Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

builtin user managment / identity provider not working with versions newer than 3.1.0-next.4 #365

Closed
wkloucek opened this issue Jul 19, 2023 · 3 comments
Labels
Severity:sev2-high operations severely restricted, workaround available Type:Bug

Comments

@wkloucek
Copy link
Contributor

This Chart currently has a known issue when using the builtin user management / identity provider with oCIS 3.1.0-beta.1.

If you're installing this Chart from scratch (and are not upgrading an existing installation), you won't be able to login. You'll see an error message like:

idm-6ff7fcf6f-7l7jx idm {"level":"debug","service":"idm","addr":"{\"IP\":\"::\",\"Port\":9235,\"Zone\":\"\"}","time":"2023-07-19T12:25:14.485632047Z","line":"github.com/owncloud/ocis/v2/ocis-pkg/log/logrus_wrapper.go:50","message":"New Connection"}
idp-6c788d497c-5l459 idp {"level":"error","service":"idp","error":"ldap identifier backend logon connect error: LDAP Result Code 49 \"Invalid Credentials\": ","time":"2023-07-19T12:25:14.561278761Z","line":"github.com/owncloud/ocis/v2/ocis-pkg/log/logrus_wrapper.go:50","message":"identifier failed to logon with backend"}
idp-6c788d497c-5l459 idp {"level":"debug","service":"idp","request-id":"08768d787eda4f11d309a4c024242766","proto":"HTTP/1.1","method":"POST","status":500,"path":"/signin/v1/identifier/_/logon","duration":77.590554,"bytes":44,"time":"2023-07-19T12:25:14.561408038Z","line":"github.com/owncloud/ocis/v2/ocis-pkg/middleware/logger.go:27"}
idm-6ff7fcf6f-7l7jx idm {"level":"error","service":"idm","bind_dn":"uid=idp,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"10.244.10.153:32994","time":"2023-07-19T12:25:14.560782325Z","line":"github.com/owncloud/ocis/v2/ocis-pkg/log/logrus_wrapper.go:50","message":"invalid credentials"}

We're currentyl investigating in this.
Current workaround is: bootstrap the oCIS installation with 3.1.0-next.4 and then switch to 3.1.0-beta.1.

@wkloucek wkloucek pinned this issue Jul 19, 2023
This was referenced Jul 19, 2023
@wkloucek wkloucek added the Severity:sev2-high operations severely restricted, workaround available label Jul 20, 2023
@wkloucek wkloucek changed the title builtin user managment / identity provider not working with 3.1.0-beta.1 builtin user managment / identity provider not working with versions newer than 3.0.0 Aug 22, 2023
@wkloucek wkloucek changed the title builtin user managment / identity provider not working with versions newer than 3.0.0 builtin user managment / identity provider not working with versions newer than 3.1.0-next.4 Aug 22, 2023
@wkloucek
Copy link
Contributor Author

Also applies to 3.1.0-rc.1 and a development image which comes close to oCIS 4.0.0

@wkloucek
Copy link
Contributor Author

Seems to be a problem with Minikube hostpath CSI driver (https://github.com/kubernetes-csi/csi-driver-host-path). It does not seem to reliably delete PersistentVolumes. This could be due Minikube container restarts.

@wkloucek wkloucek unpinned this issue Aug 31, 2023
@wkloucek
Copy link
Contributor Author

was no longer observed when ensuring that PV was actually empty

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Severity:sev2-high operations severely restricted, workaround available Type:Bug
Projects
None yet
Development

No branches or pull requests

1 participant