SSO - User could not be found

[squidy]

Infos:

• Used Zammad version: 6.4.1
• Used Zammad installation type: package
• Operating system: Ubuntu 24.04
• Browser + version: Chrome, Firefox, Edge

Expected behavior:

• Users should be able to access Zammad via SSO authentication (Active Directory), using the same user logged into the operating system.

Actual behavior:

• The user is unable to access it, receiving a message stating that the user was not found.

Steps to reproduce the behavior:

• I successfully configured the LDAP integration. I can log into the system with an Active Directory user through Zammad’s login form. I enabled SSO in the administration panel and configured Kerberos and Apache.

Apparently, Zammad detects the kerberos user, but the Zammad log says the user was not found.

I, [2025-02-20T15:56:39.274161#786-184360]  INFO -- : Started POST "/auth/sso" for 172.16.38.11 at 2025-02-20 15:56:39 -0400
I, [2025-02-20T15:56:39.278032#786-184360]  INFO -- : Processing by SessionsController#create_sso as HTML
I, [2025-02-20T15:56:39.278088#786-184360]  INFO -- :   Parameters: {"authenticity_token"=>"[FILTERED]"}
I, [2025-02-20T15:56:39.281554#786-184360]  INFO -- : User '“ldap-username”' could not be found. (Exceptions::NotAuthorized)
app/controllers/sessions_controller.rb:50:in `create_sso'
app/controllers/application_controller/handles_transitions.rb:16:in `handle_transaction'
I, [2025-02-20T15:56:39.283109#786-184360]  INFO -- : Completed 401 Unauthorized in 5ms (Views: 0.8ms | ActiveRecord: 0.7ms | Allocations: 2477)

May you helpe me?

[squidy]

However, when I try to find the user in the Zammad database, it finds and returns their data.

[2] pry(main)> User.find_by(login: 'ldap-username')
=> #<User:0x000073970ffdb688
 id: 2,
 organization_id: 1,
 login: "ldap-username",
 firstname: "name...",
 lastname: "surename....",
 email: "ldap-username@email.com",
 image: "1b8c3b9baeb2ad67068cf9c83919a3db",
 image_source: nil,
 web: "",
(....)

Do you have any suggestions? Any direction?

[squidy]

It worked!
The quotes in:

RequestHeader set X-Forwarded-User "%{RU}e" env=RU  

were incorrect. A silly mistake due to copy and paste.