Login messages
The messages of the login page, their causes, and what to do.
| Message | Cause | What to do |
|---|---|---|
| the login or the password is not correct | Wrong password, or the LDAP user filter found no user or more than one user. | Check the password. Check SHELLGRAPH_LDAP_USER_FILTER and SHELLGRAPH_LDAP_USER_BASE. |
| the LDAP server is not available | The server cannot connect to LDAP, or cannot bind with the service account. | Read the server log. Check SHELLGRAPH_LDAP_URL and the service account. |
| your account is not in a ShellGraph group: ask an administrator to add it | The user is in neither group. | Add the user to a group. The server log shows the groups that it found. |
| The identity provider is not available. | The server cannot read the OIDC discovery document of the issuer. | Read the server log. Check SHELLGRAPH_OIDC_ISSUER. |
| The login took too long or the request is not valid. Try again. | The login took more than 10 minutes, the browser blocked the sg_oidc cookie, or the callback URL is not on the same host as the login. | Log in again. Check SHELLGRAPH_PUBLIC_URL. |
| The login with the identity provider failed. | The token request or the ID token check failed. | Read the server log. Frequent causes: a wrong client secret, or a wrong SHELLGRAPH_PUBLIC_URL. |