From: Sander A. <sa....@fz...> - 2023-01-12 16:02:46
|
Hi Krzysztof, we got some tickets that our instance show in the trustedApplications module services with the name null null (see screenshot). Which attribute does the module use to display the name? Best regards, Sander -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ----------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ----------------------------------------------------------------------- ----------------------------------------------------------------------- |
From: Krzysztof B. <kb...@un...> - 2023-01-13 08:37:10
|
Hi Sander, W dniu 12.01.2023 o 17:02, Sander Apweiler pisze: > Hi Krzysztof, > > we got some tickets that our instance show in the trustedApplications > module services with the name null null (see screenshot). Which > attribute does the module use to display the name? > That depends on the type of application. In case of SAML SPs it is not in attribute, it is taken from metadata. In case of OAuth it is in general taken from sys:oauth:clientName (in proper group with IdP's OAuth clients) or from '/' attribute used as displayedName (by default 'name'). Anyway nulls should not be shown. Can you please give any hint on what is inside those blocked entries? Would be very helpful to know at least whether those were SAML or OAuth apps. Best, Krzysztof |
From: Sander A. <sa....@fz...> - 2023-01-13 08:43:49
Attachments:
smime.p7s
|
Good morning Krzysztof, in this case it was OAuth. I will check if the attributes were set correctly. Best regards, Sander On Fri, 2023-01-13 at 09:36 +0100, Krzysztof Benedyczak wrote: > Hi Sander, > > W dniu 12.01.2023 o 17:02, Sander Apweiler pisze: > > Hi Krzysztof, > > > > we got some tickets that our instance show in the > > trustedApplications > > module services with the name null null (see screenshot). Which > > attribute does the module use to display the name? > > > That depends on the type of application. In case of SAML SPs it is > not > in attribute, it is taken from metadata. > > In case of OAuth it is in general taken from sys:oauth:clientName (in > proper group with IdP's OAuth clients) or from '/' attribute used as > displayedName (by default 'name'). > > Anyway nulls should not be shown. Can you please give any hint on > what > is inside those blocked entries? Would be very helpful to know at > least > whether those were SAML or OAuth apps. > > Best, > Krzysztof > > -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ----------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ----------------------------------------------------------------------- ----------------------------------------------------------------------- |
From: Krzysztof B. <kb...@un...> - 2023-01-20 17:27:24
|
Hi Sander, W dniu 13.01.2023 o 09:43, Sander Apweiler pisze: > Good morning Krzysztof, > in this case it was OAuth. I will check if the attributes were set > correctly. > Have you by chance identified the source of the problem? We are so far only able to reproduce this behavior when setting client name attribute to literal "null null" value. Still investigating, but wanted to hear whether you have any new insights here? Thanks, Krzysztof |
From: Sander A. <sa....@fz...> - 2023-01-23 08:00:09
Attachments:
smime.p7s
|
Good morning Krzysztof, my email stocked in the drafts folder ... So the sys:oauth:clientName is stored in /oauth-clients and is set for this client. The attribute of setting the display name is not set to all oauth clients, which does not seem to be an issue for other clients. Best regards, Sander On Fri, 2023-01-20 at 18:27 +0100, Krzysztof Benedyczak wrote: > Hi Sander, > > W dniu 13.01.2023 o 09:43, Sander Apweiler pisze: > > Good morning Krzysztof, > > in this case it was OAuth. I will check if the attributes were set > > correctly. > > > Have you by chance identified the source of the problem? We are so > far > only able to reproduce this behavior when setting client name > attribute > to literal "null null" value. Still investigating, but wanted to hear > whether you have any new insights here? > > Thanks, > Krzysztof > -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ----------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ----------------------------------------------------------------------- ----------------------------------------------------------------------- |
From: Krzysztof B. <kb...@un...> - 2023-01-24 08:51:39
|
W dniu 23.01.2023 o 08:59, Sander Apweiler pisze: > Good morning Krzysztof, > my email stocked in the drafts folder ... > > So the sys:oauth:clientName is stored in /oauth-clients and is set for > this client. The attribute of setting the display name is not set to > all oauth clients, which does not seem to be an issue for other > clients. Thanks, we found one bug in this area, it is likely that it was a root cause of your problem. Will be fixed in the next release, we will see if it helps. Best, Krzysztof |