?info=json endpoint #641

goschtl · 2021-08-09T10:37:38Z

goschtl
Aug 9, 2021

Hey,

first thanks for this awesome software.

i have a virtual-host where the endpoint ?info=json does not work correctly.
I always get a 302 Response from the server.

Any idea what could happen? I looked through the logs but i did not find something useful there.
Here is the relevant part of my VirtualHost.

    OIDCProviderMetadataURL https://KEYCLOAK.de/auth/realms/siguv/.well-known/openid-configuration
    OIDCClientID apache
    OIDCClientSecret c6c8a4ff-4fe4-47bb-a188-9f64e0fce7b1
    OIDCScope "openid profile email"
    OIDCRedirectURI https://SITE.de/openid
    OIDCResponseType code
    OIDCInfoHook access_token userinfo
    OIDCCryptoPassphrase XXX

So i try to access https://SITE.de/openid?info=json but with no luck.

Tell me if you need more informations.

Thanks
Christian

zandbelt · 2021-08-09T11:06:18Z

zandbelt
Aug 9, 2021
Maintainer

which version are you on? the server debug logs should tell you more about what is happening

4 replies

goschtl Aug 9, 2021
Author

Here are the Version information:

Package: libapache2-mod-auth-openidc
Architecture: amd64
Version: 2.3.3-1build1
Priority: extra
Section: universe/web
Origin: Ubuntu
Maintainer: Ubuntu Developers [email protected]
Original-Maintainer: Hans Zandbelt [email protected]
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 462
Depends: libc6 (>= 2.14), libcjose0 (>= 0.4.1), libcurl4 (>= 7.16.2), libhiredis0.13 (>= 0.13.1), libjansson4 (>= 2.0.1), libpcre3, libssl1.1 (>= 1.1.0), apache2-api-20120211, apache2-bin (>= 2.4.16)
Filename: pool/universe/liba/libapache2-mod-auth-openidc/libapache2-mod-auth-openidc_2.3.3-1build1_amd64.deb
Size: 136300
MD5sum: 15d1e1acc909cce9c73181cdd2735a0e
SHA1: 4f178e814d553ed67e4e4cced6e2126d0de6337d
SHA256: 5283eb7796ce28ba58171d26edddfa93899bf3e29f101458c1987a8b106d71e2
Homepage: https://github.com/pingidentity/mod_auth_openidc
Description-en: OpenID Connect authentication module for Apache
mod_auth_openidc is an Apache module that authenticates users
of a web site against an OpenID Connect Identity Provider or an
OAuth 2.0 Authorization Server. It provides access control based
on claims and passes those claims to other modules and applications.
Description-md5: 2a46b2755c29c7c30c7caff32705ca4f

And here are the logs i filtered them and only show the oidc ones...

[Mon Aug 09 13:50:43.834401 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(3362): [client 91.6.37.136:56208] oidc_check_user_id: incoming request: "/openid?info=json", ap_is_initial_req(r)=1
[Mon Aug 09 13:50:43.834456 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2192): [client 91.6.37.136:56208] oidc_util_hdr_in_get: Cookie=docmanager.cookie=3b24473a-0be4-4ad9-9ca2-2cc8112e7c4b.YREWdw.Nm679br9f6x6hwp1xOnHn00NOuI; mod_auth_openidc_session=8456affc-a094-4bad-821e-f5706f216af8
[Mon Aug 09 13:50:43.834492 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1002): [client 91.6.37.136:56208] oidc_util_get_cookie: returning "mod_auth_openidc_session" = "8456affc-a094-4bad-821e-f5706f216af8"
[Mon Aug 09 13:50:43.834520 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/cache/common.c(567): [client 91.6.37.136:56208] oidc_cache_get: enter: 8456affc-a094-4bad-821e-f5706f216af8 (section=s, decrypt=0, type=shm)
[Mon Aug 09 13:50:43.834555 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/cache/common.c(601): [client 91.6.37.136:56208] oidc_cache_get: cache hit: return 4870 bytes from shm cache backend for key 8456affc-a094-4bad-821e-f5706f216af8
[Mon Aug 09 13:50:43.834676 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1154): [client 91.6.37.136:56208] oidc_util_request_matches_url: comparing "/openid"=="/openid"
[Mon Aug 09 13:50:43.834714 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(1357): [client 91.6.37.136:56208] oidc_handle_existing_session: enter
[Mon Aug 09 13:50:43.834742 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(1361): [client 91.6.37.136:56208] oidc_handle_existing_session: set remote_user to "[email protected]"
[Mon Aug 09 13:50:43.834776 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(900): [client 91.6.37.136:56208] oidc_log_session_expires: session max lifetime: Mon, 09 Aug 2021 19:47:21 GMT (in 28597 secs from now)
[Mon Aug 09 13:50:43.834805 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(1013): [client 91.6.37.136:56208] oidc_get_provider_from_session: enter
[Mon Aug 09 13:50:43.834830 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/cache/common.c(567): [client 91.6.37.136:56208] oidc_cache_get: enter: https://test.siguv.de/auth/realms/siguv/.well-known/openid-configuration (section=p, decrypt=0, type=shm)
[Mon Aug 09 13:50:43.834881 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/cache/common.c(601): [client 91.6.37.136:56208] oidc_cache_get: cache hit: return 5583 bytes from shm cache backend for key https://test.siguv.de/auth/realms/siguv/.well-known/openid-configuration
[Mon Aug 09 13:50:43.835066 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(1226): [client 91.6.37.136:56208] oidc_refresh_claims_from_userinfo_endpoint: userinfo_endpoint=https://test.siguv.de/auth/realms/siguv/protocol/openid-connect/userinfo, interval=0
[Mon Aug 09 13:50:43.835105 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: REMOTE-USER: [email protected]
[Mon Aug 09 13:50:43.835136 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(1267): [client 91.6.37.136:56208] oidc_copy_tokens_to_request_state: id_token={"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"} claims={"sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}
[Mon Aug 09 13:50:43.835183 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_sub: cb988a18-fd84-43f1-a178-178fb1cff10e
[Mon Aug 09 13:50:43.835212 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_sub: cb988a18-fd84-43f1-a178-178fb1cff10e"
[Mon Aug 09 13:50:43.835239 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_email_verified: 0
[Mon Aug 09 13:50:43.835263 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_email_verified: 0"
[Mon Aug 09 13:50:43.835289 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_name: Christian Klinger
[Mon Aug 09 13:50:43.835314 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_name: Christian Klinger"
[Mon Aug 09 13:50:43.835340 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_preferred_username: cklinger
[Mon Aug 09 13:50:43.835366 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_preferred_username: cklinger"
[Mon Aug 09 13:50:43.835390 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_given_name: Christian
[Mon Aug 09 13:50:43.835415 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_given_name: Christian"
[Mon Aug 09 13:50:43.835450 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_family_name: Klinger
[Mon Aug 09 13:50:43.835478 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_family_name: Klinger"
[Mon Aug 09 13:50:43.835507 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_CLAIM_email: [email protected]
[Mon Aug 09 13:50:43.835533 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_email: [email protected]"
[Mon Aug 09 13:50:43.835562 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_id_token_payload: {"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}
[Mon Aug 09 13:50:43.835600 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_id_token_payload: {"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}"
[Mon Aug 09 13:50:43.835658 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_access_token: eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJma01hOHdxekpHTVYyRTN2dzdaMHBkN1hfQTNuSDhVSFlzekg5blVvMHZBIn0.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.WFBm2sfDerBVaUTC09Exbpt6CEkRz7QPG4aQX22dBdYzo118pnglthD-LdX3V2bVPXx3wbCaFGrLPgEqww1kRatKgtoVtyJZLyJtD__n3vj2Oltm6PzCtvXhg1ZjZ2F7waZoy_5YtTt3cZW7YqjRBodPPUfpWw1KArz3ObirZUdVO7XoTa-5BQsQwwKdcah7uAOsWKwyXf8p355SBByw81VlU_2U4pKzinD8XT5f10kXoJIVQyJEm_gj6bCXZw-HWIxxpgkL4sfu_RDuuFyylpX0fB7rt5lAakFaEexcN6TyeHpRGUp3MKxFIhO_FYOrUF2lTYqQiNVaYCcWqB9bbw
[Mon Aug 09 13:50:43.835713 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_access_token: eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJma01hOHdxekpHTVYyRTN2dzdaMHBkN1hfQTNuSDhVSFlzekg5blVvMHZBIn0.eyJleHAiOjE2Mjg1MDk5NDEsImlhdCI6MTYyODUwOTY0MSwiYXV0aF90aW1lIjoxNjI4NTA5NjQxLCJqdGkiOiIyMzU5NjZiMi0wNTU3LTQ2ZTItODRiYy01ZjBlYWRiMTVlNjciLCJpc3MiOiJodHRwczovL3Rlc3Quc2lndXYuZGUvYXV0aC9yZWFsbXMvc2lndXYiLCJhdWQiOiJhY2NvdW50Iiwic3ViIjoiY2I5ODhhMTgtZmQ4NC00M2YxLWExNzgtMTc4ZmIxY2ZmMTBlIiwidHlwIjoiQmVhcmVyIiwiYXpwIjoiYXBhY2hlIiwibm9uY2UiOiJEWlI2VExiOXZHRUFpY2hPMXBqQ3hvSV9kOXUzeHJQblprN3BQWUUwU2k4Iiwic2Vzc2lvbl9zdGF0ZSI6ImY5NWE4MGQ4LTk2NmEtNGJmNi04ODdiLWFiMjI1NjZhYTllNiIsImFjciI6IjEiLCJyZWFsbV9hY2Nlc3MiOnsicm9sZXMiOlsiZGVmYXVsdC1yb2xlcy1zaWd1diIsIm9mZmxpbmVfYWNjZXNzIiwidW1hX2F1dGhvcml6YXRpb24iXX0sInJlc291cmNlX2FjY2VzcyI6eyJhY2NvdW50Ijp7InJvbGVzIjpbIm1hbmFnZS1hY2NvdW50IiwibWFuYWdlLWFjY291bnQtbGlua3MiLCJ2aWV3LXByb2ZpbGUiXX19LCJzY29wZSI6Im9wZW5pZCBwcm9maWxlIGVtYWlsIiwic2lkIjoiZjk1YTgwZDgtOTY2YS00YmY2LTg4N2ItYWIyMjU2NmFhOWU2IiwiZW1haWxfdmVyaWZpZWQiOmZhbHNlLCJuYW1lIjoiQ2hyaXN0aWFuIEtsaW5nZXIiLCJwcmVmZXJyZWRfdXNlcm5hbWUiOiJja2xpbmdlciIsImdpdmVuX25hbWUiOiJDaHJpc3RpYW4iLCJmYW1pbHlfbmFtZSI6IktsaW5nZXIiLCJlbWFpbCI6ImNrQG5vdmFyZXRvLmRlIn0.WFBm2sfDerBVaUTC09Exbpt6CEkRz7QPG4aQX22dBdYzo118pnglthD-LdX3V2bVPXx3wbCaFGrLPgEqww1kRatKgtoVtyJZLyJtD__n3vj2Oltm6PzCtvXhg1ZjZ2F7waZoy_5YtTt3cZW7YqjRBodPPUfpWw1KArz3ObirZUdVO7XoTa-5BQsQwwKdcah7uAOsWKwyXf8p355SBByw81VlU_2U4pKzinD8XT5f10kXoJIVQyJEm_gj6bCXZw-HWIxxpgkL4sfu_RDuuFyylpX0fB7rt5lAakFaEexcN6TyeHpRGUp3MKxFIhO_FYOrUF2lTYqQiNVaYCcWqB9bbw"
[Mon Aug 09 13:50:43.835772 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(2224): [client 91.6.37.136:56208] oidc_util_hdr_table_set: OIDC_access_token_expires: 1628509941
[Mon Aug 09 13:50:43.835826 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/util.c(1681): [client 91.6.37.136:56208] oidc_util_set_app_info: setting environment variable "OIDC_access_token_expires: 1628509941"
[Mon Aug 09 13:50:43.835860 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/mod_auth_openidc.c(900): [client 91.6.37.136:56208] oidc_log_session_expires: session inactivity timeout: Mon, 09 Aug 2021 11:55:15 GMT (in 271 secs from now)
[Mon Aug 09 13:50:43.835960 2021] [auth_openidc:debug] [pid 12972:tid 139849143076608] src/config.c(2203): [client 91.6.37.136:56208] oidc_auth_fixups: overlaying env with 10 elements
[Mon Aug 09 13:50:43.909343 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(3362): [client 91.6.37.136:56209] oidc_check_user_id: incoming request: "/login?(null)", ap_is_initial_req(r)=1
[Mon Aug 09 13:50:43.909416 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2192): [client 91.6.37.136:56209] oidc_util_hdr_in_get: Cookie=docmanager.cookie=3b24473a-0be4-4ad9-9ca2-2cc8112e7c4b.YREWkw.VygES66k8JS_SPa1Xw0DFg63XEc; mod_auth_openidc_session=8456affc-a094-4bad-821e-f5706f216af8
[Mon Aug 09 13:50:43.909459 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1002): [client 91.6.37.136:56209] oidc_util_get_cookie: returning "mod_auth_openidc_session" = "8456affc-a094-4bad-821e-f5706f216af8"
[Mon Aug 09 13:50:43.909488 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/cache/common.c(567): [client 91.6.37.136:56209] oidc_cache_get: enter: 8456affc-a094-4bad-821e-f5706f216af8 (section=s, decrypt=0, type=shm)
[Mon Aug 09 13:50:43.909544 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/cache/common.c(601): [client 91.6.37.136:56209] oidc_cache_get: cache hit: return 4870 bytes from shm cache backend for key 8456affc-a094-4bad-821e-f5706f216af8
[Mon Aug 09 13:50:43.909691 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1154): [client 91.6.37.136:56209] oidc_util_request_matches_url: comparing "/login"=="/openid"
[Mon Aug 09 13:50:43.909729 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(1357): [client 91.6.37.136:56209] oidc_handle_existing_session: enter
[Mon Aug 09 13:50:43.909757 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(1361): [client 91.6.37.136:56209] oidc_handle_existing_session: set remote_user to "[email protected]"
[Mon Aug 09 13:50:43.909796 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(900): [client 91.6.37.136:56209] oidc_log_session_expires: session max lifetime: Mon, 09 Aug 2021 19:47:21 GMT (in 28597 secs from now)
[Mon Aug 09 13:50:43.909828 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(1013): [client 91.6.37.136:56209] oidc_get_provider_from_session: enter
[Mon Aug 09 13:50:43.909857 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/cache/common.c(567): [client 91.6.37.136:56209] oidc_cache_get: enter: https://test.siguv.de/auth/realms/siguv/.well-known/openid-configuration (section=p, decrypt=0, type=shm)
[Mon Aug 09 13:50:43.909891 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/cache/common.c(601): [client 91.6.37.136:56209] oidc_cache_get: cache hit: return 5583 bytes from shm cache backend for key https://test.siguv.de/auth/realms/siguv/.well-known/openid-configuration
[Mon Aug 09 13:50:43.910070 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(1226): [client 91.6.37.136:56209] oidc_refresh_claims_from_userinfo_endpoint: userinfo_endpoint=https://test.siguv.de/auth/realms/siguv/protocol/openid-connect/userinfo, interval=0
[Mon Aug 09 13:50:43.910109 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: REMOTE-USER: [email protected]
[Mon Aug 09 13:50:43.910147 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(1267): [client 91.6.37.136:56209] oidc_copy_tokens_to_request_state: id_token={"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"} claims={"sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}
[Mon Aug 09 13:50:43.910198 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_sub: cb988a18-fd84-43f1-a178-178fb1cff10e
[Mon Aug 09 13:50:43.910228 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_sub: cb988a18-fd84-43f1-a178-178fb1cff10e"
[Mon Aug 09 13:50:43.910256 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_email_verified: 0
[Mon Aug 09 13:50:43.910289 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_email_verified: 0"
[Mon Aug 09 13:50:43.910319 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_name: Christian Klinger
[Mon Aug 09 13:50:43.910346 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_name: Christian Klinger"
[Mon Aug 09 13:50:43.910372 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_preferred_username: cklinger
[Mon Aug 09 13:50:43.910397 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_preferred_username: cklinger"
[Mon Aug 09 13:50:43.910421 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_given_name: Christian
[Mon Aug 09 13:50:43.910446 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_given_name: Christian"
[Mon Aug 09 13:50:43.910472 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_family_name: Klinger
[Mon Aug 09 13:50:43.910498 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_family_name: Klinger"
[Mon Aug 09 13:50:43.910523 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_CLAIM_email: [email protected]
[Mon Aug 09 13:50:43.910549 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_CLAIM_email: [email protected]"
[Mon Aug 09 13:50:43.910577 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_id_token_payload: {"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}
[Mon Aug 09 13:50:43.910615 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_id_token_payload: {"exp":1628509941,"iat":1628509641,"auth_time":1628509641,"jti":"f9f5a253-f5ee-48ca-b8b5-01cda039620e","iss":"https://test.siguv.de/auth/realms/siguv","aud":"apache","sub":"cb988a18-fd84-43f1-a178-178fb1cff10e","typ":"ID","azp":"apache","nonce":"DZR6TLb9vGEAichO1pjCxoI_d9u3xrPnZk7pPYE0Si8","session_state":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","at_hash":"OkWzakCMRcCZVcPTFpv5jQ","acr":"1","sid":"f95a80d8-966a-4bf6-887b-ab22566aa9e6","email_verified":false,"name":"Christian Klinger","preferred_username":"cklinger","given_name":"Christian","family_name":"Klinger","email":"[email protected]"}"
[Mon Aug 09 13:50:43.910661 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_access_token: eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJma01hOHdxekpHTVYyRTN2dzdaMHBkN1hfQTNuSDhVSFlzekg5blVvMHZBIn0.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.WFBm2sfDerBVaUTC09Exbpt6CEkRz7QPG4aQX22dBdYzo118pnglthD-LdX3V2bVPXx3wbCaFGrLPgEqww1kRatKgtoVtyJZLyJtD__n3vj2Oltm6PzCtvXhg1ZjZ2F7waZoy_5YtTt3cZW7YqjRBodPPUfpWw1KArz3ObirZUdVO7XoTa-5BQsQwwKdcah7uAOsWKwyXf8p355SBByw81VlU_2U4pKzinD8XT5f10kXoJIVQyJEm_gj6bCXZw-HWIxxpgkL4sfu_RDuuFyylpX0fB7rt5lAakFaEexcN6TyeHpRGUp3MKxFIhO_FYOrUF2lTYqQiNVaYCcWqB9bbw
[Mon Aug 09 13:50:43.910719 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_access_token: eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICJma01hOHdxekpHTVYyRTN2dzdaMHBkN1hfQTNuSDhVSFlzekg5blVvMHZBIn0.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.WFBm2sfDerBVaUTC09Exbpt6CEkRz7QPG4aQX22dBdYzo118pnglthD-LdX3V2bVPXx3wbCaFGrLPgEqww1kRatKgtoVtyJZLyJtD__n3vj2Oltm6PzCtvXhg1ZjZ2F7waZoy_5YtTt3cZW7YqjRBodPPUfpWw1KArz3ObirZUdVO7XoTa-5BQsQwwKdcah7uAOsWKwyXf8p355SBByw81VlU_2U4pKzinD8XT5f10kXoJIVQyJEm_gj6bCXZw-HWIxxpgkL4sfu_RDuuFyylpX0fB7rt5lAakFaEexcN6TyeHpRGUp3MKxFIhO_FYOrUF2lTYqQiNVaYCcWqB9bbw"
[Mon Aug 09 13:50:43.910765 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2224): [client 91.6.37.136:56209] oidc_util_hdr_table_set: OIDC_access_token_expires: 1628509941
[Mon Aug 09 13:50:43.910795 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(1681): [client 91.6.37.136:56209] oidc_util_set_app_info: setting environment variable "OIDC_access_token_expires: 1628509941"
[Mon Aug 09 13:50:43.910823 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/mod_auth_openidc.c(900): [client 91.6.37.136:56209] oidc_log_session_expires: session inactivity timeout: Mon, 09 Aug 2021 11:55:15 GMT (in 271 secs from now)
[Mon Aug 09 13:50:43.910853 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/util.c(2192): [client 91.6.37.136:56209] oidc_util_hdr_in_get: Cookie=docmanager.cookie=3b24473a-0be4-4ad9-9ca2-2cc8112e7c4b.YREWkw.VygES66k8JS_SPa1Xw0DFg63XEc; mod_auth_openidc_session=8456affc-a094-4bad-821e-f5706f216af8
[Mon Aug 09 13:50:43.910938 2021] [auth_openidc:debug] [pid 12971:tid 139849185040128] src/config.c(2203): [client 91.6.37.136:56209] oidc_auth_fixups: overlaying env with 10 elements

zandbelt Aug 9, 2021
Maintainer

I don't see a redirect happening on the request to /openid...
but I'd advise upgrading to the latest 2.4.9 anyhow

goschtl Aug 9, 2021
Author

thanks for info i guess i found the thing.

In my VirtualHost i had this proxy-pass directive:

ProxyPass / http://10.33.204.101:8091/
ProxyPassReverse / http://10.33.204.101:8091/

It seems that the userinfo was redirected to that so i did the following

 <Location /openid>
       AuthType openid-connect
       Require valid-user
       OIDCUnAuthAction pass
 </Location>

ProxyPass /openid !
ProxyPass / http://10.33.204.101:8091/
ProxyPassReverse / http://10.33.204.101:8091/

Now it works.
Thanks for your help!

zandbelt Aug 9, 2021
Maintainer

ah, good find; I'll include this in the documentation

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

?info=json endpoint #641

{{title}}

Replies: 1 comment 4 replies

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

?info=json endpoint #641

goschtl Aug 9, 2021

Replies: 1 comment · 4 replies

zandbelt Aug 9, 2021 Maintainer

goschtl Aug 9, 2021 Author

zandbelt Aug 9, 2021 Maintainer

goschtl Aug 9, 2021 Author

zandbelt Aug 9, 2021 Maintainer

goschtl
Aug 9, 2021

Replies: 1 comment 4 replies

zandbelt
Aug 9, 2021
Maintainer

goschtl Aug 9, 2021
Author

zandbelt Aug 9, 2021
Maintainer

goschtl Aug 9, 2021
Author

zandbelt Aug 9, 2021
Maintainer