[SOGo] SOGo + Dovecot + Keycloak + Apache + libapache2-mod-auth-openidc -> working setup

2023-07-01 Thread Claas Hilbrecht
Hi, after trying to the SAML working with dovecot without success for several days I tried a different approach today. Instead off using SAML I switched to use the libapache2-mod-auth-openidc module. I changed the apache sogo.conf to support the OIDC module with the settings below.

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-30 Thread Claas Hilbrecht
Hi and again I added some debug prints to SOGoSAML2Session.m. Now the important part looks like --- - (void) processAuthnResponse: (NSString *) authnResponse NSPrintErr(@"lasso_profile_get_identity:"); lasso_identity = lasso_profile_get_identity (profile); if (lasso_identity) {

Re: [SOGo] Has someone a working SAML configuration most optimal with Keycloak as IDP?

2023-06-29 Thread Claas Hilbrecht
Hi, DISCLAIMER: I have zero knowledge of SAML! me too I think after trying more than a week to get SOGo working with Keycloak... Having said that, there are two cases where people successfully used it, although not sure if they also used Keycloak. 1.

[SOGo] Has someone a working SAML configuration most optimal with Keycloak as IDP?

2023-06-29 Thread Claas Hilbrecht
Hi, since I'm still have trouble getting SOGo 5.8.4 SAML login working with Keycloak 21.1.1 I wonder if someone has a working setup and is willing to share that configuration?

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-28 Thread Claas Hilbrecht
Hi, first of all, thanks for the help. The profile.c if from the lasso module -> https://github.com/adieu/lasso/blob/master/lasso/saml-2.0/profile.c We need to find which lasso function in SOGoSAML2Session.m (I assume, it may be another file) is called and make that error, then check

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-27 Thread Claas Hilbrecht
Hi, I recompiled the sogo 5.8.4 package from Debian sid and added some NSLog outputs. So I can confirm that the SAML response is really ok and the content is fine. But it seems something in my setup is wrong. SOGo writes the current session to the sogo_sessions_folder. This works fine,

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-26 Thread Claas Hilbrecht
Hi, next Update. After using the URL https://www.scottbrady91.com/tools/saml-parser to inspect my SAML response I'm pretty sure everything is fine. This site is able to display SAML Response without any garbage. Now I'm getting a little step further (after manually doing this query:

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-26 Thread Claas Hilbrecht
Hi, after looking at the sourcecode, which is just: if (loginAttribue && (strcmp (attribute->Name, [loginAttribue UTF8String]) == 0)) I tried to debug the request flow. With the help of the apache dumpio module I was able to capture the whole traffic. II tried to decode the capture

Re: [SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-26 Thread Claas Hilbrecht
Hi, In your logs you have a segfault. You need to provide a backtrace according to https://www.sogo.nu/support/faq/how-do-i-debug-sogo.html Here it is: --- 2023-06-26 07:39:05.169 sogod[816:816] SQL: SELECT c_defaults FROM sogo_user_profile WHERE c_uid = 'anonymous'; 2023-06-26

[SOGo] SAML login not working / Keycloak 21.1.1 / Debian bookworm

2023-06-25 Thread Claas Hilbrecht
Hi, I try to get a SAML login working and failed. I read a lot in this list and think I'm pretty close towards a working setup. I managed to get redirected to the IDP login screen and while I get redirected back to SOGo I get this error message: --- Proxy Error The proxy server received