View Issue Details

This bug affects 1 person(s).
 8
IDProjectCategoryView StatusLast Update
08451Bug reportsAuthenticationpublic2014-01-25 17:22
ReporterBlizzRD Assigned Tomdekker  
PrioritynormalSeveritypartial_block 
Status closedResolutionfixed 
Product Version2.05+ 
Fixed in Version2.05+ 
Summary08451: No webserver auth and errors accessing the webserver auth options
Description

Hi,

I am preparing an upgrade of our 200+ intranet LimeSurvey tools from version 1.92+ to 2.05+.

We use Kerbros SSO based by an Apache web server and currently our web server auth code is located in the config.php. It's really good to see the webserverauth with autocreate plugin so I was excited to use that. Unfortunately it's not working.

I installed a stand-alone LS 205+ tool in a 'kerborised' directory on the webserver. It's a fresh install with a new database. I tried the following:

  • Enable webserverauth plugin
  • Set webserver auth to true in both config.php and config-defaults.php
  • Tried all the auto-create settings etc.

When I access the /admin/ dir of my LS installation I still get the normal login box.

The settings page of the webserver auth plugin returns an error regarding the $settings var (Images attached).

Even when I tried setting the var's in the lime_plugins_settings table I still don't get webserver auth.

TagsNo tags attached.
Attached Files
step2.PNG (123,669 bytes)
step1.PNG (43,492 bytes)   
step1.PNG (43,492 bytes)   
Bug heat8
Complete LimeSurvey version number (& build)131209
I will donate to the project if issue is resolvedNo
BrowserFireFox 18
Database type & version172
Server OS (if known)Ubuntu 12.04 LTS
Webserver software & version (if known)Apache 2.2
PHP Version PHP 5.3

Users monitoring this issue

mfaber

Activities

mdekker

mdekker

2013-12-16 14:33

reporter   ~27569

I think you are using latest git and not the package offered for download. Please update to latest git again and it should work again.

BlizzRD

BlizzRD

2013-12-17 11:31

reporter   ~27580

I dowloaded the latest stable from this page: http://www.limesurvey.org/en/download (Where it says LS 2.00 btw). And the the latest version link:
http://www.limesurvey.org/en/stable-release brings me to the 2.05+ download page where the same build number is shown as I am using.

BlizzRD

BlizzRD

2013-12-17 15:19

reporter   ~27590

Hi Menno, sorry to keep bothering you. I Reopen this ticket because it still won't work correctly.

I added your changes to the codebase I have installed. The settings view now works fine.

The webserverauth plugin was activated and the settings have been set (tried both config-defaults and config.php). I enabled the webserverauth and auto-create option.

The beforeLogin() method seems to complete just fine but the newUserSession method is never reached.

setAuthPlugin() returns a large object of which some properties contain my account (as available in $_SERVER['REMOTE_USER']

The error I am getting is an infinite loop browser error. When I look at the webserver accesslog it keeps requesting ../admin/authentication/sa/login over and over again.

mdekker

mdekker

2013-12-17 16:38

reporter   ~27595

The problem is probably that when you go to /admin it redirects to /index.php/admin. The trick you should try to figure out is how to preserve the remote user also for the root of limesurvey.

Please report back if and how you got it working. Probably more users will have the same problem.

Since 1.92 we have only one entry point for both admin and public part. If you search the bugtracker a little on this subject I added a comment somewhere about putting the config in the apache config instead of .htaccess to prevent redirect problems. Not sure if that works.

c_schmitz

c_schmitz

2014-01-18 16:49

administrator   ~27992

BlizzRD, feeback please?

BlizzRD

BlizzRD

2014-01-20 10:01

reporter   ~28019

Sure, will give it a try with the new 2.05+

BlizzRD

BlizzRD

2014-01-20 10:07

reporter   ~28020

Ok, tested it at home:

  • Enable webserverauth plugin: Success
  • Change options of plugin: Success
  • Change settings in config file (webserverauth:true,autocreate:true): Success
  • Auto login: Success

I tested it setting the $_SERVER['REMOTE_USER'] in the root index.php (I have no Kerberos SSO at home ;) )

Tomorrow I will try it in our corporate env. with Kerberos enabled.

Will keep you posted!

BlizzRD

BlizzRD

2014-01-23 11:26

reporter   ~28105

Ok, tested it at work. Works with Kerberos now. Thank you!

c_schmitz

c_schmitz

2014-01-25 17:22

administrator   ~28143

2.05+ Build 140125 released

Related Changesets

LimeSurvey: master 7c3135a7

2013-12-16 13:25:16

mdekker

Details Diff
Fixed 8451: No webserver auth and errors accessing the webserver auth options
dev: due to variable name refactoring https://github.com/LimeSurvey/LimeSurvey/commit/0becedf4e7f1ea686e9b7ef90d3d2b279355db85#diff-ebeb7c76a334c78c400394fb9632ed55 the view was broken
Affected Issues
08451
mod - application/controllers/PluginsController.php Diff File

Issue History

Date Modified Username Field Change
2013-12-16 13:51 BlizzRD New Issue
2013-12-16 13:51 BlizzRD File Added: step2.PNG
2013-12-16 13:51 BlizzRD File Added: step1.PNG
2013-12-16 14:12 c_schmitz Assigned To => mdekker
2013-12-16 14:12 c_schmitz Status new => assigned
2013-12-16 14:30 mdekker Changeset attached => LimeSurvey master 7c3135a7
2013-12-16 14:33 mdekker Note Added: 27569
2013-12-16 14:33 mdekker Status assigned => resolved
2013-12-16 14:33 mdekker Fixed in Version => 2.05+
2013-12-16 14:33 mdekker Resolution open => fixed
2013-12-17 11:31 BlizzRD Note Added: 27580
2013-12-17 15:19 BlizzRD Note Added: 27590
2013-12-17 15:19 BlizzRD Status resolved => feedback
2013-12-17 15:19 BlizzRD Resolution fixed => reopened
2013-12-17 16:38 mdekker Note Added: 27595
2014-01-18 16:49 c_schmitz Note Added: 27992
2014-01-20 10:01 BlizzRD Note Added: 28019
2014-01-20 10:01 BlizzRD Status feedback => assigned
2014-01-20 10:07 BlizzRD Note Added: 28020
2014-01-23 11:26 BlizzRD Note Added: 28105
2014-01-23 12:03 mfaber Issue Monitored: mfaber
2014-01-23 16:17 mdekker Status assigned => resolved
2014-01-23 16:17 mdekker Resolution reopened => fixed
2014-01-25 17:22 c_schmitz Note Added: 28143
2014-01-25 17:22 c_schmitz Status resolved => closed
2021-08-04 15:24 guest Bug heat 6 => 8