Harbor: Auth_mode menu disabled

[DemenkovK]

Hello! I need to change auth_mode to LDAP, but somewhy menu is inactive. I use admin account, ofcause. What can i do to solve my issue?

[DoctahPopp871]

I am having a similar issue. Looking to change auth mode from built in database to OIDC. I understand that you can only change auth mode when the only user present is Admin. I removed all previously created users, but the Auth_Mode value is still greyed out.

What do I need to do in order to change my auth mode ? Do I need to re-install with a new user-database ?

[stonezdj]

How did you remove all users? You can clean users created in database and try again.

docker exec -it harbor-db bash
psql -U postgres
\c registry
select * from harbor_user
delete from harbor_user where user_id > 2

Then change the configuration in web console.

[DoctahPopp871]

Removed all users from web console. Let me check the DB, thanks.

[DemenkovK]

How did you remove all users? You can clean users created in database and try again.

docker exec -it harbor-db bash
psql -U postgres
\c registry
select * from harbor_user
delete from harbor_user where user_id = xxx 

Then change the configuration in web console.

It works! Can you advice, how can i troubleshoot connection string to ldap?

[DemenkovK]

Answer to my own question:

1. Set log level to debug in harbor.yml and reinstall harbor with new param.
2. Look into core.log. There i have found incorrect ldap request, then change "LDAP Filter" and "LDAP UID" values and it's work now.

[stonezdj]

You might removed the anonymous user, try to add it

insert into harbor_user (username, email, password, realname, comment, deleted, sysadmin_flag, creation_time, update_time) values 
('anonymous', '[email protected]', '', 'anonymous user', 'anonymous user', true, false, NOW(), NOW());

[DoctahPopp871]

The anonymous user did the trick, thanks!