counldn't login after installed on odoo-v9

[GavinDong]

Hi my friend,

Thanks for your sharing of the code.

One serious issue I have encountered whiling trying to install the master branch on odoo-v9.
After installation,

1. the backend page didn't refresh automatically.
2. after refresh, the previous admin user and pwd ## would not able to login to system.
   and stuck on the login page. It happens every time.

Could you please give us some clue of where it's went wrong? And how to fix?

Thanks in advance..

Gavin

[aallouche]

Hey Gavin,
Thanks for your feedback

Another contributor is in the process of submitting a PR with a v9 port of this module.
Once it is merged, we'd be glad to get your review and comments.

Stay tunned

[GavinDong]

Hi aallouche,

Thanks for your prompt response. But, we're actually working on a real case to implement SAML for a client with odoo v9.
We were thinking this repository could sit with odoo9. But, actually it stuck.
Do you have any contact or suggest how can we resolve this issue?

Thank you in advance..

Gavin

[houzefa-abba]

Hey,

You could debug auth_saml.js and see what you receive in each call...

About your specific issues:

1. auth_saml changes some css / js files; your issue sounds like some caching done by a proxy web server (Apache / Nginx / ...)?
2. Debug the various login functions in the "res.users" model and see what you get. ;)

Good luck!

[pitbulk]

Hi, I have odoo9 and need SAML support. is this repo compatible with odoo v9?
have you solved the issues you experienced?

[houzefa-abba]

Hey @pitbulk, the status of the Odoo 9 integration is still the same for the moment: none of the authors use Odoo 9 yet (we do know auth_saml works fine on Odoo 7 & 8, though), and contributors are working on it (awaiting a merge request).

[bradjones1]

Hi @pitbulk - we keep running in to each other on SAML projects! There is a 9.0 fork that I stumbled across via a Google search and the network graph - it's installable, but then I get to this issue. I have been nibbling away at it a little today on my own fork https://github.com/bradjones1/auth_saml but it appears the module is indeed disabling login via db users, so need to track that down.

[bradjones1]

I believe the passwords are getting clobbered on install at this function? https://github.com/bradjones1/auth_saml/blob/9.0/model/res_users.py#L36

I'm not a python programmer so I am driving in the dark here. I've made a few quick tweaks on my fork in testing this with the odoo:9 docker container. For what it's worth, I've also found that in addition to the tweaks on my 9.0 branch, I needed to do an apt-get install python-lasso to get that library, which is not included as a dependency for Odoo.

It might also be useful to get the maintainers to determine their release strategy for 9.0, e.g., what branch should the 9.0 support PR be made against? There are a ton of conflicts against master, so maybe just a per-major-version branch approach works here? (Like semantic versioning?)

[bradjones1]

And it probably goes without saying but to get back in to Odoo after the password is nullified, you'll need to manually set it (they aren't hashed, just in plaintext) via the PGSQL command line.

[aallouche]

Hi everyone and thanks for your last comments!

Actually, the 9.0 port is ongoing on bitbucket which is our primary source.
Issues like views and auth_crypt compatibility to enable both saml and standard login are already addressed.
I believe the last step is to disable CSRF protection (default on 9.0 web) on the http controller to make it fully connectable with a third party saml v2 identity provider.
This will make the module usable as is and the stable version will be merged here on github with a proper 9.0 branch

As for the lasso dependency, we produced a great effort to contribute to this fine library which is released and available for major distributions along with liblasso3.
This is part of our partnership on Authentic 2 the best open source IdP around 😄
For the sake of a sound and easy deployment, I will soon release a proper production-ready 9.0 docker image of Odoo with all the required juice inside (as it is already for 7.0 and 8.0 versions

The mid-term roadmap includes advanced end-point features like local logout or user automated provisionning.

Stay tuned!

[houzefa-abba]

Hello,

https://github.com/xcgd/auth_saml now contains updated Odoo 8 & 9 versions of auth_saml (github_XXX branches).

We have been using the Odoo 8 version for a while in production; I just tested the Odoo 9 one and can confirm it works just as well.

Keeping this open until we have more extensive docs though. =)

[mabahma]

Hello

Do you have an example of configuring odoo using saml with and identity provider, Shibboleth for example?

Kind regards,

[gridworkz]

Hi:
I'd also be interested in testing this with Shibboleth. Has anyone tried auth_saml with Shibboleth?
Cheers, Dave