FATAL error oc_nextcloud authentication

Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • Nextcloud 31.0.6
  • Operating system and version (e.g., Ubuntu 24.04):
    (DOING cat /etc/os-release FROM nextcloud-aio-masercontainer)
    • Alpine Linux v3.21
  • Web server and version (e.g, Apache 2.4.25):
    (DOING httpd -v FROM nextcloud-aio-apache)
    • Apache/2.4.63 (Unix)
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    (DOING caddy -v FROM dcknextcloud-aio-caddy-1)
    • Caddy v2.9.1
  • PHP version (e.g, 8.3):
    (DOING php -v FROM nextcloud-aio-nextcloud)
    • PHP 8.3.22 (cli)
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • I cancelled volume of mastercointainer and remade first setup of AIO at localhost:8080/containers page cause nextcloud-aio-nextcloud container wasn't updating php memory limit after restart and re-compose down and up even if I had already updated in the docker-compose file the env variable NEXTCLOUD-MEMORY-LIMIT
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIO
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • Tailscale sidecar

Summary of the issue you are facing:

Hi all,
I have updated docker-compose in tailscale official AIO guide [here Tailscale (and Caddy as a sidecar) Reverse Proxy · nextcloud/all-in-one · Discussion #5439] adding NEXTCLOUD-MEMORY-LIMIT=2048M.

After tryng a lot with:

  • docker master and child containers restarts
  • docker master container compose down and up

The child container wasn’t picking up the new php memory limit (checking with php occ face:setup).

I tried deleting nextcloud_aio_mastercontainer and from localhost:8080/containers remade initialization (it gave me a new passphrase).

Now it shows an updated memory limit


BEFORE

AFTER

but it also doesn’t end its configuration:


I can clearly see from logs that Database is the blocking point cause Nextcloud has FATAL error trying to connect with oc_nextcloud user at db.

I see in config.php the dbpassword plaintext and also logged in database and tried to launch ALTER USER oc_nextcloud with PASSWORD dbpassword.
And the hash changed after (checking table pg_authid and pg_shadow on the db).

But I still get the same error. Seems like it is only a last stupid account sync issue but I run out of ideas on how to fix it.

I don’t have data which I risk to loose on resetting AIO instance, but I would like to know if that’s something that could be fixed without reset. And maybe learn something from this throubleshooting.
Thanks a lot for the support. Ask anything and will give more info. I stop here cause I don’t know what else to add relevant for this issue

Steps to replicate it (hint: details matter!):

[Not sure cause I made many trial and error in the meantime fixing something and breaking other]

  1. update compose file (optional)
  2. docker compose down
  3. delete nextcloud_aio_mastercontainer volume
  4. docker compose up -d
  5. docker stop nextcloud-aio-apache (to be able to login to localhost:8080 cause blocked when reverse proxying and in the meantime nextcloud.MYTAILSCALE.ts.net/settings/admin was also unreachable)
  6. localhost:8080/containers It sees a changed mastercontainer configuration and ask to update

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

PASTE HERE

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.

Failed to load resource: the server responded with a status of 502 ()

Web server / Reverse Proxy

The output of your Apache/nginx/system log in /var/log/____:

ON CONTAINER NEXTCLOUD-AIO-APACHE in Logs I see inifinte:

Waiting for Nextcloud to start...

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

/var/www/html # php occ config:list system
{
    "system": {
        "one-click-instance": true,
        "one-click-instance.user-limit": 100,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "check_data_directory_permissions": false,
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "password": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "overwritehost": "nextcloud.MYTAILSCALENET.ts.net",
        "overwriteprotocol": "https",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "localhost",
            "nextcloud.MYTAILSCALENET.ts.net"
        ],
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "pgsql",
        "version": "31.0.6.2",
        "overwrite.cli.url": "https:\/\/nextcloud.MYTAILSCALENET.ts.net\/",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "maintenance": false,
        "updatechecker": false,
        "loglevel": 2,
        "log_type": "file",
        "logfile": "\/var\/www\/html\/data\/nextcloud.log",
        "log_rotate_size": 10485760,
        "log.condition": {
            "apps": [
                "admin_audit"
            ]
        },
        "preview_max_x": 2048,
        "preview_max_y": 2048,
        "jpeg_quality": 60,
        "enabledPreviewProviders": {
            "1": "OC\\Preview\\Image",
            "2": "OC\\Preview\\MarkDown",
            "3": "OC\\Preview\\MP3",
            "4": "OC\\Preview\\TXT",
            "5": "OC\\Preview\\OpenDocument",
            "6": "OC\\Preview\\Movie",
            "7": "OC\\Preview\\Krita",
            "0": "OC\\Preview\\Imaginary",
            "23": "OC\\Preview\\ImaginaryPDF"
        },
        "enable_previews": true,
        "upgrade.disable-web": true,
        "mail_smtpmode": "smtp",
        "trashbin_retention_obligation": "auto, 30",
        "versions_retention_obligation": "auto, 30",
        "activity_expire_days": 30,
        "simpleSignUpLink.shown": false,
        "share_folder": "\/Shared",
        "one-click-instance.link": "https:\/\/nextcloud.com\/all-in-one\/",
        "upgrade.cli-upgrade-link": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/2726",
        "updatedirectory": "\/nc-updater",
        "maintenance_window_start": 100,
        "allow_local_remote_servers": true,
        "davstorage.request_timeout": 3600,
        "documentation_url.server_logs": "https:\/\/github.com\/nextcloud\/all-in-one\/discussions\/5425",
        "htaccess.RewriteBase": "\/",
        "dbpersistent": false,
        "auth.bruteforce.protection.enabled": true,
        "ratelimit.protection.enabled": true,
        "files_external_allow_create_new_local": false,
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_url": "***REMOVED SENSITIVE VALUE***",
        "preview_imaginary_key": "***REMOVED SENSITIVE VALUE***",
        "memories.db.triggers.fcu": true,
        "memories.exiftool": "\/var\/www\/html\/custom_apps\/memories\/bin-ext\/exiftool-amd64-musl",
        "memories.vod.path": "\/var\/www\/html\/custom_apps\/memories\/bin-ext\/go-vod-amd64",
        "memories.vod.ffmpeg": "\/usr\/bin\/ffmpeg",
        "memories.vod.ffprobe": "\/usr\/bin\/ffprobe",
        "facerecognition.external_model_url": "facerecognition-model:5000",
        "facerecognition.external_model_api_key": "$(cat \/mnt\/docker-aio-config\/api.key)",
        "DOMAIN": "nextcloud.MYTAILSCALENET.ts.net"
    }
}

Apps

The output of occ app:list (if possible).

Enabled:
  - activity: 4.0.0
  - admin_audit: 1.21.0
  - bruteforcesettings: 4.0.0
  - calendar: 5.3.3
  - circles: 31.0.0
  - cloud_federation_api: 1.14.0
  - comments: 1.21.0
  - contacts: 7.1.3
  - contactsinteraction: 1.12.0
  - dashboard: 7.11.0
  - dav: 1.33.0
  - deck: 1.15.1
  - facerecognition: 0.9.70
  - federatedfilesharing: 1.21.0
  - federation: 1.21.0
  - files: 2.3.1
  - files_downloadlimit: 4.0.0
  - files_fulltextsearch: 31.0.0
  - files_pdfviewer: 4.0.0
  - files_reminders: 1.4.0
  - files_sharing: 1.23.1
  - files_trashbin: 1.21.0
  - files_versions: 1.24.0
  - firstrunwizard: 4.0.0
  - fulltextsearch: 31.0.0
  - fulltextsearch_elasticsearch: 31.0.0
  - logreader: 4.0.0
  - lookup_server_connector: 1.19.0
  - memories: 7.5.2
  - nextcloud-aio: 0.8.0
  - nextcloud_announcements: 3.0.0
  - notes: 4.12.1
  - notifications: 4.0.0
  - notify_push: 1.1.0
  - oauth2: 1.19.1
  - password_policy: 3.0.0
  - photos: 4.0.0-dev.1
  - privacy: 3.0.0
  - profile: 1.0.0
  - provisioning_api: 1.21.0
  - recognize: 9.0.1
  - recommendations: 4.0.0
  - related_resources: 2.0.0
  - richdocuments: 8.7.1
  - serverinfo: 3.0.0
  - settings: 1.14.0
  - sharebymail: 1.21.0
  - spreed: 21.1.1
  - support: 3.0.0
  - survey_client: 3.0.0
  - systemtags: 1.21.1
  - tasks: 0.16.1
  - text: 5.0.0
  - theming: 2.6.1
  - twofactor_backupcodes: 1.20.0
  - twofactor_totp: 13.0.0-dev.0
  - updatenotification: 1.21.0
  - user_status: 1.11.0
  - viewer: 4.0.0
  - weather_status: 1.11.0
  - webhook_listeners: 1.2.0
  - whiteboard: 1.1.2
  - workflowengine: 2.13.0
Disabled:
  - app_api: 5.0.2 (installed 5.0.2)
  - encryption: 2.19.0
  - files_external: 1.23.0
  - suspicious_login: 9.0.1
  - twofactor_nextcloud_notification: 5.0.0
  - user_ldap: 1.22.0

Tips for increasing the likelihood of a response

  • Use the preformatted text formatting option in the editor for all log entries and configuration output.
  • If screenshots are useful, feel free to include them.
    • If possible, also include key error output in text form so it can be searched for.
  • Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.
1 Like

It looks like the DB credentials mismatch is preventing Nextcloud from completing setup. Since you’ve already tried updating the password directly in Postgres and config.php, try fully removing and recreating the DB volume if no data needs preserving. Alternatively, check if the DB user exists and has correct privileges. A full AIO reset might be the cleanest path if syncing config changes continues to fail.

Hi. I gave up basically after a bit of delete and partial initialization tries

  1. Tried deleting DB container e volumes → n-aio-apache gave strange DB tables errors (If I remember well)
  2. Tried deleting also Apache container e volumes → n-aio-nextcloud gave (different) strange DB tables errors + webpage gave Apache internal server error

  3. Tried deleting all containers&volumes except Nextcloud_data volume → n-aio-nextcloud gave strange (maybe) user profiles errors (it seems like It was cause in the volume there was already an Admin profile) + webpage gave Apache internal server error
  4. Tried deleting all containers&volumes also Nextcloud_data volume → basically a reset. so it worked again.

At least now I’m more versed on AIO reset procedures ¯_(ツ)_/¯
Thanks for your reply but I was totally trying hard on an already lost fight