Admin-Login Opencloud - HTTP Error 500

[duesi31]

Hi,

I installed an opencloud-instance with docker-compose faced to the internet. Everything seams to be ok and I can call the login-page calling the internet-url. But if I want to login as admin (user: admin/pwd like set in the .env-file) I get the error message "Unexpected HTTP response: 500. Please check your connection and try again."
Also activating the demo users was without success. Same error.
docker logs shows following error:
"opencloud {"level":"error","service":"idp","error":"ldap identifier backend logon connect error: LDAP Result Code 49 "Invalid Credentials": ","time":"2025-04-27T18:11:18Z","line":"github.com/opencloud-eu/opencloud/pkg/log/logrus_wrapper.go:50","message":"identifier failed to logon with backend"}". I don't know why opencloud try to communigate with ldap ?!
I tried different passwords for admin in the -env-file. Also the rolling and normal-docker-image.

Anybody a hint what is wrong here ?

Daniel

[micbar]

"opencloud {"level":"error","service":"idp","error":"ldap identifier backend logon connect error: LDAP Result Code 49 "Invalid Credentials": ","time":"2025-04-27T18:11:18Z","line":"github.com/opencloud-eu/opencloud/pkg/log/logrus_wrapper.go:50","message":"identifier failed to logon with backend"}". I don't know why opencloud try to communigate with ldap ?!

Opencloud needs to store the users somewhere. There is no relational database, so it uses an internal LDAP server, the so-called idm service.

The ldap bind password is created during the opencloud init step and is stored in the opencloud.yaml file.

If that doesn't match, you see the error from above.

@rhafer how can we reset that without running opencloud init again?

[rhafer]

@rhafer how can we reset that without running opencloud init again?

That would be opencloud idm resetpassword --user-name <username> (while opencloud is not running). But that command can currently only set the password of "normal" users.

Unfortunately, the status code 500 indicates that it is not the user's password what is wrong, but one for the services (idp) in this case can't authenticate. We currently don't have a tool for resetting the service passwords unfortunately. That reminds me that we should have a tool to also reset the service passwords to the values specified in the config file (or, if possible, reset them at service startup)

@duesi31 Did you call opencloud init --force-overwrite at some point? Or remove the opencloud.yaml file? That would have reset all the service password in the config without resetting them in the LDAP service, leading to a situation similar to yours.

If you're still in the process of setting things up and don't have any "important" data in your opencloud, the easiest way to solve the issue is to remove the idm service's database and have it regenerate from scratch. (That would of course remove any user you created before)

[duesi31]

Hi Ralf,

many thanks. I'm not aware that I executed the init-command you mentioned. Also I didn't delete the yaml-file.

How can I remove the idm-database and regenerate it?

[rhafer]

There should be a file called idm.boltdb inside the folder idm in the opencloud data directory. If you move that file away and restart opencloud it will create an new empty database and add the services users.

[fimdomeio]

I was having trouble installing open cloud. Was following the instructions at: https://github.com/opencloud-eu/opencloud-compose and tried both without traefik and with traefic. I could get to the login page but then was getting a 500 error and could not proceed.

I solved the issue by removing the idm.boltdb file and then recreating the other containers.

[micbar]

The idm and openCloud is initialized with random passwords and secrets.

If you delete data or config folders or if they are not properly writable during first initialization, you can get this result.