Uploaded image for project: 'Modules'
  1. Modules
  2. MODULES-10981

apache: Missing Params for OIDC

    XMLWordPrintable

Details

    • Bug
    • Status: Open
    • Normal
    • Resolution: Unresolved
    • None
    • None
    • apache
    • None
    • puppetlabs-apache oidcsettings

    • Needs Assessment
    • Needs Assessment

    Description

      Basic Info
      Module Version: puppetlabs-apache, latest (set in Puppetfile)
      Puppet Version: 6.21.1

       

      I was just configuring OIDC using the puppetlabs-apache module when I found out, that the type defined in `types/oidcsettings.pp` is (at least!) missing the parameter

      Optional['CookieDomain'] => String,

       

      i.e. in the vhost declaration it should end up like

      OIDCCookieDomain <mycookiedomain>

       

      Maybe it'd worth to check if all other parameters are set, I just got a problem with this param. Furthermore, I'm not sure if String is the right type for this variable but it worked for me.

       

      Furthermore, I need to set the OIDCScope to "openid email", i.e. a string with whitespaces. To accomplish this I needed to change the template in ./templates/vhost/_auth_oidc.erb, I set line 3 as follows:

      OIDC<%= key %> "<%= value %>"

       

      Last but not least I need to set a "<Location>"-block to set the AuthType and Require statements. I am currently setting this with "custom_fragment" but a built-in solution that e.g. checks for '/' as in <Location /bla/> (auto-set the "/" in beginning/end) would be very helpful.

      Attachments

        Activity

          People

            Unassigned Unassigned
            famfop Daniel
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Zendesk Support