search

chauth / confluence_http_authenticator

The new home of the Confluence HTTP Authenticator (formerly known as the Confluence Shibboleth Authenticator)
Other
64 stars 36 forks source link

displayName and mail details are not passed to confluence 7.13.2 on new user creation or update #62

Open ChopperHarley73 opened 2 years ago

ChopperHarley73 commented 2 years ago

New users since update of confluence to version 7.13.2 but possible since also 7.4.7 have only their uid (REMOTE_USER) value populated but not the CONF_EMAIL or CONF_FULLNAME. SAML trace shows the values are present in the SSO request but do not make it to the confluence user table.

Running openjdk 8, confluence reported javaversion 1.8.2. Ubuntu 20.04, but also did not work on Ubuntu 18.04.

gmkll commented 2 years ago

This may be related to issue #61. Have you checked your logs setting log level to debug for shibauth/confluence/authentication/shibboleth/RemoteUserAuthenticator? Previous releases still supported confluence 6 and java 7. This is updated and we should release this as v2.7.4 soon IMO.

ChopperHarley73 commented 2 years ago

Hi gemkall,

Many thanks for your reply. Looking at issue 61 the resolution is relative to recompiling java and maven with maven.compiler.source/target set to 1.8 and set compile flag -Dconfluence.version=7.13.2. I put this flag in setenv.sh for confluence in CATALINA_OPTS but not sure how this might help fix confluence and mod_mellon? The openJDK used is from the maintainers repo so I have no control of compilation flags.

I have grepped for "maven.compiler.source" in the atlassian install directory and can find only a match in the transformed-plugins atlassian-rest-module-6.0.5. Is that correct?

Patrick

On Mon, 6 Dec 2021 at 11:54, gemkall @.***> wrote:

This may be related to issue #61 https://github.com/chauth/confluence_http_authenticator/issues/61. Have you checked your logs setting log level to debug for shibauth/confluence/authentication/shibboleth/RemoteUserAuthenticator? Previous releases still supported confluence 6 and java 7. This is updated and we should release this as v2.7.4 soon IMO.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/chauth/confluence_http_authenticator/issues/62#issuecomment-986705431, or unsubscribe https://github.com/notifications/unsubscribe-auth/AMC36E6WEM3FZMTATOPB4JLUPSQA5ANCNFSM5JOLPD2A . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

gmkll commented 2 years ago

sorry, to be inexact here - these are java maven options. Actually the best would be, if you could not build this plugin yourself, that the maintainers of this plugin publish a new release, where this is all set appropriately.

Though I am one of the maintainers (having the rights to do this) l'll try to do this, though I need to find a time slot to do it, hopefully this week!

That said, it seems after some investigation, that indeed the signature of the Atlassian method

ImmutableUser.Builder.toUser()

changed (since at least v.3.3 to currently latest v.4.4.0, https://docs.atlassian.com/atlassian-crowd/) in returning

public ImmutableUser toUser(), exactly com.atlassian.crowd.embedded.impl.ImmutableUser

while it used to be before com.atlassian.crowd.embedded.api.User.

That explains it probably!

gmkll commented 2 years ago

you may try the newly compiled (minimal confluence v 7.11.6) plugin here: releases 2.7.4.

ChopperHarley73 commented 2 years ago

Many thanks for your speedy response. I will give it a try!

Thanks again.

On Tue, 7 Dec 2021 at 15:36, gemkall @.***> wrote:

you may try the newly compiled (minimal confluence v 7.11.6) plugin here: releases 2.7.4 https://github.com/chauth/confluence_http_authenticator/blob/master/releases/remoteUserAuth-2.7.4.jar .

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/chauth/confluence_http_authenticator/issues/62#issuecomment-988040131, or unsubscribe https://github.com/notifications/unsubscribe-auth/AMC36EY6DILHX4CF2EC64E3UPYSXLANCNFSM5JOLPD2A . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.