Hi everyone. I am having trouble accessing the lakefs UI I keep getting this authentication issue error each time I try to login and it is still the same credentials I used to access it in the past that is failing now.

FO   [2022-06-15T19:14:04Z]lakeFS/pkg/auth/authenticator.go:54 pkg/auth.ChainAuthenticator.AuthenticateUser Failed to authenticate user                   error="2 errors occurred:\n\t* built in authenticator: could not decrypt value\n\t* email authenticator: not found: no rows in result set\n\n" host="137.184.147.128:8000" method=POST path=/api/v1/auth/login request_id=2a7fad06-5a0f-4a36-9369-d18f60bff2da service_name=rest_api username=AKIAJSEJPLE4NOPT4KEQ

ERROR  [2022-06-15T19:14:04Z]lakeFS/pkg/api/auth_middleware.go:157 pkg/api.userByAuth authenticate                                  error="2 errors occurred:\n\t* built in authenticator: could not decrypt value\n\t* email authenticator: not found: no rows in result set\n\n" service=api_gateway user=AKIAJSEJPLE4NOPT4KEQ

INFO   [2022-06-15T19:14:06Z]lakeFS/pkg/auth/authenticator.go:54 pkg/auth.ChainAuthenticator.AuthenticateUser Failed to authenticate user                   error="2 errors occurred:\n\t* built in authenticator: could not decrypt value\n\t* email authenticator: not found: no rows in result set\n\n" host="137.184.147.128:8000" method=POST path=/api/v1/auth/login request_id=d7c57613-ca24-43b3-a268-df0033bd0a10 service_name=rest_api username=AKIAJSEJPLE4NOPT4KEQ

Hi Jude, did you switched or updated lakeFS's

auth.encrypt.secret_key

value?

Initially I had this program that sort of overwrote the LakeFS config file and it totally stopped working, after we discovered this we had to reset the config file and configure it with the same postgres database as before. Now the LakeFS server is up once again but we can't seem to login anymore

I've checked all the config file and the .lakectl.yaml file and all the keys are correct but still can't use them to log in

It seems the original value of auth.encrypt.secret_key in the lakefs.yaml was changed between the point this key was created and now that it is running.

We can add another admin user with new set of key/secret and use it to login

The command is part of 'lakefs' - need to run with the same lakefs configuration

lakefs superuser --user-name <admin>

admin will be a new username that will be added. The command will print out the new key/secret that you can use to login.

Once you inside you can re-create key for the original user (if needed)

Thank you very much let me work with this.

@Jude which version of lakefs do you use?

I'm running on V 0.63.0

Great, thanks - fixed an issue related to the superuser command. But is on a newer version of lakeFS.

Alright, good to know. Will keep you updated

Thanks

Thank you @Barak Amar it worked!

Good to hear. thanks for the update.