Can't login to XBackBone with my cloudron Account

[Constrain6480]

Hi, I only can log in to my XBackBone Instance with the Admin User, but not with the Cloudron User. Every Time I try to log in with Cloudron User I get a "500 Internal Server Error" Message. See screenshot below:

Same Issue happens when I try to change the email of the Admin User in "Profile Settings"

These are the Logs when I try to log in with cloudron user:

May 13 10:37:57 185.213.155.218 - - [13/May/2024:08:37:57 +0000] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
May 13 10:37:57 185.213.155.218 - - [13/May/2024:08:37:57 +0000] "GET /home HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
May 13 10:37:57 185.213.155.218 - - [13/May/2024:08:37:57 +0000] "GET /login HTTP/1.1" 200 1784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
May 13 10:38:00 - - - [13/May/2024:08:38:00 +0000] "GET / HTTP/1.1" 302 - "-" "Mozilla (CloudronHealth)"
May 13 10:38:01 185.213.155.218 - - [13/May/2024:08:38:01 +0000] "POST /login HTTP/1.1" 500 5276 "https://share.kiwi-solutions.website/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
May 13 10:38:10 - - - [13/May/2024:08:38:10 +0000] "GET / HTTP/1.1" 302 - "-" "Mozilla (CloudronHealth)"

I didn't change anything on the config.php file, but just in case here it is:

<?php

return [
    'app_name' => 'XBackBone',
    'base_url' => getenv('CLOUDRON_APP_ORIGIN'),
    'db'       => [
        'connection' => 'mysql',
        'dsn'        => 'host=' . getenv('CLOUDRON_MYSQL_HOST') . ';port=' . getenv('CLOUDRON_MYSQL_PORT') . ';dbname=' . getenv('CLOUDRON_MYSQL_DATABASE'),
        'username'   => getenv('CLOUDRON_MYSQL_USERNAME'),
        'password'   => getenv('CLOUDRON_MYSQL_PASSWORD'),
    ],
    'storage' => [
        'driver' => 'local',
        'path'   => '/app/data/storage',
    ],
    'ldap' => array(
        'enabled' => getenv('CLOUDRON_LDAP_SERVER') !== false, // enable it
        'host' => getenv('CLOUDRON_LDAP_SERVER'), // set the ldap host
        'port' => intval(getenv('CLOUDRON_LDAP_PORT')), // ldap port
        'base_domain' => getenv('CLOUDRON_LDAP_USERS_BASE_DN'), // the base_dn string
        'search_filter' => '(&(objectclass=user)(username=????))', // ???? is replaced with user provided username
        'rdn_attribute' => 'username', // the attribute to use as username
        'service_account_dn' => getenv('CLOUDRON_LDAP_BIND_DN'), // LDAP Service Account Full DN
        'service_account_password' => getenv('CLOUDRON_LDAP_BIND_PASSWORD')
    ),
];

[nebulon]

Did the login work in the past? I just installed a fresh instance and the LDAP login worked here. Is the app and Cloudron both updated to latest? Do you have any other apps, which use LDAP and are those working as expected?

[girish]

I am able to login as normal user

Same Issue happens when I try to change the email of the Admin User in "Profile Settings"

I guess this is expected because you cannot change user information inside xbackbone. The LDAP directory is read only.

[Constrain6480]

@nebulon

Did the login work in the past?

No, this is the first time I installed it, and it didn't work straight away.

Is the app and Cloudron both updated to latest?

The cloudron version is "v7.7.2 (Ubuntu 22.04.3 LTS)"
The App Version is "XBackBone 3.7.0"

Do you have any other apps, which use LDAP and are those working as expected?

Yes, for example I use Kimai, Espo CRM (in fact I think this is openID but not sure), Taiga, jitsi meet - they all work fine

[Constrain6480]

@girish ok possible, but the xbackbone admin account isn't an LDAP Account right? But I get the point. Maybe the app tries to write in the LDAP folder and is not allowed to. Even if this is fact, it dosen't help with the login issue. So one issue to go

If you guys want, I can enable the SSH remote support and you can take a look on our instance?

[nebulon]

Just to further narrow down the issue are all Cloudron users affected by this? If only one user is, maybe something is off with only that?

[Constrain6480]

Sorry for the long delay, I have created a new user and was actually able to log in with this user. I have also given the new user every role from User to Superadmin, and I have always been able to log in with this user. I therefore assume that only my user has the problem. My user is the first user created on this cloudron instance and has the role superadmin.