Rancher 2.7.6 login is disabled while migration is running

This document (000021198) is provided subject to the disclaimer at the end of this document.

Environment

Rancher 2.7.5 being upgraded to 2.7.6 with AD authentication enabled

Situation

Immediately following the upgrade from Rancher 2.7.5 to 2.7.6, users are unable to login to Rancher and are met with the following error message:

2.7.6-login-error-postupgrade.png

Cause

This is caused by a code change meant to revert the 2.7.5 AD bug. Login is locked while the migration is running so that users do not accidentally interfere with the migration and to prevent duplicate users from being created, blocking legitimate user access.

Depending on the number of users and corresponding rolebindings, this process can take sometime to resolve itself.
When the migration script begins, we expect to see [migrate-ad-user] beginning ad-guid unmigration in the Rancher logs. When it ends, we expect to see [migrate-ad-user] end of ad-guid unmigration in the Rancher logs.

Additional Information

More information about this change can be found in the Rancher 2.7.6 Release Notes: https://github.com/rancher/rancher/releases/tag/v2.7.6#:~:text=Active%20Directory%20Authentication%20Fixes

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.