Page 1 of 1

external authentication from app?

Posted: Fri May 30, 2025 8:04 pm
by jwk
With v 2.2.2 of the webmo app on an ipad (10th generation, ipados 18.5), I cannot log in to my server with the domain username and password entered in the Settings. Doing so, and touching Submit, gives a "WebMO login incomplete" error. Is this an inherent limitation of the app?
BTW, external authentication from a browser on the same ipad works normally using the domain username and password. And logging into webmo from the app as a local, non-external user also works.

Re: external authentication from app?

Posted: Fri May 30, 2025 10:36 pm
by schmidt
This is strange. I can't imagine a reason why this wouldn't work, as the app knows now difference. I just verified that I can login to the app as an externally authenticated user without any problems.

The only problematic case I can imagine is when using external authentication via Shiboleth or another API where you must login separately via the web (on another website). This is supported by the desktop version, but not via the app.

Re: external authentication from app?

Posted: Sun Jun 01, 2025 6:43 pm
by jwk
WebMO admin deletes domain user. iPad browser login with domain user - group drop down menu shown, etc.

WebMO admin deletes domain user. iPad app login with domain user (same username and pwd) - "Login incomplete..." error message.

Domain user logs in using a browser: group chosen and account created. Normal job creation and calculations.

App build molecule, Webmo, Submit - connects to Choose Engine, right arrow to Configure works. But Submit with right arrow flashes but does not submit. Left arrow works.

in App, setting username and pwd to an existing local account: Same behavior, i.e. logs in, but submit arrow flashes and nothing happens.

All same behaviors on the iPad mentioned previously and on an iPhone 16 with WebMO app v 4 freshly downloaded.

No fresh entries in ../webmo/errors.
/var/log/messages mentions "SELinux is preventing httpd read access on webmo.css.."

$ sestatus

SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: permissive
Mode from config file: permissive
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33

ls -l entry for .../public_html/webmo/webmo.css

-rwxr--r--. 1 frank frank 2685 Aug 1 2023 webmo.css

Re: external authentication from app?

Posted: Mon Jun 02, 2025 5:03 pm
by jwk
Sorry, iphone 12, not 16.

Re: external authentication from app?

Posted: Mon Jun 02, 2025 10:55 pm
by jwk
Yes, acquiring a new username by external authentication from an Active Directory domain requires using the browser; as mentioned, above if you attempt to do this through the app, you get the "Login incomplete" message.
However, with an established user, local or external, entered in the app Settings menu, submitting a calculation still seems to be broken. Initially one gets connected to the Choose Engine page; then the Continue arrow take you to Configure Gaussian Job.. However, hitting Continue again just causes the arrow to flash once; nothing else happens.
This is not a problem with the settings in WebMO. I got the same result when submitting jobs from the app to our main server and to two lab servers set up with WebMO 19 or 23, all with the usual installation per webmo.

Re: external authentication from app?

Posted: Tue Jun 03, 2025 7:20 pm
by jwk
More testing shows that selecting "Reset to defaults" enters the webmo demo page with username "appguest". Now doing Submit takes you to the demo page with MOPAC engine already selected; hitting the "continue" arrow does submit the job.
So: is the app's "Submit" function really just limited to the webmo demo site with MOPAC engine?

Re: external authentication from app?

Posted: Tue Jun 03, 2025 7:30 pm
by jwk
Answering my own question: if you change "appguest" to "guest", pwd "guest", Done. Submit takes you to the Choose Engine page of webmo demo. Any of the engines may be chosen and the continue arrow does submit the job.

Re: external authentication from app?

Posted: Mon Aug 04, 2025 5:26 pm
by polik
The configured engines are different for the "guest" and "appguest" accounts. Using username = "appguest" and password = "appguest" (which are the default settings for the app) logs one into the appguest account. Only MOPAC is configured in the appguest account. And when only a single engine is available, the choose engine screen is bypassed.