drupal are in different hosts.

If I set
CosignProtected On
in httpd.conf for drupal site, I get moved to login page of cosign when trying to open drupal site. If I add also
CosignAllowPublicAccess On
to httpd.conf - I can can see drupal page but even when I logged in with cosign, I can't see neither COSIGN_SERVICE nor REMOTE_USER set, so drupal doesn't know I've logged in. :(
It's first issue I don't know what to do with. I want to allow users to see drupal before they are logged in, and can't understand - how?

And the second one - even if I don't use "CosignAllowPublicAccess" variable to allow public access - I can't get into registered state in drupal. :( I'm trying to open my drupal website in browser, being redirected to cosign login service, logging in, and going back to my drupal page (now I can access it, because I've logged in with cosign) - but still see "Login with cosign" and all functions (allowed for registered user) of drupal still unavailable. But COSIGN_SERVICE and REMOTE_USER variables are set. And link "Login with cosign" points to the https of drupal site, not cosign one.

I don't know what I configured wrong - cosign or drupal module, or something another. And I see no error messages in apache logs and no errors in cosign logs.

If anybody have any ideas that can help me to solve these - answer, please!..

#1

disasm - August 7, 2008 - 20:37

I'm having the same issue... Two accounts login fine, the first 2 I made, but any new ones, after cosign auths, User Login only shows Login with Cosign.

Sam

#2

zibas - August 7, 2008 - 21:10

It might help to know that the cosign module will not let you view the drupal page over https without logging in. You can view the drupal, not logged in over http.

#3

disasm - August 8, 2008 - 12:53

Here's what I did...

Drupal was running on port 8080, I added an ssl instance on 443. I setup apache to auth cosign. Made a test page outside of drupal, and had it working fine.

I enabled webauth. When I enabled cosign it copied the account I was using (disasm) to my cosign access id (sbl5007).

I created a new admin account in drupal, for another system administrator with his cosign id. All worked great. He can login via cosign no problem as well.

I took the website live, moving it from port 8080 to port 80. I started creating a couple non-admin accounts, including a temp account (upast11), but after they auth, it still says login with cosign.

So, I removed upast11 account. Then I re-created it as an admin, and it still failed to login via cosign.

I'm kind of stumped here. If anyone has any suggestions, I could really use some help.

Sam

#4

disasm - August 8, 2008 - 13:59

Got some more information...

I dug into the mysql db, and there is a table called authmap. It isn't updated when a new user is created in drupal. My module version for webserver_auth is 5.x-1.x-dev. The cosign version is 5.x-1.3.

As a work around, if I disable cosign, and re-enable it, it recopies all the users into authmap table, and users can log in.

Any thoughts on how to get the user automatically added into authmap?

Sam

#5

disasm - August 8, 2008 - 14:50

It appears webserver auth prefers to have automatic user registration, so I enabled that, added a limit in my apache config to allow certain users, and voila, it works!

Sam

#6

g4hbk - November 4, 2008 - 17:39

Hi all

How to i get the Dn information of the user as an environment variable .

Thanks in advance

Nic

 
 

Drupal is a registered trademark of Dries Buytaert.