Content
You are here:
OneLogin::RubySaml::ValidationError, Current time is earlier than NotBefore condition
Added by neil neil about 2 years ago
hi, I have some problem with OpenProject when I do the following:
- installed OpenProject Community with Docker on my mac
- docker run -d --env-file config -p 8080:80 openproject openproject/community:12
here is the content of config
SECRET_KEY_BASE=secret
OPENPROJECT_SAML_SAML_NAME=saml
OPENPROJECT_SAML_SAML_DISPLAY__NAME=My SSO
OPENPROJECT_SAML_SAML_ASSERTION__CONSUMER__SERVICE__URL=http://localhost:8080/auth/saml/callback
OPENPROJECT_SAML_SAML_ISSUER=http://localhost:8080
OPENPROJECT_SAML_SAML_IDP__CERT=MIIDHDCCAgSgAwIBAgIHD1GjjM/99TANBgkqhkiG9w0BAQsFADAuMR8wHQYDVQQDExZkZW1vLXNzby5iaXBvY2xvdWQuY29tMQswCQYDVQQGEwJDTjAeFw0yMjA4MDMwNTU4MDJaFw0zMjA4MDMwNTU4MDJaMC4xHzAdBgNVBAMTFmRlbW8tc3NvLmJpcG9jbG91ZC5jb20xCzAJBgNVBAYTAkNOMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYJYv8pVitLuRRbKfRyIFByS7wvVLUZYBomUBCNaCNdDUZ+MQ9i7egFgCv975Cth45EegLNtHo1TZ66VHaZ+kF6DaCI2Fu+kuXI2qiofA4grd0KY3CmOCf6NA9/zbpW39LfcttoiF7naRXTP1lV588kLsac1MwmB/+QFvt7qX6PFNA7OtddFRle/PeaXKrBP/3F8A7WScFicEE/D6mDMUwrvTTrb1T9qXo69UzQMPd8nSD8w/hlf9Vuar/ID4G8iFkXbJS7QI8YRzHRTmtRKP1Dt1DBB9EcoALAzkYYaHPlyWOzAZnduFmg4KneaA3P4EQ/XhvjLoje9vVRKyrk5tQIDAQABoz8wPTAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQEAwIChDAdBgNVHQ4EFgQUHubQMCEc9Z0h6egrbJxGP5KMENIwDQYJKoZIhvcNAQELBQADggEBAJ2KlrYtzawPAFm/Sbb+5lfHfI6ZsuagMucTcCWtNd0TiZ2DCQEWmc0nHgneRLVOs7Rg30ETeqzCWyP4ZH8FcnM72ni1jeRx5JwSW/x4ffovyxAGIZzX/Nd4XgbxL9lx3xqIxFcf05z8S9NiZvp3FfUZSsymThAzwT2K82V7Q7tOy6Q7LAcIPNtUrdz/KVWMYql09WXOsF7jfLjo5NNb5RAThS9zIySI3THfgaEBHU45l0uGJ7JFkjkX6WunfACqi+U3y7CJ4KUxhWxosbxaBSMxf8LfC+So/NQV7SiFm1pl8rcbnFWTPJIoxJ310wXnGQt6NARJKnGWsrpDUS3rBUs=
OPENPROJECT_SAML_SAML_IDP__SSO__TARGET__URL=https://demo-sso.bipocloud.com
OPENPROJECT_SAML_SAML_IDP__SLO__TARGET__URL=https://demo2.bipocloud.com/oidc/session/end
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_LOGIN=email
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_FIRST__NAME=name
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_LAST__NAME=name
- docker container run success, and login successful. Then I'm enter the enterprise license(which is a 14 days trial)
- logout
- click My SSO button to do Single sign on
- turn to my Idp
then I get the error "- omniauth: (saml) Authentication failure! invalid_ticket: OneLogin::RubySaml::ValidationError, Current time is earlier than NotBefore condition (2022-08-05 08:16:21 UTC < 2022-08-05 08:16:28 UTC - 1s)" could any one tell me is any thing wrong?
thank you
Replies (1)
In addition:
I'm download and run another image which named sanile/openproject on Docker Hub, and run with the following command:
docker run -d -t --env-file config -p 8080:80 --name openproject-sanile sanile/openproject
config is same with before
and I'm test that, if I add the following configuration:
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_LOGIN=email
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_FIRST__NAME=name
OPENPROJECT_SAML_SAML_ATTRIBUTE__STATEMENTS_LAST__NAME=name
the openproject will return an error like this: