Infinite Scale on EC2: could not initialize oidcAuth provider

Infinite Scale
1

Steps to reproduce

  1. Create a t4g.micro EC2 instance
  2. Open port 9200 (and 80, 443) in the associated security group to the internet
  3. Follow the tutorial at https://doc.owncloud.com/ocis/next/deployment/binary/binary-setup.html with the following two exceptions:
  • Run IDM_CREATE_DEMO_USERS=true ocis init
  • Run OCIS_INSECURE=true OCIS_URL=https://<EC2_INSTANCE_PUBLIC_IP_ADDRESS>:9200 PROXY_HTTP_ADDR=0.0.0.0:9200 OCIS_LOG_LEVEL=error ocis server

Expected behaviour

When I visit https://<EC2_INSTANCE_PUBLIC_IP_ADDRESS>:9200 I expect to be able to login both as an admin and as any of the guest users.

Actual behaviour

The login page claims that not a single one of the guest users is created. I cannot login as an administrator and on the server side I see messages similar to the messages detailed in https://central.owncloud.org/t/ocis-could-not-initialize-oidcauth-provider/39585

{"level":"error","service":"proxy","error":"Get \"https://<EC2_INSTANCE_PUBLIC_IP_ADDRESS>:9200/.well-known/openid-configuration\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)","message":"could not initialize oidcAuth provider"}

I looked for a .well-known/openid-configuration on the instance, but I cannot find it anywhere.

Server configuration

Operating system: Ubuntu 22.02 ARM architecture 64-bit

Question

I am trying out Infinite Scale and any help to get it running on a virtual machine outside of Docker would be greatly appreciated. I am able to provide any requested logs. Thank you in advance for the help!

1 Like
2

I have the same issue. My browser gets stuck in a redirect loop at https://<mydomain>:9200/oidc-callback?code=... I tried clearing my cookies and local storage but that didn’t help.

My OCIS instance is running via Docker on Ubuntu 18.04.4 on a local server.

3

I wound up changing the docker container’s network to “host” rather than “bridge” and now I don’t have this problem. I know that’s not the “proper” way to do it, but I don’t know what else to do at them moment.

1 Like