O365 Modern Authentication issues

ceantuco

Hi,
We migrated to o365 and configured OSTicket as described in the KB; however, it does not work. After clicking on 'Submit' under IDP config, and entering the credentials for the OSTicket account, a message: 'Not Found' comes up.

Also, what should I put under 'hostname', 'port number' and 'protocol type' in remote mailbox and 'Hostname' and 'port number' in Outgoing smtp?
Can you assist?
https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html
Thank you!

KevinTheJedi

ceantuco

Not found means you don’t have URL Rewriting enabled on the webserver. Please search online for the instructions on how to install/enable URL Rewriting for your specific server and webserver. After doing so make sure you reload the webserver to make the changes take affect.

Cheers.

ceantuco

Hi KevinTheJedi
URL rewriting is enabled. What rewriting rule(s) should I add for OSTicket?
Please advise.
Thanks!

KevinTheJedi

ceantuco

You don’t, you just enable it for the site and it should automatically pick up the web.config file we ship with the application. That config holds the necessary rewrite rules which again should be automatically pulled if URL Rewriting is properly configured for the site.

Cheers.

ceantuco

I added the following to /etc/apache2/sites-available/000-default.conf:

<Directory /var/www/html/helpdesk>
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
</Directory>

closed my browser, rebooted the server and no luck. I am still getting 'Not Found' The requested URL was not found on this server'

ceantuco

I've read instructions to setup the a .htaccess file. should I place it in /var/www/html/.htaccess or where the Osticket files reside /var/www/html/.helpdesk/.htaccess
Thank you.

KevinTheJedi

ceantuco

We already have all of the necessary rewrite files for Apache/LiteSpeed (.htaccess) and IIS (web.config) shipped with the application. Go to the site directory and you’ll find these files already in the needed directories. You simply need to enable URL Rewriting. You may have it enabled on the server but not for the specific site. In your Apache site block in your .conf file make sure the AllowOverride All is set.

Cheers.

ceantuco

Hi @KevinTheJedi ,

My OSticket files are located in /var/www/html/helpdesk/ and this is the contents of my /etc/apache2/sites-available/000-default.conf file: (note, I changed my domain name to example.com'
is there anything I must change?
Your help is greatly appreciated!

<VirtualHost *:80>
        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/html
        <Directory /var/www/html/helpdesk>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
RewriteEngine on
RewriteCond %{SERVER_NAME} =support.example.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

KevinTheJedi

ceantuco

The only thing I can really suggest is moving all the RewriteEngine lines above the actual Directory block and reload/restart Apache. That way rewriting is enabled before the site loads the rest of the configs.

Cheers.

KevinTheJedi

ceantuco

Also, Idk what flavor of linux you are running but you should also make sure it's enabled globally via sudo a2enmod rewrite (if this doesn't work you can google the replacement command for your specific OS).

Cheers.

ceantuco

@KevinTheJedi I am running Debian 12. sudo a2enmod rewrite returns Module rewrite already enabled
I made the suggested changes and rebooted server. Still no luck. 🙁 note the 'Not Found' error message comes up after I enter the credentials (see screenshot below).

see new file config as per your recommendation:

`<VirtualHost *:80>
RewriteEngine on
RewriteCond %{SERVER_NAME} =support.example.com
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]

    ServerAdmin webmaster@localhost
    DocumentRoot /var/www/html

    <Directory /var/www/html/helpdesk>
    Options Indexes FollowSymLinks
    AllowOverride All
    Require all granted
    </Directory>

    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>`

ceantuco

@KevinTheJedi this is the URL that my browser cannot find https://support.example.com/helpdesk/api/auth/oauth2

When I go to /var/www/html/helpdesk/api I do not have a /auth/oauth2 folder(s). All I have within the 'api' folder are the following files:

api.inc.php cron.php http.php index.php pipe.php

maybe that is my issue?
Please advise.
Thanks!

KevinTheJedi

ceantuco

When I go to /var/www/html/helpdesk/api I do not have a /auth/oauth2 folder(s). All I have within the 'api' folder are the following files:
api.inc.php cron.php http.php index.php pipe.php
maybe that is my issue?

..no the rewrite rules handle where to send the request based on the url. But based on what you pasted above it does appear you are missing the .htaccess file (that’s shipped with the application) in the api/ directory. I would suggest that you download the latest v1.18.2 from our website, make a full backup of your site directory just in case, replace all files in the site directory with the files from the upload/ folder within the download (make sure your previous config file remains in the include/ directory or copy it from the backup), restart Apache, and retest.

Cheers.

ceantuco

@KevinTheJedi I got it working!!!!!
In addition to modifying my site's .conf file I also modified /etc/apache/apache2.conf file and set the following:

<Directory "/var/www/html/helpdesk">
        Options FollowSymLinks
        AllowOverride All
        Require all granted
</Directory>

I restarted Apache and re-entered the secret. All working fine now!
Thank you so much for your help and patience!