Anonymous_User Absent Member.
Absent Member.
613 views

Weird IDP Sign in problem

Hi! This is driving me crazy!

Sign in from Windows 10 or Suse Linux Desktop 12 is impossible!
The page is stripped from 'styles', no banner and Sign in isn't a
button, just text.
Try:
http://password.avans.nl
You'll get redirected to
https://login.avans.nl/nidp/idff/sso?RequestID=.....Ref=kerberos%2Fcontract%2Furi
No Sign in button!

https://login.avans.nl/nidp/app/login
This is what it should look like

It's not browser specific.
We're on 4.2.1.0-29 b.t.w.
Anyone?

0 Likes
5 Replies
Knowledge Partner
Knowledge Partner

Re: Weird IDP Sign in problem

Peter D. wrote:

> Hi! This is driving me crazy!
>
> Sign in from Windows 10 or Suse Linux Desktop 12 is impossible!
> The page is stripped from 'styles', no banner and Sign in isn't a
> button, just text.
> Try:
> http://password.avans.nl
> You'll get redirected to
>

https://login.avans.nl/nidp/idff/sso?RequestID=.....Ref=kerberos%2Fcontract%2Furi
> No Sign in button!
>
> https://login.avans.nl/nidp/app/login
> This is what it should look like
>
> It's not browser specific.
> We're on 4.2.1.0-29 b.t.w.



Works for me from Norway.
Windows 10 (Anniversary update) tested with IE11 and Chrome (latest)

Could it be something specific related to the source IP range you are
testing from.

We saw something similar at a customer a while back, the kerberos
fallback was not presenting properly in some sceanrios.

We had a case open with NetIQ - never got resolved 100% to my knowledge.

Lovely part of the world you live in BTW, been to Tilburg many times
for concerts at the 013.
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Weird IDP Sign in problem

Alex McHugh wrote:

> Peter D. wrote:
>
> > Hi! This is driving me crazy!
> >
> > Sign in from Windows 10 or Suse Linux Desktop 12 is impossible!
> > The page is stripped from 'styles', no banner and Sign in isn't a
> > button, just text.
> >


Now it doesn't work for me when I retested it! Odd.

Some things to look at (some of which were suggested by NetIQ when we
reported something similar after a NAM 4.1 upgrade).


1. Are you using the use the include/exclude options in the
kerb.properties to force the fallback with no user input?

2. What 'trusted domains' do you have configured in your browser?

3. Do you have the kerberos contract added as a step up contract on the
relevant SP?

4. is your Kerberos card 'hidden'
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Weird IDP Sign in problem

On Fri, 30 Sep 2016 11:29:26 GMT, "Alex McHugh"
<alexmchugh@no-mx.forums.microfocus.com> wrote:

>Alex McHugh wrote:
>
>> Peter D. wrote:
>>
>> > Hi! This is driving me crazy!
>> >
>> > Sign in from Windows 10 or Suse Linux Desktop 12 is impossible!
>> > The page is stripped from 'styles', no banner and Sign in isn't a
>> > button, just text.
>> >

>
>Now it doesn't work for me when I retested it! Odd.
>
>Some things to look at (some of which were suggested by NetIQ when we
>reported something similar after a NAM 4.1 upgrade).
>
>
>1. Are you using the use the include/exclude options in the
>kerb.properties to force the fallback with no user input?
>
>2. What 'trusted domains' do you have configured in your browser?
>
>3. Do you have the kerberos contract added as a step up contract on the
>relevant SP?
>
>4. is your Kerberos card 'hidden'


Hi Alex,

013 is a really nice pop podium, been there several times also.

1) Yes, we use kerberos.exclude=
2) My mistake. Because some colleges complained, I didn't think of
that when I installed the W10 VM...
Linux clients still show the stripped version without the Sign In
button. Probably a JRE issue or so.
3) Not sure what they mean by that. Kerberos is the only contract to
that RP.
4) Yes

Grtz,
Peter
0 Likes
Knowledge Partner
Knowledge Partner

Re: Weird IDP Sign in problem

Peter D. wrote:

>
>
> 1) Yes, we use kerberos.exclude=


And the logging shows that the excluded range is detected (thus
triggering the fallback method)?

> 2) My mistake. Because some colleges complained, I didn't think of
> that when I installed the W10 VM...
> Linux clients still show the stripped version without the Sign In
> button. Probably a JRE issue or so.


Just something to check regardless.

> 3) Not sure what they mean by that. Kerberos is the only contract to
> that RP.


Don't worry then, we were explitly specifying the contract via an
Intersite Transfer URL.


> 4) Yes


Try making it visible (that was a specific step we had from NetIQ when
they were troubleshooting our SR)


The URL works for me again today.
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Weird IDP Sign in problem

On 9/30/2016 8:41 PM, Peter D. wrote:
> Hi! This is driving me crazy!
>
> Sign in from Windows 10 or Suse Linux Desktop 12 is impossible!
> The page is stripped from 'styles', no banner and Sign in isn't a
> button, just text.
> Try:
> http://password.avans.nl
> You'll get redirected to
> https://login.avans.nl/nidp/idff/sso?RequestID=.....Ref=kerberos%2Fcontract%2Furi
> No Sign in button!
>
> https://login.avans.nl/nidp/app/login
> This is what it should look like
>
> It's not browser specific.
> We're on 4.2.1.0-29 b.t.w.
> Anyone?
>

works for me...Windows 10, IE11

--
Cheers,
Edward
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.