Open varenius opened 4 years ago
This happened again, so trying to track this backwards to figure out where to add the allowed_clock:drift parameter to make it work.
Error seems raised by line 219 in vendor/bundle/ruby/2.5.0/gems/ruby-saml-0.9.4/lib/onelogin/ruby-saml/response.rb :
if not_before && (now + (options[:allowed_clock_drift] || 0)) < not_before
For now, I'll just hack this temporarily to make it work, i.e. replace this line with
if not_before && (now + 1.second + (options[:allowed_clock_drift] || 0)) < not_before
This is definitely not the proper place to add this, but it seems to work for now.
Hello, I am trying to configure Redmine to use this plugin with my university login service.
I go to my redmine login page, then click the link to login wih SAML, get to the University server and provide my details, and press enter. Then I get the message "Invalid saml_ticket". Looking in "/var/log/apache2/error.log" I see the following lines appear:
So, google to the rescue... According to "https://github.com/onelogin/ruby-saml#clock-drift" there is an option
I have tried to login many times, and some times I don't get this error, so I think the allowed time is just a bit too small. I would like to increase it to avoid this error. An example is given at the page, but I don't see how I can apply this to the redmine_omniauth_saml plugin. Could you please advise? Kind regards Eskil