Loss of admin right

Hello
I was admin of my own nextcloud server.
And today when trying to update an app I have discover that I was no more admin (no more menu in my “parameter”
When launching the “occ user:info userId” I realize that I have no more groups…

I get back of course my admin right with “occ group:adduser admin userId”

But any idea how this could happend?
I had a look in nextcloud.log hopping to see some line related to the group managment but see nothing…

hard to say without any logs and config - but SSO like LDAP/OpenID and similar integrations usually integration the option to manage user groups as well. I would recommend using audit log and email notifications - in my case group changes triggered by user_oidc app are reliably reported.

Ok thanks for the idea.
I use indeed a login throught Keyclock/Ldap
I will have a look in the link between groups of LDAP and nextcloud
(and will propably install user_oidc :wink: )

Ok it clearly link to the SSO.
Setting the admin to my user in cli give admin back, but as soon as I re autenticate I loose my admin right.

When you say user_oidc you mean OpenId connect?
When searching in NC for user_oidc it give me OpenId connect (that I have already installed)

What NC expect as roles to give admin right? I did not see any configuration in OpenIdConnect except choosing to get the roles from the LDAP.
In my LDAP my user is in admin an nextcloud group

did you read the docs looked at the config? hard to miss it:

image

Yes agree with you I read “to fast” the doc… But even with a deep reading I did not succed to manage account from LDAP.
But at least I could unplug the managment of role from LDAP and Manage them from NC :slight_smile:
The strange thing is that I did not touch any configuration since some month and with an update (of NC ? or with the app) I loose my admin right.

I will consider the subject close, maybe one day I will spend more time to link the role :wink:

1 Like

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.