[8.0] Add auth saml #274

houzefa-abba · 2015-10-19T17:06:38Z

This addon lets users log into Odoo via an SAML2 provider.
Requires lasso http://lasso.entrouvert.org.

…cleaning

…location assignation done by OE

…es on production servers when admins have removed the configuration entry instead of disabling it.

…e proper relaystate

--HG-- branch : odoo8

…tent for everything --HG-- branch : odoo8

…6ebc0 --HG-- branch : odoo8

--HG-- branch : odoo8

Suggested by petrus-v on <OCA#274>. --HG-- branch : odoo8

--HG-- branch : odoo8

houzefa-abba · 2016-08-23T14:52:07Z

Hey @petrus-v, thanks for the review. Most changes you have suggested, and some more to get this to properly work on Odoo 8 & 9, have been applied.

Remaining travis failures (I am stuck on both):

pylint-odoo fails because it does not understand some RST directives used in the sphinx doc that has been added. Removing that doc would be a pity; is there a way to tell pylint-odoo to ignore some files? -> pylint-odoo fails if the addon contains Sphinx documentation pylint-odoo#38
Tests fail because the database_cleanup addon attempts to remove a table added by auth_saml and fails?

This seems to be getting quite close to success; thanks for any help on these 2 points!

gurneyalex · 2016-08-24T06:32:56Z

@hbrunn it looks like there is still some issues related to database_cleanup. Your input on this is welcome.

yasii1991 · 2017-08-17T10:48:35Z

Hi,

I have been struggling with the working of this module. I am trying to use the shibboleth idp, I have entered the metadata from the idp and also have the sp metadata configured. Now when I click on the provider login link, I get an error from lasso as follows

File "/usr/lib/python2.7/dist-packages/lasso.py", line 6409, in addProviderFromBuffer
Error.raise_on_rc(rc)
File "/usr/lib/python2.7/dist-packages/lasso.py", line 62, in raise_on_rc
raise exception
ServerAddProviderFailedError: <lasso.ServerAddProviderFailedError(-202): Failed to add new provider.>

Please provide details regarding why this is happening as I am not able to debug further into the package. And also does lasso work with Shibboleth IDP. If it doesn't what's the other alternative I have?

houzefa-abba · 2017-12-12T15:32:41Z

PR canceled for now; dev will continue on https://bitbucket.org/xcg/auth_saml for the moment.

Suggested by petrus-v on <OCA/server-tools#274>. --HG-- branch : odoo8

Syncing from upstream OCA/server-tools (10.0)

faide and others added 30 commits October 19, 2015 18:40

Initial import

2d515e8

MASSIVE commit. Working POC. This is just a POC. We'll need a lot of …

f0d00eb

…cleaning

Now with proper request encoding!!! we will now test the signature test

8f24011

Fixed issue for database that does not have saml providers

5da4193

[security] Fixed values

d159ce6

Added a starting point rst documentation... Not finished YET.

a43dc3a

Fixed an information leak... This is an important update

aa92302

Added css and body to the default values

932274a

Try to use a proper url redirect instead of just the barebone window.…

144990c

…location assignation done by OE

Sample local provider is now disabled by default to avoid update issu…

7f55f24

…es on production servers when admins have removed the configuration entry instead of disabling it.

Added a specific case for clients coming to the singin url without th…

fc44b3b

…e proper relaystate

Added French translation

1884750

Bumped version to 1.0(stable)

f54879e

Added tag TAG_1.0 for changeset 0971293545c0

ff13d1d

Bumped version to 1.0.1(dev)

258cbf8

Fixes OCA#1

9d3ffe9

updated hgignore

b3ba0e4

Made body editable

ce97438

1.1

8062faf

Added tag TAG_1.1 for changeset 440c74a3b23e

bd5a2cd

1.1.1

0795dd4

Fixed missing module

c3848a8

1.2

d7befbf

Added tag TAG_1.2 for changeset e0aa862214f8

f6e5ee9

dev version

63494c6

Add TODO for multi access

1e0a21f

New ignore pattern for pycharm projects

7615a71

docstring

06b99fe

Tokens are now in their own table to avoid locks on res.users

d532280

Added #security rules, missing import and NEWS and README files

c11d67d

pedrobaeza mentioned this pull request Jan 26, 2016

Migration to version 9.0 #271

Closed

59 tasks

houzefa-abba and others added 19 commits August 22, 2016 18:10

Temporarily revert some changes to import updates

2dc67ae

docstrings

bf7bf66

--HG-- branch : odoo8

implement real attribute matching instead of using subject.nameId.con…

ff3d516

…tent for everything --HG-- branch : odoo8

Remove a trailing comma introduced during the grafting of rev d67d84c…

e5e9730

…6ebc0 --HG-- branch : odoo8

Also clear out the "password_crypt" field when clearing out "password"

e7845f4

--HG-- branch : odoo8

Security: Let users in the "access rights" group see SAML providers

c60b8e4

--HG-- branch : odoo8

Don't add different states twice to the same URL

1d017d5

--HG-- branch : odoo8

Don't clear out the pass of the Odoo admin.

e31de2a

Suggested by petrus-v on <OCA#274>. --HG-- branch : odoo8

Add a missing import

9895008

--HG-- branch : odoo8

Code formatting (flake8 valid)

0c618ed

--HG-- branch : odoo8

Don't bork other auth addons when using this one

cfd806d

--HG-- branch : odoo8

Odoo 8 style override of "res.users::check_credentials"

38bb5f7

--HG-- branch : odoo8

Remove an old comment

3371d44

--HG-- branch : odoo8

Prefer "ensure_one" to a comment

1d6d8f2

--HG-- branch : odoo8

Various changes done while submitting to the OCA

e0c9d12

--HG-- branch : odoo8

model/ -> models/

e2eb8b2

--HG-- branch : odoo8

Test scaffold (nothing yet)

93d6fe4

--HG-- branch : odoo8

Sphinx doc

209a521

--HG-- branch : odoo8

Code formatting (flake8 valid)

cff5f27

houzefa-abba closed this Dec 12, 2017

houzefa-abba deleted the 8.0-auth_saml branch December 12, 2017 15:32

houzefa-abba mentioned this pull request Feb 16, 2018

odoo 11 xcgd/auth_saml#8

Closed

max3903 pushed a commit to ursais/server-auth that referenced this pull request Mar 26, 2018

Don't clear out the pass of the Odoo admin.

0565e89

Suggested by petrus-v on <OCA/server-tools#274>. --HG-- branch : odoo8

max3903 pushed a commit to ursais/server-auth that referenced this pull request Mar 28, 2018

Don't clear out the pass of the Odoo admin.

a36c2d8

Suggested by petrus-v on <OCA/server-tools#274>. --HG-- branch : odoo8

SiesslPhillip pushed a commit to grueneerde/OCA-server-tools that referenced this pull request Nov 20, 2024

Merge pull request OCA#274 from OCA/10.0

d0a94a8

Syncing from upstream OCA/server-tools (10.0)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

[8.0] Add auth saml #274

[8.0] Add auth saml #274

Uh oh!

houzefa-abba commented Oct 19, 2015

Uh oh!

houzefa-abba commented Aug 23, 2016 •

edited

Loading

Uh oh!

gurneyalex commented Aug 24, 2016

Uh oh!

yasii1991 commented Aug 17, 2017

Uh oh!

houzefa-abba commented Dec 12, 2017

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Uh oh!

[8.0] Add auth saml #274

[8.0] Add auth saml #274

Uh oh!

Conversation

houzefa-abba commented Oct 19, 2015

Uh oh!

houzefa-abba commented Aug 23, 2016 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gurneyalex commented Aug 24, 2016

Uh oh!

yasii1991 commented Aug 17, 2017

Uh oh!

houzefa-abba commented Dec 12, 2017

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

houzefa-abba commented Aug 23, 2016 •

edited

Loading