Azure AD authentication configuration #918

kangchen06 · 2023-01-05T08:12:21Z

kangchen06
Jan 5, 2023

Current Behavior

Unable to activate Azure AD authentication:
Netbox setup following netbox documentation about Azure AD authentication (and MS Enterprise App registration).

Expected Behavior

Authenticate users registered in Azure AD

Docker Compose Version

Docker Compose version v2.12.2

Docker Version

Client: Docker Engine - Community
 Version:           20.10.21
 API version:       1.41
 Go version:        go1.18.7
 Git commit:        baeda1f
 Built:             Tue Oct 25 18:02:19 2022
 OS/Arch:           linux/amd64
 Context:           default
 Experimental:      true

Server: Docker Engine - Community
 Engine:
  Version:          20.10.21
  API version:      1.41 (minimum version 1.12)
  Go version:       go1.18.7
  Git commit:       3056208
  Built:            Tue Oct 25 18:00:24 2022
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.6.9
  GitCommit:        1c90a442489720eec95342e1789ee8a5e1b9536f
 runc:
  Version:          1.1.4
  GitCommit:        v1.1.4-0-g5fd4c4d
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

The git Revision

9369c606eb4170eeeeefb073611a37fdf4240edd

The git Status

On branch main
Your branch is ahead of 'origin/main' by 1 commit.
  (use "git push" to publish your local commits)

nothing to commit, working tree clean

Startup Command

docker-compose up

NetBox Logs

[autobot@emfrndsunx034 netbox-docker]# docker-compose up
[+] Running 7/0
 ⠿ Container netbox-docker-redis-cache-1          Cre...                                         0.0s
 ⠿ Container netbox-docker-postgres-1             Create...                                      0.0s
 ⠿ Container netbox-docker-redis-1                Created                                        0.0s
 ⠿ Container netbox-docker-netbox-worker-1        C...                                           0.0s
 ⠿ Container netbox-docker-netbox-1               Created                                        0.0s
 ⠿ Container reverse-proxy                        Created                                        0.0s
 ⠿ Container netbox-docker-netbox-housekeeping-1  Created                                        0.0s
Attaching to netbox-docker-netbox-1, netbox-docker-netbox-housekeeping-1, netbox-docker-netbox-worker-                                           1, netbox-docker-postgres-1, netbox-docker-redis-1, netbox-docker-redis-cache-1, reverse-proxy
netbox-docker-redis-1                | 1:C 05 Jan 2023 08:03:46.630 # oO0OoO0OoO0Oo Redis is starting                                            oO0OoO0OoO0Oo
netbox-docker-redis-1                | 1:C 05 Jan 2023 08:03:46.630 # Redis version=7.0.7, bits=64, co                                           mmit=00000000, modified=0, pid=1, just started
netbox-docker-redis-1                | 1:C 05 Jan 2023 08:03:46.630 # Configuration loaded
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.630 * monotonic clock: POSIX clock_get                                           time
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Running mode=standalone, port=63                                           79.
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 # WARNING: The TCP backlog setting                                            of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128.
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 # Server initialized
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 # WARNING Memory overcommit must b                                           e enabled! Without it, a background save or replication may fail under low memory condition. Being dis                                           abled, it can can also cause failures without low memory condition, see https://github.com/jemalloc/je                                           malloc/issues/1328. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then rebo                                           ot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect.
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Reading RDB base file on AOF loa                                           ding...
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Loading RDB produced by version                                            7.0.7
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * RDB age 2076 seconds
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * RDB memory usage when created 0.                                           82 Mb
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * RDB is base AOF
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Done loading RDB, keys loaded: 0                                           , keys expired: 0.
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * DB loaded from base file appendo                                           nly.aof.1.base.rdb: 0.000 seconds
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * DB loaded from incr file appendo                                           nly.aof.1.incr.aof: 0.000 seconds
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * DB loaded from append only file:                                            0.000 seconds
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Opening AOF incr file appendonly                                           .aof.1.incr.aof on server start
netbox-docker-redis-1                | 1:M 05 Jan 2023 08:03:46.631 * Ready to accept connections
netbox-docker-postgres-1             |
netbox-docker-postgres-1             | PostgreSQL Database directory appears to contain a database; Sk                                           ipping initialization
netbox-docker-postgres-1             |
netbox-docker-postgres-1             | 2023-01-05 08:03:46.841 UTC [1] LOG:  starting PostgreSQL 14.6                                            on x86_64-pc-linux-musl, compiled by gcc (Alpine 12.2.1_git20220924-r4) 12.2.1 20220924, 64-bit
netbox-docker-postgres-1             | 2023-01-05 08:03:46.841 UTC [1] LOG:  listening on IPv4 address                                            "0.0.0.0", port 5432
netbox-docker-postgres-1             | 2023-01-05 08:03:46.841 UTC [1] LOG:  listening on IPv6 address                                            "::", port 5432
netbox-docker-postgres-1             | 2023-01-05 08:03:46.866 UTC [1] LOG:  listening on Unix socket                                            "/var/run/postgresql/.s.PGSQL.5432"
netbox-docker-postgres-1             | 2023-01-05 08:03:46.885 UTC [22] LOG:  database system was shut                                            down at 2023-01-05 08:03:14 UTC
netbox-docker-postgres-1             | 2023-01-05 08:03:46.914 UTC [1] LOG:  database system is ready                                            to accept connections
netbox-docker-redis-cache-1          | 1:C 05 Jan 2023 08:03:46.931 # oO0OoO0OoO0Oo Redis is starting                                            oO0OoO0OoO0Oo
netbox-docker-redis-cache-1          | 1:C 05 Jan 2023 08:03:46.931 # Redis version=7.0.7, bits=64, co                                           mmit=00000000, modified=0, pid=1, just started
netbox-docker-redis-cache-1          | 1:C 05 Jan 2023 08:03:46.931 # Configuration loaded
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.931 * monotonic clock: POSIX clock_get                                           time
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * Running mode=standalone, port=63                                           79.
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 # WARNING: The TCP backlog setting                                            of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128.
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 # Server initialized
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 # WARNING Memory overcommit must b                                           e enabled! Without it, a background save or replication may fail under low memory condition. Being dis                                           abled, it can can also cause failures without low memory condition, see https://github.com/jemalloc/je                                           malloc/issues/1328. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then rebo                                           ot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect.
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * Loading RDB produced by version                                            7.0.7
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * RDB age 33 seconds
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * RDB memory usage when created 0.                                           89 Mb
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * Done loading RDB, keys loaded: 0                                           , keys expired: 0.
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * DB loaded from disk: 0.000 secon                                           ds
netbox-docker-redis-cache-1          | 1:M 05 Jan 2023 08:03:46.932 * Ready to accept connections
netbox-docker-netbox-housekeeping-1  | Interval set to 86400 seconds
netbox-docker-netbox-housekeeping-1  | Thu Jan  5 08:03:48 UTC 2023
reverse-proxy                        | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will                                            attempt to perform configuration
reverse-proxy                        | /docker-entrypoint.sh: Looking for shell scripts in /docker-ent                                           rypoint.d/
reverse-proxy                        | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen                                           -on-ipv6-by-default.sh
reverse-proxy                        | 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of                                            /etc/nginx/conf.d/default.conf
reverse-proxy                        | 10-listen-on-ipv6-by-default.sh: info: /etc/nginx/conf.d/defaul                                           t.conf differs from the packaged version
reverse-proxy                        | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsub                                           st-on-templates.sh
reverse-proxy                        | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-w                                           orker-processes.sh
reverse-proxy                        | /docker-entrypoint.sh: Configuration complete; ready for start                                            up
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: using the "epoll" event metho                                           d
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: nginx/1.23.3
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: built by gcc 12.2.1 20220924                                            (Alpine 12.2.1_git20220924-r4)
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: OS: Linux 4.18.0-425.3.1.el8.                                           x86_64
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 104                                           8576:1048576
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: start worker processes
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: start worker process 29
reverse-proxy                        | 2023/01/05 08:03:52 [notice] 1#1: start worker process 30
netbox-docker-netbox-worker-1        | No queues have been specified. This process will service the fo                                           llowing queues by default: high, default, low
netbox-docker-netbox-housekeeping-1  | 🧬 loaded config '/etc/netbox/config/configuration.py'
netbox-docker-netbox-housekeeping-1  | 🧬 loaded config '/etc/netbox/config/extra.py'
netbox-docker-netbox-housekeeping-1  | 🧬 loaded config '/etc/netbox/config/logging.py'
netbox-docker-netbox-housekeeping-1  | 🧬 loaded config '/etc/netbox/config/plugins.py'
netbox-docker-netbox-housekeeping-1  | [*] Clearing expired authentication sessions
netbox-docker-netbox-housekeeping-1  |  Sessions cleared.
netbox-docker-netbox-housekeeping-1  | [*] Checking for expired changelog records
netbox-docker-netbox-housekeeping-1  |  No expired records found.
netbox-docker-netbox-housekeeping-1  | [*] Checking for expired jobresult records
netbox-docker-netbox-housekeeping-1  |  No expired records found.
netbox-docker-netbox-housekeeping-1  | [*] Checking for latest release
netbox-docker-netbox-housekeeping-1  |  Request error: HTTPSConnectionPool(host='api.github.com', port                                           =443): Max retries exceeded with url: /repos/netbox-community/netbox/releases (Caused by SSLError(SSLC                                           ertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get loc                                           al issuer certificate (_ssl.c:997)')))
netbox-docker-netbox-housekeeping-1  | Finished.
netbox-docker-netbox-1               | 🧬 loaded config '/etc/netbox/config/configuration.py'
netbox-docker-netbox-1               | 🧬 loaded config '/etc/netbox/config/extra.py'
netbox-docker-netbox-1               | 🧬 loaded config '/etc/netbox/config/logging.py'
netbox-docker-netbox-1               | 🧬 loaded config '/etc/netbox/config/plugins.py'
netbox-docker-netbox-1               | 💡 Superuser Username: admin, E-Mail: [email protected]
netbox-docker-netbox-1               | ⚠️⚠️⚠️ WARNING: The initializers have been moved to a plugin. See                                            release notes.
netbox-docker-netbox-1               | ⚠️⚠️⚠️ Set environment variable 'SKIP_STARTUP_SCRIPTS' to 'true' t                                           o remove this warning.
netbox-docker-netbox-1               | ✅ Initialisation is done.
netbox-docker-netbox-1               | ⏳ Waiting for control socket to be created... (1/10)
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [warn] 6#6 Unit is running unprivileged, th                                           en it cannot use arbitrary user and group.
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 6#6 unit 1.27.0 started
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 13#13 discovery started
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [notice] 13#13 module: python 3.10.4 "/usr/                                           lib/unit/modules/python3.10.unit.so"
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 6#6 controller started
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [notice] 6#6 process 13 exited with code 0
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 15#15 router started
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 15#15 OpenSSL 3.0.2 15 Mar 2022, 300                                           00020
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 16#16 "netbox" prototype started
netbox-docker-netbox-1               | 2023/01/05 08:04:01 [info] 17#17 "netbox" application started
netbox-docker-netbox-1               | ⚙️ Applying configuration from /etc/unit/nginx-unit.json
netbox-docker-netbox-1               | ✅ Unit configuration loaded successfully
netbox-docker-netbox-1               | 2023/01/05 08:04:02 [notice] 6#6 process 11 exited with code 0

Content of docker-compose.override.yml

version: '3.4'
services:
    netbox:
        environment:
          REMOTE_AUTH_BACKEND: 'social_core.backends.azuread.AzureADOAuth2'
          SOCIAL_AUTH_AZUREAD_OAUTH2_KEY: 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
          SOCIAL_AUTH_AZUREAD_OAUTH2_SECRET: 'yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy'
    reverse-proxy:
        build:
           context: .
           dockerfile: Dockerfile.nginx
        container_name: reverse-proxy
        depends_on:
           - netbox
        volumes:
           - ${SSL_CERT_PATH}:/etc/ssl/certs/emfrndsunx034.emea.sesam.mane.com.crt
           - ${SSL_CERT_KEY_PATH}:/etc/ssl/private/emfrndsunx034.emea.sesam.mane.com.key
           - ./nginx.conf:/etc/nginx/conf.d/default.conf
        ports:
           - 443:443

kangchen06 · 2023-01-05T08:14:30Z

kangchen06
Jan 5, 2023
Author

Forget to put MS authentication issue message:

AADSTS700016: Application with identifier 'None' was not found in the directory 'xxxxx'. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. You may have sent your authentication request to the wrong tenant.

3 replies

Dark-DK Jan 24, 2023

Hey.

Any SOCIAL_AUTH_* variables do not work in the docker-compose.yml.
You need to create a file within the configuration/ folder on the host.
*.py will get parsed and sent to the container, so you do not need to edit any of the existing files. Just create your own "my-extra-settings.py" file and put the following in it:

LOGIN_REQUIRED=True
REMOTE_AUTH_ENABLED=True
REMOTE_AUTH_AUTO_CREATE_USER=True
REMOTE_AUTH_BACKEND='social_core.backends.azuread.AzureADOAuth2'
SOCIAL_AUTH_AZUREAD_OAUTH2_KEY='yzx'
SOCIAL_AUTH_AZUREAD_OAUTH2_SECRET='xyz'
SOCIAL_AUTH_REDIRECT_IS_HTTPS=True

That should do the trick.

rock7632 Apr 5, 2024

This worked for me. Thank you so much!

Zappelphilipp Aug 9, 2024

tried that but same error. running netbox v3.7.8-2.8.0
EDIT: Tried evene newest version (4.0) - same error

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Azure AD authentication configuration #918

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment 3 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Select a reply

Uh oh!

Uh oh!

Azure AD authentication configuration #918

Uh oh!

kangchen06 Jan 5, 2023

Current Behavior

Expected Behavior

Docker Compose Version

Docker Version

The git Revision

The git Status

Startup Command

NetBox Logs

Content of docker-compose.override.yml

Replies: 1 comment · 3 replies

Uh oh!

kangchen06 Jan 5, 2023 Author

Uh oh!

Uh oh!

Dark-DK Jan 24, 2023

Uh oh!

rock7632 Apr 5, 2024

Uh oh!

Uh oh!

Zappelphilipp Aug 9, 2024

kangchen06
Jan 5, 2023

Replies: 1 comment 3 replies

kangchen06
Jan 5, 2023
Author