OIDC users and confirmation passwords

[rdr]

Hi,

I am using FOG server up yo date 1.6 branch. I installed OIDC plugin and enabled automatic user creation when a user logs in via oidc. I have two problems:

1. IDP is sending email address as username. It works with automatic user creation. User is created with email as username. But it seems FOG server does not allow “@” char in username. So if I try to edit anything for that user, I can not save it as the form gives validation error for the username field. I also can’t disable auto user creation because I can not create a user with username in email format. So how to deal with this?

2. When an OIDC only user tries to delete a host record, FOG server asks user’s password in a confirmation dialog. But OIDC users does not have any local password so they can’t do anything that requires password confirmation. I am overlooking something? or OIDC login is not usefull at all?

Regards,

Rahman

[Tom Elliott]

Hi Rahman,

Thanks for the report. Both problems are fixed in the working-1.6 branch.

1. A username can now be an email address. The user form accepts “@”, and mixed-case names from the identity provider save correctly.
2. Delete no longer asks for a password. It asks you to confirm, and the button shows how many items will be deleted. The FOG_REAUTH_ON_DELETE setting is removed.

To get both fixes, update to the latest working-1.6 and re-run the installer. You do not need a plugin update. Until you update, you can turn off FOG_REAUTH_ON_DELETE in FOG Configuration to stop the password prompt.