Interactive mode - No reply address provided

[aitzubi]

Hi @bb-froggy ,

First of all, thanks for this script. It will help us a great deal with our linux laptop fleet ;)

We are having some issues using the enroll script in interactive mode. We have created the app in Azure and exposed the API. When I run the enroll script and I authenticate in the browser that opens, it fails with the error 'AADSTS900971: No reply address provided.'.

I think that we need a valid Redirect-URI. Microsoft provides some examples when you choose a Desktop Application but they don't work. Where can I find a valid redirect-uri?

As a feature request, it would be nice that you add compatibility with certmonger in the future ;)

Keep the good job!

[bb-froggy]

Just to make sure we are taking about the same thing, you are using the bash script, not the PowerShell? When it comes to end-user Linux devices, we are currently very actively working on a new variant. It uses bash, but without the dependency on the .NET CSRClient. You just need az.

Chances are we have something usable tomorrow. I keep you updated here. It will be an alpha version, but I believe it is just the better approach for this use case, so if you can wait a little longer, this will make things easier.

The specific login issue would also be resolved, because az would do it.

[aitzubi]

Great new @bb-froggy !! Yes, we are using the bash script. We are only interested in enrolling /renewing user certificates in linux (Ubuntu LTS). Please, feel free to ping me as I will be really glad of helping you with the beta testing.

Kind regards,

[aitzubi]

Hi @bb-froggy ,

Any news regarding that new version?

Kind regards,

[bb-froggy]

We couldn't get out done on Tuesday and then it turned out that we can only continue next week. Sorry for not giving am update! It was mostly organizational hassles, not technical ones, so I still expect the new version soon next week.

[aitzubi]

Thanks!

[bb-froggy]

Again, we couldn't get it done today and due to unfortunate organization on my end*, we will continue with this only next Monday.

*Internal use only ;-): For reasons that seemed sensible at the time, three people from three different continents and time zones, some working in part-time, some with small children are working on the Linux enrollment together. I failed to anticipate that there are only few opportunities to work on this together.

[aitzubi]

Don't worry @bb-froggy! Family first ;)

[bb-froggy]

Btw, we are still working on this and we do make progress. We have a working script, but still finish some tests. I hope it doesn't sound to silly, but we'll have it ready next week ;-).

[bb-froggy]

In the meantime, we have a working version of the scripts: https://docs.scepman.com/certificate-deployment/api-certificates/linux-enrollment-guide

We are still working to improve the documentation, but the script and SCEPman itself are now working and passed several tests :-).