{"action":"created","issue":{"url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/109","repository_url":"https://api.github.com/repos/davido/gerrit-oauth-provider","labels_url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/109/labels{/name}","comments_url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/109/comments","events_url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/109/events","html_url":"https://github.com/davido/gerrit-oauth-provider/issues/109","id":333184757,"node_id":"MDU6SXNzdWUzMzMxODQ3NTc=","number":109,"title":"Gerrit + CAS + LDAP: redirects to CAS root after authorized","user":{"login":"objectkuan","id":2225492,"node_id":"MDQ6VXNlcjIyMjU0OTI=","avatar_url":"https://avatars2.githubusercontent.com/u/2225492?v=4","gravatar_id":"","url":"https://api.github.com/users/objectkuan","html_url":"https://github.com/objectkuan","followers_url":"https://api.github.com/users/objectkuan/followers","following_url":"https://api.github.com/users/objectkuan/following{/other_user}","gists_url":"https://api.github.com/users/objectkuan/gists{/gist_id}","starred_url":"https://api.github.com/users/objectkuan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/objectkuan/subscriptions","organizations_url":"https://api.github.com/users/objectkuan/orgs","repos_url":"https://api.github.com/users/objectkuan/repos","events_url":"https://api.github.com/users/objectkuan/events{/privacy}","received_events_url":"https://api.github.com/users/objectkuan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":23,"created_at":"2018-06-18T08:57:34Z","updated_at":"2018-09-15T03:57:06Z","closed_at":null,"author_association":"NONE","body":"Hi,\r\n\r\nWe're hitting a problem while setting up Gerrit -> gerrit-oauth-provider -> CAS -> OpenLDAP.\r\nAll the above services share a same IP address **ROOT**.\r\n\r\n**Steps:**\r\n\r\n1. Click \"Sign in\" on Gerrit http://**ROOT**:9999\r\n2. See the browser is loading http://**ROOT**:9999/login/%2Fq%2Fstatus%3Aopen\r\n3. See we're redirected to site: http://**ROOT**:8888/login?service=http%3A%2F%2F**ROOT**%3A8888%2Foauth2.0%2FcallbackAuthorize%3Fclient_id%3Dgerrit%26redirect_uri%3Dhttp%253A%252F%252F**ROOT**%253A9999%252Foauth%26response_type%3Dcode%26client_name%3DCasOAuthClient\r\n4. Input username and password of a user in OpenLDAP: gerrit/passwd\r\n5. Click \"LOGIN\"\r\n\r\n**What we expect:**\r\n\r\nAuthorized and redirected to Gerrit http://**ROOT**:9999 with the user logged in\r\n\r\n**What we see:**\r\n\r\nAuthorized but redirected to http://**ROOT**:8888/login\r\n\r\n**CAS configs:**\r\n\r\n[cas.properties](https://github.com/davido/gerrit-oauth-provider/files/2110595/cas.properties.txt)\r\n[ci-10000000.json](https://github.com/davido/gerrit-oauth-provider/files/2110598/ci-10000000.json.txt)\r\n[gerrit-10000001.json](https://github.com/davido/gerrit-oauth-provider/files/2110599/gerrit-10000001.json.txt)\r\n\r\n**Gerrit configs:**\r\n\r\n[gerrit.config](https://github.com/davido/gerrit-oauth-provider/files/2110605/gerrit.config.txt)\r\n\r\n**CAS and Gerrit logs:**\r\n[cas.log](https://github.com/davido/gerrit-oauth-provider/files/2110542/cas.log)\r\n[gerrit.log](https://github.com/davido/gerrit-oauth-provider/files/2110543/gerrit.log)\r\n\r\nNote: I've replaced the server IP with ROOT, my company name with MY_COMPANY, and other sensitive information (e.g secret) with xxx."},"comment":{"url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/comments/421528490","html_url":"https://github.com/davido/gerrit-oauth-provider/issues/109#issuecomment-421528490","issue_url":"https://api.github.com/repos/davido/gerrit-oauth-provider/issues/109","id":421528490,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMTUyODQ5MA==","user":{"login":"davido","id":347173,"node_id":"MDQ6VXNlcjM0NzE3Mw==","avatar_url":"https://avatars1.githubusercontent.com/u/347173?v=4","gravatar_id":"","url":"https://api.github.com/users/davido","html_url":"https://github.com/davido","followers_url":"https://api.github.com/users/davido/followers","following_url":"https://api.github.com/users/davido/following{/other_user}","gists_url":"https://api.github.com/users/davido/gists{/gist_id}","starred_url":"https://api.github.com/users/davido/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davido/subscriptions","organizations_url":"https://api.github.com/users/davido/orgs","repos_url":"https://api.github.com/users/davido/repos","events_url":"https://api.github.com/users/davido/events{/privacy}","received_events_url":"https://api.github.com/users/davido/received_events","type":"User","site_admin":false},"created_at":"2018-09-15T03:57:06Z","updated_at":"2018-09-15T03:57:06Z","author_association":"OWNER","body":"Could you track all requests on gerrit and cloud foundry sides? My current explanation is that cloud foundry somehow changing the state and send another one to gerrit."}}
{"actor":{"display_login":"davido"}}