UeJo comments

Results 7 comments of


                                            UeJo

Cookie “miq_oidc_access_token” is invalid because its size is too big. Max size is 4096 B.

Yes its only in the browser. The cookie is too long, hence the browser is rejecting it, gives an error on the client side, like the screenshot i posted. That's...

Cookie “miq_oidc_access_token” is invalid because its size is too big. Max size is 4096 B.

Hello, we are talking about around 50 long named ldap groups. But i think the main problem here is not that the user is in too many ldap groups, its...

Cookie “miq_oidc_access_token” is invalid because its size is too big. Max size is 4096 B.

You mean probably https://github.com/OpenIDC/mod_auth_openidc/blob/9c0909af71eb52283f4d3797e55d1efef64966f2/auth_openidc.conf#L539-L546. But if not defined the default value is 4000. So it is even set by default, but that doesn't matter since the cookie is explicitly set...

Cookie “miq_oidc_access_token” is invalid because its size is too big. Max size is 4096 B.

I found a workaround, at least for our problem: In the documentation: https://www.manageiq.org/docs/reference/latest/auth/openid_connect.html#oidc-assertions it says for the "The following Group Membership mapper must be manually created": ID token: on access...