View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
10000Bug reportsAuthenticationpublic2015-10-28 10:552015-12-04 17:26
Reportergkuchyt Assigned Toc_schmitz  
PrioritynormalSeveritypartial_block 
Status closedResolutionwon't fix 
Product Version2.06+ 
Summary10000: 2.06, webserver auth, & shibboleth no longer work together
Description

Upgrading from 2.05 build 150211 to 2.06 build 151018 has broken the ability to put shibboleth in front of limesurvey with the web server authentication plugin.

What happens now is that any authenticating user gets stuck in a redirect loop for index.php/admin/authentication/sa/login.

If debug is set to 2 I get the attached stack trace upon attempting to login which may or may not be a red herring.

Steps To Reproduce

Upgrade to 2.06 build 151018 using web server authentication and shibboleth.

Additional Information

Does authentication need to happen via POST now? When shibboleth redirects back to LimeSurvey after authenticating this happens via a GET request.

How does the YII_CSRF_TOKEN factor into web server authentication? Does this get properly set if a user comes in via web server authentication?

TagsNo tags attached.
Attached Files
gkuchyt_ls_stack.pdf (459,033 bytes)
Bug heat6
Complete LimeSurvey version number (& build)2.06 build 151018
I will donate to the project if issue is resolvedNo
Browser
Database type & versionPercona 5.5.35-33.0
Server OS (if known)Red Hat Enterprise Linux 6.7
Webserver software & version (if known)Apache 2.2.15
PHP Version5.3.3
Git branch / Pull Request URL

Users monitoring this issue

There are no users monitoring this issue.

Activities

gkuchyt

gkuchyt

2015-10-28 10:56

reporter   ~33461

Just to note, I will have limited time to work on this from my end in the next couple weeks as I'm about to leave on vacation.
DenisChenu

DenisChenu

2015-10-30 13:15

developer   ~33468

Hi,

README.MD : LimeSurvey 2.05+ Shibboleth auth plugin

I think this bug must be submitted to https://github.com/atlet/LimeSurvey-ShibbolethAuth/issues
c_schmitz

c_schmitz

2015-12-04 17:26

administrator   ~33715

Yes, the plugin is not part of the LimeSurvey core.
Please submit your report to the URL mentioned by Denis, instead.

Issue History

Date Modified Username Field Change
2015-10-28 10:55 gkuchyt New Issue
2015-10-28 10:55 gkuchyt File Added: gkuchyt_ls_stack.pdf
2015-10-28 10:56 gkuchyt Note Added: 33461
2015-10-30 13:15 DenisChenu Note Added: 33468
2015-12-04 17:26 c_schmitz Note Added: 33715
2015-12-04 17:26 c_schmitz Status new => closed
2015-12-04 17:26 c_schmitz Assigned To => c_schmitz
2015-12-04 17:26 c_schmitz Resolution open => won't fix