Disabled Users and Trying to find the Cause

Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 20.0.5): 26.01
Operating system and version (eg, Ubuntu 20.04): Ubuntu 22.04.2 LTS
Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.52
PHP version (eg, 7.4): PHP 8.1

The issue you are facing:
10 users total
2 users get disabled immediately after being re-enabled
Logs audit.log and nextcloud.log don’t appear to blatantly call out the disabling user activity, nor the cause for it.

This has been going on for several version upgrades now and needs to be corrected.

I’m asking for a process by which other folks have determined why a user was disabled, so that the issue can be remediated.

Is this the first time you’ve seen this error? (Y/N): Y

Steps to replicate it:

  1. Enable user
  2. Have user log in.
  3. User either cannot, already disabled, or gets the pop-up reauthenticate prompt shortly after logging in.

The output of your Nextcloud log in Admin > Logging:

PASTE HERE

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'auth.bruteforce.protection.enabled' => false,
  'datadirectory' => '/mnt/ncdata',
  'dbhost' => 'localhost',
  'dbname' => 'nextcloud_db',
  'dbpassword' => 'MooseAndSquirrel', // redacted
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbtype' => 'pgsql',
  'dbuser' => 'Bullwinkle', // redacted
  'default_language' => 'en',
  'default_phone_region' => 'US',
  'enable_previews' => true,
  'filelocking.enabled' => true,
  'installed' => true,
  'instanceid' => 'AAAAAnAAAAA', // redacted
  'jpeg_quality' => '60',
  'log_rotate_size' => '0',
  'log_type' => 'file',
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'loglevel' => '1',
  'logtimezone' => 'America/Chicago',
  'mail_domain' => 'My Domain.TLD', // redacted
  'mail_from_address' => 'Rocky', // redacted
  'mail_sendmailmode' => 'smtp',
  'mail_smtphost' => 'bridge.My Home Domain.TLD', // redacted
  'mail_smtpmode' => 'smtp',
  'mail_smtpport' => '25',
  'maintenance_window_start' => '1',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'overwrite.cli.url' => 'My Home Domain.TLD', // redacted
  'overwritecondaddr' => '^NNN\\.NNN\\.NNN\\.NNN$', // redacted
  'overwritehost' => 'My Home Domain.TLD', // redacted
  'overwriteprotocol' => 'https',
  'passwordsalt' => 'Bullwinkle', // redacted
  'preview_max_x' => '2048',
  'preview_max_y' => '2048',
  'remember_login_cookie_lifetime' => '1800',
  'secret' => 'MooseAndSquirrel',  // redacted
  'simpleSignUpLink.shown' => false,
  'trashbin_retention_obligation' => 'auto, 180',
  'twofactor_enforced' => 'false',
  'upgrade.disable-web' => 'false',
  'version' => '26.0.1.1',
  'enabledPreviewProviders' => 
  array (
    0 => 'OC\\Preview\\PNG',
    1 => 'OC\\Preview\\JPEG',
    2 => 'OC\\Preview\\GIF',
    3 => 'OC\\Preview\\BMP',
    4 => 'OC\\Preview\\MarkDown',
    5 => 'OC\\Preview\\MP3',
    6 => 'OC\\Preview\\TXT',
    7 => 'OC\\Preview\\Movie',
    8 => 'OC\\Preview\\Photoshop',
    9 => 'OC\\Preview\\SVG',
    10 => 'OC\\Preview\\TIFF',
  ),
  'versions_retention_obligation' => 'auto, 365',
  0 => 
  array (
    'apps' => 
    array (
      0 => 'admin_audit',
    ),
  ),
  'redis' => 
  array (
    'host' => '/run/redis/redis-server.sock',
    'port' => 0,
  ),
  'trusted_domains' => 
  array (
    0 => 'localhost',
    1 => '127.0.0.1',
    2 => '127.0.1.1',
    3 => 'NNN.NNN.NNN.*', // redacted
    4 => 'My Home Domain.TLD', // redacted
  ),
  'trusted_proxies' => 
  array (
    0 => 'NNN.NNN.NNN.NNN', // redacted Proxy Server Address
  ),
  'maintenance' => false,
  'memories.exiftool' => '/var/www/nextcloud/apps/memories/exiftool-bin/exiftool-amd64-glibc',
  'memories.vod.ffmpeg' => '/usr/bin/ffmpeg',
  'memories.vod.ffprobe' => '/usr/bin/ffprobe',
  'memories.vod.path' => '/var/www/nextcloud/apps/memories/exiftool-bin/go-vod-amd64',
  'memories.vod.disable' => false,
  'memories.gis_type' => 2,
);

The output of your Apache/nginx/system log in /var/log/____:

PASTE HERE

PASTE HERE


Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

PASTE HERE

No one has any tips on determining why a user was disable?

2 Likes

The logs would be my starting point as well, perhaps with debug mode enabled:
https://docs.nextcloud.com/server/latest/admin_manual/issues/general_troubleshooting.html#nextcloud-logfiles

Is this the behavior now for all new users? Do you use file-access-control? Is there a difference between the users that still can login and the others (just added later, different groups, different access location, …). What is disturbing, the disabling is done within Nextcloud, so it is a bit surprising that such important events are not logged…

1 Like

Thank you,

I’ve Added debug = true, and restarted the server
I’m seeing the following message every 3 seconds

{“reqId”:“hd7FGtYpQdSJtEs3zVHt”,“level”:1,“time”:“2023-10-07T06:35:29-05:00”,“remoteAddr”:“”,“user”:“–”,“app”:“related_resources”,“method”:“”,“url”:“–”,“message”:“Could not resolve OCA\Circles\CirclesManager! Class "OCA\Circles\CirclesManager" does not exist”,“userAgent”:“–”,“version”:“26.0.1.1”,“data”:{“app”:“related_resources”}}

I’m not sure if its related to the user getting disabled, but it certainly appears to need resolution.
We have no Circles app, or Collectives installed.

There are much newer releases that already fix a lot of things:

I’d try that first before figuring out a bug that has already been fixed.

What app is this? What apps do you use? For less standard apps, I’d try to disable them if they might be causing the issue.