External SMB Storage User Access Errors

zpang1 · October 22, 2019, 12:25am

User Cannot Access its External Storage Mount

Sorry to hear you’re facing problems

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can

Nextcloud version (16.0.1):
Operating system and version (Red Hat Enterprise Linux Server release 7.4 (Maipo)):
Apache Version ( Apache 2.4.6):
PHP version (7.1.30):

Issue: We have a Nextcloud implementation on our cluster that’s connected to 3 storage systems via the External Storage plug-in. All users authenticate via LDAP. We currently have a user who cannot access her file shares, whereas all other users have no problem accessing them. This issue arose after she had reset her password (stored inside our LDAP database). She can authenticate and log in just fine, but her external directories would not get mapped. Once more the issue is user specific for whatever reason I cannot seem to pinpoint—thanks in advance to anyone willing to offer recommendations

Sample 1 of error logs in Admin > Logging:

{"reqId":"Xa3URPcBWYS15Jyi64oXygAAAAg","level":1,"time":"2019-10-21T10:52:36-05:00","remoteAddr":"###.###.##.###","user":"65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023","app":"no app in context","method":"GET","url":"\/index.php\/apps\/files_external\/userstorages\/1115?testOnly=true","message":"External storage not available: stat() failed","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.120 Safari\/537.36","version":"16.0.1.1"}

Sample 2 of error logs in Admin > Logging:

{"reqId":"XaTsr0s2uzDtdPpMXJByEwAAAAo","level":4,"time":"2019-10-14T16:46:23-05:00","remoteAddr":"###.###.##.###","user":"65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023","app":"webdav","method":"PROPFIND","url":"\/remote.php\/dav\/files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work","message":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"","Code":0,"Trace":[{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Tree.php","line":76,"function":"getChild","class":"OCA\\DAV\\Connector\\Sabre\\Directory","type":"->","args":["work"]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":967,"function":"getNodeForPath","class":"Sabre\\DAV\\Tree","type":"->","args":["files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work"]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":1666,"function":"getPropertiesIteratorForPath","class":"Sabre\\DAV\\Server","type":"->","args":["files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work",["{DAV:}getlastmodified","{DAV:}getetag","{DAV:}getcontenttype","{DAV:}resourcetype","{http:\/\/owncloud.org\/ns}fileid","{http:\/\/owncloud.org\/ns}permissions","{http:\/\/owncloud.org\/ns}size","{DAV:}getcontentlength","{http:\/\/nextcloud.org\/ns}has-preview","{http:\/\/nextcloud.org\/ns}mount-type","{http:\/\/nextcloud.org\/ns}is-encrypted","{http:\/\/open-collaboration-services.org\/ns}share-permissions","{http:\/\/owncloud.org\/ns}tags","{http:\/\/owncloud.org\/ns}favorite","{http:\/\/owncloud.org\/ns}comments-unread","{http:\/\/owncloud.org\/ns}owner-id","{http:\/\/owncloud.org\/ns}owner-display-name","{http:\/\/owncloud.org\/ns}share-types"],1]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/CorePlugin.php","line":355,"function":"generateMultiStatus","class":"Sabre\\DAV\\Server","type":"->","args":[{"__class__":"Generator"},false]},{"function":"httpPropFind","class":"Sabre\\DAV\\CorePlugin","type":"->","args":[{"absoluteUrl":"https:\/\/#####.###.###.###\/remote.php\/dav\/files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/event\/lib\/EventEmitterTrait.php","line":105,"function":"call_user_func_array","args":[[{"__class__":"Sabre\\DAV\\CorePlugin"},"httpPropFind"],[{"absoluteUrl":"https:\/\/###.###.###.###\/remote.php\/dav\/files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":479,"function":"emit","class":"Sabre\\Event\\EventEmitter","type":"->","args":["method:PROPFIND",[{"absoluteUrl":"https:\/\/###.###.###.###\/remote.php\/dav\/files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]]},{"file":"\/var\/www\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":254,"function":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":[{"absoluteUrl":"https:\/\/###.###.###.###\/remote.php\/dav\/files\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/work","__class__":"Sabre\\HTTP\\Request"},{"__class__":"Sabre\\HTTP\\Response"}]},{"file":"\/var\/www\/nextcloud\/apps\/dav\/lib\/Server.php","line":316,"function":"exec","class":"Sabre\\DAV\\Server","type":"->","args":[]},{"file":"\/var\/www\/nextcloud\/apps\/dav\/appinfo\/v2\/remote.php","line":35,"function":"exec","class":"OCA\\DAV\\Server","type":"->","args":[]},{"file":"\/var\/www\/nextcloud\/remote.php","line":163,"args":["\/var\/www\/nextcloud\/apps\/dav\/appinfo\/v2\/remote.php"],"function":"require_once"}],"File":"\/var\/www\/nextcloud\/apps\/dav\/lib\/Connector\/Sabre\/Directory.php","Line":225,"CustomMessage":"--"},"userAgent":"Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36","version":"16.0.1.1"}

Sample 3 of error logs in Admin > Logging:

{"reqId":"XaTYF3Y28enxDFZ7-Vua2gAAAA8","level":3,"time":"2019-10-14T15:18:32-05:00","remoteAddr":"###.###.##.###","user":"65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023","app":"core","method":"POST","url":"\/index.php\/login?redirect_url=\/index.php\/logout%3Frequesttoken%3DYTMziIkmjPKICi3Qpd9VMnOMTIjcUiFzn9XQkrnyO5U%253D%253AD1VluuYX4rHSeh2%252FxugjWzXtCfi0Pxcc2LCc3OGnU8U%253D","message":"Following symlinks is not allowed ('\/cloud_data\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/files_external' -> '\/project\/shared\/.cloud_data\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/files_external\/' not inside '\/cloud_data\/65ae6ecd-6efb-4dc0-a01f-4a083f85b28b_2023\/')","userAgent":"Mozilla\/5.0 (X11; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.120 Safari\/537.36","version":"16.0.1.1"}

Sample 4 of error logs in Admin > Logging:

j-ed · October 22, 2019, 12:16pm

I don’t know how the mount has exactly been set-up, as personal or as global (admin) mount, but I have in mind that there are different ways to fetch the authentication credentials for a mount. Maybe the credentials have been saved differently as for all other users - just an idea.

zpang1 · October 22, 2019, 3:48pm

Hello j-ed,

Thanks for the idea, would I be able to pull the mount authentication/credentials via the occ command? Would you happen to know some examples?

Thanks again!

j-ed · October 22, 2019, 4:41pm

Until now I’ve only used the GUI to setup mounts but you should have a look on the
"> ./occ files_external:backends" command which shows you all available of configuration options, like e.g.

      - storage_class: \OCA\Files_External\Lib\Storage\SMB
      - supported_authentication_backends:
        - password::password
        - password::sessioncredentials
        - password::logincredentials
        - password::userprovided
        - password::global
        - password::global::user