Error" There was more than one matching user for username"

Graylog Central (peer support)
1

1. Describe your incident:
We are getting below errors
2022-04-18 10:46:19,446 ERROR: org.graylog2.users.UserServiceImpl - There was more than one matching user for username XXXXX. This should never happen.
2022-04-18 10:46:19,446 ERROR: org.graylog2.security.realm.HTTPHeaderAuthenticationRealm - Unhandled authentication error
due to which user cant login to graylog

2. Describe your environment:

  • OS Information:
    Debian Buster

  • Package Version:
    Graylog 4.2.5
    Mongo 4.4.12
    ES 7.16

  • Service logs, configurations, and environment variables:
    2022-04-18 10:46:19,446 ERROR: org.graylog2.users.UserServiceImpl - There was more than one matching user for username XXXXX. This should never happen.
    2022-04-18 10:46:19,446 ERROR: org.graylog2.security.realm.HTTPHeaderAuthenticationRealm - Unhandled authentication error

3. What steps have you already taken to try and solve the problem?
we are checking in mongo but not sure how same user has been created twice, this is affecting login for that user.

4. How can the community help?

I need help how to troubleshoot this

Regards,
SAMURAI

2

Hello @samurai29

Is this a Enterprise version? or do you just have Trusted Header Authentication configured?
If so , How/What was this SSO configured?

3

Hello @gsmith,

our graylog is community version

Trusted header is configured with X-FORWARDER USER,
since SSO is inbuilt but its not working for us we have created one sidecar container that checks users in graylog and in lam then as per difference it syncs to graylog according to roles,

above configuration works well but we faced this issue first time when we tried to configure new graylog on different server. the idea behind side car is to login user without password prompt.

please let me know if you need anything else.

Regards,
SAMURAI

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.