search

kevinoconnor7 / osTicket-auth-cas

JASIG CAS Authentication plugin for osTicket
GNU General Public License v2.0
13 stars 8 forks source link

Auth-cas configuration problem #32

Open lucascarrizo72818 opened 2 years ago

lucascarrizo72818 commented 2 years ago

Hi @kevinoconnor7 ! I am experiencing a problem when trying to configure the auth-cas plugin for OsTicket (OsTicket v1.15.2 and Auth-cas v1.2.1). I don´t know what should I put in "CA Certh Path" field. Is it a root certificate? I 've tried the certificates that can be generated on this site https://letsencrypt.org/certificates/#root-certificates but they didn´t work. However, I left empty the CA field and I was able to see the CAS interface but when try to login I recieved an error: err I think the URL is wrong, it miss a "/", if I change it I recieve the following message: cas Is it related with CA certificate? Do you know how to proceed? Any idea will be very appreaciated! Thanks in advance!

kevinoconnor7 commented 2 years ago

Hey! You're correct on the first issue, it indeed looks like you were missing a trailing slash.

As for the second issue, "CA Cert Path" should be the CA chain. If you're using certbot for getting your LE cert this would be the chain.pem or fullchain.pem file. However, let's confirm that this is actually the issue. If you leave the option empty it'll disable certificate validation entirely. If the issue still persists then it's unrelated to the certificate validation.

lucascarrizo72818 commented 2 years ago

Hi @kevinoconnor7, thanks for your replied. I have tried certificates and I recieving the following error: error No error messages on Chrome or error.log file. Is this common?

kevinoconnor7 commented 2 years ago

I've never seen that specific error before. If you put in the path to your certificate file do make sure it's readable by the user running the PHP process. You may also want to try with the certificate omitted entirely to confirm that this is the cause.

You could also try adjusting the debug logging level (I believe the general settings section of osTicket has this option) to increase the logs captured.

Unfortunately I haven't osTicket or this plugin myself in 5+ years now, so my knowledge is a bit fuzzy of the issues one may encounter.