Hello jtr,
Thank you very much for your follow-up questions. I have gathered all the requested information.
1. Are you using an email address for login?
No, I am using the username admin for login, not an email address.
2. What WebDAV URL are you testing against?
I am testing against the standard WebDAV endpoint for my user:
https://cloud.example.com/remote.php/dav/files/admin/
3. Can you share the full curl command you’re using?
Yes. After further testing, I discovered that both App Password and the main password fail with the same error.
Testing with an App Password (while 2FA is ON):
curl -u "admin:[APP_PASSWORD_HERE]" "https://cloud.example.com/remote.php/dav/files/admin/" -X PROPFIND -H "Depth: 1"
# Result: 401 PasswordLoginForbidden
Use code with caution.
Testing with my main password (with 2FA temporarily OFF):
Generated bash
curl -u "admin:[MY_MAIN_PASSWORD]" "https://cloud.example.com/remote.php/dav/files/admin/" -X PROPFIND -H "Depth: 1"
# Result: 401 PasswordLoginForbidden
This confirms the issue is not specific to App Passwords but affects all password-based WebDAV authentication.
4. Are you using local accounts?
Yes, this is a standard Nextcloud AIO installation with local user accounts. I am not using any external authentication backend like LDAP or SAML.
5. What appears in your Nextcloud log?
This is a key point. When I tailed the logs of the nextcloud-aio-apache container (sudo docker logs -f nextcloud-aio-apache), absolutely no new log entries appeared during the failed WebDAV attempts. The request does, however, appear in my Caddy logs with a 401 status code returned from the upstream (Nextcloud).
6. Do you have any warnings or errors under Admin settings->Overview?
No, there are no warnings or errors displayed. Everything shows as “All checks passed”.
Here is the additional information you requested:
occ app:list output:
Enabled:
- activity: 4.0.0
- admin_audit: 1.21.0
- bruteforcesettings: 4.0.0
- calendar: 5.3.8
- circles: 31.0.0
- cloud_federation_api: 1.14.0
- comments: 1.21.0
- contacts: 7.2.3
- contactsinteraction: 1.12.0
- dashboard: 7.11.0
- dav: 1.33.0
- deck: 1.15.2
- federatedfilesharing: 1.21.0
- federation: 1.21.0
- files: 2.3.1
- files_downloadlimit: 4.0.0
- files_fulltextsearch: 31.0.0
- files_pdfviewer: 4.0.0
- files_reminders: 1.4.0
- files_sharing: 1.23.1
- files_trashbin: 1.21.0
- files_versions: 1.24.0
- firstrunwizard: 4.0.0
- fulltextsearch: 31.0.0
- fulltextsearch_elasticsearch: 31.0.0
- logreader: 4.0.0
- lookup_server_connector: 1.19.0
- nextcloud-aio: 0.8.0
- nextcloud_announcements: 3.0.0
- notes: 4.12.2
- notifications: 4.0.0
- notify_push: 1.1.0
- oauth2: 1.19.1
- password_policy: 3.0.0
- photos: 4.0.0
- privacy: 3.0.0
- profile: 1.0.0
- provisioning_api: 1.21.0
- recommendations: 4.0.0
- related_resources: 2.0.0
- serverinfo: 3.0.0
- settings: 1.14.0
- sharebymail: 1.21.0
- support: 3.0.0
- survey_client: 3.0.0
- systemtags: 1.21.1
- tasks: 0.16.1
- text: 5.0.0
- theming: 2.6.1
- twofactor_backupcodes: 1.20.0
- twofactor_totp: 13.0.0-dev.0
- updatenotification: 1.21.0
- user_status: 1.11.0
- viewer: 4.0.0
- weather_status: 1.11.0
- webhook_listeners: 1.2.0
- workflowengine: 2.13.0
Disabled:
- app_api: 5.0.2 (installed 5.0.2)
- encryption: 2.19.0
- files_external: 1.23.0
- suspicious_login: 9.0.1
- twofactor_nextcloud_notification: 5.0.0
- user_ldap: 1.22.0
occ config:list system output:
{
"system": {
"one-click-instance": true,
"one-click-instance.user-limit": 100,
"memcache.local": "\\OC\\Memcache\\APCu",
"apps_paths": [
{
"path": "/var/www/html/apps",
"url": "/apps",
"writable": false
},
{
"path": "/var/www/html/custom_apps",
"url": "/custom_apps",
"writable": true
}
],
"check_data_directory_permissions": false,
"memcache.distributed": "\\OC\\Memcache\\Redis",
"memcache.locking": "\\OC\\Memcache\\Redis",
"redis": {
"host": "***REMOVED SENSITIVE VALUE***",
"password": "***REMOVED SENSITIVE VALUE***",
"port": 6379
},
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"trusted_domains": [
"localhost",
"cloud.example.com"
],
"datadirectory": "***REMOVED SENSITIVE VALUE***",
"dbtype": "pgsql",
"version": "31.0.7.1",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "***REMOVED SENSITIVE VALUE***",
"dbport": "",
"dbtableprefix": "oc_",
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"installed": true,
"instanceid": "***REMOVED SENSITIVE VALUE***",
"maintenance": false,
"updatedirectory": "/nc-updater",
"loglevel": 2,
"app_install_overwrite": [
"nextcloud-aio"
],
"log_type": "file",
"logfile": "/var/www/html/data/nextcloud.log",
"log_rotate_size": 10485760,
"log.condition": {
"apps": [
"admin_audit"
]
},
"preview_max_x": 2048,
"preview_max_y": 2048,
"jpeg_quality": 60,
"enabledPreviewProviders": {
"1": "OC\\Preview\\Image",
"2": "OC\\Preview\\MarkDown",
"3": "OC\\Preview\\MP3",
"4": "OC\\Preview\\TXT",
"5": "OC\\Preview\\OpenDocument",
"6": "OC\\Preview\\Movie",
"7": "OC\\Preview\\Krita",
"0": "OC\\Preview\\Imaginary",
"23": "OC\\Preview\\ImaginaryPDF"
},
"enable_previews": true,
"upgrade.disable-web": true,
"mail_smtpmode": "smtp",
"trashbin_retention_obligation": "auto, 30",
"versions_retention_obligation": "auto, 30",
"activity_expire_days": 30,
"simpleSignUpLink.shown": false,
"share_folder": "/Shared",
"one-click-instance.link": "https://nextcloud.com/all-in-one/",
"upgrade.cli-upgrade-link": "https://github.com/nextcloud/all-in-one/discussions/2726",
"maintenance_window_start": 100,
"allow_local_remote_servers": true,
"davstorage.request_timeout": 3600,
"documentation_url.server_logs": "https://github.com/nextcloud/all-in-one/discussions/5425",
"htaccess.RewriteBase": "/",
"dbpersistent": false,
"auth.bruteforce.protection.enabled": true,
"ratelimit.protection.enabled": true,
"files_external_allow_create_new_local": false,
"preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
"preview_imaginary_key": "***REMOVED SENSITIVE VALUE***",
"updatechecker": false,
"trusted_proxies": "***REMOVED SENSITIVE VALUE***",
"overwritehost": "cloud.example.com",
"overwriteprotocol": "https",
"overwritewebroot": "/",
"overwrite.cli.url": "https://cloud.example.com/",
"forwarded_for_headers": [
"HTTP_X_FORWARDED_FOR",
"HTTP_CF_CONNECTING_IP"
]
}
}