Netbox RemoteUserBackend + Shib Not Logging in. #971
Unanswered
Nightrest
asked this question in
Getting Help
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I am pretty new to docker and SSO side of the house so bare with me. (from network side of the house)
We have Netbox 3.4 running in a docker container and are trying to get SSO working from Shibboleth. I am playing catchup on this build as i was not the one to initially set it up, but it is basically a fresh install and Shib is set up right off the bat so you have to log in before you can even get to https://netbox.mydomain.com.
Once we authenticate and are able to get to the main Netbox screen we then try to go to the " Netbox Login" page and type in our SSO creds.... and it will return.
"Please enter a correct username and password. Note that both fields may be case-sensitive."
In netbox-docker/configuration/configuration.py the following are set.
`REMOTE_AUTH_ENABLED = _environ_get_and_map('REMOTE_AUTH_ENABLED', 'True', _AS_BOOL)
REMOTE_AUTH_BACKEND = environ.get('REMOTE_AUTH_BACKEND', 'netbox.authentication.RemoteUserBackend')
REMOTE_AUTH_HEADER = environ.get('REMOTE_AUTH_HEADER', 'HTTP_REMOTE_USER')
REMOTE_AUTH_AUTO_CREATE_USER = _environ_get_and_map('REMOTE_AUTH_AUTO_CREATE_USER', 'True', _AS_BOOL)
REMOTE_AUTH_DEFAULT_GROUPS = _environ_get_and_map('REMOTE_AUTH_DEFAULT_GROUPS', '', _AS_LIST)`
from the docker container i have ran "tcpdump -i lo -nn -s0 -A tcp port 8080" to make sure REMOTE_USER is being passed which it is.
`businessCategory:
physicalDeliveryOfficeName:
Shib-Application-ID: default
REMOTE_USER: [email protected]`
while looking at the tcpdump i noticed a field "csrfmiddlewaretoken" was displaying a "username" and "password" which was in cleartext.... what i thought was interesting was that when i tried to use the Netbox "Login" page to try to log in with random creds the "csrfmiddlewaretoken" would produce the random creds however "REMOTE_USER" was still coming up with '[email protected]'
I am not sure what i am missing, i feel like i am just banging my head against a wall at this point. Any help would be much appreciated.
Beta Was this translation helpful? Give feedback.
All reactions