phpipam / phpipam

phpipam development repository
https://phpipam.net
2.27k stars 742 forks source link

SAML Deprecated Function libxml_disable_entity_loader #4335

Open mswanson775 opened 3 days ago

mswanson775 commented 3 days ago

Describe the bug I just installed phpipam so I am on version 1.6.1. When I try to log into SAML I get the below error message. I turned on the debugger in the config.php file.

Deprecated: Function libxml_disable_entity_loader() is deprecated in /var/www/html/functions/php-saml/src/Saml2/Utils.php on line 85

Deprecated: Function libxml_disable_entity_loader() is deprecated in /var/www/html/functions/php-saml/src/Saml2/Utils.php on line 89

My PHP version is 8.3. Do I need to downgrade PHP or PHPIPAM to resolve this issue? Or do I need to upgrade?

Database version: mariadb 10.5.22

image

mswanson775 commented 3 days ago

I went ahead and installed PHPIPAM version 1.7. It looks like I was able to resolve the error message. I am not getting this error message. image

Everything points to a mismatch certificate. I have the correct IDP X.509 public cert. Here are my SAML settings. My SAML debugger shows successful. Is their a way to see more detail on why it is failing on PHPIPAM side of things.

image

GaryAllan commented 3 days ago

Hi,

You should get more info with $debugging = true; in config.php.

mswanson775 commented 3 days ago

I did set the debugging to true in config.php. I think its a cert issue. I think their is an issue on how the cert is being read by PHIPAM. I copied the same public cert and pasted it into the PHPIPAM settings. Once I saved it and extracted it again it came up in a different format.

GaryAllan commented 3 days ago

Hi,

It uses the OS CA store by default.

For Ubuntu/Debian

Installing a Company CA

Copy your certificate in PEM format (the format that has ----BEGIN CERTIFICATE---- in it) into /usr/local/share/ca-certificates and name it with a .crt file extension.

Then run sudo update-ca-certificates

mswanson775 commented 3 days ago

I am using RedHat 9. Do you have the command and location for RedHat