Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
lemonldap-ng
lemonldap-ng
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 245
    • Issues 245
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
  • Merge Requests 2
    • Merge Requests 2
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Repository
    • Value Stream
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • LemonLDAP NG
  • lemonldap-nglemonldap-ng
  • Issues
  • #2067

Closed
Open
Opened Jan 14, 2020 by Benoit Lair@kurushi

[SAML] Lasso Error Code -201 when trying to use Office 365 as SP and LemonLdap as IDP

Concerned version

Version: %2.0.7

Platform: Apache

Summary

When trying to configure federation between Office 365 and Lemonldap, i encounter an error with Lasso (2.5 and also 2.6 are the sames errors) I followed this article to configure this : https://lemonldap-ng.org/documentation/latest/applications/office365

But i have an error with Lasso when trying to handle the SAML message from Office365

Logs

Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Start routing saml
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Processing _forAuthUser
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Cleaning pdata
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Processing importHandlerData
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Processing controlUrl
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Processing code ref
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Launching ::Password::LDAP::_modifyPassword
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Processing code ref
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] URL /saml/singleSignOn detected as an SSO request URL
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] SAML method: HTTP-POST
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] HTTP-POST: SAML Request PHNhbWxwOkF1dGhuUmVxdWVzdCBJRD0iX2Y2NDE3ZjJiLTE2Y2UtNGFmYi05MDNlLWQ2YTZiZTQ2NGQwOSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMjAtMDEtMTRUMTM6MzE6MzkuOTA4WiIgeG1sbnM6c2FtbHA9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpwcm90b2NvbCI+PElzc3VlciB4bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiI+dXJuOmZlZGVyYXRpb246TWljcm9zb2Z0T25saW5lPC9Jc3N1ZXI+PHNhbWxwOk5hbWVJRFBvbGljeSBGb3JtYXQ9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDpuYW1laWQtZm9ybWF0OnBlcnNpc3RlbnQiLz48L3NhbWxwOkF1dGhuUmVxdWVzdD4=
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Lasso error code -201: The identifier of a provider is unknown to #LassoServer. To register a provider in a #LassoServer object, you must use the methods lasso_server_add_provider() or lasso_server_add_provider_from_buffer().
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [error] SSO: Fail to process authentication request
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Returned error: 51 (PE_SAML_SSO_ERROR)
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Skin returned: error
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Calling sendHtml with template error
Jan 14 14:31:42 vpc-05-lemonldap-prod3 LLNG[43424]: [debug] Starting HTML generation using /usr/share/lemonldap-ng/portal/templates/bootstrap/error.tpl

Backends used

Debian 9.9 / Apache 2.4.25-3+deb9u9 / File storage (default config from lemonldap) Installed from deb https://lemonldap-ng.org/deb 2.0 main

Possible fixes

Edited Jan 14, 2020 by Clément OUDOT
Assignee
Assign to
FAQ
Milestone
FAQ
Assign milestone
Time tracking
None
Due date
None
Reference: lemonldap-ng/lemonldap-ng#2067