Description of problem: While enabling the feature for RHSSO, Satellite failed to start. (RHEL8) Version-Release number of selected component (if applicable): 6.12 (do not present in 6.10, 6.11 with rhel7) How reproducible: always Steps to Reproduce: 1. Follow the steps mentioned here https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11/html/administering_red_hat_satellite/configuring_external_authentication_admin#prerequisites-for-integrating-project-with-keycloak_keycloak-general Actual results: RHSSO feature is not working in RHEL8 with Satellite 6.12 Expected results: RHSSO feature should work with Satellite 6.12 with RHEL8 Additional info:
Can you double check this works with 6.11 on RHEL8? I'd expect it to, but one never knows… ;)
Could you please try adding the following into /etc/foreman-installer/custom-hiera.yaml and re-running the installer? apache::default_mods: - authn_core
@aruzicka Above workaround is working for the auth tests with RHSSO. and issue is no more reproducible.
(In reply to Omkar Khatavkar from comment #5) > @aruzicka Above workaround is working for the auth tests with > RHSSO. and issue is no more reproducible. Hi Omkar Thank you for checking that, Adam updated PR with that info: https://github.com/theforeman/puppet-foreman/pull/1073#pullrequestreview-1075196114
The proper fix is https://github.com/puppetlabs/puppetlabs-apache/pull/2283. This also works on EL8 where mod_auth_openidc is in a DNF module. This should be cherry picked.
Created redmine issue https://projects.theforeman.org/issues/35524 from this bug
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/35524 has been resolved.
https://github.com/theforeman/foreman-installer/pull/807 is the cherry pick PR for 3.3.
verified this on Satellite 6.12 Snap 13. this issue is no more reproducible
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Satellite 6.12 Release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2022:8506