Landscape OpenID Authentication
Clash Royale CLAN TAG#URR8PPP up vote
2
down vote
favorite
Currently, I have an instance of Canonical Landscape installed and I would like to change the authentication method to use ADFS 2016 via OpenID.
However, Landscape offers these two configurations in services.conf:
openid-provider-url = https://login.ubuntu.com/
openid-logout-url = https://login.ubuntu.com/+logout
If I append the following url:
openid-provider-url = https://<my_adfs_server>/adfs/oauth2/authorize/
I Get the error:
Error in discovery: Error fetching XRDS document: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>
Installing the ADFS certificate does not solve my problem and as there is no place for me to configure the clientId from ADFS OpenID.
How is it possible to integrate Landscape with ADFS via OpenID?
*PAM is not an option, because I can't connect directly to AD.
landscape
asked Apr 12 at 14:17
Edmar Junior
111
add a comment |Â
up vote
2
down vote
favorite
Currently, I have an instance of Canonical Landscape installed and I would like to change the authentication method to use ADFS 2016 via OpenID.
However, Landscape offers these two configurations in services.conf:
openid-provider-url = https://login.ubuntu.com/
openid-logout-url = https://login.ubuntu.com/+logout
If I append the following url:
openid-provider-url = https://<my_adfs_server>/adfs/oauth2/authorize/
I Get the error:
Error in discovery: Error fetching XRDS document: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>
Installing the ADFS certificate does not solve my problem and as there is no place for me to configure the clientId from ADFS OpenID.
How is it possible to integrate Landscape with ADFS via OpenID?
*PAM is not an option, because I can't connect directly to AD.
landscape
asked Apr 12 at 14:17
Edmar Junior
111
add a comment |Â
up vote
2
down vote
favorite
up vote
2
down vote
favorite
Currently, I have an instance of Canonical Landscape installed and I would like to change the authentication method to use ADFS 2016 via OpenID.
However, Landscape offers these two configurations in services.conf:
openid-provider-url = https://login.ubuntu.com/
openid-logout-url = https://login.ubuntu.com/+logout
If I append the following url:
openid-provider-url = https://<my_adfs_server>/adfs/oauth2/authorize/
I Get the error:
Error in discovery: Error fetching XRDS document: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>
Installing the ADFS certificate does not solve my problem and as there is no place for me to configure the clientId from ADFS OpenID.
How is it possible to integrate Landscape with ADFS via OpenID?
*PAM is not an option, because I can't connect directly to AD.
landscape
asked Apr 12 at 14:17
Edmar Junior
111
Currently, I have an instance of Canonical Landscape installed and I would like to change the authentication method to use ADFS 2016 via OpenID.
However, Landscape offers these two configurations in services.conf:
openid-provider-url = https://login.ubuntu.com/
openid-logout-url = https://login.ubuntu.com/+logout
If I append the following url:
openid-provider-url = https://<my_adfs_server>/adfs/oauth2/authorize/
I Get the error:
Error in discovery: Error fetching XRDS document: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>
Installing the ADFS certificate does not solve my problem and as there is no place for me to configure the clientId from ADFS OpenID.
How is it possible to integrate Landscape with ADFS via OpenID?
*PAM is not an option, because I can't connect directly to AD.
landscape
landscape
asked Apr 12 at 14:17
Edmar Junior
111
asked Apr 12 at 14:17
Edmar Junior
111
asked Apr 12 at 14:17
Edmar Junior
111
asked Apr 12 at 14:17
Edmar Junior
111
asked Apr 12 at 14:17
Edmar Junior
111
111
add a comment |Â
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1024382%2flandscape-openid-authentication%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
var $window = $(window),
onScroll = function(e)
var $elem = $('.new-login-left'),
docViewTop = $window.scrollTop(),
docViewBottom = docViewTop + $window.height(),
elemTop = $elem.offset().top,
elemBottom = elemTop + $elem.height();
if ((docViewTop elemBottom))
StackExchange.using('gps', function() StackExchange.gps.track('embedded_signup_form.view', location: 'question_page' ); );
$window.unbind('scroll', onScroll);
;
$window.on('scroll', onScroll);
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password