SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-11 18:51:53 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Unable to configure Netbird using Shibboleth as IdP: redirect to /auth results in 404 #2085

New Issue
Closed
opened 2025-11-20 06:12:31 -05:00 by saavagebueno · 1 comment
saavagebueno commented 2025-11-20 06:12:31 -05:00
Owner
Copy Link

Originally created by @uedvt359 on GitHub (Jul 18, 2025).

I'm trying to setup netbird, using our existing Shibboleth IdP. It appears to mostly work: opening netbird.company.com redirects me to idp.company.com, where I log in, and am successfully redirected back to netbird.company.com/auth?code=.... However, this page is served as 404 and shows the following error:

Image

This page then tries to do further REST calls to the IDP, which are rejected.

Please help me understand what I am doing wrong. I can't see anything in the logs of either the management or dashboard containers. Can I increase the verbosity of login attempts for debugging?

my setup.env looks like this: I tried adding the commented out values as well, but these did not have any effect.

NETBIRD_DOMAIN="netbird.company.com"
NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://idp.company.com/.well-known/openid-configuration"
NETBIRD_DASH_AUTH_USE_AUDIENCE=false
NETBIRD_AUTH_CLIENT_ID="netbird"
NETBIRD_USE_AUTH0="false"
NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none"
NETBIRD_LETSENCRYPT_EMAIL="..."
NETBIRD_AUTH_SUPPORTED_SCOPES="openid offline_access"
NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid"
NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=false
#NETBIRD_IDP_MGMT_CLIENT_SECRET="..."
NETBIRD_AUTH_CLIENT_SECRET="..."
NETBIRD_AUTH_REDIRECT_URI="/auth"
#NETBIRD_MGMT_IDP_SIGNKEY_REFRESH=true
#NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth"

We installed netbird using the provided containers, tag latest as of two days ago.

Originally created by @uedvt359 on GitHub (Jul 18, 2025). I'm trying to setup netbird, using our existing Shibboleth IdP. It appears to mostly work: opening `netbird.company.com` redirects me to `idp.company.com`, where I log in, and am successfully redirected back to `netbird.company.com/auth?code=...`. However, this page is served as 404 and shows the following error: <img width="439" height="298" alt="Image" src="https://github.com/user-attachments/assets/f6e59ea9-45b2-4666-aa76-b4969ec4fe7b" /> This page then tries to do further REST calls to the IDP, which are rejected. Please help me understand what I am doing wrong. I can't see anything in the logs of either the management or dashboard containers. Can I increase the verbosity of login attempts for debugging? my setup.env looks like this: I tried adding the commented out values as well, but these did not have any effect. ``` NETBIRD_DOMAIN="netbird.company.com" NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://idp.company.com/.well-known/openid-configuration" NETBIRD_DASH_AUTH_USE_AUDIENCE=false NETBIRD_AUTH_CLIENT_ID="netbird" NETBIRD_USE_AUTH0="false" NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none" NETBIRD_LETSENCRYPT_EMAIL="..." NETBIRD_AUTH_SUPPORTED_SCOPES="openid offline_access" NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid" NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=false #NETBIRD_IDP_MGMT_CLIENT_SECRET="..." NETBIRD_AUTH_CLIENT_SECRET="..." NETBIRD_AUTH_REDIRECT_URI="/auth" #NETBIRD_MGMT_IDP_SIGNKEY_REFRESH=true #NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth" ``` We installed netbird using the provided containers, tag `latest` as of two days ago.
saavagebueno added the idptriage-neededself-hosting labels 2025-11-20 06:12:31 -05:00
saavagebueno commented 2025-11-20 06:12:33 -05:00
Author
Owner
Copy Link

@uedvt359 commented on GitHub (Jul 25, 2025):

This has been solved by our IdP team. I don't know the details of what they changed, sorry for anyone else reading this in the future.

This aside, the /auth endpoint is still served with a 404 status code, even though the login now succeeds.

@uedvt359 commented on GitHub (Jul 25, 2025): This has been solved by our IdP team. I don't know the details of what they changed, sorry for anyone else reading this in the future. **This aside, the /auth endpoint is still served with a 404 status code, even though the login now succeeds.**
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label idp self-hosting triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2085
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?