The requested URL /api/auth/oauth2 was not found on this server.

ramrajone · Apr 5, 2023

Androids
To enable rewrite mod on Ubuntu:
sudo a2enmod rewrite

sudo systemctl restart apache2

Androids · Apr 11, 2023

Thanks, it was already enabled - (/etc/httpd/conf.modules.d/00-base.conf in Centos)
It is working now regardless.

Androids · Apr 11, 2023

Just to add to this;
[root@tickets /]# httpd -M|grep write
rewrite_module (shared)

In (Centos) /etc/httpd/conf/httpd.conf
<Directory "/var/www/html/osticket"> # YOUR EXACT directory
AllowOverride All
Options FollowSymlinks
Require all granted
</Directory>

systemctl restart httpd

That worked for me - Explicitly defining the osticket directory was the key

yashbhardwaj · May 3, 2023

Hi, I've been getting the same error. Before starting with URL rewrite and other suggested fixes, i wanted to know if it is necessary to setup remote mailbox and outgoing. I don't have them setup and i just want to implement simple OAuth with Microsoft login for which i have followed the necessary steps show in the authentication guide for Microsoft in osticket official docs.

KevinTheJedi

ramrajone

ramrajone · May 3, 2023

yashbhardwaj
Remote Mailbox/Outgoing and SSO are two things, if you don't want to pull emails from MS365 then you don't need to set up the Mailbox part, just setup SSO something like this:
https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authentication%20(SSO)%20Guide.html

Rookye23 · Feb 27, 2024

Hi, I have the same problem, when I authenticate with office.

I have apache modrewrite enabled.
In my virtual host as well as in apache2.conf I have the following

In the virtual host

Can you help me

KevinTheJedi · Feb 27, 2024

Rookye23

I can't say for certain but it's probably due to your virtual site config rules. I would clear all the custom rules, make it default, reload/restart the webserver so the changes are applied, and retest.

Cheers.

Rookye23 · Feb 28, 2024

Hello KevinTheJedi

This is what I have configured in the plugin

And I have left the vhost as clean as possible.

I have modrewrite enabled, which I'm missing

in my directories I don't have the path to api/auth/oauth2

I might be configuring the wrong redirect url in Azure ?.

Thanks

KevinTheJedi · Feb 28, 2024

Rookye23

No that’s correct. The api/http.php file redirects the request to the proper channels. Definitely seems like a setup issue as you have a custom port but don’t have the site config setup correctly for that.

Cheers.

Rookye23 · Mar 1, 2024

Hello, I have not solved the problem, I want to be able to access osticket through Microsoft365 with the Oauth2 plugin.
I'm not an expert, I'm forgetting something.
I leave you the information to see if you can help me.

When I login through 365 I appear to be logged in, but I am redirected back to the home page and do not enter the agent panel.

The authentication if it is being done through Microsoft 365

This is the content of the login errors access.log

When I log in with a local user it does redirect to the path https://soporte.ticket.com:6971/scp/tickets.php?queue=1&dir=1&sort=10"

These are the details of my operating system

Distributor ID: Debian
Description:    Debian GNU/Linux 10 (buster)
Release:        10
Codename:       buster

Version of osTicket installed

This is the Azure configuration, but I'm not sure if the Redirect URI configured in Azure is correct.

Rewrite module is enabled and working

sudo apache2ctl -M | grep rewrite
 rewrite_module (shared)

This is the content of the .htaccess directory /var/www/html/osticket/upload/api/.htaccess

<IfModule mod_rewrite.c>

RewriteEngine On

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} (.*/api)
RewriteRule ^(.*)$ %1/http.php/$1 [L]

</IfModule>

This is the content of the apache2 configuration directory /etc/apache2/apache2.conf

<Directory />
        Options FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

<Directory /usr/share>
        AllowOverride None
        Require all granted
</Directory>

<Directory /var/www/>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

This is the content of the apache2 port configuration directory /etc/apache2/ports.conf

Listen 82
<IfModule ssl_module>
        Listen 6971
</IfModule>

<IfModule mod_gnutls.c>
        Listen 6971
</IfModule>

This is the directory contents of the vhost-ssl file directory /etc/apache2/sites-available/osticket-ssl.conf

<IfModule mod_ssl.c>
        <VirtualHost *:6971>
                ServerName soporte.ticket.com:6971
                ServerAdmin rambo@ticket.com

                DocumentRoot /var/www/html/osticket/upload/

                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined

                SSLEngine on
                SSLCertificateFile /etc/ssl/private/soporte.ticket.com.crt
                SSLCertificateKeyFile /etc/ssl/private/soporte.ticket.com.key

                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>
                <Directory /var/www/html/osticket>
                        Options FollowSymlinks
                        AllowOverride All
                        Require all granted
                </Directory>
        </VirtualHost>
</IfModule>

This is the directory contents of the vhost file directory /etc/apache2/sites-available/osticket.conf

<VirtualHost *:82>
        ServerName soporte.ticket.com:6971
        ServerAdmin rambo@ticket.com

        DocumentRoot /var/www/html/osticket/upload
        RewriteEngine On

        ErrorLog ${APACHE_LOG_DIR}/osticket.log
        CustomLog ${APACHE_LOG_DIR}/osticket_access.log combined

        <Directory /var/www/html/osticket>
                Options FollowSymlinks
                AllowOverride All
                Require all granted
        </Directory>

</VirtualHost>

Thank you very much for your help

KevinTheJedi · Mar 1, 2024

Rookye23

I would need to see your app registration. Also do you have the cURL root certificate installed/enabled for PHP?

Cheers.

ntozier · Mar 3, 2024

Rookye23 When I login through 365 I appear to be logged in, but I am redirected back to the home page and do not enter the agent panel.

Are you clicking on the log in as an agent to start the login process?

Rookye23 · Mar 4, 2024

Hello KevinTheJedi curl I have it installed and enabled

it's my php.ini

in the directory I have the certificate

Rookye23 · Mar 4, 2024

Hello ntozier I log in via 365

the agent user I have configured the method 635

in the database the agent backend is as follows

ntozier · Mar 4, 2024

I meant you should check the url and see if you were in the correct space for an Agent to sign in.
Agent area url ends with /scp/login.php
User area url ends with /login.php

I also noticed from your Apache configs (both p82 and p6971) you have:
DocumentRoot /var/www/html/osticket/upload/

and both have:
<Directory /var/www/html/osticket>
Options FollowSymlinks
AllowOverride All
Require all granted
</Directory>

/upload/ does not seem to be included for "AllowOverride All"

Rookye23 · Mar 5, 2024

Hello ntozier

Ok I understand, for the login with an agent I am in the correct path /scp/login.php

I have modified the configuration of the vhost files to include upload as in DocumentRoot

But it still doesn't work, when I login with 365 it redirects me to the url https://soporte.ticket.com:6971/

<IfModule mod_ssl.c>
        <VirtualHost *:6971>
                ServerName soporte.ticket.com:6971
                ServerAdmin rambo@ticket.com

                DocumentRoot /var/www/html/osticket/upload/

                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined

                SSLEngine on
                SSLCertificateFile /etc/ssl/private/soporte.ticket.com.crt
                SSLCertificateKeyFile /etc/ssl/private/soporte.ticket.com.key

                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>
                <Directory /var/www/html/osticket/upload>
                        Options FollowSymlinks
                        AllowOverride All
                        Require all granted
                </Directory>
        </VirtualHost>
</IfModule>

<VirtualHost *:82>
        ServerName soporte.ticket.com:6971
        ServerAdmin rambo@ticket.com

        DocumentRoot /var/www/html/osticket/upload
        RewriteEngine On

        ErrorLog ${APACHE_LOG_DIR}/osticket.log
        CustomLog ${APACHE_LOG_DIR}/osticket_access.log combined

        <Directory /var/www/html/osticket/upload>
                Options FollowSymlinks
                AllowOverride All
                Require all granted
        </Directory>

</VirtualHost>

KevinTheJedi · Mar 5, 2024

Rookye23

I noticed in your plugin config you have the default "common" endpoints. Are you sure you chose the right endpoints? Go to the app registration, click Overview tab, click Endpoints button, see what the top two endpoints are (should be the only two OAuth2 endpoints), and compare to see if they match your endpoints in the plugin config.

Cheers.

Rookye23 · Mar 14, 2024

KevinTheJedi The endpoints are correct and if I am logging in with 365, the problem is that after logging in I am redirected to the login page https://soporte.ticket.com:6971/.

it does not redirect me to the route https://soporte.ticket.com:6971/scp/index.php?dir=1&sort=10

KevinTheJedi · Mar 14, 2024

Rookye23

When you are redirected to the client portal that means something isn’t right. I’m not sure what’s going on in your case without more debug info.

Cheers.