Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Error syncing user when enabling Shibboleth/Okta + LDAP auth providers #45444

Open
joesims22 opened this issue May 10, 2024 · 0 comments
Open
Labels
area/authentication kind/bug Issues that are defects reported by users or that we know have reached a real release priority/2 team/collie the team that is responsible for auth and rbac within rancher

Comments

@joesims22
Copy link

Rancher Server Setup

  • Rancher version: v2.8.3
  • Installation option (Docker install/Helm Chart): Docker

Information about the Cluster

  • Kubernetes version: v1.28.6+k3s2
  • Cluster Type (Local/Downstream): local

Describe the bug
When using Okta/Shibboleth + LDAP Auth Providers we see this issue upon enabling and logging in as a user.
Configuring Okta with a user from ldap spams rancher with following logs:

[ERROR] error syncing 'user-2kpjm': handler mgmt-auth-userattributes-controller: No identities can be retrieved, requeuing

To Reproduce

  1. Deploy Rancher on v2.8.3
  2. Enable Okta/Shibboleth + LDAP
  3. Integrate Okta and AD
  4. Check Rancher logs for error
@joesims22 joesims22 added kind/bug Issues that are defects reported by users or that we know have reached a real release area/authentication labels May 10, 2024
@samjustus samjustus added team/collie the team that is responsible for auth and rbac within rancher priority/2 labels May 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/authentication kind/bug Issues that are defects reported by users or that we know have reached a real release priority/2 team/collie the team that is responsible for auth and rbac within rancher
Projects
None yet
Development

No branches or pull requests

2 participants