Upgrade from 6 to 7 broke

[senekor]

Describe the bug

I upgraded from 6 to 7. I applied the config change as suggested in the changelog. The opencloud server seems to be running now, but I cannot login anymore with any user.

I use OIDC for authentication. So I thought maybe it's related to that. I removed any OIDC config and tried to login with my admin account, didn't work.

I tried downgrading to 6 again, didn't work.

Here are my error logs from when I try to login. (I think these ones are from version 6, when I tried to downgrade again.)

Jun 12 12:33:08 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=reva,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:56782","time":"2026-06-12T10:33:08Z","message":"invalid credentials"}
Jun 12 12:33:09 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=libregraph,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:56786","time":"2026-06-12T10:33:09Z","message":"invalid credentials"}
Jun 12 12:33:09 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000023","error":"LDAP Result Code 49 \"Invalid Credentials\": ","time":"2026-06-12T10:33:09Z","message":"failed to add user"}
Jun 12 12:33:09 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000023","error":"generalException: failed to add user","time":"2026-06-12T10:33:09Z","message":"could not create user: backend error"}
Jun 12 12:33:09 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:09Z","message":"Error creating user"}
Jun 12 12:33:09 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:09Z","message":"Autoprovisioning user failed"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=reva,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:56792","time":"2026-06-12T10:33:11Z","message":"invalid credentials"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=libregraph,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:56798","time":"2026-06-12T10:33:11Z","message":"invalid credentials"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000028","error":"LDAP Result Code 49 \"Invalid Credentials\": ","time":"2026-06-12T10:33:11Z","message":"failed to add user"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000028","error":"generalException: failed to add user","time":"2026-06-12T10:33:11Z","message":"could not create user: backend error"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:11Z","message":"Error creating user"}
Jun 12 12:33:11 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:11Z","message":"Autoprovisioning user failed"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=reva,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:60246","time":"2026-06-12T10:33:18Z","message":"invalid credentials"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"idm","bind_dn":"uid=libregraph,ou=sysusers,o=libregraph-idm","op":"bind","remote_addr":"127.0.0.1:60248","time":"2026-06-12T10:33:18Z","message":"invalid credentials"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000033","error":"LDAP Result Code 49 \"Invalid Credentials\": ","time":"2026-06-12T10:33:18Z","message":"failed to add user"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"graph","request-id":"b8af32fc748f/qc0jOSEwLI-000033","error":"generalException: failed to add user","time":"2026-06-12T10:33:18Z","message":"could not create user: backend error"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:18Z","message":"Error creating user"}
Jun 12 12:33:18 remo-raspi systemd-opencloud[2765667]: {"level":"error","service":"proxy","error":"500 Internal Server Error","time":"2026-06-12T10:33:18Z","message":"Autoprovisioning user failed"}

Steps to reproduce

Upgrade from 6 to 7 with an instance using OIDC? Not sure.

Expected behavior

I can login with my existing users.

Actual behavior

Posted the logs above, and the browser shows this page:

Setup

Here's my Quadlet file:

Details

[Container]
Image=docker.io/opencloudeu/opencloud-rolling:6
AutoUpdate=registry

PublishPort=4500:9200
Volume=opencloud-config:/etc/opencloud:Z
Volume=opencloud-data:/var/lib/opencloud:Z

Environment=PROXY_TLS=false
Environment=OC_URL=https://cloud.buenzli.dev
Environment=OC_DOMAIN=cloud.buenzli.dev

# OIDC
Environment=OC_OIDC_ISSUER=https://id.buenzli.dev
Environment=OC_EXCLUDE_RUN_SERVICES=idp
Environment=PROXY_OIDC_REWRITE_WELLKNOWN=true
Environment=PROXY_AUTOPROVISION_ACCOUNTS=true
Environment=GRAPH_USERNAME_MATCH=none
Environment=WEB_OIDC_CLIENT_ID=cb6c700f-99fa-480f-9d95-d19f6745be49

Environment=OC_SHARING_PUBLIC_SHARE_MUST_HAVE_PASSWORD=false

[Service]
Restart=always

[Install]
WantedBy=default.target

[senekor]

I restored my instance by exporting my podman volume for the data, deleting the data and config volumes, doing the setup again with init (this time with v7 right away) and lastly re-importing my data.

Luckily this wasn't too big of a pain, because I don't have many users. But still, shared links, app tokens, webDAV URLs and all that stuff is gone / changed and I have to set it up again. Not the best upgrade experience.

[micbar]

@senekor Sorry to hear that.

Please note that we are using semver. So a major upgrade always indicates breaking changes.

We are maintaining a smooth upgrade path only for the production releases. The documentation for that upgrade path from 4.x to 7.x is here https://docs.opencloud.eu/docs/next/admin/maintenance/upgrade/upgrade-7.x.x