Allow external auth in Nextcloud

[Sam_uk]

Hi @nebulon I'm using Keycloak module https://github.com/njsubedi/cloudron-keycloak

Which seems to work well until the Nextcloud container is restarted. At which point it breaks and the auth settings are overwritten.

According to your comment;
"it will always ensure the LDAP settings are bound to the LDAP server on your Cloudron."

Could you change the Nextcloud package to allow for external user management

I'd be willing to pay for this work if it helps it happen quickly.

[nebulon]

@Sam_uk have you installed your Nextcloud with the Cloudron usermanagement or without? Cloudron will only overwrite the auth settings if the Cloudron usermanagement (which is through LDAP) is used.

[Sam_uk]

@nebulon I think on setup we did use cloudron user management, before deciding to use Keycloak.

If I create another Nextcloud instance I can choose at setup?

[Sam_uk]

@Sam_uk Ah I see that I can. So I guess I just need to migrate all my user data to the new instance?

Or is there a way of editing the old instance to no longer use the LDAP?

[jdaviescoates]

@Sam_uk I'm not sure but I think you may be able to create a fresh install using a backup of the existing one and choose let app manage access then

[Sam_uk]

@jdaviescoates Thanks, but it doesn't look like that is an option. I can only re-create a complete clone.

[nebulon]

Theoretically this is possible to change the auth method and we might implement that in the future, but currently the side-effects for apps is a bit unknown what happens if the apps start with configured LDAP then again without, so at the moment you would have to install a fresh Nextcloud instance unfortunately.

[Sam_uk]

@nebulon thanks, how best can I get all my user data from old> New Nextcloud instance?

The Cloudron backup doesn't help in this case?

[nebulon]

@Sam_uk such data migration is always a bit tricky. You might be able to first install a fresh Nextcloud without the Cloudron user management and then import a backup from the other instance. Only do this in a test app instance first though.