Server: Cannot login after fresh install

Created on 15 Dec 2018 · 11Comments · Source: nextcloud/server

Just installed Nextcloud 15.0.0 on fresh Ubuntu 18.04.1 LTS and after initial setup it won't let me in with credentials I have set up.

Steps to reproduce

Install Nextcloud
Set admin login and pass
try to login.

Expected behaviour

Actual behaviour

Goes back to the login page.

Server configuration

Operating system:
Ubuntu 18.03.1 LTS

Web server:
Nginx 14.0.0

Database:
MariaDB: 10.3.11

PHP version:
7.2.10

Nextcloud version: (see Nextcloud admin page)
15.0.0

Updated from an older Nextcloud/ownCloud or fresh install:
Fresh

Where did you install Nextcloud from:
Nextcloud website

Signing status:

Signing status

Login as admin user into your Nextcloud and access 
http://example.com/index.php/settings/integrity/failed 
paste the results here.

List of activated apps:

App list

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your Nextcloud installation folder

The process control (PCNTL) extensions are required in case you want to interrupt long running commands - see http://php.net/manual/en/book.pcntl.php
Enabled:

accessibility: 1.1.0
activity: 2.8.2
cloud_federation_api: 0.1.0
comments: 1.5.0
dav: 1.8.0
federatedfilesharing: 1.5.0
federation: 1.5.0
files: 1.10.0
files_pdfviewer: 1.4.0
files_sharing: 1.7.0
files_texteditor: 2.7.0
files_trashbin: 1.5.0
files_versions: 1.8.0
files_videoplayer: 1.4.0
firstrunwizard: 2.4.0
gallery: 18.2.0
logreader: 2.0.0
lookup_server_connector: 1.3.0
nextcloud_announcements: 1.4.0
notifications: 2.3.0
oauth2: 1.3.0
password_policy: 1.5.0
provisioning_api: 1.5.0
serverinfo: 1.5.0
sharebymail: 1.5.0
support: 1.0.0
survey_client: 1.3.0
systemtags: 1.5.0
theming: 1.6.0
twofactor_backupcodes: 1.4.1
updatenotification: 1.5.0
workflowengine: 1.5.0
Disabled:
admin_audit
encryption
files_external
user_external
user_ldap

Nextcloud configuration:

Config report

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

The process control (PCNTL) extensions are required in case you want to interrupt long running commands - see http://php.net/manual/en/book.pcntl.php
{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "cloud.domain"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "version": "15.0.0.10",
        "overwrite.cli.url": "https:\/\/cloud.domain",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "mysql.utf8mb4": true,
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true
    }
}


Insert your config.php content here. 
Make sure to remove all sensitive content such as passwords. (e.g. database password, passwordsalt, secret, smtp password, …)

Are you using external storage, if yes which one: local/smb/sftp/...
no

Are you using encryption: yes/no
no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/...
no

LDAP configuration (delete this part if not used)

LDAP config

With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your Nextcloud installation folder

Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';


Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.

Client configuration

Browser:
Any

Operating system:
Slackware 14.2

Logs

Web server error log

Insert your webserver log here

Nextcloud log (data/nextcloud.log)

Nextcloud log

Insert your Nextcloud log here

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

bug needs info

Source

80kk

All 11 comments

Thanks for the report @80kk .

To help you the browser and Nextcloud log files would be very helpful. You find information about that on this page: https://docs.nextcloud.com/server/15/admin_manual/issues/general_troubleshooting.html . The cause may be an error during installation. So my suggestions is: start over with a clean environment until you can't login. Then attach the log files here.

weeman1337 on 16 Dec 2018

Hi
I have dropped DB/user, deleted /var/www/html/nextcloud. Started from scratch and end up in the same place.

Nginx error log and /var/www/html/nextcloud/data/nextcloud.log are empty, access-log says:

192.168.101.1 - - [17/Dec/2018:14:22:57 +0000] "GET / HTTP/1.0" 200 13350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:22:57 +0000] "GET /core/fonts/Nunito-Regular.woff2 HTTP/1.0" 200 13350 "https://cloud.domain/core/css/guest.css?v=ba222ded25d957b900c03bef914333cd" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:22:57 +0000] "GET /core/fonts/Nunito-Bold.woff2 HTTP/1.0" 200 13350 "https://cloud.domain/core/css/guest.css?v=ba222ded25d957b900c03bef914333cd" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:32 +0000] "POST /index.php HTTP/1.0" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /apps/files/ HTTP/1.0" 303 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /login?redirect_url=/apps/files/ HTTP/1.0" 200 9311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /core/js/oc.js?v=76320180 HTTP/1.0" 200 5263 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /js/core/merged-template-prepend.js?v=76320180-0 HTTP/1.0" 200 42536 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /js/core/merged-share-backend.js?v=76320180-0 HTTP/1.0" 200 31435 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /apps/theming/styles?v=0 HTTP/1.0" 200 957 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /js/core/merged-login.js?v=76320180-0 HTTP/1.0" 200 2322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /apps/theming/js/theming?v=0 HTTP/1.0" 200 232 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /apps/accessibility/js/accessibility?v=0 HTTP/1.0" 200 65 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /core/fonts/Nunito-Regular.woff2 HTTP/1.0" 302 0 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:33 +0000] "GET /core/fonts/Nunito-Bold.woff2 HTTP/1.0" 302 0 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:34 +0000] "GET /svg/core/logo/logo?color=fff&v=1 HTTP/1.0" 200 321 "https://cloud.domain/apps/theming/styles?v=0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:34 +0000] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:34 +0000] "GET /login HTTP/1.0" 200 9249 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:34 +0000] "GET /login HTTP/1.0" 200 9249 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:49 +0000] "POST /login?redirect_url=/apps/files/ HTTP/1.0" 303 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /apps/files/ HTTP/1.0" 303 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /login?redirect_url=/apps/files/ HTTP/1.0" 200 9311 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /core/js/oc.js?v=76320180 HTTP/1.0" 200 5263 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /core/fonts/Nunito-Bold.woff2 HTTP/1.0" 302 0 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /core/fonts/Nunito-Regular.woff2 HTTP/1.0" 302 0 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /login HTTP/1.0" 200 9249 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"
192.168.101.1 - - [17/Dec/2018:14:24:50 +0000] "GET /login HTTP/1.0" 200 9249 "https://cloud.domain/core/css/guest.css?v=76320180-0" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 OPR/57.0.3098.91"

80kk on 17 Dec 2018

I am having this exact same issue. I do a fresh install, and even use OCC to install and later SET the admin user password --> and still, no access. It is as if it is incorrectly storing the salt or encrypted version of the password. And YES the accessing host is listed in trusted. This is what I've tried:

@ server:

sudo -u www-data php occ maintenance:install --database "mysql" --database-name "nextcloud" --database-user "www-data" --database-pass "www" --admin-user "[REDACTED]" --admin-pass "[REDACTED]"
Installation completes;

sudo -u www-data php occ user:resetpassword [REDACTED]
Enter a new password: [new-password]
Confirm the new password: [new-password] again
Successfully reset password for [REDACTED];

Please fix this bug: Template Data Follows:

Steps to reproduce

Install Nextcloud 15
Attempt to Login as admin-id with admin-password

Expected behaviour

Log into admin-id account

Actual behaviour

Returns to Login with error "Wrong Password".

Server configuration

Operating system:
Ubuntu Server 18.04

Web server:
Nginx 1.14.0

Database:
MySQL 5.7.24

PHP version:
7.1 fpm

Nextcloud version: (see Nextcloud admin page)
15.0.0.10

Updated from an older Nextcloud/ownCloud or fresh install:
Fresh Install

Where did you install Nextcloud from:
https://download.nextcloud.com/server/releases/

List of activated apps:

App list

Enabled:

accessibility: 1.1.0
activity: 2.8.2
cloud_federation_api: 0.1.0
comments: 1.5.0
dav: 1.8.0
federatedfilesharing: 1.5.0
federation: 1.5.0
files: 1.10.0
files_pdfviewer: 1.4.0
files_sharing: 1.7.0
files_texteditor: 2.7.0
files_trashbin: 1.5.0
files_versions: 1.8.0
files_videoplayer: 1.4.0
firstrunwizard: 2.4.0
gallery: 18.2.0
logreader: 2.0.0
lookup_server_connector: 1.3.0
nextcloud_announcements: 1.4.0
notifications: 2.3.0
oauth2: 1.3.0
password_policy: 1.5.0
provisioning_api: 1.5.0
serverinfo: 1.5.0
sharebymail: 1.5.0
support: 1.0.0
survey_client: 1.3.0
systemtags: 1.5.0
theming: 1.6.0
twofactor_backupcodes: 1.4.1
updatenotification: 1.5.0
workflowengine: 1.5.0
Disabled:
admin_audit
encryption
files_external
user_external
user_ldap

Nextcloud configuration:

Config report

{
"system": {
"passwordsalt": "REMOVED SENSITIVE VALUE",
"secret": "REMOVED SENSITIVE VALUE",
"trusted_domains": [
"localhost",
"REMOVED SENSITIVE VALUE",
"nexus"
],
"datadirectory": "REMOVED SENSITIVE VALUE",
"dbtype": "mysql",
"version": "15.0.0.10",
"overwrite.cli.url": "http:\/\/localhost",
"dbname": "REMOVED SENSITIVE VALUE",
"dbhost": "REMOVED SENSITIVE VALUE",
"dbport": "",
"dbtableprefix": "oc_",
"mysql.utf8mb4": true,
"dbuser": "REMOVED SENSITIVE VALUE",
"dbpassword": "REMOVED SENSITIVE VALUE",
"installed": true,
"instanceid": "REMOVED SENSITIVE VALUE"
}
}

Are you using external storage, if yes which one: local/smb/sftp/...
NO

Are you using encryption: yes/no
NO

NO LDAP/etc.

Browser Console Log:
JQMIGRATE: Migrate is installed, version 1.4.0

mistergibson on 28 Dec 2018

2|$argon2i$v=19$m=1024,t=2,p=2$REhrVHZJR0g0S3F3L0hzQQ$f3cG11i4tMECKxDtlOHtSa0SQkHKx05PQ2rzrhdI50c

That's a lot of opportunity for something to go wrong I think. Might consider dedicating some fields w/o all the params embedded. Anyhow, nuff said.

A hash for argon2 looks like above. See https://secure.php.net/manual/en/function.password-hash.php for more details. Only 2| or 1| is from nextcloud to distinguish argon2 and bcrypt: https://github.com/nextcloud/server/blob/2e36069e24406455ad3f3998aa25e2a949d1402a/lib/private/Security/Hasher.php#L176-L180

Not sure what is wrong in your case. Can't reproduce. Could you provide the information from the issue template (https://raw.githubusercontent.com/nextcloud/server/master/.github/ISSUE_TEMPLATE/Bug_report.md)?

kesselb on 28 Dec 2018

👍1

Update: I switched to Apache and the issue went away. I'm hosting now on Apache version 2.4.29

I'm suspecting there is something in the header manipulation that Nginx does NOT do under the current configuration. Included is my Apache site-server file for comparison:

nextcloud.txt

mistergibson on 7 Jan 2019

I am having this exact same issue with a fresh install of 15.0.1 and nginx.
I get to the first screen, enter an admin login
Select MySQL and enter all information requested.
The setup seems to do its stuff.
Then it comes back to the login screen.
I enter the admin login I just created and it comes back to the login screen.
No messages. Tried several times with same behavior, just back to the login screen.
Interestingly, the URL shows https://ourdomain.com/login?redirect_url=/apps/files/

Any hints, we don't want to move to apache...

Template Data Follows:
Steps to reproduce
Install Nextcloud 15.0.1
Setup with MySQL DB
Attempt to Login as admin-id with admin-password

Expected behaviour
Log into admin-id account

Actual behaviour
Returns to Login screen with no message.

Server configuration
Operating system:
CentOS Linux release 7.6.1810 (Core)

Web server:
Nginx 1.14.2

Database:
MariaDB 5.5.60

PHP version:
7.2 fpm

Nextcloud version: (see Nextcloud admin page)
15.0.1.2 (cannot get to admin page)

Updated from an older Nextcloud/ownCloud or fresh install:
Fresh Install

Where did you install Nextcloud from:
https://download.nextcloud.com/server/releases/nextcloud-15.0.1.zip

List of activated apps:
App list
Number unknown as we cannot get to the admin page

Nextcloud configuration:
Config report
$CONFIG = array (
'instanceid' => 'REMOVED SENSITIVE VALUE',
'passwordsalt' => 'REMOVED SENSITIVE VALUE',
'secret' => 'REMOVED SENSITIVE VALUE',
'trusted_domains' =>
array (
0 => 'REMOVED SENSITIVE VALUE.com',
),
'datadirectory' => '/usr/share/tds/tdsveh/data',
'dbtype' => 'mysql',
'version' => '15.0.1.2',
'overwrite.cli.url' => 'https://REMOVED SENSITIVE VALUE.com',
'dbname' => 'REMOVED SENSITIVE VALUE',
'dbhost' => 'localhost',
'dbport' => '',
'dbtableprefix' => 'oc_',
'dbuser' => 'REMOVED SENSITIVE VALUE',
'dbpassword' => 'REMOVED SENSITIVE VALUE',
'installed' => true,
);

Are you using external storage, if yes which one: local/smb/sftp/...
NO

Are you using encryption: yes/no
NO

NO LDAP/etc.

ocochar on 11 Jan 2019

@ocochar https://help.nextcloud.com/t/nextcloud-14-stops-working-after-fedora-28-upgrade/42546 could this work for you?

kesselb on 12 Jan 2019

Well, yes, this folder (as well as opcache, wsdlcache) are owned by root:apache. I had already found that and added new folders session-n opcache-n, wsdlcache-n owned by root:nginx in that directory and modified php-fpm/www.conf accordingly as it is recommended not to change existing folder permissions.

That did not solve the login issue.
Even when changing permission or the existing folders to root:nginx we cannot login...

@ocochar https://help.nextcloud.com/t/nextcloud-14-stops-working-after-fedora-28-upgrade/42546 could this work for you?

ocochar on 12 Jan 2019

php -i | grep session.save_path

Is php-fpm able to write a session file into this directory?

kesselb on 12 Jan 2019

php -i | grep session.save_path

Is php-fpm able to write a session file into this directory?

here is the result:
session.save_path => no value => no value
Strange that this is empty...

I went and remove the folders created earlier (session-n opcache-n, wsdlcache-n owned by root:nginx). Changed www.conf in php-fpm.d to point back at the original session, opcache, and wsdlcache folders with changed owner to root:nginx and after restarting php-fpm and nginx, BINGO it works... I am not sure why as session.save_path still has => no value => no value...

Anyway, I am off adding REDIS now and finally have a working environment!

Thanks a lot for your help Daniel.

Olivier

ocochar on 13 Jan 2019

👍1

I'm not sure why nextcloud 14/15 are more strict about the session configuration. Closing this issue now.

kesselb on 13 Jan 2019

Was this page helpful?

0 / 5 - 0 ratings