search

up2university / single-sign-on

Up2U federated authentication service
0 stars 2 forks source link

Error with google account access #48

Closed ivanoterouvigo closed 5 years ago

ivanoterouvigo commented 5 years ago

Hi everyone!

A teacher who attended Italian training course in april/may has a problem accessing the course.

He autenticated to the platform and created an account using his google account at the beginning of the training course. He followed the course and now he wants to consult its materials again, but he can't. The error that appear is an "unhandled exception", with the following tracking id

b07fe95c83

How can we solve the problem?

Regards

foobarable commented 5 years ago

@m0ark @michzimny Waiting for response from our IDM team to fix this issue

foobarable commented 5 years ago

@ivanoterouvigo Can you try again?

foobarable commented 5 years ago

Is this problem still existent?

foobarable commented 5 years ago

Closing issue.

ivanoterouvigo commented 5 years ago

Hi @foobarable @michzimny,

We get again the same issue from Italian teachers

The error generated is always the same (exception not menaged - or something like that-, tracking id b07fe95c8).

I received this error on 7 of January but the person who told me the error received the error on 28 of December. So I am the third person in to receive this email. This error happen in the test platform. https://learn.test.up2university.eu

But, today this afternoon I had a webwinar with some teachers and I got the same error in the production platform. https://learn.up2university.eu

This is one of the errors (exception not menaged , tracking id 9127a0f4fa).

So I think this is a critical issue, we need to solve as quickly as possible. At least, discovering what is the problem or what are the actions that produce this errors.

Regards

foobarable commented 5 years ago

We will have a look at it.

foobarable commented 5 years ago

@ivanoterouvigo It looks like the problem is that multiple accounts with the same attributes exist, which we currently can not fix. Did you, by any means, register one account with a gmail address and then try to access the sso via google authentication?

foobarable commented 5 years ago

Also, can you send me the mail-adresses of the teachers affected? (via mail, please)

ivanoterouvigo commented 5 years ago

Hi @foobarable, sorry I don't have your email, and you don't have your email on your profile. Could you send me this information?

Situation 1) Related with this case tracking id b07fe95c8 yes there is multiple accounts (3 exactly ) for the same email account. This is the case for the Italian teacher.

But the best workaround I suggest is:

If you login with Social Media, for example facebook and you logged in some days before with Social Media for example Google account as the first time.

Then the system need to check if the account exist and after that show to users.

Sorry, your email exist in our platform. Do you want to know in which way do you logged? Type your email here.

Situation 2) Related with this case tracking id 9127a0f4fa In this case this teacher has only one account. So I didn't understand what could be the problem here.

Anyway, I would need access to >> site administration, >> reports, >> logs in order to know more about this issues.

So, I hope your email to send more details about. Thanks in advance

michzimny commented 5 years ago

@ivanoterouvigo It looks like the problem is that multiple accounts with the same attributes exist, which we currently can not fix. Did you, by any means, register one account with a gmail address and then try to access the sso via google authentication?

@foobarable, if this is a case that we cannot solved, then we need to do everything to prevent users from reaching such a state. For instance, by blocking the second authentication when the first account already exists.

foobarable commented 5 years ago

We have this logic already implemented. We first perform an LDAP search and check, if the user is already present. But in this case, the LDAP search returned an error which triggered our logic (correctly) to create a new account. We still investigate what the problem with the ldap search was.

michzimny commented 5 years ago

Thanks for this update. Is the logic correct that it allows to create an account once it knows that there is an error with the backend ldap (i.e. the search query failed)?

foobarable commented 5 years ago

The search query didn't fail, it returned with "no such user". But the user was there. We currently think it was a replication issue. But can't say for sure.

ivanoterouvigo commented 5 years ago

Hi everyone, @michzimny , @foobarable

I met yesterday with a Spanish teacher in order to help him with the moodle platform. I told him to login here. learn.up2university.eu (MPP) Here you are.

error_sso_emilio_v000-pixel

error_sso_emilio_v001-pixel

error_sso_emilio_v002

error_sso_emilio_v003-pixel

It is the second time It happenned to me. The last time I reported this 1 month ago.

So the error message didn't change.

Regards

foobarable commented 5 years ago

Should be fixed for now. Please tell me if you experience similar issues again.