nextcloud / nextcloud/user_saml
Connection error with SAML
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 104
- Forks
- 85
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 16
Description
Hello,
We have a problem on Nextcloud.
Nextcloud 17.0.2
SSO & SAML authentication 2.4.0
When adding a user in LDAP, when this user tries to log in via SAML, he receives this message "Account not funded.
Your account is not provisioned, therefore access to this service is not possible. ".
In nextcloud.log:
{"reqId": "Q0J1B084D791wVUZCGLM", "level": 4, "time": "2020-04-09T10: 09: 12 + 00: 00", "remoteAddr": "XXX.XXX.XXX.XXX", " user ":" - "," app ":" user_saml "," method ":" POST "," url ":" \ / index.php \ / apps \ / user_saml \ / saml \ / acs "," message ":" Auto provisioning not allowed and user tnuage2 does not exist "," userAgent ":" Mozilla \ /5.0 (X11; Ubuntu; Linux x86_64; rv: 75.0) Gecko \ / 20100101 Firefox \ /75.0 "," version ": "17.0.2.1"}
The only way for the message to disappear is to go to the Nextcloud user list, to force Nextcloud to update the LDAP users.
sorry for my bad english (thanks google translate)
Best regards
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the login through the SAML ACS endpoint at /index.php/apps/user_saml/saml/acs with a newly added LDAP user on the reported Nextcloud and SSO & SAML versions. Examine the nextcloud.log message that auto provisioning is not allowed and compare it with the LDAP user-list refresh behavior. Done means a newly added LDAP user can authenticate through SAML without manually forcing a user-list update.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100