Android: Can't login to nextcloud with ldap backend
Actual behaviour
NC app replaces login username with ldap id.
Expected behaviour
App should use the username as I entered it.
Steps to reproduce
- (I have accounts on two OC instances, one with a regular database backend and one which authenticates against Active Directory.)
- Add AD account as second account to NC app. Login works. Files are displayed.
- Switch to normal account.
- In the side drawer the name of the other account changes to the ldap id (screenshot 1).
- Switching back does lead to a password prompt, the incorrect username cannot be changed (screenshot 2). Login is no longer possible.
Environment data
Android version: 6.0.1
Device model: Moto X Play
Stock or customized system: Stock
Nextcloud app version: 2.0.0RC4
Nextcloud server version: Database backend: 12.0.2 , AD backend: 10.0.6
tribut
All 51 comments
@tobiasKaminsky is this the issue you fixed?
AndyScherzinger
on 24 Aug 2017
We will include a ldap fix for RC5, but I am unsure if this fixes the described problem.
Once it is release, I'll ping you.
tobiasKaminsky
on 28 Aug 2017
@tribut Does 2.0.0 RC5 fix this issue for you?
AndyScherzinger
on 29 Aug 2017
No, unfortunately not. The behavior is unchanged (I did remove and re-add the ldap account to check).
tribut
on 29 Aug 2017
Can you create us a test account for the ldap backend and send the credentials with a link to this issue to android at nextcloud dot com?
tobiasKaminsky
on 31 Aug 2017
Unfortunately I do not have the authority to do that. I could mitm the communication of the app with the NC instance if that's helpful?
tribut
on 4 Sep 2017
Then it is very hard to debug it.
Nextcloud server version: Database backend: 12.0.2 , AD backend: 10.0.6
Does this mean that it is working on NC12 (without LDAP) and on NC10 (with LDAP) not?
NC10 is end of life and maybe this ldap bug was fixed in one of the newer version, so please upgrade before we spent more time in debugging this.
tobiasKaminsky
on 5 Sep 2017
Does this mean that it is working on NC12 (without LDAP) and on NC10 (with LDAP) not?
Yes. I have since updated the LDAP-based NC instance to 12.0.2 and the problem remains.
I'll see if I can find something interesting from the http traffic. Otherwise I'll setup another ldap server with only my users' data in it to maybe reproduce it. Creating a test account there would be no problem.
tribut
on 5 Sep 2017
Just FYI: I just got feedback that the iOS Nextcloud app has the same behavior: It logs in very briefly and then disconnects. The server shows multiple login attempts with the ldap ID as username.
This also explains why some users were complaining about slow login times, because brute force detection is also kicking in.
tribut
on 6 Sep 2017
@tribut yes. Explanations have been made by all relevant parties so this will be improved.
cc @tobiasKaminsky
mario
on 6 Sep 2017
Great! :+1:
So further information from me is no longer needed to reproduce this?
tribut
on 6 Sep 2017
Hopefully not, but you will be needed to test still ;) @tribut
mario
on 6 Sep 2017
@marvinwankersteen have you deleted your comment? If so, can I get a test account to [email protected]?
mario
on 8 Sep 2017
@mario yes I deleted my comment because I thought its the wrong issue. If I wipe all data of the nextcloud app, I can login but after that I have to relogin. Its this issue: https://github.com/nextcloud/android/issues/1458
I sent you an testaccount.
marvinwankersteen
on 9 Sep 2017
Better with RC6?
mario
on 12 Sep 2017
Yes, it looks more stable and faster. I will test the next days and give you feedback.
Thanks!
marvinwankersteen
on 12 Sep 2017
Can confirm that I can no longer reproduce this issue on RC6. Thanks everyone!
tribut
on 13 Sep 2017
@tribut I the ID also replaced with the proper username in the menu (like shown in your screenshots, when you reported this issue)?
AndyScherzinger
on 13 Sep 2017
I can confirm that the full name is shown in the menu, and not the ID. Only the picture is not loaded.
givenname surname
<username>@<nextcloud-domain>
@marvinwankersteen what does get displayed? Number or Character in a colored circle (which one)?
AndyScherzinger
on 13 Sep 2017
It's a character in a colored circle (matching full name on the server). Image from non-ldap server appears to continue to work.
tribut
on 14 Sep 2017
@tribut is the avatar image available on the server?
AndyScherzinger
on 14 Sep 2017
On the server the image is available
marvinwankersteen
on 14 Sep 2017
@mario @tobiasKaminsky any way to reproduce this? I don't have a server with ldap etc. @marvinwankersteen can/did you provide a test account where we could debug this behavior?
AndyScherzinger
on 14 Sep 2017
I tried on 8 available servers, both LDAP and non-LDAP. All works as expected. So I'd need a test account on [email protected] and a confirmation that latest RC6 is used.
cc @tribut
mario
on 14 Sep 2017
@mario I reenabled your test account.
Screenshot:
RC6 is used:
marvinwankersteen
on 14 Sep 2017
Any update @mario?
As I understand it is "only" a problem of not showing the correct avatar? Then we can also postpone it to 2.0.1, or?
tobiasKaminsky
on 20 Sep 2017
Ah yes, I forgot ... will check today.
mario
on 20 Sep 2017
This has bigger issues @tobiasKaminsky that you might be able to debug...
09-20 09:16:29.902 1258-1360/com.nextcloud.client D/ExistenceCheckRemoteOperation: Existence check for https://bla.bla.net/remote.php/webdav/ targeting for existence finished with HTTP status 401(FAIL)
09-20 09:16:29.902 1258-1360/com.nextcloud.client D/DetectAuthenticationMethodOperation: Authentication method found: BASIC_HTTP_AUTH
cc @marvinwankersteen
o.O
mario
on 20 Sep 2017
I have to say that the login via web browser does work, but the above is what is shown in our "internal" webview.
mario
on 20 Sep 2017
@mario: Tell me if you need logs from the server.
marvinwankersteen
on 20 Sep 2017
Sure @marvinwankersteen
mario
on 20 Sep 2017
I have a similar problem - nextcloud 12.0.3, ldap integration, android app 2.0.0RC6. If I try to login to an ldap account, the app crashes (at least it doesn't correctly add the account). Works fine if I create a non-ldap test user and attempt to login from the app with that.
(Please let me know if I should create a new issue?)
swalladge
on 21 Sep 2017
@mario can you send me the credentials of marvinwankersteen so that I can debug it?
tobiasKaminsky
on 21 Sep 2017
To keep track of it: @swalladge is discussed in https://github.com/nextcloud/android/issues/1458#issuecomment-331077969
tobiasKaminsky
on 21 Sep 2017
@mario can you send me the credentials of marvinwankersteen so that I can debug it?
tobiasKaminsky
on 26 Sep 2017
@mario can you send me the credentials?
As I am next week only working on monday, I would like to fix this until then and release RC8 on monday.
After that we can release final 2.0 the week after.
tobiasKaminsky
on 29 Sep 2017
@tobiasKaminsky on it.
mario
on 29 Sep 2017
@marvinwankersteen can you please send me an email in the same thread where you've sent me the credentials? I can't seem to find the email right now...
mario
on 29 Sep 2017
@mario I resent the mail with the credentials.
marvinwankersteen
on 29 Sep 2017
@marvinwankersteen got nothing o.O mario AT nextcloud.com? You can also try mario AT lovelyhq.com.
mario
on 30 Sep 2017
@mario
Hm strange. I can see in the logs that the mail is sent to the MX of nextcloud.com...
Sep 29 23:00:12 529115bbb2c9 postfix/smtp[1627]: 442D35C6: to=<mario AT nextcloud.com>, relay=mx.nextcloud.com[88.198.160.131]:25, delay=1.1, delays=0.06/0.01/0.96/0.04, dsn=2.0.0, status=sent (2
50 2.0.0 Ok: queued as 4FCDDD402BA)
I resent the mail again to both addresses.
marvinwankersteen
on 30 Sep 2017
Re-tried with master, works like a charm. Thanks @marvinwankersteen.
mario
on 1 Oct 2017
@marvinwankersteen @tribut @swalladge we just released 2.0.0RC8 on Google Play. Would you mind giving it a test drive to check if LDAP matters have been resolved for you please? Highly appreciate your help! 😃
AndyScherzinger
on 2 Oct 2017
The profile picture still won't show up for the ldap account, otherwise I cannot find any issues.
tribut
on 2 Oct 2017
Same here. Still no profile picture with RC8.
marvinwankersteen
on 2 Oct 2017
@marvinwankersteen and @tribut fixed via https://github.com/nextcloud/android/pull/1620, sorry - forgot this!
mario
on 2 Oct 2017
@tribut @marvinwankersteen we just released RC9 with an avatar fix on Google Play. Does that version fix the issue for you?
AndyScherzinger
on 9 Oct 2017
@andyscherzinger: Yes, it's fixed with RC9. The avatar is displayed. Thanks.
marvinwankersteen
on 9 Oct 2017
Awesome, thanks for the account!
On Mon, 9 Oct 2017 at 19:37, marvinwankersteen notifications@github.com
wrote:
@AndyScherzinger https://github.com/andyscherzinger: Yes, it's fixed
with RC9. The avatar is displayed. Thanks.—
You are receiving this because you modified the open/close state.Reply to this email directly, view it on GitHub
https://github.com/nextcloud/android/issues/1419#issuecomment-335228559,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAAWsnGO_yrbVkvaCHvowoyNln4EDxTCks5sqlnZgaJpZM4PA9Eo
.
mario
on 9 Oct 2017
Sweet and kudos to @mario for fixing it 🏆
AndyScherzinger
on 9 Oct 2017
Related issues
ikke-t
·
3Comments
eppfel
·
3Comments
JSoko
·
3Comments
Shagequi
·
3Comments
AndyScherzinger
·
3Comments