Server: Admin password not accepted when requested for privileged actions in NC 11

Created on 17 Dec 2016 · 33Comments · Source: nextcloud/server

Steps to reproduce

Install Nextcloud 11.0.0
Log in to an admin account
Try to do something that requires password authentication like creating a new user or installing an app

Expected behaviour

The password should be accepted and the action applied.

Actual behaviour

The "Authentication Required" dialog is shown again and again even though the password is correct.

I see a couple of support forum threads that seem related. There might be more:

Server configuration

Operating system: Debian 8.5

Web server: Apache 2.4.10

Database: MariaDB 10.0.28 (also tried mysql-server package with same result)

PHP version: 5.6.28

Nextcloud version: 11.0.0

Updated from an older Nextcloud/ownCloud or fresh install: I tried both and got the same result

Where did you install Nextcloud from: Downloaded the tar.bz2 file from nextcloud.com

Signing status:

Signing status

No errors have been found.

List of activated apps:

App list

Enabled:
  - activity: 2.4.1
  - comments: 1.1.0
  - dav: 1.1.1
  - federatedfilesharing: 1.1.1
  - federation: 1.1.1
  - files: 1.6.1
  - files_pdfviewer: 1.0.1
  - files_sharing: 1.1.1
  - files_texteditor: 2.2
  - files_trashbin: 1.1.0
  - files_versions: 1.4.0
  - files_videoplayer: 1.0.0
  - firstrunwizard: 2.0
  - gallery: 16.0.0
  - logreader: 2.0.0
  - lookup_server_connector: 1.0.0
  - nextcloud_announcements: 1.0
  - notifications: 1.0.1
  - password_policy: 1.1.0
  - provisioning_api: 1.1.0
  - serverinfo: 1.1.1
  - sharebymail: 1.0.1
  - survey_client: 0.1.5
  - systemtags: 1.1.3
  - theming: 1.1.1
  - twofactor_backupcodes: 1.0.0
  - updatenotification: 1.1.1
  - workflowengine: 1.1.1
Disabled:
  - admin_audit
  - encryption
  - external
  - files_accesscontrol
  - files_automatedtagging
  - files_external
  - files_retention
  - templateeditor
  - user_external
  - user_ldap
  - user_saml

The content of config/config.php:

Config report

<?php
$CONFIG = array (
  'trusted_domains' => 
  array (
    0 => 'server',
  ),
  'datadirectory' => '/var/www/nextcloud/data',
  'overwrite.cli.url' => 'http://server/nextcloud',
  'dbtype' => 'mysql',
  'version' => '11.0.0.10',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'nextcloud',
  'logtimezone' => 'UTC',
  'installed' => true,
  'loglevel' => 2,
  'maintenance' => false,
);

Are you using external storage, if yes which one: No

Are you using encryption: no

Are you using an external user-backend, if yes which one: no

Client configuration

I don't think this is client specific

Logs

Web server error log

error.log is empty. access.log is full of noise and I don't think it's relevant?

Nextcloud log (data/nextcloud.log)

Nextcloud log

Here is the log for Nextcloud 11.

Error   no app in context   InvalidArgumentException: The given object name is invalid

    /var/www/nextcloud/apps/activity/lib/FilesHooks.php - line 892: OC\Activity\Event->setObject('files', 2, false)
    /var/www/nextcloud/apps/activity/lib/FilesHooks.php - line 184: OCA\Activity\FilesHooks->addNotificationsForUser('ncadmin', 'created_self', Array, 2, false, true, true, 0, 'file_created')
    /var/www/nextcloud/apps/activity/lib/FilesHooks.php - line 111: OCA\Activity\FilesHooks->addNotificationsForFileAction('/', 'file_created', 'created_self', 'created_by')
    /var/www/nextcloud/apps/activity/lib/FilesHooksStatic.php - line 45: OCA\Activity\FilesHooks->fileCreate('/')
    [internal function] OCA\Activity\FilesHooksStatic fileCreate(Array)
    /var/www/nextcloud/lib/private/legacy/hook.php - line 106: call_user_func(Array, Array)
    /var/www/nextcloud/lib/private/Files/View.php - line 1237: OC_Hook emit('OC_Filesystem', 'post_create', Array)
    /var/www/nextcloud/lib/private/Files/View.php - line 1163: OC\Files\View->runHooks(Array, '/ncadmin/files', true)
    /var/www/nextcloud/lib/private/Files/View.php - line 266: OC\Files\View->basicOperation('mkdir', '/ncadmin/files', Array)
    /var/www/nextcloud/lib/private/Files/Node/Folder.php - line 149: OC\Files\View->mkdir('/ncadmin/files')
    /var/www/nextcloud/lib/private/Files/Node/Root.php - line 380: OC\Files\Node\Folder->newFolder('/ncadmin/files')
    [internal function] OC\Files\Node\Root->getUserFolder('ncadmin')
    /var/www/nextcloud/lib/private/Files/Node/LazyRoot.php - line 65: call_user_func_array(Array, Array)
    /var/www/nextcloud/lib/private/Files/Node/LazyRoot.php - line 282: OC\Files\Node\LazyRoot->__call('getUserFolder', Array)
    /var/www/nextcloud/lib/private/Server.php - line 948: OC\Files\Node\LazyRoot->getUserFolder('ncadmin')
    /var/www/nextcloud/lib/private/User/Session.php - line 411: OC\Server->getUserFolder('ncadmin')
    /var/www/nextcloud/lib/private/User/Session.php - line 479: OC\User\Session->prepareUserLogin(true)
    /var/www/nextcloud/lib/private/User/Session.php - line 299: OC\User\Session->loginWithPassword(*** sensitive parameters replaced ***)
    /var/www/nextcloud/lib/private/Setup.php - line 393: OC\User\Session->login(*** sensitive parameters replaced ***)
    /var/www/nextcloud/core/Controller/SetupController.php - line 65: OC\Setup->install(Array)
    /var/www/nextcloud/lib/base.php - line 957: OC\Core\Controller\SetupController->run(Array)
    /var/www/nextcloud/index.php - line 40: OC handleRequest()
    {main}
    2016-12-14T05:48:25-0500 Error  mysql.setup Specific user creation failed: An exception occurred while executing 'SELECT user FROM mysql.user WHERE user=?' with params ["oc_ncadmin"]: SQLSTATE[42000]: Syntax error or access violation: 1142 SELECT command denied to user 'nextcloud'@'localhost' for table 'user'  2016-12-14T05:47:56-0500

Here is the log from installing 10.0.2 and then upgrading to 11.0.0 manually:

{"reqId":"QjYwUnMtoKVaz5hnq5P7","remoteAddr":"192.168.1.171","app":"mysql.setup","message":"Specific user creation failed: An exception occurred while executing 'SELECT user FROM mysql.user WHERE user=?' with params ["oc_ncadmin"]:nnSQLSTATE[42000]: Syntax error or access violation: 1142 SELECT command denied to user 'nextcloud'@'localhost' for table 'user'","level":3,"time":"2016-12-14T11:00:42+00:00","method":"POST","url":"/nextcloud/index.php","user":"--","version":"9.1.2.2"}
{"reqId":"QjYwUnMtoKVaz5hnq5P7","remoteAddr":"192.168.1.171","app":"mysql.setup","message":"Database creation failed: An exception occurred while executing 'GRANT ALL PRIVILEGES ON nextcloud . * TO 'nextcloud'':nnSQLSTATE[42000]: Syntax error or access violation: 1044 Access denied for user 'nextcloud'@'localhost' to database 'nextcloud'","level":3,"time":"2016-12-14T11:00:42+00:00","method":"POST","url":"/nextcloud/index.php","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::maintenanceEnabled: Turned on maintenance mode","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"core","message":"starting upgrade from 9.1.2.2 to 11.0.0.10","level":0,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"PHP","message":"file_put_contents(/var/www/nextcloud/data/.htaccess): failed to open stream: Permission denied at /var/www/nextcloud/lib/private/Setup.php#499","level":3,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair MySQL database engine","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair MySQL collation","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair SQLite autoincrement","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair duplicate entries in oc_lucene_status","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: lucene_status table does not exist -> nothing to do","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::dbUpgradeBefore: Updating database schema","level":1,"time":"2016-12-15T20:16:33+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::dbUpgrade: Updated database","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.0.1","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 2.2","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.0.0","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 2.0","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:35+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 16.0.0","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.0","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.0","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.6.1","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:36+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 2.4.1","level":1,"time":"2016-12-15T20:16:38+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:38+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Fix component of birthday calendars","level":1,"time":"2016-12-15T20:16:39+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: 1 birthday calendars updated.","level":1,"time":"2016-12-15T20:16:39+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:39+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:39+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.0","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.4.0","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:40+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:41+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:41+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.0","level":1,"time":"2016-12-15T20:16:41+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:41+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.0.1","level":1,"time":"2016-12-15T20:16:42+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:42+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.3","level":1,"time":"2016-12-15T20:16:42+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgradeStarted: Updating ...","level":1,"time":"2016-12-15T20:16:42+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::appUpgrade: Updated to 1.1.1","level":1,"time":"2016-12-15T20:16:42+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair MySQL collation","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair mime types","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair legacy storages","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: Updated 0 legacy home storage ids","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Remove asset cache","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: Asset cache cleared.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Generate ETags for file where no ETag is present.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: ETags have been fixed for 0 files/folders.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Clean tags and favorites","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: 0 tags of deleted users have been removed.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: 0 tags for delete files have been removed.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: 0 tag entries for deleted tags have been removed.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: 0 tags with no entries have been removed.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Drop old database tables","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::startProgress: Starting ... Drop old database tables (31)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: calendar_calendars (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: calendar_objects (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: calendar_share_calendar (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: calendar_share_event (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: file_map (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: foldersize (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: fscache (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: gallery_sharing (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: locks (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: log (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: media_albums (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: media_artists (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: media_sessions (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: media_songs (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: media_users (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: permissions (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: pictures_images_cache (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: principalgroups (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: principals (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: queuedtasks (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: sharing (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: clndr_calendars (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: clndr_objects (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: clndr_share_event (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: clndr_share_calendar (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: clndr_repeat (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: contacts_addressbooks (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: contacts_cards (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: contacts_cards_properties (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: gallery_albums (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: Drop old database table: gallery_photos (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::finishProgress","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Drop old background jobs","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Remove getetag entries in properties table","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: Removed 0 unneeded "{DAV:}getetag" entries from properties table.","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair outdated OCS IDs","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair invalid shares","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Remove old share propagation app entries","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Remove old (< 9.0) calendar/contact shares","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::startProgress: Starting ... Remove old (< 9.0) calendar/contact shares (4)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::finishProgress","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Fix permissions so avatars can be stored again","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::startProgress: Starting ... Fix permissions so avatars can be stored again (2)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::advance: (1)","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::finishProgress","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Remove shares of a users root folder","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Repair unmerged shares","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Move .step file of updater to backup location","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Add move avatar background job","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: Add background job","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Add preview cleanup background jobs","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::step: Repair step: Fix potential broken mount points","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Repair::info: Repair info: No mounts updated","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::startCheckCodeIntegrity: Starting code integrity check...","level":1,"time":"2016-12-15T20:16:44+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::finishedCheckCodeIntegrity: Finished code integrity check","level":1,"time":"2016-12-15T20:17:02+00:00","method":"--","url":"--","user":"--","version":"9.1.2.2"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::updateEnd: Update successful","level":1,"time":"2016-12-15T20:17:02+00:00","method":"--","url":"--","user":"--","version":"11.0.0.10"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::maintenanceDisabled: Turned off maintenance mode","level":1,"time":"2016-12-15T20:17:02+00:00","method":"--","url":"--","user":"--","version":"11.0.0.10"}
{"reqId":"SM3IhkkAMknkaXcRhGRc","remoteAddr":"","app":"updater","message":"\OC\Updater::resetLogLevel: Reset log level to Warning(2)","level":1,"time":"2016-12-15T20:17:02+00:00","method":"--","url":"--","user":"--","version":"11.0.0.10"}
```

bug settings needs info

Source

wshanks

👍1

Most helpful comment

Thank you so much. Synchronising the clocks fixed it perfectly, I should have thought of that!

ghost on 24 Dec 2016

👍2

All 33 comments

I also have the same errror as you. At the beginning of my installatiuon of nextcloud, the authentication worked and I could add new users. After some time, it just stopped working and if I wanted to install an app or create a new user, the password dialog would just keep opening, even if I entered the correct password.

3699n on 18 Dec 2016

I have the same problem with an instance using LDAP user backend with 1 user. I can log in without any problem, but password isn't accepted when trying to enable apps.

fredrik-eriksson on 18 Dec 2016

same problem here after upgrade from nextcloud 10.0.2 - trying to activate calendar, contacts,...

fezzz78 on 18 Dec 2016

What operating system, web server, and database are you using? I have only tried with the Debian/Apache/MariaDB configuration I listed above. I wonder if I used something newer like Ubuntu 16.04 if I would still have this problem. Or perhaps something needs to be configured differently for version 11. There are no release notes, so I'm not sure. Presumably there is some configuration for which version 11 works.

wshanks on 18 Dec 2016

Gentoo/Nginx/php-fpm (5.6.28)/postgresql (9.5, on separate host)

fredrik-eriksson on 18 Dec 2016

I'm using Ubuntu 16.04/Apache/MariaDb with LDAP

3699n on 18 Dec 2016

centos 7.3, nginx 1.11.7, php-fpm 7.0.14, mariadb 5.6.35 on localhost

fezzz78 on 18 Dec 2016

CentOS 7, Apache 2.4.2, PHP-FPM 7.0, MySQL 5.6.35

vatanparvar on 19 Dec 2016

@nickvergessen any idea?

schiessle on 19 Dec 2016

Which browsers are you using, something in the browsers console and what does the browsers network log say?

nickvergessen on 19 Dec 2016

@nickvergessen I have tested it with Firefox, Google Chrome, Chromium and Opera on Arch Linux client as well as Firefox and IE on a Windows 10 client and the result was the same.
Unfortunately I cannot provide log since I reverted back to NC10.

vatanparvar on 19 Dec 2016

On Firefox, I see Invalid chrome URI: / every time I try to enter the password.

And in the network log I see POST XHR http://eeepc/nextcloud/index.php/login/confirm right before that.

wshanks on 19 Dec 2016

I noticed yesterday that the time was skewed on both the webserver and the database server. Not sure if it's related, but after logging out and logging in again today I didn't get the prompt to verify password when enabling apps. Is there an idle timeout before these prompts are shown?

fredrik-eriksson on 19 Dec 2016

Yes, 30 minutes. But you should be able to trigger it after that f.e. by changing your email in the personal settings.

nickvergessen on 19 Dec 2016

just like @willsALMANJ I see a POST to https:///index.php/login/confirm with the data "password=" and it gets response 403 (Forbidden). I have more headers, cookies and stuff if you need, but since I'm not quite sure what data could be sensitive, I would prefer not to attach them here. Are there any particular header/data that would help in troubleshooting this that I could provide?

fredrik-eriksson on 19 Dec 2016

Hello, I encountered the detailed issue after doing a clean install of Nextcloud with apache and MariaDB on Debian "Jessie" 8.6 on a KVM virtual machine. I have made a copy of the virtual machine and am posting it here if it will help diagnose the issues.

Username is "testing" Password "testing" the nextcloud admin password is set to "testing12321" With the Database admin password being "testing".

The image file is 3.8 GiB uncompressed and 1.2GiB compressed.

Below are the SHA512 hashes for the files.

73e2e08b307ec5aadcb89b539b0a40d37fd42ced6df7f419d499bfb5a41b74c7556d5f56531f321a3bfa311aff0a65fa4c24eb5ed2f37bb682f8d3efe470dabb debian8.qcow2 235e76ffe069210bd20733c91de01d62f12986c72957d51f2e4df4725537c2b001ffd8605e98e74ad1c42023a14a1c7835191489526816e94f6e768a29164359 debian8.qcow2.tar.gz

And here is the link to the actual file.

https://drive.google.com/open?id=0B3blgyMBLh2pTVBueGluR2lkYXM

If anything else is needed to run the VM, Let me know i haven't really shared a VM image before.

Oxreim on 20 Dec 2016

@fredrik-eriksson if you don't mind and trust, you can email all of that to me (my github name @nextcloud.com )

nickvergessen on 20 Dec 2016

I think @fredrik-eriksson had the right idea when he mentioned that his clocks were skewed. My server's clock was way off (like two days slow). I just fixed it and now I can actually create a user. I haven't tried to look at the code, but it seems like this might be a bug in the way the timeout is determined. Is it comparing a timestamp from the server against a timestamp from the client? It should probably always compare two timestamps from the server.

wshanks on 20 Dec 2016

I agree that the same server clock should be used for the compare timestamp and input timestamp when determining the timeout, but I think the main issue here is that the password isn't accepted when it should be. I think I'm a bit closer on understanding this now though.

When entering an incorrect password I see this in the log:

{"reqId":"M1Sm056rwkMncGm+8zzS","remoteAddr":"127.0.0.1","app":"core","message":"Login failed: 'feffe' (Remote IP: '127.0.0.1')","level":2,"time":"2016-12-20T16:14:23+00:00","method":"POST","url":"\/index.php\/login","user":"--","version":"11.0.0.10"}

When failing a "sudo" attempt I see this:

{"reqId":"P9TCCD4ghNrP+gvbdYmu","remoteAddr":"127.0.0.1","app":"core","message":"Login failed: 'bdd7bd1d-d467-4ae3-bd75-f933c61b52b6' (Remote IP: '127.0.0.1')","level":2,"time":"2016-12-20T15:53:39+00:00","method":"POST","url":"\/index.php\/login\/confirm","user":"bdd7bd1d-d467-4ae3-bd75-f933c61b52b6","version":"11.0.0.10"}

Note that the username logged is "feffe" in the first, but "bdd7bd1d-d467-4ae3-bd75-f933c61b52b6"
I traced the authentication code to core/Controller/LoginController.php.

tryLogin(), which I assume is the function that is run when doing a login, seems to use the username as provided from user input to checkPassword(). confirmPassword(), however, uses the user UID, which at least in the LDAP case is an UUID created by nextcloud as username to checkPassword(). As far as I can tell the user_ldap app uses the username to build the LDAP query, which obviously will fail when searching for the internal uid instead of the username.

I guess the way to fix this is to convert the uid back to a login name before running checkPassword().

fredrik-eriksson on 20 Dec 2016

👍1

Oh, well that explains it. I will have a look, but with that info (LDAP being used) it should be quickly fixable.

nickvergessen on 20 Dec 2016

Just to be clear -- my problem was without LDAP, just a LAMP stack on a single machine, and then trying to login from a client with a clock off by two days, so it seems like there are two issues, the server vs. client timestamp check for the timeout and the LDAP UID problem. Note there might be a security problem with the client/server timestamp issue if it is possible to turn back the clock on the client to bypass the timeout.

wshanks on 21 Dec 2016

👍1

@fredrik-eriksson can you try:

diff --git a/core/Controller/LoginController.php b/core/Controller/LoginController.php
index b6add48ef6..3c81ed5242 100644
--- a/core/Controller/LoginController.php
+++ b/core/Controller/LoginController.php
@@ -298,14 +298,10 @@ class LoginController extends Controller {
                $currentDelay = $this->throttler->getDelay($this->request->getRemoteAddress());
                $this->throttler->sleepDelay($this->request->getRemoteAddress());

-               $user = $this->userSession->getUser();
-               if (!$user instanceof IUser) {
-                       return new DataResponse([], Http::STATUS_UNAUTHORIZED);
-               }
-
-               $loginResult = $this->userManager->checkPassword($user->getUID(), $password);
+               $loginName = $this->userSession->getLoginName();
+               $loginResult = $this->userManager->checkPassword($loginName, $password);
                if ($loginResult === false) {
-                       $this->throttler->registerAttempt('sudo', $this->request->getRemoteAddress(), ['user' => $user->getUID()]);
+                       $this->throttler->registerAttempt('sudo', $this->request->getRemoteAddress(), ['user' => $loginName]);
                        if ($currentDelay === 0) {
                                $this->throttler->sleepDelay($this->request->getRemoteAddress());
                        }

nickvergessen on 21 Dec 2016

I can confirm that after applying that patch my password is accepted, so it at least solve the LDAP issue.

fredrik-eriksson on 21 Dec 2016

I'm using sqlite3 and not an LDAP user, debian/nginx/php-fpm 5.629, and having exactly the same issue. Tried the patch, no luck.

ghost on 24 Dec 2016

@amsomniac Are you connecting from a browser on the same machine as the server or a separate machine? If a separate machine, check that both the client and server's clocks are accurate. It seems the password timeout is triggered by comparing the last authentication time on the server vs. the current time on the client. If the clocks on the client and server are off by more than the timeout, you will never get past the prompt. The patch only addressed a separate issue related to LDAP.

wshanks on 24 Dec 2016

Thank you so much. Synchronising the clocks fixed it perfectly, I should have thought of that!

ghost on 24 Dec 2016

👍2

Synchronising clocks fixed the issue for me, too!

Morjgus on 2 Jan 2017

👍1

Running LDAP here, the above patch works.

lorenz on 2 Jan 2017

👍1

Just need set correct time on your computer

alexstep on 9 Mar 2017

Just another point of view: I have server in different timezone than I'm sitting. Times are correct (UTC is same) but Nextcloud refuse log me in with confirm dialog.

vojtabiberle on 9 Mar 2017

@nickvergessen , this is what I meant with the creating users issue. Happens on 12 as well. Will test syncing the clock and get back to you.

enoch85 on 2 Jun 2017

FYI: Running NC 12.0.3 and the same thing happened to me when I changed PHP version from 5.6 to 7.1, I couldn't log in with any clients. Changing back to 5.6 fixed it.

tanghus on 21 Feb 2018

I can confirm what @tanghus reported for a fresh install of Nextcloud 12.03 on Ubuntu server: authenticaiton errors with php 7.1, switching to 5.6 fixed it.