Azure SSO Broken Since update to PHP 8.2.10

dd25aaawm

Good morning, Azure SSO no longer logs us in since updating to PHP version 8.2.10.

osTicket version 1.18

Everything worked on PHP 8.1.8, and if I revert back to that PHP version it works again.
Host server: Windows Server 2019, IIS

Azure SSO acts like it signs us in, and in fact our Azure sign on logins indicate that the sign in was successful. However it just drops us back to the main helpdesk page as a guest user. If we add the /scp to the url it brings us back to the login page saying authentication required.

KevinTheJedi

dd25aaawm

Change PHP version, restart/reload the webserver, clear your sessions and cookies, and retest.

Cheers.

dd25aaawm

Good afternoon,

That did not help.

Thanks!

KevinTheJedi

dd25aaawm

Make sure you have all the same extensions installed/enabled on the new version of PHP as you have on the old version of PHP. You can also compare the INI files to make sure you're using the same settings. You can also try installing the latest build of the OAuth2 plugin and replacing the old plugin with the new one, restart the webserver (and PHP-FPM if you're running it), and retest.

Cheers.

dd25aaawm

Good afternoon,

I have all the same extensions installed and enabled. I haven't made any settings changes to the ini files. I have the newest OAuth2 plugin installed. Still no go.

Thanks!

KevinTheJedi

dd25aaawm

Well something is different as it works with PHP 8.1 but not 8.2. That's the only difference here so I would bet it's a difference of PHP settings.

You can always create a phpinfo file, load the file with php 8.1, save the content of the page, do the same thing for php 8.2, and compare all the settings.

Cheers.

dd25aaawm

Good morning,

Here are all the settings that are "different" They all only exist in php 8.2.10, none of these exist in php 8.1.

Zend Max Execution Timers disabled
error_log_mode 0644
mail.mixed_lf_and_crlf Off
max_multipart_body_parts -1
ALTSVC Yes
HTTP3 No
UNICODE No
ZSTD No
HSTS Yes
GSASL No
zend_test.not_empty_str_test val
zend_test.observer.execute_internal Off
zend_test.observer.observe_declaring Off
zend_test.print_stderr_mshutdown Off
zend_test.quantity_value 0
zend_test.str_test no value

I don't know anything about php so I have no idea if these would make a different for Azure SSO, or how to turn them off.

Thanks!

KevinTheJedi

dd25aaawm

Most likely this then:

https://forum.osticket.com/d/103843-new-installation-oauthazure-auth-plugin-not-working/10

Cheers.

dd25aaawm

Good morning,

That was it! Thanks!

edmontonitguy

Thanks @KevinTheJedi I've been fighting with this all day and the cURL root cert in PHP INI was the problem. I've setup oauth stuff before so I was really wondering what on earth I was doing wrong.