By: Evan Tatarzycki user 21 Jun 2016 at 5:47 p.m. CDT

9 Responses
Evan Tatarzycki gravatar
We are in the process of evaluating GLUU. We have successfully installed on Ubuntu and integrated with Google: Default Authentication Mode: Default oxTrust authentication mode: gplus oxTrust via gplus is working. However OpenID Connect redirect to authorize endpoint is not working. Thank you in Advance. OpenID Connect Scopes configured such that openid Default = True Client is configured with mostly defaults. REDIRECT URL-> https://gluu-test.schoolica.com/oxauth/seam/resource/restv1/oxauth/authorize?redirect_uri=http%3A%2F%2Ffortworthisd.owschools.com%3A8080%2Fowsoo%2Foauth%2Fcallback&response_type=code&client_id=%40!9E18.EEC2.F42A.E22E!0001!A815.E3CB!0008!1799.DA65&scope=openid%20email%20profile 2016-06-21 22:46:39,084 ERROR [xdi.oxauth.authorize.ws.rs.AuthorizeRestWebServiceImpl] java.lang.NullPointerException at org.xdi.oxauth.model.authorize.ScopeChecker.checkScopesPolicy(ScopeChecker.java:70)

By Aliaksandr Samuseu staff 21 Jun 2016 at 6:16 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Evan. First, why do you use version 2.4.2? I believe for Ubuntu current one is 2.4.3. I also can't get what do you mean by: > oxTrust via gplus is working. However OpenID Connect redirect to authorize endpoint is not working. Can you log in to the oxTrust when authentication method is set to gplus? Then this effectively means that OpenID with gplus authentication IS working, as Gluu's oxTrust uses OpenID to get users' attributes. Regards, Alex.

By Evan Tatarzycki user 22 Jun 2016 at 10:04 a.m. CDT

Evan Tatarzycki gravatar
helloAlex!! thankYou for quick response. This project began a few months ago. I am picking it up. For that reason, 2.4.2 was installed back then. I attempted unsuccessfully to install 2.4.3 community version locally and on CentOS 7.x using yum. The https://github.com/GluuFederation/install instructions have been deprecated and the link to new does not work. I did not wish to break the 2.4.2 install. For that reason, I stuck with 2.4.2. See screenshots in link URL. We are able to login using admin through the front door to get into GLUU Admin interface. We would like to be able to use GLUU as our OpenID Connect IDP. We have a suite of applications that we would like to integrate with GLUU for Single Sign On to all of them. When we configure our local apps to redirect to the authorize endpoint, we get that error. I also tried to copy/paste the authorize endpoint URL into browser with no success and to use CURL to test it. We also have questions on pricing. If we purchase enterprise support - does that include openDJ licensing. I spoke with openDJ on phone; but the rep was not able to give me tiered pricing and has not called me back. Thanks again for quick response. Evan

By William Lowe user 22 Jun 2016 at 12:16 p.m. CDT

William Lowe gravatar
Hi Evan, I'll let Alex comment on the main issues, but I can respond to your question about support. We forked and maintain our own branch of the OpenDJ code, so yes, support for our version of OpenDJ is included in enterprise support. If you have any additional questions about VIP support feel free to email me directly at will@gluu.org. Thanks, Will

By Evan Tatarzycki user 22 Jun 2016 at 12:18 p.m. CDT

Evan Tatarzycki gravatar
Great! Thank you Will

By William Lowe user 22 Jun 2016 at 12:18 p.m. CDT

William Lowe gravatar
I guess I should clarify that it does not include a license for ForgeRock's version of OpenDJ. No commercial license is needed for our fork of OpenDJ.

By William Lowe user 22 Jun 2016 at 12:21 p.m. CDT

William Lowe gravatar
Evan, I also updated the broken link in the github file you mentioned. Thanks for pointing that out. You can find instructions for upgrading your server [here](https://gluu.org/docs/deployment/upgrading/).

By Aliaksandr Samuseu staff 22 Jun 2016 at 1:15 p.m. CDT

Aliaksandr Samuseu gravatar
I see your situation now. > I attempted unsuccessfully to install 2.4.3 community version locally and on CentOS 7.x using yum. That's strange, we've done several installs on CentOS7 lately, and they went ok. Do you remember what was the problem? >The https://github.com/GluuFederation/install instructions have been deprecated and the link to new does not work. I did not wish to break the 2.4.2 install. For that reason, I stuck with 2.4.2. I believe, this is the correct current link to CentOS7 install guide: [https://gluu.org/docs/deployment/centos7/](https://gluu.org/docs/deployment/centos7/). This is our official docs portal, by the way, and it has some guides on configuring OIDC, as well as gplus script, too, so feel free to have a look at them. I understand your worries about breaking your current setup, but may be we still could go with a clean install of a separate 2.4.3 instance (on another vm) and migration of all settings to it from your live 2.4.2 instance? Do you think it's still possible at this phase of the project?

By Evan Tatarzycki user 22 Jun 2016 at 2:27 p.m. CDT

Evan Tatarzycki gravatar
Thank You. We like your suggestion to upgrade to 2.4.3. We will try that approach. Thanks Again! You are welcome to close this issue.

By William Lowe user 22 Jun 2016 at 2:31 p.m. CDT

William Lowe gravatar
Sounds good, Evan. Feel free to open a new ticket if you run into any hurdles. Thanks, Will