<![CDATA[Another LDAP/OIDC sync issue - admin can't login]]>It seems to be a continuation of issues I'm facing, including the latest one.
Since OIDC has been introduced, and after Cloudron 7.5.* version I keep facing many instabilities and issues.

Now the problem is that I can't login with superadmin user to the dashboard.

Here is a schema:
LDAP client sync users from LDAP master. It seems like all users can login into LDAP client Cloudron, except for admin user.

Impersonating works. But not an LDAP based auth. I have only one superadmin, so I'm not sure if that's exactly the problem or if there are other related things affecting.

The problem first noticed at 7.5.2, but I updated to 7.6.1 and the issue still persist.

The only error I'm seeing - it's 'Internal error, try again later'.
Console gives a bit more information:

[Error] Failed to load resource: the server responded with a status of 401 () (login, line 0)

It also shows that 401 error handler is failing at 138 line - screenshot of that piece attached.

Screenshot 2023-12-08 at 21.28.24.png

]]>https://forum.cloudron.io/topic/10601/another-ldap-oidc-sync-issue-admin-can-t-loginRSS for NodeSun, 16 Aug 2026 07:17:59 GMTFri, 08 Dec 2023 20:30:37 GMT60<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Wed, 17 Jan 2024 22:22:22 GMT]]>

Are you able to login without 2fa

yep - by setting up temporary password with cloudron cli tool

Note that the ldap connector does not sync with a cron job, you have to press the sync button manually.

Not valid - as otherwise I wouldn't be able to login with temporary password - user wouldn't exist.

Manual sync - yes, sure. My logins worked up till I setup 2FA on admin on master server.

]]>https://forum.cloudron.io/post/81315https://forum.cloudron.io/post/81315Wed, 17 Jan 2024 22:22:22 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Wed, 03 Jan 2024 14:35:27 GMT]]>There was a bug that 2FA is not enforced when it should be. I have fixed this now.

  • Is the admin user in the client synced properly ? Note that the ldap connector does not sync with a cron job, you have to press the sync button manually. Do you see a 'External directory user' icon to the right of the user like below?
  • Are you able to login without 2fa ?

image.png

]]>https://forum.cloudron.io/post/80323https://forum.cloudron.io/post/80323Wed, 03 Jan 2024 14:35:27 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Tue, 02 Jan 2024 22:39:02 GMT]]>@potemkin_ai said in Another LDAP/OIDC sync issue - admin can't login:

The only error I'm seeing - it's 'Internal error, try again later'.

I have fixed this part. When a username is valid but just the password is incorrect, it displays 'Internal error' incorrectly.

I will test the 2FA part tomorrow and get back.

]]>https://forum.cloudron.io/post/80283https://forum.cloudron.io/post/80283Tue, 02 Jan 2024 22:39:02 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Fri, 29 Dec 2023 13:25:15 GMT]]>Apologies, any updates on that?

]]>https://forum.cloudron.io/post/80054https://forum.cloudron.io/post/80054Fri, 29 Dec 2023 13:25:15 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Sun, 10 Dec 2023 20:42:57 GMT]]>@nebulon said in Another LDAP/OIDC sync issue - admin can't login:

What is the 401 response message body/text?

Seems to be empty:

Screenshot 2023-12-10 at 21.41.15.png

As a guess: do you handle 2FA auth from slave/client LDAP Cloudron? I would guess it's a corner case and it's not handled.

]]>https://forum.cloudron.io/post/79099https://forum.cloudron.io/post/79099Sun, 10 Dec 2023 20:42:57 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Sun, 10 Dec 2023 19:33:08 GMT]]>What is the 401 response message body/text?

]]>https://forum.cloudron.io/post/79096https://forum.cloudron.io/post/79096Sun, 10 Dec 2023 19:33:08 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Sat, 09 Dec 2023 20:16:42 GMT]]>Superadmin has 2FA enabled. Guess it could be also a problem.

]]>https://forum.cloudron.io/post/79067https://forum.cloudron.io/post/79067Sat, 09 Dec 2023 20:16:42 GMT<![CDATA[Reply to Another LDAP/OIDC sync issue - admin can't login on Fri, 08 Dec 2023 20:35:58 GMT]]>btw: nothing in box, nginx logs.

]]>https://forum.cloudron.io/post/79017https://forum.cloudron.io/post/79017Fri, 08 Dec 2023 20:35:58 GMT