2024-06-07T00:00:17  <acidsys> matomo == beans.opensuse.org
2024-06-07T00:00:23  <matrix-o-o> <Firstyear (Firstyear)> Never heard of it lol.
2024-06-07T00:00:34  <SFaulken> wtf is beans.o.o
2024-06-07T00:00:45  <acidsys> sure I think douglas is the only person using the backend
2024-06-07T00:00:57  <acidsys> and the rest of the application works without any authentication anyways
2024-06-07T00:01:08  <matrix-o-o> <Firstyear (Firstyear)> acidsys: Only thing to be wary of here is that once we stop the sync into kanidm, we can't re-enable so we have to be sure if we want to proceed.
2024-06-07T00:01:38  <acidsys> hmm then rather let me sleep over it
2024-06-07T00:01:44  <matrix-o-o> <Firstyear (Firstyear)> Yep
2024-06-07T00:01:58  <matrix-o-o> <Firstyear (Firstyear)> Sounds wise :)
2024-06-07T00:02:07  <acidsys> SFaulken: I'm sure the highly descriptive homepage https://beans.opensuse.org/ explains everything, right?
2024-06-07T00:02:30  <SFaulken> if I just went and read for myself, I wouldn't be able to ask you.
2024-06-07T00:02:58  <matrix-o-o> <Firstyear (Firstyear)> acidsys: In theory if I took a back up before breaking the sync, if we restored that backup we could re-enable sync but it's a pain in the but.
2024-06-07T00:03:06  <SFaulken> and that *is* an incredibly descriptive web page.
2024-06-07T00:03:46  <matrix-o-o> <Firstyear (Firstyear)> acidsys: We could shutdown the freeipa server for 24 hours as a scream test to see if it catches anything else out.
2024-06-07T00:10:34  <acidsys> I now have access to beans, it's actually quite cool, shows geographics from where people use our website etc
2024-06-07T00:13:17  <matrix-o-o> <knurpht - Gertjan> Ah
2024-06-07T00:32:22  <acidsys> Firstyear: https://paste.opensuse.org/pastes/847183041b5b
2024-06-07T02:08:39  <acidsys> I have the LoginOIDC plugin in Matomo now but it wants the authorization server to redirect back to a custom callback URL
2024-06-07T02:09:00  <acidsys> Kanidm redirects back to https://beans.opensuse.org/matomo/index.php?state=xxx&code=yyy
2024-06-07T02:09:19  <acidsys> but it needs https://beans.opensuse.org/matomo/index.php?module=LoginOIDC&provider=oidc&action=callback&state=xxx&code=xxx (additional query parameters)
2024-06-07T02:11:26  <acidsys> if I copy the URL from the location response header of the authorise call and add the missing query parameters by hand I get in. I think it's not possible to specify a custom callback URL in Kanidm? none of the other resources needed it. but if I know what it expects I could try to patch it in the Matomo plugin
2024-06-07T08:22:06  *** mdogg_ is now known as mdogg
2024-06-07T10:06:17  <matrix-o-o> <Dominik Wombacher (wombelix)> re matomo oidc, not tested and just a quick thought based on your discussion last night, there is a redirect uri setting in the plugin you use.
2024-06-07T10:06:19  <matrix-o-o> <Dominik Wombacher (wombelix)> https://github.com/dominik-th/matomo-plugin-LoginOIDC/blob/63f3bf5eeb72d6feeb1dffd86c87f7396977fbc3/Controller.php#L440
2024-06-07T10:06:35  <matrix-o-o> <Dominik Wombacher (wombelix)> And this issue sounds also pretty "similar", so wouldn't that already work? https://github.com/dominik-th/matomo-plugin-LoginOIDC/issues/61
2024-06-07T10:48:57  <acidsys> hi DominikWombacher, thanks I solved it with mod_rewrite in the meanwhile
2024-06-07T10:49:01  <acidsys> https://paste.opensuse.org/pastes/52237c54e860
2024-06-07T10:49:27  <acidsys> too bad I did not find that issue you linked
2024-06-07T10:58:15  <matrix-o-o> <Dominik Wombacher (wombelix)> Solved is solved i guess :D
2024-06-07T10:58:50  <acidsys> I actually had "I hacked around it" pending in my IRC input buffer
2024-06-07T14:10:50  *** teepee_ is now known as teepee
2024-06-07T14:15:31  *** teepee_ is now known as teepee
2024-06-07T23:07:32  *** teepee_ is now known as teepee