Closed jas01 closed 4 months ago
Despite of what the message says, this is actually not a bug of oidc-agent. Anyway, thanks for being obedient.
We display the "probable bug" message because the OP returns an invalid_request
error, normally this would be a sign that we did something wrong. However, It then says that the scopes are invalid. We are aware that this could happen, but then we would expect a invalid_scope
error (instead of invalid_request
).
Anyway, the problem seems to be that mccli is requesting scopes that are not available from the OP (at least not with this client). From the logs we can see that mccli is requesting the scope openid profile email eduperson_entitlement
; I would expect that eduperson_entitlement
is the one causing the problem. Please check that it is availabe for you client.
Also make sure that you set up the agent account config with all the configured scopes.
Despite of what the message says, this is actually not a bug of oidc-agent. Anyway, thanks for being obedient.
Well that's joke... ;-) mostly because I need help ;-)
We display the "probable bug" message because the OP returns an
invalid_request
error, normally this would be a sign that we did something wrong. However, It then says that the scopes are invalid. We are aware that this could happen, but then we would expect ainvalid_scope
error (instead ofinvalid_request
).Anyway, the problem seems to be that mccli is requesting scopes that are not available from the OP (at least not with this client). From the logs we can see that mccli is requesting the scope
openid profile email eduperson_entitlement
; I would expect thateduperson_entitlement
is the one causing the problem. Please check that it is availabe for you client. Also make sure that you set up the agent account config with all the configured scopes.
Thanks. You're perfectly right. It was “offline_access” who are not supported.
Big thanks
Hi,
I'm trying to use eduteams with oidc-agent, pam-oidc and motley_cue to install a sshd server authenticated against eduteams.
With a lot of help (thanks) I was able to generated the token with oidc-gen. No I try to connect to my sshd server.
When I try mccli I got this message, and because I'm very obedient person ;-) ;-)
I obfuscated the hostname.