nextcloud / nextcloud/user_saml

Connection error with SAML

Open
#532 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
104
Forks
85
Avg merge
1d 15h
Merged PRs (30d)
16

Description

Hello,
We have a problem on Nextcloud.
Nextcloud 17.0.2
SSO & SAML authentication 2.4.0

When adding a user in LDAP, when this user tries to log in via SAML, he receives this message "Account not funded.
Your account is not provisioned, therefore access to this service is not possible. ".

In nextcloud.log:
{"reqId": "Q0J1B084D791wVUZCGLM", "level": 4, "time": "2020-04-09T10: 09: 12 + 00: 00", "remoteAddr": "XXX.XXX.XXX.XXX", " user ":" - "," app ":" user_saml "," method ":" POST "," url ":" \ / index.php \ / apps \ / user_saml \ / saml \ / acs "," message ":" Auto provisioning not allowed and user tnuage2 does not exist "," userAgent ":" Mozilla \ /5.0 (X11; Ubuntu; Linux x86_64; rv: 75.0) Gecko \ / 20100101 Firefox \ /75.0 "," version ": "17.0.2.1"}

The only way for the message to disappear is to go to the Nextcloud user list, to force Nextcloud to update the LDAP users.

sorry for my bad english (thanks google translate)
Best regards

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the login through the SAML ACS endpoint at /index.php/apps/user_saml/saml/acs with a newly added LDAP user on the reported Nextcloud and SSO & SAML versions. Examine the nextcloud.log message that auto provisioning is not allowed and compare it with the LDAP user-list refresh behavior. Done means a newly added LDAP user can authenticate through SAML without manually forcing a user-list update.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.