# Issues with mod\_auth\_mellon

**URL:** <https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268>\
**Category:** Get Help\
**Created:** [February 15, 2024, 4:16pm UTC](https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268 "2024-02-15T16:16:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rgas20](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/rgas20/32/309_2.png) [@rgas20](https://discourse.openondemand.org/u/rgas20)\
**Post date:** [February 15, 2024, 4:16pm UTC](https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268/1 "2024-02-15T16:16:47Z")

</div>

Good morning,

We’re setting up a new instance of OnDemand and are having issues with mod\_auth\_mellon. We’re probably missing something, just wanted to check with someone that has more experience with this.

Following this: [SAML Authentication with Active Directory Federated Services (ADFS) and mod\_auth\_mellon — Open OnDemand 3.0.3 documentation](https://osc.github.io/ood-documentation/latest/authentication/adfs-with-auth-mellon.html#configure-mod-auth-mellon)

So we wget the metadata, then run **export mellon\_endpoint=“https://$(hostname)/mellon”**

Then run the create\_metadata.sh script: **/usr/libexec/mod\_auth\_mellon/mellon\_create\_metadata.sh “${mellon\_endpoint}/metadata” “${mellon\_endpoint}”**

This creates a .cert and a .key file, but not an .xml file. It is my understanding that we should have another .xml file generated as well, correct? As the next step says to put in the path to both a MellonSPMetadataFile and a MellonIdPMetadataFile:

MellonSPPrivateKeyFile /etc/httpd/mellon/mellon.key  
MellonSPCertFile /etc/httpd/mellon/mellon.cert  
MellonSPMetadataFile /etc/httpd/mellon/mellon\_metadata.xml  
MellonIdPMetadataFile /etc/httpd/mellon/idpmetadata.xml

The idpmetadata.xml is not the same as the mellon\_metadata.xml correct?

Any help on this would be appreciated. Thank you.

---

<div class="post-metadata">

**Author:** ![travert](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/travert/32/3074_2.png) [@travert](https://discourse.openondemand.org/u/travert)\
**Post date:** [February 15, 2024, 5:08pm UTC](https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268/2 "2024-02-15T17:08:23Z")

</div>

Unfortunately we don’t have a lot of experience with this module and it was a community addition to the docs.

@nealep I see you made the original contribution, would you have time to add any pointers here to help guide the setup and the missing `.xml` file?

---

<div class="post-metadata">

**Author:** ![rgas20](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/rgas20/32/309_2.png) [@rgas20](https://discourse.openondemand.org/u/rgas20)\
**Post date:** [February 16, 2024, 5:34pm UTC](https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268/3 "2024-02-16T17:34:11Z")

</div>

Looks like it’s a bug: [Bug #2052795 “mellon\_create\_metadata fails silently to create xm...” : Bugs : ssl-cert package : Ubuntu](https://bugs.launchpad.net/ubuntu/+source/ssl-cert/+bug/2052795)

We’ll find a workaround. I appreciate the offer of help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [August 14, 2024, 5:34pm UTC](https://discourse.openondemand.org/t/issues-with-mod-auth-mellon/3268/4 "2024-08-14T17:34:49Z")

</div>

Closed on August 14, 2024, 5:34pm UTC

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.