Netbox RemoteUserBackend + Shib Not Logging in. #971
Unanswered
Nightrest
asked this question in
Getting Help
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
I am pretty new to docker and SSO side of the house so bare with me. (from network side of the house)
We have Netbox 3.4 running in a docker container and are trying to get SSO working from Shibboleth. I am playing catchup on this build as i was not the one to initially set it up, but it is basically a fresh install and Shib is set up right off the bat so you have to log in before you can even get to https://netbox.mydomain.com.
Once we authenticate and are able to get to the main Netbox screen we then try to go to the " Netbox Login" page and type in our SSO creds.... and it will return.
"Please enter a correct username and password. Note that both fields may be case-sensitive."
In netbox-docker/configuration/configuration.py the following are set.
`REMOTE_AUTH_ENABLED = _environ_get_and_map('REMOTE_AUTH_ENABLED', 'True', _AS_BOOL)
REMOTE_AUTH_BACKEND = environ.get('REMOTE_AUTH_BACKEND', 'netbox.authentication.RemoteUserBackend')
REMOTE_AUTH_HEADER = environ.get('REMOTE_AUTH_HEADER', 'HTTP_REMOTE_USER')
REMOTE_AUTH_AUTO_CREATE_USER = _environ_get_and_map('REMOTE_AUTH_AUTO_CREATE_USER', 'True', _AS_BOOL)
REMOTE_AUTH_DEFAULT_GROUPS = _environ_get_and_map('REMOTE_AUTH_DEFAULT_GROUPS', '', _AS_LIST)`
from the docker container i have ran "tcpdump -i lo -nn -s0 -A tcp port 8080" to make sure REMOTE_USER is being passed which it is.
`businessCategory:
physicalDeliveryOfficeName:
Shib-Application-ID: default
REMOTE_USER: name@mydomain.com`
while looking at the tcpdump i noticed a field "csrfmiddlewaretoken" was displaying a "username" and "password" which was in cleartext.... what i thought was interesting was that when i tried to use the Netbox "Login" page to try to log in with random creds the "csrfmiddlewaretoken" would produce the random creds however "REMOTE_USER" was still coming up with 'name@mydomain.com'
I am not sure what i am missing, i feel like i am just banging my head against a wall at this point. Any help would be much appreciated.
Beta Was this translation helpful? Give feedback.
All reactions