OpenID Broke in v7.1 after Upgrade

[artooro]

I had OpenID authentication to Google working on Proxmox VE v7.0 but after upgrading to v7.1 today we now get an error that says:

OpenID login failed, please try again
authentication failure (401)

Here is a screenshot as well.


Nothing else changed other than the upgrade, and tested multiple users and browsers.
Also not seeing anything in the logs, in /var/log/pveproxy/access.log I see the token response redirect come in which gets a 200 code and no errors.

 

[t.lamprecht]

Hi,

thanks for your report, seems to be a regression of some specific configuration and a missing fallback that came in with the more flexible OIDC configuration possibilities in PVE 7.1.

Will be fixed in the libpve-access-control package with version 7.1-5, that just got available on the pve-no-subscription repository.

 

[artooro]

Thanks Thomas, I can confirm that this package update resolved the issue.