Shib Logs In, Creates User but no access to wp-admin

  • Just enabled the plugin.

    When I go to wp-login, I can select Shibboleth and authenticate.
    My user is created in wordpress (I know this by inspecting it by logging in with the native admin user) with the appropriate Role based on LDAP group (passed via isMemberOf) and SP attributes are mapped correctly to user fields.

    The problem is that when I login, it simply takes me back to the wp-login page. I can see the Shib session is active; The user is created from the HEADER variables, yet wordpress does not regcognize the user when I try to browse to wp-admin. Instead it takes me to the login page.

    I don’t understand why I can’t access wp-admin.

    I have the global setting ‘allow users to register’ off and I also do not have ‘use shibboleth for default login’ option enabled.

    Any help appreciated.

    https://www.ads-software.com/plugins/shibboleth/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter i.macdonald

    (@imacdonald-1)

    I have tested this on a couple of different instances, with no luck. I can see the user created after authentication, the Shibboleth session is active but the user session is not recognized by WordPress.

    A few more details on my setup:
    Debian 8.0(Jessie) with the following packages:
    wordpress 3.9.1+dfsg-1
    libapache2-mod-shib2 2.5.3+dfsg-1+b1
    php5 5.6.0~b5+dfsg-4
    mysql 5.5.37-1
    apache 2.4.9-2

    I also found this error in my Apache logs which I assume has to be related (site obfuscated). It looks like a shib hook/action failing, which I assume must be where wordpress is failing. Could this be a SQL syntax bug?

    [Tue Jul 01 13:59:34.282248 2014] [:error] [pid 5768] [client 99.234.122.9:53610] WordPress database error You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘WHERE meta_key = ‘shibboleth_update_roles’ AND site_id = 0′ at line 1 for query SELECT meta_value FROM WHERE meta_key = ‘shibboleth_update_roles’ AND site_id = 0 made by activate_plugin, do_action(‘activate_shibboleth/shibboleth.php’), call_user_func_array, shibboleth_activate_plugin, shibboleth_add_option, referer: https://<sitename>/wp-admin/plugins.php

    Thread Starter i.macdonald

    (@imacdonald-1)

    On that last note, I think the error is unrelated. I can’t reproduce any longer, so I think it may have occurred when I tested the older v1.4 version of the plugin (currently packaged for Debian as wordpress-shibboleth).

    I am still having no luck getting this working.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Shib Logs In, Creates User but no access to wp-admin’ is closed to new replies.