search

hlavki / g-suite-identity-sync

G Suite to LDAP identity synchronizer
Apache License 2.0
127 stars 29 forks source link

"No service was found." when clicking Sign In #33

Closed ghost closed 5 years ago

ghost commented 5 years ago

Hi,

We currently have a FreeRADIUS running, but would like to login with our Gsuite credentials.

After running a few times through all commands in the installation procedure, I'm hitting the same error "No service was found." when clicking Sign in on http://localhost:8181/#/sign-in - Screenshot here.

Some files that might help:

karaf.log

(anonymized) docker-compose.yml

Personally I think there is something wrong with my docker-compose file, as I'm not really sure of the variables. Could you perhaps enlighten me which we could choose ourselves and which should match what variable in our Gsuite admin?

Note we're not using LDAP already, I wasn't sure if one is created with the Docker or we should create one ourselves first ?

Many thanks!

PS: A video tutorial for the Gsuite configuration would be really helpful!

hlavki commented 5 years ago

SLAPD_PASSWORD and LDAP_ADMIN_PASSWORD must be same in docker-compose.yml

hlavki commented 5 years ago

And btw I am working on simpler configuration and then I'll prepare video tutorial

ghost commented 5 years ago

Hi, SLAPD_PASSWORD and LDAP_ADMIN_PASSWORDare indeed the same but the docker is still not working (same issue).

Is it correct that all LDAPD variables can be chosen freely and all GSUITE variables should match our Gsuite setup?

hlavki commented 5 years ago

try to clean all and setup from scratch:

docker-compose down -v
docker-compose up -d

Is it correct that all LDAPD variables can be chosen freely and all GSUITE variables should match our Gsuite setup?

Yes, that's generaly true

ghost commented 5 years ago

It's still not working - something is wrong with my Gsuite settings I suppose:

Last output from docker-compose logs -f:

identity_1 | 21:22:21.865 INFO [CM Configuration Updater (ManagedService Update: pid=[org.apache.cxf.osgi])] Service account private key was not loaded from null

Full output

PS: Many thanks, your efforts are really appreciated!

ghost commented 5 years ago

Hey,

After double-checking our Gsuite settings a few times, I don't think the issue is with my Gsuite settings now as the private key is successfully loaded but there appears to be an issue to reaching http://localhost:8181/cxf/oidc/. Any ideas?

Full docker logs

Karaf.log

identity_1  | 09:23:48.352 INFO  [sshd-SshServer[7a28fc83]-nio2-thread-2] Session karaf@/127.0.0.1:53836 authenticated
identity_1  | 09:23:48.854 INFO  [CM Configuration Updater (Update: pid=eu.hlavki.identity.google)] Google Configuration changed
identity_1  | 09:23:48.856 INFO  [CM Configuration Updater (Update: pid=eu.hlavki.identity.google)] Configuring GSuiteDirectoryService ...
identity_1  | 09:23:48.856 INFO  [CM Configuration Updater (Update: pid=eu.hlavki.identity.google)] Token lifetime set to 3600
identity_1  | 09:23:49.012 INFO  [CM Configuration Updater (Update: pid=eu.hlavki.identity.google)] Service account private key  loaded from /opt/karaf/etc/identity/service-account.p12
identity_1  | 09:23:51.921 WARN  [qtp1203710790-124] Can't find the request for http://localhost:8181/cxf/identity/user's Observer
identity_1  | 09:23:53.492 WARN  [qtp1203710790-171] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:25:48.104 WARN  [qtp1203710790-127] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:25:50.944 WARN  [qtp1203710790-124] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:25:54.724 WARN  [qtp1203710790-127] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:25:59.893 WARN  [qtp1203710790-124] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:26:02.657 WARN  [qtp1203710790-127] Can't find the request for http://localhost:8181/cxf/oidc/'s Observer
identity_1  | 09:26:20.503 WARN  [qtp1203710790-165] Can't find the request for http://localhost:8181/cxf/identity/user's Observer
identity_1  | 09:26:21.930 WARN  [qtp1203710790-124] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:26:28.718 WARN  [qtp1203710790-167] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:26:30.770 WARN  [qtp1203710790-124] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer
identity_1  | 09:26:34.871 WARN  [qtp1203710790-171] Can't find the request for http://localhost:8181/cxf/oidc/rp's Observer