E2E Disabled But Cannot Use Joplin

Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 20.0.5): 25.0.3
Operating system and version (eg, Ubuntu 20.04): Ubuntu 22.04.1 LTS
Apache or nginx version (eg, Apache 2.4.25): Apache/2.4.52
PHP version (eg, 7.4): PHP 8.1.2-1ubuntu2.10

The issue you are facing:
I had originally enabled E2EE, but disabled it when I was attempting to connect Joplin to Nextcloud by using an app password. Image shows that E2EE should be disabled.
Nextcloud

Is this the first time you’ve seen this error? (Y/N): Y

Steps to replicate it:

  1. Create an app password
  2. Attempt to connect Joplin
  3. Review error message

The output of your Nextcloud log in Admin > Logging:

{"reqId":"7SFxezh9rBzlL0kijixE","level":3,"time":"2023-02-17T16:46:54-06:00","remoteAddr":"x.y.z.quack","user":"nextcloud_user","app":"webdav","method":"DELETE","url":"/remote.php/dav/files/nextcloud_user/Joplin/locks/2_1_532709541a644880b1f95af22e795976.json","message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","userAgent":"Joplin/1.0","version":"25.0.3.2","exception":{"Exception":"OCA\\DAV\\Connector\\Sabre\\Exception\\Forbidden","Message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","Code":0,"Trace":[{"file":"/var/www/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"checkLock","class":"OCA\\EndToEndEncryption\\Connector\\Sabre\\LockPlugin","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":253,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":321,"function":"start","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/lib/Server.php","line":360,"function":"exec","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/appinfo/v2/remote.php","line":35,"function":"exec","class":"OCA\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/remote.php","line":171,"args":["/var/www/nextcloud/apps/dav/appinfo/v2/remote.php"],"function":"require_once"}],"File":"/var/www/nextcloud/apps/end_to_end_encryption/lib/Connector/Sabre/LockPlugin.php","Line":122,"message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","exception":[],"CustomMessage":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content"},"id":"63f003df08e08"}

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'passwordsalt' => 'saltypassword',
  'secret' => 'secretsecret',
  'trusted_domains' =>
  array (
    0 => 'cloud[dot]domain[dot]com',
    1 => '172.16.x.y',
    2 => 'localhost',
  ),
  'trusted_proxies' =>
  array (
    0 => 'proxy[dot]domain[dot]com',
    1 => '172.16.x.proxy',
  ),
  'forwarded-for-headers' =>
  array (
    0 => 'X-Forwarded-For',
    1 => 'HTTP_X_FORWARDED_FOR',
  ),
  'overwriteprotocol' => 'https',
  'overwritehost' => 'cloud[dot]domain[dot]com',
  'overwrite.cli.url' => 'https://cloud[dot]domain[dot]com/',
  'datadirectory' => '/mnt/ncdata',
  'dbtype' => 'pgsql',
  'version' => '25.0.3.2',
  'dbname' => 'nextcloud_db',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'db_user',
  'dbpassword' => 'secretsecret',
  'installed' => true,
  'instanceid' => 'icantswim',
  'upgrade.disable-web' => true,
  'log_type' => 'file',
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'loglevel' => '2',
  'log.condition' =>
  array (
    'apps' =>
    array (
      0 => 'admin_audit',
    ),
  ),
  'remember_login_cookie_lifetime' => '1800',
  'log_rotate_size' => '10485760',
  'trashbin_retention_obligation' => 'auto, 60',
  'versions_retention_obligation' => 'auto, 180',
  'activity_expire_days' => '120',
  'simpleSignUpLink.shown' => false,
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'filelocking.enabled' => true,
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' =>
  array (
    'host' => '/var/run/redis/redis-server.sock',
    'port' => 0,
    'timeout' => 0.5,
    'dbindex' => 0,
    'password' => 'secretpassword',
  ),
  'default_phone_region' => 'us',
  'logtimezone' => 'America/Chicago',
  'htaccess.RewriteBase' => '/',
  'maintenance' => false,
  'mail_smtpmode' => 'smtp',
  'mail_smtphost' => 'smtp[dot]hostname[dot]com',
  'mail_sendmailmode' => 'smtp',
  'mail_smtpport' => '465',
  'mail_smtpauth' => 1,
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpsecure' => 'ssl',
  'mail_from_address' => 'cloud',
  'mail_domain' => 'domain[dot]com',
  'mail_smtpname' => 'cloud[at]domain[dot]com',
  'mail_smtppassword' => 'secretsecret',
  'twofactor_enforced' => 'true',
  'twofactor_enforced_groups' =>
  array (
  ),
  'twofactor_enforced_excluded_groups' =>
  array (
  ),
);

The output of your Apache/nginx/system log in /var/log/____:

[Fri Feb 17 16:58:58.462904 2023] [access_compat:error] [pid 90591:tid 139699414873664] [client 172.16.x.proxy:34456] AH01797: client denied by server configuration: /var/www/nextcloud/remote.php
[Fri Feb 17 16:58:58.463239 2023] [access_compat:error] [pid 90591:tid 139699414873664] [client 172.16.x.proxy:34456] AH01797: client denied by server configuration: /var/www/nextcloud/dav

Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

{"reqId":"v8ws1klxDPGfnifK5LC3","level":3,"time":"2023-02-17T17:02:28-06:00","remoteAddr":"x.y.z.quack","user":"nextcloud_user","app":"webdav","method":"PUT","url":"/remote.php/dav/files/nextcloud_user/Joplin/locks/2_1_532709541a644880b1f95af22e795976.json","message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","userAgent":"Joplin/1.0","version":"25.0.3.2","exception":{"Exception":"OCA\\DAV\\Connector\\Sabre\\Exception\\Forbidden","Message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","Code":0,"Trace":[{"file":"/var/www/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"checkLock","class":"OCA\\EndToEndEncryption\\Connector\\Sabre\\LockPlugin","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":253,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":321,"function":"start","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/lib/Server.php","line":360,"function":"exec","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/appinfo/v2/remote.php","line":35,"function":"exec","class":"OCA\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/remote.php","line":171,"args":["/var/www/nextcloud/apps/dav/appinfo/v2/remote.php"],"function":"require_once"}],"File":"/var/www/nextcloud/apps/end_to_end_encryption/lib/Connector/Sabre/LockPlugin.php","Line":122,"message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","exception":{},"CustomMessage":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content"}}
{"reqId":"GP5U8NWaoLQYALXzifsH","level":3,"time":"2023-02-17T17:02:29-06:00","remoteAddr":"x.y.z.quack","user":"nextcloud_user","app":"webdav","method":"DELETE","url":"/remote.php/dav/files/nextcloud_user/Joplin/locks/2_1_532709541a644880b1f95af22e795976.json","message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","userAgent":"Joplin/1.0","version":"25.0.3.2","exception":{"Exception":"OCA\\DAV\\Connector\\Sabre\\Exception\\Forbidden","Message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","Code":0,"Trace":[{"file":"/var/www/nextcloud/3rdparty/sabre/event/lib/WildcardEmitterTrait.php","line":89,"function":"checkLock","class":"OCA\\EndToEndEncryption\\Connector\\Sabre\\LockPlugin","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":456,"function":"emit","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":253,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php","line":321,"function":"start","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/lib/Server.php","line":360,"function":"exec","class":"Sabre\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/apps/dav/appinfo/v2/remote.php","line":35,"function":"exec","class":"OCA\\DAV\\Server","type":"->"},{"file":"/var/www/nextcloud/remote.php","line":171,"args":["/var/www/nextcloud/apps/dav/appinfo/v2/remote.php"],"function":"require_once"}],"File":"/var/www/nextcloud/apps/end_to_end_encryption/lib/Connector/Sabre/LockPlugin.php","Line":122,"message":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content","exception":{},"CustomMessage":"Client \"Joplin/1.0\" is not allowed to access end-to-end encrypted content"}}

Error message as shown from Joplin:

Last error: Error: DELETE locks/2_1_532709541a644880b1f95af22e795976.json: Client "Joplin/1.0" is not allowed to access end-to-end encrypted content (Exception OCA\DAV\Connector\Sabre\Exception\Forbidden) (403): <?xml version="1.0" encoding="utf-8"?> <d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns" xmlns:o="http://owncloud.org/ns"> <s:exception>OCA\DAV\Connector\Sabre\Exception\Forbidden</s:exception> <s:message>Client "Joplin/1.0" is not allowed to access end-to-end encrypted content</s:message>```