By: cs chong user 16 May 2018 at 2:54 a.m. CDT

9 Responses
cs chong gravatar
I am setting up Gluu server as an AuthZ server, mainly serves as authorization (+ consent platform). I have an external identity provide or we call it OpenID Provider (OP), which provides an authentication service (AuthN) using the OpenID standard. E.g. keycloak or Auth0 Use Case: ``` 1. User accesses an application. 2. The application/relaying party (RP) prepares an authentication request containing the desired request parameters (client_id, scope, response_type & redirect_uri) and sends it to the Gluu Server Authorization Endpoint. 3. Gluu server authenticates users through an OpenID Provider (OP). 4. Gluu Server sends the user back to the application with an authorization code. 5. The application sends the code to the Gluu Server Token Endpoint to receive an Access Token and ID Token in the response. 6. The application uses the ID Token to authorise the user. At this point the application/RP can access the UserInfo endpoint for claims. ``` I did some research and read through a few documents/guide in Gluu website, unfortunately I couldn't found any guide that allow me to configure an external OpenID Provider (OP) in Gluu. I am not sure how this can be done in Gluu...

By Michael Schwartz Account Admin 16 May 2018 at 3 a.m. CDT

Michael Schwartz gravatar
An external OP would be consider "Inbound Identity". You would have to configure passport, and add the [OpenID strategy](https://github.com/jaredhanson/passport-openid)

By cs chong user 16 May 2018 at 4:34 a.m. CDT

cs chong gravatar
Hi Michael, Thanks for your prompt reply. :) I'm new to Gluu, hence I'm referring this guide ["How Passport is used in Gluu"](https://gluu.org/docs/ce/authn-guide/passport/) to add ["OpenID strategy"](https://github.com/jaredhanson/passport-openid) into the passport. Firstly I follow the step in the guide to do this, ``` 1. Logged into the Gluu Server chroot container - $ su - node - $ export PATH=$PATH:/opt/node/bin - $ cd /opt/gluu/node/passport/ 2. $ npm install passport-openid --save ``` After I would need to continue with the configuration of, ``` 3. Configure the strategy 4. Configure routes for the strategy 5. Call method to configure the strategy 6. Add button for the configured strategy in passport authentication UI ``` However, I do not understand how to configure step 3 to 6. Appreciate your help on this. Many thanks.

By cs chong user 18 May 2018 at 1:34 a.m. CDT

cs chong gravatar
Hi Michael, For ``` 3. Configure the strategy 4. Configure routes for the strategy 5. Call method to configure the strategy 6. Add button for the configured strategy in passport authentication UI ``` I tried to update these files, to include OpenID strategy. - _/opt/gluu/node/passport/server/routes/index.js_ ``` ... var passportOpenID = require('../auth/openid').passport; ... // ========= openid ========== router.get('auth/openid/callback', passportOpenID.authenticate('openid', { failureRedirect : '/passport/login' }), callbackResponse); router.get('/auth/openid/:token', validateToken, passportOpenID.authenticate('openid',{ scope :['email'] })); ... ``` - _/opt/gluu/node/passport/server/views/index.html_ ``` ... <a href="/auth/openid/passtoken" class="btn btn-default">OpenID</a> ... ``` Then I create an openid.js in, - _/opt/gluu/node/passport/server/auth/openid.js_ ``` var passport = require('passport'); var OpenIDStrategy = require('passport-openid').Strategy; var setCredentials = function(credentials) { var callbackURL = global.applicationHost.concat("/passport/auth/openid/callback"); passport.use(new OpenIDStrategy({ clientID: credentials.clientID, clientSecret: credentials.clientSecret, callbackURL: callbackURL, passReqToCallback: true }, function(request, accessToken, refreshToken, profile, done) { var userProfile = { id: profile.id, name: profile.displayName, username: profile.username || profile.id, email: profile.email, givenName: profile.name.givenName, familyName: profile.name.familyName, provider: profile.provider, accessToken: accessToken }; return done(null, userProfile); } )); }; module.exports = { passport: passport, setCredentials: setCredentials }; ``` After than, I restart the passport service. ``` $ service passport stop $ service passport start ``` I do not think it's working... Appreciate if you could let me know how to configure OpenID in Gluu.

By Michael Schwartz Account Admin 20 May 2018 at 8:58 a.m. CDT

Michael Schwartz gravatar
I'm re-opening this.

By Jose Gonzalez staff 21 May 2018 at 8:23 a.m. CDT

Jose Gonzalez gravatar
Hi cs, > I couldn't found any guide that allow me to configure an external OpenID Provider (OP) in Gluu. Out of the box Gluu's Passport supports SAML identity providers and the most popular social providers. Adding another provider flavour requires some work, however, in general terms you are doing fine with your integration. We expect to offer point and click capabilities for integrating providers (including OpenID) to make the process very straightforward in version 3.2 of Gluu Server. > I do not think it's working... Can you elaborate more on why you say so. Recall there are some pre-reqs needed for the setup to work (basically the steps from listed in this [section](https://gluu.org/docs/ce/authn-guide/passport/#setup-passportjs-with-gluu)). Attaching the passport log and oxauth_script log to the ticket would be useful. Those are found at `/opt/gluu/node/passport/server/logs` and `/opt/gluu/jetty/oxauth/logs` respectively in chroot.

By cs chong user 21 May 2018 at 11:17 p.m. CDT

cs chong gravatar
> Recall there are some pre-reqs needed for the setup to work (basically the steps from listed in this [section](https://gluu.org/docs/ce/authn-guide/passport/#setup-passportjs-with-gluu)). Yes, I did follow the all the pre-reqs steps. ![enter image description here](https://image.ibb.co/hKRvfo/Gluu_3.png "enter image title here") ![enter image description here](https://image.ibb.co/kcYxt8/Gluu_2.png "enter image title here") ![enter image description here](https://image.ibb.co/e0MT0o/Gluu.png "enter image title here") But when i tried to login, I didn't see the "openid" icon in the external provider. ![enter image description here](https://image.ibb.co/g33afo/ox_Auth_Passport_Login.png "enter image title here") The logs, - /opt/gluu/node/passport/server/logs/start.log ``` -bash-4.2# cat start.log module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) module.js:545 throw err; ^ Error: Cannot find module 'express' at Function.Module._resolveFilename (module.js:543:15) at Function.Module._load (module.js:470:25) at Module.require (module.js:593:17) at require (internal/module.js:11:18) at Object.<anonymous> (/opt/gluu/node/passport/server/app.js:2:15) at Module._compile (module.js:649:30) at Object.Module._extensions..js (module.js:660:10) at Module.load (module.js:561:32) at tryModuleLoad (module.js:501:12) at Function.Module._load (module.js:493:3) ``` - /opt/gluu/jetty/oxauth/logs/2018_05_22.jetty.log ``` java.lang.Thread.run(Thread.java:748) [?:1.8.0_162] Caused by: org.gluu.site.ldap.exception.ConnectionException: Failed to lookup entry --> A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 169, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:534) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more Caused by: com.unboundid.ldap.sdk.LDAPSearchException: A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 169, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at com.unboundid.ldap.sdk.SearchRequest.process(SearchRequest.java:1193) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.search(LDAPConnection.java:3635) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.getEntry(LDAPConnection.java:1712) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.getEntry(AbstractConnectionPool.java:611) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:531) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more 2018-05-22 12:02:08,207 INFO [Thread-142] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [] 2018-05-22 12:02:23,414 ERROR [Thread-156] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:554) - Failed to load appliance entry from Ldap org.gluu.site.ldap.persistence.exception.EntryPersistenceException: Failed to find entry: inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:303) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.AbstractEntryManager.find(AbstractEntryManager.java:444) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.AbstractEntryManager.find(AbstractEntryManager.java:381) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager$Proxy$_$$_WeldClientProxy.find(Unknown Source) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.xdi.oxauth.service.AppInitializer.loadAppliance(AppInitializer.java:552) [classes/:?] at org.xdi.oxauth.service.AppInitializer.loadLdapIdpAuthConfigs(AppInitializer.java:486) [classes/:?] at org.xdi.oxauth.service.AppInitializer.loadLdapAuthConfigs(AppInitializer.java:580) [classes/:?] at org.xdi.oxauth.service.AppInitializer.reloadConfiguration(AppInitializer.java:257) [classes/:?] at org.xdi.oxauth.service.AppInitializer.reloadConfigurationTimerEvent(AppInitializer.java:244) [classes/:?] at org.xdi.oxauth.service.AppInitializer$Proxy$_$$_WeldSubclass.reloadConfigurationTimerEvent$$super(Unknown Source) [classes/:?] at sun.reflect.GeneratedMethodAccessor223.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_162] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_162] at org.jboss.weld.interceptor.proxy.TerminalAroundInvokeInvocationContext.proceedInternal(TerminalAroundInvokeInvocationContext.java:51) [weld-core-impl-3.0.1.Final.jar:3.0.1.Final] at org.jboss.weld.interceptor.proxy.AroundInvokeInvocationContext.proceed(AroundInvokeInvocationContext.java:78) [weld-core-impl-3.0.1.Final.jar:3.0.1.Final] at org.xdi.service.cdi.async.AsynchronousInterceptor$1.get(AsynchronousInterceptor.java:36) [oxcore-service-3.1.3.Final.jar:?] at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1590) [?:1.8.0_162] at java.lang.Thread.run(Thread.java:748) [?:1.8.0_162] Caused by: org.gluu.site.ldap.exception.ConnectionException: Failed to lookup entry --> A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 104, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:534) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more Caused by: com.unboundid.ldap.sdk.LDAPSearchException: A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 104, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at com.unboundid.ldap.sdk.SearchRequest.process(SearchRequest.java:1193) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.search(LDAPConnection.java:3635) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.getEntry(LDAPConnection.java:1712) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.getEntry(AbstractConnectionPool.java:611) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:531) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more 2018-05-22 12:02:23,781 INFO [Thread-156] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [] 2018-05-22 12:02:37,975 INFO [Thread-219] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [org.gluu.site.ldap.persistence.LdapEntryManager@6c51a07] 2018-05-22 12:02:53,932 INFO [Thread-225] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [org.gluu.site.ldap.persistence.LdapEntryManager@325b960a] ``` - /opt/gluu/jetty/oxauth/logs/oxauth.log ``` APConnection.getEntry(LDAPConnection.java:1712) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.getEntry(AbstractConnectionPool.java:611) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:531) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more 2018-05-22 12:02:08,207 INFO [Thread-142] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [] 2018-05-22 12:02:23,414 ERROR [Thread-156] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:554) - Failed to load appliance entry from Ldap org.gluu.site.ldap.persistence.exception.EntryPersistenceException: Failed to find entry: inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:303) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.AbstractEntryManager.find(AbstractEntryManager.java:444) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.AbstractEntryManager.find(AbstractEntryManager.java:381) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager$Proxy$_$$_WeldClientProxy.find(Unknown Source) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.xdi.oxauth.service.AppInitializer.loadAppliance(AppInitializer.java:552) [classes/:?] at org.xdi.oxauth.service.AppInitializer.loadLdapIdpAuthConfigs(AppInitializer.java:486) [classes/:?] at org.xdi.oxauth.service.AppInitializer.loadLdapAuthConfigs(AppInitializer.java:580) [classes/:?] at org.xdi.oxauth.service.AppInitializer.reloadConfiguration(AppInitializer.java:257) [classes/:?] at org.xdi.oxauth.service.AppInitializer.reloadConfigurationTimerEvent(AppInitializer.java:244) [classes/:?] at org.xdi.oxauth.service.AppInitializer$Proxy$_$$_WeldSubclass.reloadConfigurationTimerEvent$$super(Unknown Source) [classes/:?] at sun.reflect.GeneratedMethodAccessor223.invoke(Unknown Source) ~[?:?] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_162] at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_162] at org.jboss.weld.interceptor.proxy.TerminalAroundInvokeInvocationContext.proceedInternal(TerminalAroundInvokeInvocationContext.java:51) [weld-core-impl-3.0.1.Final.jar:3.0.1.Final] at org.jboss.weld.interceptor.proxy.AroundInvokeInvocationContext.proceed(AroundInvokeInvocationContext.java:78) [weld-core-impl-3.0.1.Final.jar:3.0.1.Final] at org.xdi.service.cdi.async.AsynchronousInterceptor$1.get(AsynchronousInterceptor.java:36) [oxcore-service-3.1.3.Final.jar:?] at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1590) [?:1.8.0_162] at java.lang.Thread.run(Thread.java:748) [?:1.8.0_162] Caused by: org.gluu.site.ldap.exception.ConnectionException: Failed to lookup entry --> A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 104, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:534) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more Caused by: com.unboundid.ldap.sdk.LDAPSearchException: A client-side timeout was encountered while waiting 300000ms for a response to search request with message ID 104, base DN 'inum=@!A802.2908.7B46.5FD6!0002!9331.F156,ou=appliances,o=gluu', scope BASE, and filter '(objectClass=*)' from server localhost:1636. at com.unboundid.ldap.sdk.SearchRequest.process(SearchRequest.java:1193) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.search(LDAPConnection.java:3635) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.LDAPConnection.getEntry(LDAPConnection.java:1712) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at com.unboundid.ldap.sdk.AbstractConnectionPool.getEntry(AbstractConnectionPool.java:611) ~[unboundid-ldapsdk-3.2.0.jar:3.2.0] at org.gluu.site.ldap.OperationsFacade.lookup(OperationsFacade.java:531) ~[oxcore-ldap-3.1.3.Final.jar:?] at org.gluu.site.ldap.persistence.LdapEntryManager.find(LdapEntryManager.java:297) ~[oxcore-ldap-3.1.3.Final.jar:?] ... 17 more 2018-05-22 12:02:23,781 INFO [Thread-156] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [] 2018-05-22 12:02:37,975 INFO [Thread-219] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [org.gluu.site.ldap.persistence.LdapEntryManager@6c51a07] 2018-05-22 12:02:53,932 INFO [Thread-225] [org.xdi.oxauth.service.AppInitializer] (AppInitializer.java:371) - Recreated instance ldapAuthEntryManager: [org.gluu.site.ldap.persistence.LdapEntryManager@325b960a] ``` - /opt/gluu/jetty/oxauth/logs/oxauth_persistence.log ``` 2018-05-22 11:47:22,114 INFO [main] [org.gluu.site.ldap.LDAPConnectionProvider] (LDAPConnectionProvider.java:195) - Attempting to create connection pool: 1 2018-05-22 12:02:37,789 INFO [Thread-219] [org.gluu.site.ldap.LDAPConnectionProvider] (LDAPConnectionProvider.java:195) - Attempting to create connection pool: 1 2018-05-22 12:02:37,883 INFO [Thread-219] [org.gluu.site.ldap.LDAPConnectionProvider] (LDAPConnectionProvider.java:195) - Attempting to create connection pool: 1 2018-05-22 12:02:53,411 INFO [Thread-225] [org.gluu.site.ldap.LDAPConnectionProvider] (LDAPConnectionProvider.java:195) - Attempting to create connection pool: 1 2018-05-22 12:02:53,714 INFO [Thread-225] [org.gluu.site.ldap.LDAPConnectionProvider] (LDAPConnectionProvider.java:195) - Attempting to create connection pool: 1 ``` - /opt/gluu/jetty/oxauth/logs/oxauth_script.log ``` 2018-05-22 11:47:26,971 INFO [Thread-30] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: Initialized successfully 2018-05-22 11:47:26,973 INFO [Thread-30] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: Initialization init method call 2018-05-22 11:47:26,974 INFO [Thread-30] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: Extension module key not found 2018-05-22 11:54:14,900 INFO [qtp1744347043-10] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: Prepare for Step 1 method call 2018-05-22 11:54:14,903 INFO [qtp1744347043-10] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: session {auth_step: 1, acr: passport_social, remote_ip: 10.10.2.206, scope: openid email, response_type: code, redirect_uri: http://localhost:3001/callback, client_id: @!A802.2908.7B46.5FD6!0001!C493.71ED!0008!7C4F.6723.E6E2.CA80} 2018-05-22 11:54:14,923 INFO [qtp1744347043-10] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: old state is none 2018-05-22 11:54:44,764 INFO [qtp1744347043-18] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: Prepare for Step 1 method call 2018-05-22 11:54:44,766 INFO [qtp1744347043-18] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: session {auth_step: 1, acr: passport_social, remote_ip: 10.10.2.206, scope: openid email, response_type: code, redirect_uri: http://localhost:3001/callback, client_id: @!A802.2908.7B46.5FD6!0001!C493.71ED!0008!7C4F.6723.E6E2.CA80} 2018-05-22 11:54:44,767 INFO [qtp1744347043-18] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:239) - Passport-social: old state is none ```

By Jose Gonzalez staff 22 May 2018 at 7:40 a.m. CDT

Jose Gonzalez gravatar
Hi cs, In `/opt/gluu/node/passport/server/logs` there should be a log named "passport" or similar... From what I see in your `start.log` the passport service is not even started. It seems your node app does not have the node modules required: in `/opt/gluu/node/passport/node_modules` you should be able to see ~ 200 directories. Can you tell us if you have them there? When passport installation takes places, it connects to the remote nodejs repository and downloads/installs all modules needed. I attach an image showing how the "express" module directory looks like in a working environment (your log says apparently you don't have it...) For a next time please include the logs as attachments, also for oxauth there is no need for files named after dates (e.g `2018_05_22.jetty.log`, just the `oxauth.log` suffices).

By Jose Gonzalez staff 22 May 2018 at 7:42 a.m. CDT

Jose Gonzalez gravatar
... and the image

By Jose Gonzalez staff 23 May 2018 at 6:32 p.m. CDT

Jose Gonzalez gravatar
Hi, We would like to hear about your progress on the task. Feel free to post here if you have questions, we'll be happy to assist you. Kind regards, Jose.