Getting prompted for password whenever changing setting or updating app

ℹ️ Support
,
1
Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 29.0.5): 29.04
Operating system and version (eg, Ubuntu 24.04): Ubuntu 22.04
Apache or nginx version (eg, Apache 2.4.25): Apache 2.4.52
PHP version (eg, 8.3): PHP 8.3

The issue you are facing:

  • Whenever I go to update an app, or change a setting, it prompts for the password again causing the page I’m currently on to have issues (IE: apps page will go from showing all apps installed to ‘No apps found for your version’
  • refreshing the page after entering password sometimes gets it to reload but can cause updates to cancel out because the page is refreshed

image_2024-10-12_092840799

Is this the first time you’ve seen this error? (Y/N): no been happening for a while and just lived with it

Steps to replicate it:

  1. log in as an account in the administrator group
  2. go to apps or system settings page
  3. update an app or change a system setting
  4. get prompt for ‘This action needs authentication’

The output of your Nextcloud log in Admin > Logging:

{"reqId":"6da4VLtB6A2REjVdgIoP","level":1,"time":"2024-10-12T14:20:07+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"No iMIP messages to process.","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"6da4VLtB6A2REjVdgIoP","level":1,"time":"2024-10-12T14:20:08+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"Account 1 does not have an archive mailbox","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"6da4VLtB6A2REjVdgIoP","level":1,"time":"2024-10-12T14:20:08+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"Account 1 does not have an snooze mailbox","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"6da4VLtB6A2REjVdgIoP","level":1,"time":"2024-10-12T14:20:09+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"Tp5wc31PYmKj7ZJvemry","level":1,"time":"2024-10-12T14:25:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"Ud1ZqIuh6A4q6qMOaBom","level":1,"time":"2024-10-12T14:30:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"frN0nv3xpTsLDyDaYRBw","level":1,"time":"2024-10-12T14:35:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"frN0nv3xpTsLDyDaYRBw","level":1,"time":"2024-10-12T14:35:11+00:00","remoteAddr":"","user":"--","app":"memories","method":"","url":"--","message":"Indexing completed successfully","userAgent":"--","version":"29.0.4.1","data":{"app":"memories"}}
{"reqId":"xe1gAblyM4ZF4OEkGsba","level":1,"time":"2024-10-12T14:40:02+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"hzbDgwIroaZjLPU8T2Vu","level":1,"time":"2024-10-12T14:45:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"1bzkHGFoYGCc4fWm8AIA","level":1,"time":"2024-10-12T14:50:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"TSnMfCIE14RQdS971j7O","level":1,"time":"2024-10-12T14:55:02+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"TSnMfCIE14RQdS971j7O","level":1,"time":"2024-10-12T14:55:09+00:00","remoteAddr":"","user":"--","app":"memories","method":"","url":"--","message":"Indexing completed successfully","userAgent":"--","version":"29.0.4.1","data":{"app":"memories"}}
{"reqId":"C0RopsefxKVGiT1KxBDg","level":1,"time":"2024-10-12T15:00:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"Z7a3eikgeWiNkAMdPdVy","level":1,"time":"2024-10-12T15:05:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"kQwias6TJeXivLVDpNnd","level":1,"time":"2024-10-12T15:10:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"IaDw8hGFUeMXxyvG9KGw","level":1,"time":"2024-10-12T15:15:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"IaDw8hGFUeMXxyvG9KGw","level":1,"time":"2024-10-12T15:15:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Closed and deleted 1 sessions permanently","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"IaDw8hGFUeMXxyvG9KGw","level":1,"time":"2024-10-12T15:15:11+00:00","remoteAddr":"","user":"--","app":"memories","method":"","url":"--","message":"Indexing completed successfully","userAgent":"--","version":"29.0.4.1","data":{"app":"memories"}}
{"reqId":"Ilm6JCYbk7QzqUND2fL7","level":1,"time":"2024-10-12T15:20:02+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"JHoXwDFSWyguo0ido67N","level":1,"time":"2024-10-12T15:25:07+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"No iMIP messages to process.","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"JHoXwDFSWyguo0ido67N","level":1,"time":"2024-10-12T15:25:08+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"Account 1 does not have an archive mailbox","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"JHoXwDFSWyguo0ido67N","level":1,"time":"2024-10-12T15:25:08+00:00","remoteAddr":"","user":"--","app":"mail","method":"","url":"--","message":"Account 1 does not have an snooze mailbox","userAgent":"--","version":"29.0.4.1","data":{"app":"mail"}}
{"reqId":"JHoXwDFSWyguo0ido67N","level":1,"time":"2024-10-12T15:25:09+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"vjKIN4NiG5HSukhzBmrv","level":1,"time":"2024-10-12T15:30:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"xqOOC5tBS62ebK3s1frY","level":1,"time":"2024-10-12T15:35:02+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"xqOOC5tBS62ebK3s1frY","level":1,"time":"2024-10-12T15:35:10+00:00","remoteAddr":"","user":"--","app":"memories","method":"","url":"--","message":"Indexing completed successfully","userAgent":"--","version":"29.0.4.1","data":{"app":"memories"}}
{"reqId":"6bjBqyaj6UijqeGpF97s","level":1,"time":"2024-10-12T15:40:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"7Y4o2Hv2dEZsHVRzlAnD","level":1,"time":"2024-10-12T15:45:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"aXociRDHGEBBwTDWPKti","level":1,"time":"2024-10-12T15:50:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"d6UimBK3eJHaFlYj8PJg","level":1,"time":"2024-10-12T15:55:04+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"d6UimBK3eJHaFlYj8PJg","level":1,"time":"2024-10-12T15:55:11+00:00","remoteAddr":"","user":"--","app":"memories","method":"","url":"--","message":"Indexing completed successfully","userAgent":"--","version":"29.0.4.1","data":{"app":"memories"}}
{"reqId":"oqxmp6YgBeS81bnwiYk1","level":1,"time":"2024-10-12T16:00:02+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"bjJOmSI4dk5TeBOopD7k","level":2,"time":"2024-10-12T16:04:08+00:00","remoteAddr":"192.168.2.5","user":"kenneth","app":"integration_giphy","method":"GET","url":"/ocs/v2.php/search/providers/giphy-search-gifs/search?term=kenneth&from=%2Fsettings%2Fapps%2Fupdates","message":"Giphy API error : Client error: `GET https://api.giphy.com/v1/gifs/search?q=kenneth&rating=r&limit=5&offset=0&api_key=Piston2023%21` resulted in a `401 Unauthorized` response:\n{\n        \"data\": [],\n        \"meta\": {\n          \"status\": 401,\n          \"msg\": \"Unauthorized\",\n          \"response_id (truncated...)\n","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 OPR/113.0.0.0","version":"29.0.4.1","data":{"app":"integration_giphy","response_body":"{\"[object] (GuzzleHttp\\Psr7\\Stream)\":{\"GuzzleHttp\\Psr7\\Streamstream\":\"[resource] Resource id #78\",\"GuzzleHttp\\Psr7\\Streamsize\":143,\"GuzzleHttp\\Psr7\\Streamseekable\":true,\"GuzzleHttp\\Psr7\\Streamreadable\":true,\"GuzzleHttp\\Psr7\\Streamwritable\":true,\"GuzzleHttp\\Psr7\\Streamuri\":\"php://temp\",\"GuzzleHttp\\Psr7\\StreamcustomMetadata\":[]}}"}}
{"reqId":"d8gkOnmbpU5WskOGwbBB","level":1,"time":"2024-10-12T16:05:01+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"AIt3dhf7P4oQG65HLuWx","level":1,"time":"2024-10-12T16:10:03+00:00","remoteAddr":"","user":"--","app":"passwords","method":"","url":"--","message":"Passwords runs /var/www/nextcloud/cron.php in global mode","userAgent":"--","version":"29.0.4.1","data":{"app":"passwords"}}
{"reqId":"RgLN3RAM2AyIz5W7t7bA","level":2,"time":"2024-10-12T16:11:35+00:00","remoteAddr":"192.168.2.5","user":"kenneth","app":"integration_giphy","method":"GET","url":"/ocs/v2.php/search/providers/giphy-search-gifs/search?term=kenneth&from=%2Fsettings%2Fapps%2Fupdates","message":"Giphy API error : Client error: `GET https://api.giphy.com/v1/gifs/search?q=kenneth&rating=r&limit=5&offset=0&api_key=Piston2023%21` resulted in a `401 Unauthorized` response:\n{\n        \"data\": [],\n        \"meta\": {\n          \"status\": 401,\n          \"msg\": \"Unauthorized\",\n          \"response_id (truncated...)\n","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 OPR/113.0.0.0","version":"29.0.4.1","data":{"app":"integration_giphy","response_body":"{\"[object] (GuzzleHttp\\Psr7\\Stream)\":{\"GuzzleHttp\\Psr7\\Streamstream\":\"[resource] Resource id #78\",\"GuzzleHttp\\Psr7\\Streamsize\":143,\"GuzzleHttp\\Psr7\\Streamseekable\":true,\"GuzzleHttp\\Psr7\\Streamreadable\":true,\"GuzzleHttp\\Psr7\\Streamwritable\":true,\"GuzzleHttp\\Psr7\\Streamuri\":\"php://temp\",\"GuzzleHttp\\Psr7\\StreamcustomMetadata\":[]}}"}}
{"reqId":"9Cu5ilyDQL25Pway2OQh","level":3,"time":"2024-10-12T16:14:15+00:00","remoteAddr":"192.168.2.5","user":"kenneth","app":"PHP","method":"GET","url":"/index.php/apps/logreader/api/poll?lastReqId=RgLN3RAM2AyIz5W7t7bA","message":"Allowed memory size of 134217728 bytes exhausted (tried to allocate 20480 bytes) at /var/www/nextcloud/apps/logreader/lib/Controller/LogController.php#128","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 OPR/113.0.0.0","version":"29.0.4.1","data":{"app":"PHP"}}

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'instanceid' => '***',
  'passwordsalt' => '***',
  'secret' => '***',
  'trusted_domains' =>
  array (
    0 => '***',
    1 => '192.168.2.252',
  ),
  'default_phone_region' => 'US',
  'datadirectory' => '/mnt/md0/nextcloud',
  'dbtype' => 'mysql',
  'version' => '29.0.4.1',
  'overwrite.cli.url' => 'https://***',
  'overwriteprotocol' => 'https',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => '***',
  'dbpassword' => '***',
  'installed' => true,
  'filesystem_check_changes' => 1,
  'filelocking.enabled' => false,
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'ssl',
  'mail_sendmailmode' => 'smtp',
  'mail_smtpauth' => 1,
  'mail_domain' => '***',
  'mail_from_address' => 'noreply',
  'mail_smtphost' => '***',
  'mail_smtpport' => '465',
  'mail_smtpname' => '***',
  'mail_smtppassword' => '***',
  'maintenance_window_start' => 1,
  'maintenance' => false,
  'defaultapp' => 'files',
  'theme' => '',
  'loglevel' => 1,
  'default_language' => 'en',
  'default_locale' => 'en_US',
  'default_timezone' => 'America/Phoenix',
  'memories.exiftool' => '/var/www/nextcloud/apps/memories/bin-ext/exiftool-amd64-glibc',
  'memories.vod.path' => '/var/www/nextcloud/apps/memories/bin-ext/go-vod-amd64',
  'memories.vod.ffmpeg' => '/usr/bin/ffmpeg',
  'memories.vod.ffprobe' => '/usr/bin/ffprobe',
);

The output of your Apache/nginx/system log in /var/log/____:

nothing relevant

Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

no errors
2

Hello @cmdrscotty ,

welcome to the community of Nextcloud.

Does this happen also straight after login?

On my NC I am prompted for a password after some time (>10min) being logged in and change settings.

3

Yes happens even if i log in and make a beeline for something that tends to trigger it.

Looking through some other possibilities I investigated the timezone setting but confirmed that my computer, and server both show as in the same timezone (granted not sure why the log is in UTC 0 when server is UTC -7)

Looked through any settings I could think of, 2fa is off, and not set up to use any kind of ldap or external provider, so I’m at a loss for why it keeps prompting for re-authentication and causing the page to glitch out even if everything is set up properly.

Edit: also wanted to note that seems after providing the password for the re-authentication it doesn’t ask for it again. feels like it might be some security setting buried i’m either overlooking or missing

4

The password confirmation kicks in on sensitive operations if the password for the current session hasn’t been entered in the last 30 minutes (IIRC). It shouldn’t impact the current operation (other than needing to answer the prompt).

You are several maintenance releases out-of-date (we’re at 29.0.8 now). Though the main change I see that is directly related to password confirmation is solely SSO related.

Might be insightful to monitor your browser inspector (the Console tab and maybe the Network tab) while reproducing the behavior on your end.

Do you have a reverse proxy or Cloudflare or WAF or anything like that?

Also, would be helpful if you can you detail a step-by-step way of possibly reproducing this? I tried a few ways based on what you posted and I’m not seeing this behavior.

1 Like
5

I think I may have narrowed down the culprit.

as a test, I updated the system to the latest (29.0.8) and confirmed I could sign in.

got distracted and came back an hour later, but after reading your post I did notice that I wasn’t being asked to sign in (it was remembering my user session).

So on a whim, loaded it up in incognito mode/private browsing, signed in, went and updated an app and it didn’t ask to re-authenticate.

Sounds like I need to go looking into seeing if there’s a setting to force log out a user that has been inactive for x minutes.

6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.