I couldn’t make the Azure AD plugin configured. https://github.com/discourse/discourse-azure-ad After adding to app.yml, rebuilding doesn’t work. Is the plugin obsolete?

[图片] Chanka_Dod: Is the plugin obsolete? Why would you leap straight to the plugin being obsolete? [图片] Chanka_Dod: After adding to app.yml, rebuilding doesn’t work. Define “doesn’t work”. The full console output from the rebuild run would be preferred.

[图片] mpalmer: Why would you leap straight to the plugin being obsolete? As I couldn’t find the plugin in the meta, I assumed it to be obsolete. :slight_smile: I added the plugin to app.yml like below hooks: after_code: - exec: cd: $home/plugins cmd: - git clone https://github.com/discourse/docker_manager.git - git clone https://github.com/discourse/discourse-azure-ad.git During the rebuild it fails at the below point. FAILED -------------------- Pups::ExecError: cd /var/www/discourse && su discourse -c 'bundle exec rake db:migrate' failed with return # Location of failure: /pups/lib/pups/exec_command.rb:108:in `spawn' exec failed with the params {"cd"=>"$home", "hook"=>"bundle_exec", "cmd"=>["su discourse -c 'bundle install --deployment --verbose --without test --without development'", "su discourse -c 'bundle exec rake db:migrate'", "su discourse -c 'bundle exec rake assets:precompile'"]} 4c8dc9092f38bca99f21fac1c7e417f07d979e48f466259088937d1f02345087 ** FAILED TO BOOTSTRAP ** please scroll up and look for earlier error messages, there may be more than one

[图片] Chanka_Dod: please scroll up and look for earlier error messages Yeah… we are going to need that :wink:

Sorry for being late to reply. It’s Yesterday that I was look into the discourse configuration again. Finally I was able to configure it successfully. Seems like I have done a silly mistake when configuring the plugin. I have not properly added the environment variables to app.yml. Everything seems to be working smoothly now. :smiley: May I know why it’s not published in the meta as a plugin yet? Cheers

Hi Chanka Can you please explain a little more what you did to get it to compile? I can’t get Discourse rebuilt with the plugin in my app.yml file. hooks: after_code: - exec: cd: $home/plugins cmd: - git clone https://github.com/discourse/docker_manager.git - git clone https://github.com/discourse/discourse-azure-ad.git Thanks! Ryan

Hi Ryan Before rebuilding you need to If you’re running Discourse from the Docker container, add these environment variables to your container’s yml file: DISCOURSE_AZURE_CLIENT_ID DISCOURSE_AZURE_CLIENT_SECRET (optional) DISCOURSE_AZURE_TITLE Cheers Chanka

Thanks, Chanka! Can’t believe it’s that easy. :slight_smile:

Followup question for @Chanka_Dod and @sam: The oAuth plug-in is working great, except one thing: The user’s email address is incorrect. The plug-in is populating the email address as the short name and the Active Directory domain, neither of which are correct. Example my email address is r-nix@mycollege.edu but the oAuth plugin is making the email address rtn456@ad.mycollege.edu. Is there a way to add something to the code that populates the user account as the ‘mail’ attribute in LDAP or Active Directory.

I am not sure exactly what changes are needed would appreciate some help: The implementation now is all here: plugin.rb main # name: discourse-azure-ad # about: Microsoft Azure Active Directory OAuth support for Discourse # version: 0.1 # authors: Neil Lalonde # url: https://github.com/discourse/discourse-azure-ad require_dependency 'auth/oauth2_authenticator' gem 'omniauth-azure-oauth2', '0.0.10' class AzureOAuth2Authenticator 'azure_oauth2', :tenant_id => GlobalSetting.try(:azure_tenant_id) || "common", :client_id => GlobalSetting.azure_client_id, :client_secret => GlobalSetting.azure_client_secret end end This file has been truncated. show original The gem itself that implement the bridge is here: https://github.com/KonaTeam/omniauth-azure-oauth2 So you need to figure out first if the change is required in the library we are leaning on vs the library we control.

Crosspoting from gitub. I’m not in a position to test this out at the moment, however it appears that we’re just grabbing the ‘email’ attribute returned from Azure. line 52 of lib/omniauth/strategies/azure_oauth2.rb master require 'omniauth/strategies/oauth2' require 'jwt' module OmniAuth module Strategies class AzureOauth2 < OmniAuth::Strategies::OAuth2 BASE_AZURE_URL = 'https://login.microsoftonline.com' option :name, 'azure_oauth2' option :tenant_provider, nil # AD resource identifier option :resource, '00000002-0000-0000-c000-000000000000' # tenant_provider must return client_id, client_secret and optionally tenant_id and base_azure_url args [:tenant_provider] def client if options.tenant_provider This file has been truncated. show original

Discourse Azure AD Plugin not working

Product Support

Ryan_Nix (Ryan Nix) 2017 年9 月 21 日 20:15 12

Looks like the UPN or UserPrincipalName is the attribute being used as the email address in Discourse. I’ll log a ticket with Azure support to see how this can be fixed. @sam @marknadig

话题		回复	浏览量
Discourse v2.2.0.beta7 +63 version discourse-azure-ad plugin error Product Support	8	779	2019 年1 月 8 日
Official support for Microsoft Azure AD? Self-hosting	7	2259	2021 年9 月 2 日
Not able to logged in using discourse-azure-ad auth plugin Product Support	1	948	2019 年1 月 23 日
./launcher rebuild app fails hard 'bundle exec rake db:migrate' possible issue with github/master repo removal of auth/oath2_authenticator Self-hosting	5	2064	2022 年5 月 21 日
Discourse - Integrate Azure AD Product Support	1	629	2021 年12 月 22 日

Discourse Azure AD Plugin not working

相关话题