Overriding SAML2 authentication no longer works in 2.5?

General
1

One may remember New SAML authentication in CheckMk 2.2 where I discussed that we want to use SAML2 only for authentication (and don’t let Checkmk create a new user when he’s authenticated) and let LDAP do the authorization.

This we did by “simply” copying the SAML2 code from the distro to the ~/local folder of the site user and modified the files that we needed to modify.

All this was working fine up to version 2.4 but no longer in 2.5.

So my (simple?) question would be if it’s still possible to override such code?
Now copy from /omd/version/default/lib/python3/cmk/gui/nonfree/pro/saml2_auth to ~/local/lib/python3/cmk/gui/nonfree/pro/saml2_auth ?

Thanks!
Christian

2

I would say - no chance. The folder “~/lib/python3/cmk/gui/nonfree/” has an init.py inside and with this you can not simply shadow the files.
Or better said - you need to shadow the complete folder structure there.

3

Hi Andreas,

so it looks like my users will no longer be able to use SSO, at least until I find a different solution (will then hopefully find time to setup a Keycloak server) :slight_smile:

Thanks!
Christian