Both windows and Android client fail

Can_B · March 18, 2021, 8:51am

I just installed nextcloud on my VPS (Centos 7)
I use vestaCP with Php7.3
I have no problems logging in with Browsers.
When I wish to connect using Windows-Desktop Client after granting access it comes back and says “Access forbidden by server. To verify that you have proper access click here to access with browser” and granting loop starts again.
But I can see in "Security–> devices and sessions → my device that was logged in.

in the logs for windows client I have :

176.198.180.116 - - [18/Mar/2021:09:47:17 +0100] "POST /index.php/login/v2/poll HTTP/1.0" 200 160 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [18/Mar/2021:09:47:18 +0100] "PROPFIND /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [18/Mar/2021:09:47:18 +0100] "PROPFIND /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [18/Mar/2021:09:47:39 +0100] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0"

When I do the same with Android client I get into similar loop of granting access and my logs looks like below.

176.198.180.116 - - [18/Mar/2021:09:50:02 +0100] "GET /status.php HTTP/1.0" 200 171 "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:02 +0100] "HEAD /remote.php/webdav/ HTTP/1.0" 401 - "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:02 +0100] "GET /ocs/v2.php/cloud/capabilities?format=json HTTP/1.0" 200 782 "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:02 +0100] "GET /index.php/login/flow HTTP/1.0" 200 4183 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:03 +0100] "GET /index.php/core/js/oc.js?v=10e2d8a1 HTTP/1.0" 200 3906 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:03 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:05 +0100] "GET /index.php/login/flow/grant?stateToken=hDlvYj03yQqJZdh7R510cti3JR6xALiC8VvA202qKPzdoJAmvE1NLBRiXkXo5cx8&clientIdentifier= HTTP/1.0" 303 - "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:05 +0100] "GET /index.php/login?redirect_url=/index.php/login/flow/grant?stateToken%3DhDlvYj03yQqJZdh7R510cti3JR6xALiC8VvA202qKPzdoJAmvE1NLBRiXkXo5cx8%26clientIdentifier%3D HTTP/1.0" 200 3800 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:05 +0100] "GET /index.php/core/js/oc.js?v=10e2d8a1 HTTP/1.0" 200 3906 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:06 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:10 +0100] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0"
176.198.180.116 - - [18/Mar/2021:09:50:22 +0100] "POST /index.php/login HTTP/1.0" 303 - "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:23 +0100] "GET /index.php/login/flow/grant?stateToken=hDlvYj03yQqJZdh7R510cti3JR6xALiC8VvA202qKPzdoJAmvE1NLBRiXkXo5cx8&clientIdentifier= HTTP/1.0" 200 3705 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:23 +0100] "GET /index.php/core/js/oc.js?v=10e2d8a1 HTTP/1.0" 200 3934 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:24 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:25 +0100] "POST /index.php/login/flow HTTP/1.0" 303 - "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:25 +0100] "GET /status.php HTTP/1.0" 200 171 "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:26 +0100] "HEAD /remote.php/webdav/ HTTP/1.0" 401 - "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:26 +0100] "HEAD /remote.php/webdav/ HTTP/1.0" 401 - "-" "Mozilla/5.0 (Android) Nextcloud-android/3.15.1"
176.198.180.116 - - [18/Mar/2021:09:50:26 +0100] "GET /index.php/login/flow HTTP/1.0" 200 4183 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:27 +0100] "GET /index.php/core/js/oc.js?v=10e2d8a1 HTTP/1.0" 200 3906 "-" "Huawei RNE-L21 (Android)"
176.198.180.116 - - [18/Mar/2021:09:50:27 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Huawei RNE-L21 (Android)".

Hope that I find help here.
thank you.

tflidd · March 22, 2021, 9:08am

Do you have more in your logs? The login flow seems to work, there is a redirect and the page after is correctly loaded. Something strange with the remote.php file permissions? Does native webdav work (e.g. with winscp)

Can_B · March 26, 2021, 10:14pm

Sorry for the late reply here I tried once again and more logs

176.198.180.116 - - [26/Mar/2021:23:04:55 +0100] "GET /status.php HTTP/1.0" 200 171 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:04:55 +0100] "GET /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:04:55 +0100] "GET /ocs/v2.php/cloud/capabilities?format=json HTTP/1.0" 200 379 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:04:55 +0100] "PROPFIND /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:04:57 +0100] "POST /index.php/login/v2 HTTP/1.0" 200 330 "-" "Monster (Desktop Client - Windows)"
176.198.180.116 - - [26/Mar/2021:23:05:00 +0100] "GET /index.php/login/v2/flow/a8AjNFSOl1FYMaRQROfNmS3saXZIbUPGSyHVMpudGL08jGozRKGKJr7lhqYE5cbW7Fil9iP53LZnUH7hnA7MVN54Zj1XlTkEFppGdBGbCZkkHnqC8c5MBFeJByF2pby8 HTTP/1.0" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:00 +0100] "GET /index.php/login/v2/flow HTTP/1.0" 200 5105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:00 +0100] "GET /index.php/apps/theming/styles?v=0 HTTP/1.0" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:00 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:01 +0100] "GET /index.php/apps/theming/manifest?v=0 HTTP/1.0" 200 191 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:01 +0100] "GET /index.php/apps/theming/icon?v=0 HTTP/1.0" 200 6795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:02 +0100] "GET /index.php/login/v2/grant?stateToken=XVlDY9eAutsrBCYPV7mEuChvRazbzM2Y6ta3REEcTFUWrvOVz3Tg9XTAvr18q2IG HTTP/1.0" 200 5072 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:02 +0100] "GET /index.php/login/v2/grant?stateToken=XVlDY9eAutsrBCYPV7mEuChvRazbzM2Y6ta3REEcTFUWrvOVz3Tg9XTAvr18q2IG HTTP/1.0" 200 5070 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:02 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:06 +0100] "POST /index.php/login/v2/grant HTTP/1.0" 200 4826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:07 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:12 +0100] "POST /index.php/login/v2/poll HTTP/1.0" 200 159 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:05:12 +0100] "PROPFIND /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:05:13 +0100] "PROPFIND /remote.php/webdav/ HTTP/1.0" 401 414 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:05:31 +0100] "POST /index.php/login/v2 HTTP/1.0" 200 326 "-" "Monster (Desktop Client - Windows)"
176.198.180.116 - - [26/Mar/2021:23:05:31 +0100] "GET /index.php/login/v2/flow/TeXkimpGF77m2ykp4LZEpclT5jxRJ5Enb654Ewpy2oWLcxFxx1KYZhU2AvJOnId3Kz71oheiuQENDSbVVXzWc8O4K9kRMdiOkq2GscXEeOZFrVtrNN3NAZvainaDEXV2 HTTP/1.0" 303 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:32 +0100] "GET /index.php/login/v2/flow HTTP/1.0" 200 5107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:32 +0100] "GET /cron.php HTTP/1.0" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.90 Safari/537.36"
176.198.180.116 - - [26/Mar/2021:23:05:35 +0100] "POST /index.php/login/v2/poll HTTP/1.0" 404 2 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"
176.198.180.116 - - [26/Mar/2021:23:05:44 +0100] "POST /index.php/login/v2/poll HTTP/1.0" 404 2 "-" "Mozilla/5.0 (Windows) mirall/3.1.3stable-Win64 (build 20210218) (Nextcloud)"

that’s correct redırect opens the web browser I login and says access granted your client should not be connected. then I look at the application and see "access forbidden by server.to verify that you have proper access click here … and the login process starts on a new browser again.

the remote.php
-rw-r–r-- 1 Res0 Res0 5341 Feb 19 09:49 remote.php

Winscp webdav can not connect with error code " 405 method not allowed"
connection failed.

where else can I look. seems like a folder right is missing or wrong.

Can_B · March 26, 2021, 10:28pm

also winscp logs

176.198.180.116 - - [26/Mar/2021:23:25:36 +0100] "OPTIONS / HTTP/1.0" 302 - "-" "WinSCP/5.9.3 neon/0.30.1"
176.198.180.116 - - [26/Mar/2021:23:25:36 +0100] "OPTIONS /index.php/login HTTP/1.0" 405 - "-" "WinSCP/5.9.3 neon/0.30.1"

tflidd · March 27, 2021, 8:09am

Someone is blocking a method, OPTIONS or PROPFIND etc. should be allowed. Some had this problem in plesk with the PUT: Nextcloud on Plesk Obsidian ERROR PUT 405 "Method not allowed"

Can_B · March 27, 2021, 9:51pm

I have VestaCP as CP and it does not have firewall, web application firewall.
As recommended in the link.

Can_B · March 29, 2021, 8:59am

on the firewall side there is no blocking rule at all

tflidd · March 29, 2021, 9:20am

It can be from the configuration. There are modules to configure that, e.g. mod_allowmethods - Apache HTTP Server Version 2.4
It’s probably easy for someone who knows your config tool.

Can_B · May 3, 2021, 2:35am

Interesting after sometime I had time to check it. Saw that there are some updates for both client and server side. Did the updates and problem solved. So it works at least