Problem with Nextcloud and Cloudron OIDC auth

[Jordy]

Hello,
I manage a paid instance of Cloudron.
We use Nextcloud with an installed Keycloak as a OIDC. We don’t want to use the Cloudron auth with Nextcloud, but each time I delete Cloudron as oidc in the Nextcloud parameters, it comes back (after an update, I suppose).
How can I get rid of the Cloudron OIDC for Nextcloud definitely ?

v8.3.2 (Ubuntu 24.04.2 LTS)
Nextcloud 32.0.1
Keycloak 26.4.2

Thanks,

[nebulon]

You probably then have installed Nextcloud with the Cloudron usermanagement. This is an installation time decision and currently cannot be changed afterwards. If the app is installed using Cloudron usermanagement, it will always ensure those settings on app startup. This is why it keeps on resetting your settings.

You would have to reinstall the app without Cloudron usermanagement to use some external Keycloak in your case.

[Jordy]

Hello,
Thank you,, how can i reinstall the app without Cloudron usermanagement ? I have to manage the app by myself without Cloudron at all ?
Edit : saw on a new install, i can leave the user management to the app.

No possibility to modify the current behavior without reinstalling ? Maybe modifying the underlying scripts ?

[nebulon]

Currently only the reinstallation is supported. The side-effects are often quite confusing when the usermanagement and thus user mapping for an app gets changed mid-way.

Allowing user management to be changed after installation may be something we provider in future releases, but that requires a lot more testing of all the apps first, which is a lot of work for little benefit.

Depending on what parts of Nextcloud you have already used, maybe copying files from one instance to another using SSH into the server and then trigger a full occ rescan might help https://docs.cloudron.io/packages/nextcloud/#rescan-files

Though make sure to have a recent backup around before attempting any such migration.

[james]

Hello @Jordy

Be very careful with Nextcloud and migrating an OIDC setup.
I know that Nextcloud does not play well with these type of migrations.
Always test this with a clone from backup and a new installation with the same version where you select let the app handle accounts.

There is this app https://apps.nextcloud.com/apps/user_migration for user migration but still, proceed with caution.

I've looked into the LDAP to local user migration and have all SQL queries to do that, but not for OIDC to local user.
How Nextcloud behaves if you simply change the OIDC provider I can't tell right now.
So please keep us updated with findings.