I think I have this plugin 90% working. But nothing tells you what the "sso 
url" should be in Discourse. As it is now when I load the Discourse page it 
redirects to Gitlab. After I authenticate it never redirects back to 
Discourse. The URL appears to have all the right stuff in it, but the root 
domain remains on the Gitlab site. Do you normally get redirected back, or 
do you normally need to then find a link in Gitlab to get back to 
Discourse? If so I have yet to find it.

In GitLab I have Callback as: https://mydiscourse.gov/auth/gitlab/callback

And in Discourse my sso url is: https://mygitlab.gov

Could also have something to do with this:

gitlab_rails['omniauth_enabled'] = true
gitlab_rails['omniauth_allow_single_sign_on'] = ['kerberos']
# gitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'
# gitlab_rails['omniauth_block_auto_created_users'] = true
# gitlab_rails['omniauth_auto_link_ldap_user'] = false
# gitlab_rails['omniauth_auto_link_saml_user'] = false
# gitlab_rails['omniauth_external_providers'] = ['twitter', 'google_oauth2']
gitlab_rails['omniauth_providers'] = [
  {
    "name" => "kerberos",
#     "app_id" => "YOUR APP ID",
#     "app_secret" => "YOUR APP SECRET",
#     "args" => { "access_type" => "offline", "approval_prompt" => "" }
  }
]


Can I not use the system level kerberos for login, and share that 
authentication via the discourse-omniauth-gitlab plugin?

-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/da36aba2-6a09-4816-99b4-4d68c1c85ed5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to