Github user dagsonstebo commented on the issue: https://github.com/apache/cloudstack/pull/1684 @abhinandanprateek @jburwell @pdion891 - my twopence worth - I've come across issues with this on two uprade projects in the last 8-10 months. Both cases were CCP to ACS upgrades: 1) In the first case we hit an issue where the admin account could log in - but no users. We carried out a preliminary check of this, and the suspicion was on changes in the MD5 authenticator - but the client eventually chose to just reset all users passwords, hence no accurate RCA carried out. 2) In the second, more recent case the client wanted to use either PLAINTEXT or MD5 authenticators, hence we updated the authenticators order similar to @pdion891 did above. During troubleshooting of this trace level logging showed the authenticator order in ACS4.9 was respected, no issues found. RCA of the underlying issue concluded with it being a user configuration and usage issue rather than a bug.
--- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastruct...@apache.org or file a JIRA ticket with INFRA. ---