Merge branch 'patch-7' into 'master'
fix how to get SAML error details ## What does this MR do? Update to better document how to get SAML error details. Fix https://gitlab.com/gitlab-org/gitlab-ce/issues/1929 and https://gitlab.com/gitlab-org/gitlab-ce/issues/3223. Related to https://gitlab.com/gitlab-org/gitlab-ce/issues/12705. See merge request !7199
This commit is contained in:
commit
83180841f7
1 changed files with 13 additions and 6 deletions
|
@ -268,13 +268,20 @@ message `Can't verify CSRF token authenticity`. This means that there is an erro
|
|||
the SAML request, but this error never reaches GitLab due to the CSRF check.
|
||||
|
||||
To bypass this you can add `skip_before_action :verify_authenticity_token` to the
|
||||
`omniauth_callbacks_controller.rb` file. This will allow the error to hit GitLab,
|
||||
where it can then be seen in the usual logs, or as a flash message in the login
|
||||
screen.
|
||||
`omniauth_callbacks_controller.rb` file immediately after the `class` line and
|
||||
comment out the `protect_from_forgery` line using a `#` then restart Unicorn. This
|
||||
will allow the error to hit GitLab, where it can then be seen in the usual logs,
|
||||
or as a flash message on the login screen.
|
||||
|
||||
That file is located at `/opt/gitlab/embedded/service/gitlab-rails/app/controllers`
|
||||
for Omnibus installations and by default on `/home/git/gitlab/app/controllers` for
|
||||
installations from source.
|
||||
That file is located in `/opt/gitlab/embedded/service/gitlab-rails/app/controllers`
|
||||
for Omnibus installations and by default in `/home/git/gitlab/app/controllers` for
|
||||
installations from source. Restart Unicorn using the `sudo gitlab-ctl restart unicorn`
|
||||
command on Omnibus installations and `sudo service gitlab restart` on installations
|
||||
from source.
|
||||
|
||||
You may also find the [SSO Tracer](https://addons.mozilla.org/en-US/firefox/addon/sso-tracer)
|
||||
(Firefox) and [SAML Chrome Panel](https://chrome.google.com/webstore/detail/saml-chrome-panel/paijfdbeoenhembfhkhllainmocckace)
|
||||
(Chrome) browser extensions useful in your debugging.
|
||||
|
||||
### Invalid audience
|
||||
|
||||
|
|
Loading…
Reference in a new issue