OAuth2 MS Issues

UnderDogMiller

We are trying to get OAuth2 running on our LAMP 1.17.2 osTicket server and after configuring all the settings, we are returned to this page where it says; "Loading" and never finishes up.

KevinTheJedi

UnderDogMiller

You will need to check your logs for any related errors (general server logs, webserver error logs, PHP error logs, MySQL/MariaDB error logs, osTicket System Logs, Browser Console logs, etc.). In the meantime you can go to the database and clear out auth_bk (make it empty) and set auth_id to NULL for the relevant ost_email_account records and see if that helps. If that doesn’t work you can also try deleting the email and re-adding it.

Also, when creating a new post you need to add a screenshot of your Admin Panel > Dashboard > Information page so we can better assist you.

Cheers.

UnderDogMiller

Thanks - I will try the delete option and check the auth_bk and auth_id fields... Our info:

UnderDogMiller

The last_error_msg in the ost_email_account table for that entry shows: Credentials: Required option not passed: "access_token"

UnderDogMiller

But I think I'm still fighting some url rewrite issues on this apache server. I don't have any .htaccess file so I'm trying to figure out how to modify the default apache files to allow for rewrite. I think I'm almost there.

UnderDogMiller

Rewrite rules are now working and SSO via MS Azure works! Still can't get the email to work...but looking at it.

TonyO

It could be corrupted permissions in Exchange. In the past week I've seen two admins resolve this in Exchange Admin Center. In the mailbox, disable delegated permissions (IMAP for example) and re-enable the permissions. Another admin resolved it by deleting the mailbox and recreating it. This is my preference, to get rid of any other corruption besides just delegated permissions.

ntozier

From the screen shot the Authorization Endpoint and Token Endpoint are wrong.

Take a look at the docs
https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

make sure you replace "common" with your Tenant ID.

UnderDogMiller

I blocked those out of the screenshot - they are in there.

UnderDogMiller

Reloaded osTicket 1.17.2, fixed a DNS issue, reconfigured OAuth2 and still get the "loading..." page:

Is there maybe a SQL table I need to clear out?

KevinTheJedi

UnderDogMiller

You can go to the ost_email_account table and delete the two records associated with this email and reconfigure everything or simply delete the email and re-add/re-configure it.

Cheers.

UnderDogMiller

Finally - it is working again on our LAMP server! Thanks @KevinTheJedi