Issues - ipsilon - Pagure.io

#585 Recovered: Add per-SP option to disable signature checking for authn requests

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#584 Recovered: debug call_location is using wrong stack frame

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#583 Recovered: force use.screen to true when debug is enabled

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#582 Recovered: Allow SP and IdP to be installed on same box.

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#581 Recovered: Allow one-time password to be used for SP registration

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#580 Recovered: ipsilon-upgrade-database idx_association_uuid

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#579 Recovered: lasso ECP support check should be based on lasso symbol rather than lasso version

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#578 Recovered: Don't fail on unsigned logout requests

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#577 Recovered: Rework database system

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#576 Recovered: Configuration without hierarchical paths

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#575 Recovered: ipsilon client redirect not working with custom saml paths

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#574 Recovered: ipsilon-client-install fails to add mellon AssertionConsumerService for PAOS

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#573 Recovered: Attribute mapping issue (locality as state)

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#572 Recovered: Traceback if SAML attempted when plugin not loaded due to config failure

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#571 Recovered: Failure to initialize SAML2 plugin should not be debug level

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#570 Recovered: CVE-2015-5215/CVE-2015-5216: XSS in multiple pages

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#569 Recovered: Better logging if supported NameID not authenticated

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#568 Recovered: Provide database update tool

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#567 Recovered: database cleanup/expire procedure

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#566 Recovered: IPA helper assumes that if keytab exists it contains the right creds

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#565 Recovered: ipsilon gssapi path not found

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#564 Recovered: --ipa doesn't count as enabling gssapi plugin

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#563 Recovered: /tmp race in test case

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#562 Recovered: Logging out of an SP that isn't logged in throws a 400

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#561 Recovered: setup.py should install the ipsilon wsgi into /usr/libexec

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#560 Recovered: Available SP portal

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#559 Recovered: Check that any imported SAML SP metadata contains a public key

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#558 Recovered: Duplicate service providers, cannot delete

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.3

#557 Recovered: ipsilon-client-install: Shouldn't need to set --saml-sp-logout and --saml-sp-post with --saml-sp

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#556 Recovered: ipsilon-client package should require mod_ssl

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#555 Recovered: Uncaught exception in IPA helper

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#554 Recovered: ipsilon-client-install give password in env. var.

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#553 Recovered: ipsilon-client-install: fix --saml-secure-setup; generate apache conf snippet

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#552 Recovered: Extend REST SP interface to allow update and delete operations

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#551 Recovered: Update spec file when new lasso and mod_auth_mellon have update ECP support

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#550 Recovered: Support IdP initiated SSO

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#549 Recovered: SAMLv2: WantAuthnRequestsSigned = true

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#548 Recovered: yuPKG: ipsilon-authgssapi should obsolete ipsilon-authkrb (also mod_auth_kerb) on EL7

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#547 Recovered: PKG: ipsilon-infosssd requires sssd >= 1.12.4, while latest on EL7 is 1.12.2

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#546 Recovered: IPA helper should auto-configure LDAP

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#545 Recovered: Port Persona to jwcrypto

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#544 Recovered: Strack trace if an unknown login plugin is configured

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#543 Recovered: Allow metadata to be updated for an existing SAML SP

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#542 Recovered: Require SSL for SAML2 protected endpoint

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#541 Recovered: Add in-tree requirements checker for runtime, tests and development

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#540 Recovered: mellon metadata retrevial has different values depending on whether http or https is used in the meatadata url

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#539 Recovered: Copyright headers need to be changed to Ipsilon Project

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#538 Recovered: Document procedure for using Ipsilon behind a load-balancer

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#537 Recovered: mod_auth_gssapi and mod_auth_mellon are sensitive to order

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#536 Recovered: Install sets up mod_auth_gsss values ,but RPM does not require mod_auth_gss

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#535 Recovered: Configure SP to periodicaly poll for new IdP metadata

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#534 Recovered: Regenerate IdP metadata, distribute

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#533 Recovered: Completely remove _debug

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#532 Recovered: installer configured incorrect path to /usr/libexec/ipsilon

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#531 Recovered: Permissions need adjusted for RPM package ipsilon-base

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#530 Recovered: merge login and info plugin configuration in a single stack

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#529 Recovered: Add mod_auth_gssapi to test suite

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#528 Recovered: Make use of GSS_NAME

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#527 Recovered: Rename auth_krb plugin to auth_gssapi

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#526 Recovered: [RFE] Provide a way to delegate between different services

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#525 Recovered: [RFE] Provide an API to add tenant configurations

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#524 Recovered: sssd info plugin can't be properly enabled from UI

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#523 Recovered: After some time, Ipsilon will stop working with remote database

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#522 Recovered: Investigate supported SAML 2.0 XML XML Encryption Algorithms

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#521 Recovered: Investigate supported SAML 2.0 XML signature algorithms

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#520 Recovered: Implement SAML Identity Provider Discovery profile

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#519 Recovered: Implement SAML Artifact Resolution

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#518 Recovered: Display an actual error message if no auth provider is selected

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#517 Recovered: ipsilon-server-install fails when ipa is enabled, nss name conflict, plugins need to be loaded into their own namespace

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#516 Recovered: IdP metadata validity period default should be extended

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#515 Recovered: REST API allows SPs to be added with illegal names

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#514 Recovered: Allow SP to be registered by ipsilon-client-install

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#513 Recovered: SP uninstall attempts to run install

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#512 Recovered: ipsilon-client-install should permit multiple Ipsilon IdP's to be configured

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#511 Recovered: JavaScript errors in Administration page

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#510 Recovered: Carret symbol on admin page toolbar does not display properly

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#509 Recovered: Login page should allow some control over method selection

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#508 Recovered: Add tool-tips and descriptions on admin pages

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#507 Recovered: Failed authentication in form based login plugins returns 200

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#506 Recovered: Implement OpenID Connect Provider

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.3

#505 Recovered: Allow SP installation to be on non-standard ports

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#504 Recovered: 'make test' should check for dependencies

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#503 Recovered: Track SP sessions separately from IdP user session

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#502 Recovered: Switch Negotiate auth from mod_auth_kerb to mod_auth_gssapi

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#501 Recovered: 400 error is thrown when performing a logout without a session

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#500 Recovered: IdP initiated logout does not trigger SLO

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#499 Recovered: With --info-sssd yes, attributes are not in SAML response

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#498 Recovered: RFE: Let SP get Apache certificate from IPA if enrolled

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#497 Recovered: 500 errors when using cherrypy 3.5.x

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#496 Recovered: ipsilon-*-install should enable the httpd service

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#495 Recovered: Validate SP path settings during installation

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#494 Recovered: Add Cache-Control header to prevent browser caching of SAML auth location

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#493 Recovered: Require SSL on SP when using --saml-secure-setup

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#492 Recovered: When --krb yes and user does not have a TGT and authenticates via PAM, no redirect back to SP happens

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#491 Recovered: The --info-sssd yes does not configure sssd.conf unless --info-sssd-domain is used

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#490 Recovered: ipsilon-server-install does not catch error properly

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#489 Recovered: The ipsilon command does not understand help nor --help

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#488 Recovered: Client tools end up pulling in all of ipsilon via dependencies

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#487 Recovered: Add discoverability of Identity Providers

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#486 Recovered: SAML Client installer should not copy idp metadata

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#176 Use dedicated ipsilon PAM service

7

Opened Sep 25, 2015 by dkelson. Modified Feb 13, 2017

1.2 Normal

#175 SSSD info plugin doesn't play nice with pam service

10

Opened Sep 25, 2015 by rcritten. Modified Jun 30, 2026

1.3 Normal

#174 Lasso causing interoperation failure with pysaml2

7

Opened Sep 25, 2015 by merlinthp. Modified Feb 13, 2017

Normal

#74 Redirect to SP does not occur when multiple login plugins are enabled

9

Opened Mar 3, 2015 by nkinder. Modified Feb 13, 2017

1.0 m3 Normal

#485 Recovered: Fix SAML provider to deal with _groups

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#484 Recovered: Verify conformance with SAML spec

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#483 Recovered: Handle expired passwords

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#482 Recovered: Add tests for LDAP auth/info modules

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#481 Recovered: Per-module uninstall

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#480 Recovered: ipsilon-server-install should only print "Installation complete" when the installation actually completes

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#479 Recovered: Discovery Page

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#478 Recovered: Track down remaining logout issues

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#477 Recovered: Improve logout feedback

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#476 Recovered: WSGIDaemonProcess should set display-name

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#475 Recovered: Ipsilon sends empty AttributeStatement, violates specification

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#474 Recovered: Refactor plugin configuration code to handle errors

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

#473 Recovered: Implement SAML logout using SOAP over HTTP method

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#472 Recovered: Add SAML multi-logout test

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#471 Recovered: Implement authentication of external Persona identities

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#470 Recovered: Add database versioning

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#469 Recovered: feedback on auth issues

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#468 Recovered: Make admin/role assignment group-based instead of in userprefs

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#467 Recovered: Create cute landing page that apologize in case of errors

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#466 Recovered: Use expiring metadata

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#465 Recovered: do not cache data in saml's ServiceProvider class

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#464 Recovered: new request_response_log facility issues with multipart requests

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#463 Recovered: Ipsilon 0.3.0 EL7 package

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#462 Recovered: ipsilon-server-install should enforce ntp time sync, kerberos logins silently fail otherwise

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#461 Recovered: ipa ipsilion-server-install option fails ungracefully if ipa client/server version mismatch

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#460 Recovered: need admin command line tool to prevent admin lockout on web GUI

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#459 Recovered: ipsilon spec file missing required components

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#458 Recovered: need to log request/response

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#457 Recovered: Create a "best practices" document for integrating with Ipsilon

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#456 Recovered: Update spec file

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#455 Recovered: debug logging needs better source code location information

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#454 Recovered: user input is not validated in LDAP auth plugin

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#453 Recovered: many error messages give no useful information

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#452 Recovered: Implement ipsilon-server-install --uninstall

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m2

#451 Recovered: ipsilon-server config profile undocumented

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#450 Recovered: 404 not found error; ui fonts are missing

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#449 Recovered: ipsilon-server-install log omits essential messages

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#448 Recovered: ipsilon has (almost) no man pages

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#447 Recovered: Incorrect ipsilon-server-install --server-debuging help documentation

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#446 Recovered: Automatic optional user creation based on the external authentication source

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#445 Recovered: Add Apache identity modules as an info plugin

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m2

#444 Recovered: Add ECP (Enhanced Client or Proxy) support

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

N/A

#443 Recovered: Add an audit log

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#442 Recovered: Add concept of roles

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#441 Recovered: Support transient and persistent NameID identifiers

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#440 Recovered: Create an API for automatic SP registration

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m2

#439 Recovered: attribute mapping and filtering policies

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m4

#438 Recovered: Session tracking and logout

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#437 Recovered: Write new SELinux policy

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#436 Recovered: metadata upload cryptically fails if file is not readable

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.2

#435 Recovered: Support minimal installations

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#434 Recovered: Some files missing license header

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

N/A

#433 Recovered: Add option to provide certificates to installers

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#432 Recovered: Create policy framework

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m2

#431 Recovered: Add support for passing database URIs from the installer

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#430 Recovered: Fonts are missing

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

N/A

#429 Recovered: Add X-Frame-Options / frame-ancestors support

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#428 Recovered: Config needs changes

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#427 Recovered: Better configuration UI

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#426 Recovered: Offer logout if identity_url doesn't match openid_request.identity

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

Backlog

#425 Recovered: Implement better UI support for lists in configuration options

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#424 Recovered: Review database schema

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#423 Recovered: Add tests that use a real db engine

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#422 Recovered: Create expiring Idp metadata on request

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#421 Recovered: Add Cache-control headers on admin and other pages

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m3

#420 Recovered: Gray-out the PAM Service configuration for auth form

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.1

#419 Recovered: Add support for logout

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

N/A

#418 Recovered: Support SAML CLI interactions aka Enhanced Client Profile (ECP)

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0

#417 Recovered: Server metadata.xml enpoint paths are incorrectly generated

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#416 Recovered: 500 error is thrown when accessing login plugins order config

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#415 Recovered: WSGI settings conflict with FreeIPA

Opened Jun 30, 2026 by t0xic0der. Modified Jun 30, 2026

1.0 m1

#413 Recovered: SAMLv2 metadata validUntil should have a 'Z' appended

1

Opened Jun 10, 2026 by t0xic0der. Modified Jun 10, 2026

1.1

#410 imghdr is deprecated

2

Opened Nov 3, 2024 by keeper-of-the-keys. Modified Jun 30, 2026

#404 ipsilon-server-install fails on Fedora 40 (sqlalchemy 2.0)

4

Opened May 7, 2024 by ryanlerch. Modified Dec 11, 2024

PR#408

#403 Wrong message when the password is expired

Opened Apr 27, 2024 by abompard. Modified Jun 30, 2026

easyfix

#402 New release?

5

Opened Apr 7, 2024 by keeper-of-the-keys. Modified Dec 5, 2024

#401 Cannot authenticate from Flatpak

Opened Feb 15, 2024 by jstanek. Modified Jun 30, 2026

#399 `make containertest-fedora38` fails on testlogout and testmapping

1

Opened Dec 22, 2023 by adamwill. Modified Jun 30, 2026

#398 Disable the TOTP entry field, when unsupported by the backend.

1

Opened Dec 12, 2023 by rokejulianlockhart. Modified Jun 30, 2026

#395 saml2 metadata truncated on a regular basis

1

Opened Aug 7, 2023 by darknao. Modified Aug 14, 2023

PR#396

#393 saml2 default signing algo RSA-SHA1 is not accepted by some services

3

Opened Jun 8, 2023 by darknao. Modified Jul 15, 2023

#390 WSGI app cannot access /etc/ipsilon and /var/lib/ipsilon

Opened Jun 3, 2023 by koalillo. Modified Jun 30, 2026

#388 Can't run behind reverse proxy? --hostname option is ignored

1

Opened Mar 11, 2023 by koalillo. Modified Jun 3, 2023

#387 Small fixes to docs

Opened Mar 5, 2023 by koalillo. Modified Jun 30, 2026

#381 ERROR: SLO validation failed: <lasso.ProfileMissingAssertionError(-427): When looking for an assertion we did not found it.>

Opened Oct 3, 2022 by jelledj. Modified Jun 30, 2026

#380 Wrong release dates (2020 vs 2022) on releases page

1

Opened Aug 12, 2022 by ondrejj. Modified Aug 16, 2022

#372 Refreshable OIDC tokens are cleaned up

1

Opened Jun 17, 2022 by abompard. Modified Jun 20, 2022

PR#373

#361 400 Error Description should be improved

Opened Sep 29, 2021 by lgriffin. Modified Jun 30, 2026

easyfix PR#378

#359 OTP field in the auth form

3

Opened Aug 10, 2021 by frostyx. Modified Jul 5, 2022

#358 Logging in by email + password

2

Opened Aug 10, 2021 by frostyx. Modified Jul 5, 2022

#357 No error message on unsuccessful login

3

Opened Aug 10, 2021 by frostyx. Modified Jul 10, 2022

#356 Can't log out from (stg.)pagure.io, can't switch accounts

6

Opened Jul 9, 2021 by kparal. Modified Jun 30, 2026

#351 improve user error message

2

Opened Apr 15, 2021 by kevin. Modified Jul 5, 2022

#350 *Autogenerated* openidc client secret isn't rotated

Opened Apr 7, 2021 by arrfab. Modified Jun 30, 2026

#347 Use openid,display wrong username

Opened Jan 6, 2021 by hxj3315. Modified Jun 30, 2026

#346 Tracebacks when using ipsilon on RHEL8 with mysql

2

Opened Nov 18, 2020 by arrfab. Modified Jun 30, 2026

#345 I want to know how to configure openidc

Opened Nov 17, 2020 by hxj3315. Modified Jun 30, 2026

#344 /admin/providers/openidc/admin/new client_secret prefilled

1

Opened Sep 28, 2020 by bmwiedemann. Modified Jun 30, 2026

#343 Logging in bugzilla via ipsilon returns a 500 error

13

Opened Aug 31, 2020 by mohanboddu. Modified Sep 1, 2020

#342 Allow (declaratively?) configurable extra data

2

Opened Aug 25, 2020 by nphilipp. Modified Jul 5, 2022

#339 OpenID Connect bad serialize `amr` claim in token.

8

Opened Jun 18, 2020 by astepano. Modified Jun 30, 2026

PR#340

#334 openid uses wrong username capitalization

3

Opened Jun 3, 2020 by bmwiedemann. Modified Jun 30, 2026

#332 binascii.a2b_base64 binascii.Error: Incorrect padding

7

Opened May 19, 2020 by bmwiedemann. Modified May 20, 2020

PR#333

#330 Is /doc/design.txt still up to date?

4

Opened May 11, 2020 by sudoman. Modified May 12, 2020

#325 Web interface throws HTTP 403 when trying to manipulate OIDC provider client settings

2

Opened Apr 26, 2020 by ngompa. Modified Apr 26, 2020

#322 Install fails when service already exists

Opened Mar 19, 2020 by scoady. Modified Jun 30, 2026

#318 m2crypto seems to be unused

Opened Nov 19, 2019 by patrakov. Modified Jun 30, 2026

#316 logout SLO issues with ipsilon

Opened Mar 18, 2019 by jelledj. Modified Jun 30, 2026

#315 WebAuthn support for 2FA in Ipsilon

Opened Mar 15, 2019 by ngompa. Modified Jun 30, 2026

#310 501 Not Implemented shows the error

2

Opened Oct 16, 2018 by hansolo. Modified Jun 30, 2026

#309 Please port to Python 3

1

Opened Sep 11, 2018 by ngompa. Modified Feb 23, 2020

#307 Support for pagure.io project specific scopes

Opened Aug 24, 2018 by cverna. Modified Jun 30, 2026

#305 stack trace when logging in with e-mail address

Opened Jul 26, 2018 by papa. Modified Jun 30, 2026

#304 No auth error or retry with single plugin

Opened Jun 7, 2018 by puiterwijk. Modified Jun 30, 2026

#302 OpenIDC provider seems to be unstable

4

Opened May 17, 2018 by bkabrda. Modified Jun 30, 2026

#301 500 from fas provider goes on with incomplete data

Opened Apr 27, 2018 by kevin. Modified Jun 30, 2026

#298 Warning for upper case

Opened Feb 7, 2018 by kevin. Modified Jun 30, 2026

#290 SPNEGO doesn't work with FreeIPA 4.5

6

Opened Sep 20, 2017 by tkov. Modified Jun 30, 2026

#289 AttributeError: 'NoneType' object has no attribute 'format'

1

Opened Aug 16, 2017 by dosmage. Modified Aug 16, 2017

#283 RelayState=None sent when SP request didn't contain a relaystate parameter

1

Opened Jul 13, 2017 by merlinthp. Modified Jul 30, 2017

#273 Database upgrade fails with readonly plugin database

1

Opened May 4, 2017 by puiterwijk. Modified May 15, 2017

#272 infosssd does not work with unicode characters in user gecos or attributes

1

Opened Apr 24, 2017 by puiterwijk. Modified May 15, 2017

#265 FreeIPA 4.5 breaks Ipsilion installation

4

Opened Feb 23, 2017 by cheimes. Modified Apr 20, 2017

#264 Token refreshing is not working due to no refreshable_until being set in the database

2

Opened Feb 23, 2017 by puiterwijk. Modified Jun 13, 2017

#263 Provide developer-facing API documentation

Opened Feb 22, 2017 by ncoghlan. Modified Jun 30, 2026

#262 Only create a session when needed

Opened Feb 19, 2017 by puiterwijk. Modified Jun 30, 2026

#261 Code style inconsistency: camelCase vs under_score

Opened Feb 17, 2017 by puiterwijk. Modified Jun 30, 2026

#252 Implement OpenID Connect service accounts

Opened Feb 14, 2017 by puiterwijk. Modified Jun 30, 2026

#251 Rework admin system

Opened Feb 14, 2017 by puiterwijk. Modified Jun 30, 2026

#247 Token introspection API should be limited

Opened Feb 13, 2017 by puiterwijk. Modified Jun 30, 2026

#246 Assure that API requests always respond with json

Opened Feb 13, 2017 by puiterwijk. Modified Jun 30, 2026

#245 500 Internal Server Error when user attributes contain non-ascii characters.

1

Opened Feb 3, 2017 by tkov. Modified Jun 2, 2017

Normal

#244 missing Requires: python-setuptools

3

Opened Jan 25, 2017 by arrfab. Modified Feb 14, 2017

Normal

#243 Implement openidc token request via web UI

Opened Jan 15, 2017 by puiterwijk. Modified Jun 30, 2026

Normal

#242 Mapping needs to have implicated _* -> _*

2

Opened Jan 14, 2017 by puiterwijk. Modified Feb 14, 2017

Normal

#241 Not possible to not use signed userinfo

Opened Dec 28, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#240 OpenID provider doesn't create nonce table

1

Opened Dec 27, 2016 by puiterwijk. Modified Jun 30, 2026

Normal PR#306

#239 saving default settings on openid provider confguration page /idp/admin/providers/openid results into non working configuration

Opened Dec 27, 2016 by kordex. Modified Jun 30, 2026

Normal

#238 If OpenID response is too long, Apache error occurs

1

Opened Dec 19, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#237 Ipsilon inserts certificates as-is

2

Opened Oct 22, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#236 python-jwcrypto package for ipsilon-openidc not available on CentOS 7

2

Opened Oct 11, 2016 by dtheisen. Modified Feb 13, 2017

centos jwcrypto openidc package test yum Backlog Normal

#235 PEP8 rules are breaking the build process on CentOS 7

3

Opened Oct 10, 2016 by dtheisen. Modified Jun 30, 2026

build compile error fail pep8 test Backlog Normal

#234 ipsilon-upgrade-database fails with mysql/mariadb backend

2

Opened Aug 17, 2016 by arrfab. Modified Jun 30, 2026

Normal

#233 Pgsql schema update.

2

Opened Jul 16, 2016 by volga629. Modified Jun 30, 2026

Normal

#232 Support authentication to existing IdPs by using Ipsilon as SP for federation services

2

Opened Jul 12, 2016 by marlinc. Modified Jun 30, 2026

High

#231 Admin key management

Opened Jul 12, 2016 by puiterwijk. Modified Jun 30, 2026

Backlog Normal

#230 Ansible modules

Opened Jul 11, 2016 by puiterwijk. Modified Jun 30, 2026

Backlog Normal

#229 Full REST API

Opened Jul 11, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#228 Login stack implementation

Opened Jul 11, 2016 by puiterwijk. Modified Jun 30, 2026

Backlog Normal

#227 Add client installer option to configure the remote CA

Opened Jun 8, 2016 by rcritten. Modified Jun 30, 2026

Normal

#226 Add support for SP-based authorization of sessions

3

Opened May 16, 2016 by merlinthp. Modified Feb 13, 2017

Normal

#225 Root-mounted instance has invalid openid base redirect

3

Opened May 11, 2016 by puiterwijk. Modified Feb 13, 2017

1.3 Normal

#224 Implement user portal

1

Opened May 11, 2016 by puiterwijk. Modified Feb 13, 2017

1.3 Normal

#223 Allow ipsilon-server-install with no base.mount

2

Opened May 11, 2016 by puiterwijk. Modified Feb 13, 2017

1.3 Normal

#222 Always log exceptions

Opened May 10, 2016 by puiterwijk. Modified Jun 30, 2026

1.3 Normal

#221 Implement Client Configuration

Opened May 9, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#220 Determine a time for client secret expiration

Opened May 9, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#219 Implement more JWT algorithms handling

Opened May 9, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#218 Implement caching of request_uris at registration time

Opened May 9, 2016 by puiterwijk. Modified Jun 30, 2026

Normal

#217 client_secret_jwt and private_key_jwt implementation

Opened May 9, 2016 by puiterwijk. Modified Jun 30, 2026

Backlog Normal

#216 Implement webfinger

1

Opened May 3, 2016 by puiterwijk. Modified Feb 13, 2017

1.3 Normal

#215 Redirect not working when coming from http to ipsilon server

4

Opened May 3, 2016 by veruu. Modified Feb 13, 2017

Normal

#214 OpenID extensions send empty fields

2

Opened Apr 19, 2016 by puiterwijk. Modified Feb 13, 2017

Normal

#213 SAML Unicode handling

4

Opened Apr 19, 2016 by puiterwijk. Modified Feb 13, 2017

1.3 Normal

#212 Various new pylint errors

2

Opened Mar 30, 2016 by puiterwijk. Modified Feb 13, 2017

1.2 Normal

#211 Test cases for cleanup

Opened Feb 29, 2016 by puiterwijk. Modified Jun 30, 2026

1.3 Normal

#210 OpenID fails with readonly config due to erroring out

5

Opened Feb 23, 2016 by puiterwijk. Modified Feb 13, 2017

1.2 Normal

#209 SAML2SessionStore cleanup task not scheduled

4

Opened Feb 22, 2016 by jgainerdewar. Modified Feb 13, 2017

1.2 Normal

#208 Allow username for SAML2 to be mapped

2

Opened Feb 14, 2016 by puiterwijk. Modified Feb 13, 2017

1.2 Normal

#207 ipsilon-server-install not checking if ran as admin

1

Opened Jan 6, 2016 by pingou. Modified Jun 30, 2026

Normal

#206 Starting IdP-Initiated logout with non-conforming SP returns server error

3

Opened Jan 5, 2016 by puiterwijk. Modified Feb 13, 2017

1.2 Normal

#205 Anonymous binds do not work with infoldap

2

Opened Dec 3, 2015 by jdennis. Modified Feb 13, 2017

1.2 Normal

#204 500 Server Error from infoldap

2

Opened Dec 3, 2015 by jdennis. Modified Feb 13, 2017

1.2 Normal

#203 Need to consider unsigned requests

2

Opened Nov 17, 2015 by puiterwijk. Modified Feb 13, 2017

Normal

#202 ipsilon-server-install fails to emit error message, fails silently

4

Opened Nov 12, 2015 by jdennis. Modified Feb 13, 2017

Normal

#201 error messages in ipsilon-server-install are missing a value for the format specifier

2

Opened Nov 12, 2015 by jdennis. Modified Feb 13, 2017

Normal

#200 port authpam.py to new python-pam version

4

Opened Nov 11, 2015 by jdennis. Modified Feb 13, 2017

Normal

#199 ipsilon-server-install uninstall aborted unable to find domain if installed with ipa=no

Opened Nov 2, 2015 by nkinder. Modified Jun 30, 2026

1.3 Normal

#198 Use constants instead of strings in admin code

1

Opened Oct 29, 2015 by rcritten. Modified Jun 30, 2026

1.3 Normal

#197 Add a SAML viewer

2

Opened Oct 29, 2015 by rcritten. Modified Jun 30, 2026

1.3 Normal

#196 [RFE] add support to ipsilon for using hostnames for SP names

7

Opened Oct 19, 2015 by nkinder. Modified Feb 13, 2017

1.3 Normal

#195 Traceback in SOAP logout raising exception

4

Opened Oct 14, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#194 CVE-2015-5301: missing user authorization check when deleting a service provider

2

Opened Oct 14, 2015 by puiterwijk. Modified Feb 13, 2017

security 1.2 Normal

#193 Incorrect attribute used in logout error message

3

Opened Oct 13, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#192 Integration with Sibboleth

3

Opened Oct 12, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#191 When authentication is performed by Apache user info attributes are not available

4

Opened Oct 10, 2015 by jdennis. Modified Feb 13, 2017

1.2 Normal

#190 Logging instrumentation info for backend auth

3

Opened Oct 9, 2015 by puiterwijk. Modified Jun 30, 2026

easyfix Backlog Normal

#189 Ipsilon requires a NameIDPolicy in the SAML Login request

4

Opened Oct 8, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#188 SimpleSAMLPHP option redirect.validate is unsupported

2

Opened Oct 6, 2015 by rcritten. Modified Feb 13, 2017

Normal

#187 Logout error in admin pages

7

Opened Oct 6, 2015 by rcritten. Modified Feb 13, 2017

1.2 High

#186 Don't assume cache_dir exists in the configuration

4

Opened Oct 6, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#185 Handle SAML IdP certificate rollover

1

Opened Oct 6, 2015 by nkinder. Modified Jun 30, 2026

1.3 Normal

#184 Interoperability with gitlab

3

Opened Oct 5, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#183 Interoperability with AWS

2

Opened Oct 5, 2015 by rcritten. Modified Feb 13, 2017

Backlog Normal

#182 Integration with Google Compute Engine (GCE)

1

Opened Oct 5, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#181 Integration with Picketlink/Keycloak

6

Opened Oct 5, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#180 Integration with SimpleSAMLPHP

3

Opened Oct 5, 2015 by rcritten. Modified Feb 13, 2017

1.2 Normal

#179 /etc/httpd/saml2 should be owned by ipsilon rpm

3

Opened Oct 5, 2015 by rcritten. Modified Jun 30, 2026

Backlog High

#178 util.Policy mapping documentation is incomplete & incomprehensible

4

Opened Oct 2, 2015 by jdennis. Modified Feb 13, 2017

1.3 High

#177 Exception triggered when Ipsilon receives AuthnRequest via SOAP endpoint

4

Opened Oct 1, 2015 by jdennis. Modified Feb 13, 2017

1.2 Normal

ipsilon

Issues 0 Open 304 Closed

Issues
0 Open 304 Closed