OOD on CentOS 8

[susan (Susan Litzinger)]

Has anyone tried updating Open OnDemand under CentOS 8?

[datakid (Lachlan Musicman)]

Yes, we are using 1.7.x successfully using LDAP and AuthBasic. Was there anything in particular you wanted to know? Still working on getting 1.8 working in RHEL8, Dex is new to us and causing issues.

[tdockendorf (Trey Dockendorf)]

Let us know what issues you’re facing with RHEL8 , as we’ve only lightly tested that deployment as OSC still runs all RHEL7. Testing for RHEL8 has been mostly done inside Vagrant or Docker.

[tdockendorf (Trey Dockendorf)]

I just discovered we forgot to include mod_auth_openidc in the 1.8 repos that is necessary to use Dex with OnDemand. This thread has the steps to remedy this issue:

Httpd wont start: Invalid command 'OIDCStateMaxNumberOfCookies' + Dex confusion

I just verified with Vagrant that the necessary configs are working with CentOS 8. I had forgotten we do ship a newer mod_auth_openidc but it appears like I mistakenly did not include that in 1.8 repos. I think that’s the issue you were facing because the RHEL8 version of mod_auth_openidc is 2.3.7 which is too old to support OIDCStateMaxNumberOfCookies I’d recommend updating to use the mod_auth_openidc shipped by OnDemand 1.8 repos: dnf module disable mod_auth_openidc:2.3 yum update mod_auth_…