Azure AD website authentication - getting access denied

Question

Azure AD website authentication - getting access denied

Mohamed Faris 0

Hi,

I've a deployment for "Kubeflow" on an AKS cluster. The deployment have steps to use AAD for authentication as mentioned [here].

Steps are applied and I get redirected to Azure sign in for authentication. However, after signing in I get access denied error as in the image attached.

User's image

I need any insights what the problem may be, if it is from AAD subscription limits or misconfiguration or anything. Also this info may help, applying the same steps in another azure account the authentication worked but for the account admin only.

Any help is appreciated.

Mohamed,

1 answer

Your answer

Answer 1

JimmySalian-2011 42,496

Hi,

If you can check the Azure AD logs you will be able to see the failure and success messages, can you check the permissions for this user and the app you have configured? The link you posted does not work so not sure what is configured. Log portal over here - https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

Mohamed Faris 0 Reputation points

2023-05-02T08:31:34.2633333+00:00

Hi,
Thanks for the reply. This is the link
https://www.kubeflow.org/docs/distributions/azure/authentication-oidc/
Mohamed Faris 0 Reputation points

2023-05-02T08:35:31.43+00:00

The sgin-in logs is grayed-out on my side. So I will check this with the admin.

Mohamed Faris 0

The sign-in logs show no error in Azure. It gives successful sign in. So I guess the problem now is with the OIDC service. The logs of the OIDC service pod throws this error, but I can't find what the problem is.


http: panic serving 10.244.0.6:41724: interface conversion: interface {} is nil, not string
goroutine 932 [running]:

net/http.(*conn).serve.func1(0xc000296460)

        /usr/local/go/src/net/http/server.go:1767 +0x139

panic(0x88ee00, 0xc0000eae70)

        /usr/local/go/src/runtime/panic.go:679 +0x1b2

main.(*server).callback(0xc0000e4100, 0x9b6ce0, 0xc0002500e0, 0xc0001c4a00)

        /go/src/oidc-authservice/handlers.go:150 +0x1061

net/http.HandlerFunc.ServeHTTP(0xc0000d4340, 0x9b6ce0, 0xc0002500e0, 0xc0001c4a00)

        /usr/local/go/src/net/http/server.go:2007 +0x44

github.com/gorilla/mux.(*Router).ServeHTTP(0xc0000d60c0, 0x9b6ce0, 0xc0002500e0, 0xc00008d300)

        /go/pkg/mod/github.com/gorilla/mux@v1.7.3/mux.go:212 +0xe2

main.whitelistMiddleware.func1.1(0x9b6ce0, 0xc0002500e0, 0xc00008d300)

        /go/src/oidc-authservice/handlers.go:225 +0xf2

net/http.HandlerFunc.ServeHTTP(0xc00006da80, 0x9b6ce0, 0xc0002500e0, 0xc00008d300)

        /usr/local/go/src/net/http/server.go:2007 +0x44

github.com/gorilla/handlers.(*cors).ServeHTTP(0xc000082360, 0x9b6ce0, 0xc0002500e0, 0xc00008d300)

        /go/pkg/mod/github.com/gorilla/handlers@v1.4.2/cors.go:54 +0x1037

net/http.serverHandler.ServeHTTP(0xc0000941c0, 0x9b6ce0, 0xc0002500e0, 0xc00008d300)

        /usr/local/go/src/net/http/server.go:2802 +0xa4

net/http.(*conn).serve(0xc000296460, 0x9b7ea0, 0xc00006d980)

        /usr/local/go/src/net/http/server.go:1890 +0x875

created by net/http.(*Server).Serve

        /usr/local/go/src/net/http/server.go:2927 +0x38e

Share via

Azure AD website authentication - getting access denied

1 answer

Your answer