Channels
extensions
rancher-extensions
supermicro-sixsq
ozt
os
one-point-x
rio
onlinemeetup
v16-v21-migration
events
onlinetraining
training-1220
training-0110
training-0124
k3s-contributor
submariner
storage
k3os
windows
ci-cd
theranchcast
rfed_ara
nederlands
ukranian
danish
training-0131
masterclass
training-0207
training-0214
terraform-controller
epinio
phillydotnet
swarm
rancher-wrangler
deutsch
russian
chinese
mesos
français
japanese
arm
longhorn-dev
terraform-provider-rke
service-mesh
azure
gcp
academy
random
elemental
espanol
lima
harvester-dev
portugues
kubernetes
kim
hypper
kubewarden
opni
logging
neuvector-security
rancher-setup
developer
office-hours
mexico
cabpr
rke
vsphere
longhorn-storage
k3s
k3d
terraform-provider-rancher2
fleet
amazon
harvester
rke2
s3gw
hobbyfarm
rancher-desktop
general
Title
c
clean-ability-26001
11/16/2022, 3:40 PMI joined Rancher (2.6.9) to AD domain through Auth Provider, and after successful joining to domain, if I logout from rancher and login again, I faced with issue not having access to domain users and shows this error that not able to fetch domian users, also I am not able to ad ny domain users too. Who does have any opionion about this problem?
f
famous-angle-73641
11/16/2022, 3:53 PMdid you login with an AD account or a local account for that screenshot?
if local, that is why, login with an AD user. If an AD user, the AD Auth setup cannot query so it somehow isn't working.
c
clean-ability-26001
11/16/2022, 4:04 PMthis screen is by local admin account becasue I couldn't login with each of domain users!
f
famous-angle-73641
11/16/2022, 4:07 PMi would re-setup and validate your AD config then, but it is normal and expected to see that when logged in as the Admin user.
i am sure your Rancher pods log could tell you too why you cannot login via AD.
c
clean-ability-26001
11/16/2022, 4:29 PMI used helm charts to deploy HA rancher with 3 instances
one thins is that when I wanted to join Rancher to domain, I should use IP of the DNS server not domain name.
also I found that in Rancher's log that an issue to resolve by local DNS which I am not sure why it should be resoved it while I am using Windows DNS service
tI am also wondering if I want to join with TLS, how should i provide needed certificate? and it is related to issue or not?