ondemand: Default auth config in 1.8 causes Apache 500 error
Hi,
I noticed that the default authentication configuration in 1.8 was changed from Basic to “Dex” (openid-connect) in https://github.com/OSC/ondemand/commit/5915cbbb8659cb188da80cb5d54551a8ca9944f7 (and the corresponding config file comments were updated in https://github.com/OSC/ondemand/commit/a698fac0bf4bcc984348aa77814f913bc2ec6a31).
As a result, the portal now throws an HTTP 500 error in the default configuration, and logs:
[Mon Aug 17 15:00:31.380929 2020] [authn_core:error] [pid 16] [client 172.20.0.1:42288] AH01796: AuthType openid-connect configured without corresponding module
For example, when using the OOD Docker image source, which installs the OOD packages from the ondemand-release-web-latest repo (currently 1.8.11):
docker system prune -a
docker volume prune
cd ~/projects # or wherever
git clone https://github.com/OSC/ood-images.git ood-images-official
cd ood-images-official/docker-with-slurm
docker-compose up -d --build
Going to http://localhost:8080 shows “Internal Server Error”.
I was able to reproduce this error using Open Ondemand packages for 1.8.11 from the “latest” yum repo, and earlier 1.8 packages. Only downgrading to 1.7 provided a working default configuration.
Also, of secondary concern, the update in https://github.com/OSC/ondemand/commit/a698fac0bf4bcc984348aa77814f913bc2ec6a31 was incomplete. The comment above the modified line still says that the default auth type is Basic.
About this issue
- Original URL
- State: closed
- Created 4 years ago
- Comments: 15 (15 by maintainers)
Commits related to this issue
- Update ood_portal_example.yml Address issue raised in #649 — committed to OSC/ondemand by treydock 4 years ago
Comment updated in #650, if that doesn’t help let me know.