Kann einem User eine bestimmte Gruppe nicht hinzufügen

🌐 International support 🇩🇪 Deutsch (german)
, , , ,
1

Hallo,

ich habe das Problem, dass ich einem User eine bestimmte Gruppe nicht hinzufügen kann. Manche Gruppen gehen, die die ich brauche geht nicht. Das Problem tritt im GUI und an der Console auf.

  1. ./occ -vvv group:adduser GroupNotWorking TheUser => funktioniert nicht
  2. ./occ -vvv group:adduser GroupWorking TheUser => funktioniert

Das Problem trat mit 32.0.5 auf, ich habe ein Update auf 32.0.8 durchgeführt, das gleiche Problem.

  • Bei welchen Anbieter? Lokal
  • Was für ein Server? normales Blech
  • Auf welcher Hardware? PC-x64
  • Betriebssystem: NetBSD 10.1
  • Nextcloud Version: 32.0.8
  • PHP Version: 8.3.27
  • Welche Datenbank? MySql
  • Apache: 2.4.65
  • Wurden vor kurzen Server Updates gemacht? Wenn ja von was? 32.0.5 → 32.0.8
  • Habt ihr die Logs angesehen von Nextcloud und von System?
$ ./occ -vvv group:adduser GroupNotWorking TheUser 
...
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Checking if TheUser exists","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_explode_dn with parameters [\"TheUser\",0]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_explode_dn with parameters [\"TheUser\",0]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters [\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"(&(objectclass=inetOrgPerson)(!(uid=zahn))(!(uid=oneuid))(!(uid=wlgast*))(!(uid=someuid))(!(uid=otheruid)))\",[\"\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"readAttribute: uid=TheUser,ou=people,dc=abc-stadt,dc=de found","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters[\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"objectClass=*\",[\"primarygroupid\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"AuCLGqgMIKljeEu44zAc","level":0,"time":"2026-04-10T06:38:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ",
"message":"Requested attribute primarygroupid not found for uid=TheUser,ou=people,dc=abc-stadt,dc=de","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
-------------------------------------------------------------------

$ ./occ -vvv group:adduser GroupWorking TheUser

{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Checking if TheUser exists","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_explode_dn with parameters [\"TheUser\",0]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_explode_dn with parameters [\"TheUser\",0]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters[\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"(&(objectclass=inetOrgPerson)(!(uid=zahn))(!(uid=oneuid))(!(uid=wlgast*))(!(uid=someuid))(!(uid=otheruid)))\",[\"\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"readAttribute: uid=TheUser,ou=people,dc=abc-stadt,dc=de found","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters[\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"objectClass=*\",[\"primarygroupid\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Requested attribute primarygroupid not found for uid=TheUser,ou=people,dc=abc-stadt,dc=de","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters[\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"objectClass=*\",[\"gidnumber\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_read with parameters[\"(resource)\",\"uid=TheUser,ou=people,dc=abc-stadt,dc=de\",\"objectClass=*\",[\"uid\"],0,-1]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"initializing paged search for filter(&(memberuid=TheUser)(&(|(objectclass=posixGroup))(|(cn=excinema)(cn=GroupNotWorking)(cn=cnOne)(cn=cnTwo)(cn=intern)(cn=cnThree)(cn=cnFour)(cn=cnFive)(cn=rz)(cn=cnSix)))),base dc=abc-stadt,dc=de,attr [\"memberuid\",\"cn\",\"dn\"],pageSize 1000,offset 0","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}
{"reqId":"DuTFEoT2pcyi3nXPWDVY","level":0,"time":"2026-04-10T06:41:26+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"./occ","message":"Calling LDAP function ldap_search with parameters[\"(resource)\",\"dc=abc-stadt,dc=de\",\"(&(memberuid=TheUser)(&(|(objectclass=posixGroup))(|(cn=excinema)(cn=GroupNotWorking)(cn=cnOne)(cn=cnTwo)(cn=intern)(cn=cnThree)(cn=cnFour)(cn=cnFive)(cn=rz)(cn=cnSix))))\",[\"memberuid\",\"cn\",\"dn\"],0,0,-1,0,[{\"oid\":\"1.2.840.113556.1.4.319\",\"value\":{\"size\":1000,\"cookie\":\"\"},\"iscritical\":false}]]","userAgent":"--","version":"32.0.8.2","occ_command":["./occ","-vvv"],"data":{"app":"user_ldap"}}


$ ./occ app:list
Enabled:
activity: 5.0.0
admin_audit: 1.22.0
announcementcenter: 7.3.0
bookmarks: 16.1.3
bruteforcesettings: 5.0.0
circles: 32.0.0
cloud_federation_api: 1.16.0
collectives: 4.2.0
comments: 1.22.0
contacts: 8.3.7
contactsinteraction: 1.13.1
dashboard: 7.12.0
dav: 1.34.2
deck: 1.16.3
federatedfilesharing: 1.22.0
federation: 1.22.0
files: 2.4.0
files_downloadlimit: 5.0.0
files_external: 1.24.1
files_pdfviewer: 5.0.0
files_reminders: 1.5.0
files_sharing: 1.24.1
files_trashbin: 1.22.0
files_versions: 1.25.0
firstrunwizard: 5.0.0
forms: 5.2.6
groupfolders: 20.1.12
logreader: 5.0.0
lookup_server_connector: 1.20.0
nextcloud_announcements: 4.0.0
notes: 4.13.1
notifications: 5.0.0
oauth2: 1.20.0
password_policy: 4.0.0
photos: 5.0.0
privacy: 4.0.0
profile: 1.1.0
provisioning_api: 1.22.0
quota_warning: 1.23.0
recommendations: 5.0.0
related_resources: 3.0.0
richdocuments: 9.0.5
serverinfo: 4.0.0
settings: 1.15.1
sharebymail: 1.22.0
spreed: 22.0.11
support: 4.0.0
survey_client: 4.0.0
systemtags: 1.22.0
tasks: 0.17.1
text: 6.0.1
theming: 2.7.0
twofactor_backupcodes: 1.21.0
updatenotification: 1.22.0
user_ldap: 1.23.0
user_status: 1.12.0
viewer: 5.0.0
weather_status: 1.12.0
webhook_listeners: 1.3.0
workflowengine: 2.14.0
Disabled:
app_api: 32.0.0 (installed 32.0.0)
encryption: 2.20.0 (installed 2.3.0)
files_rightclick: 0.15.1 (installed 1.6.0)
suspicious_login: 10.0.0 (installed 4.3.0)
twofactor_nextcloud_notification: 6.0.0
twofactor_totp: 14.0.0
user_migration: 8.0.0 (installed 8.0.0)
$

Viele Grüße

Thomas

2

Existiert diese Gruppe?
Funktioniert es mit anderen Usern?
Hast Du nach dem Upgrade von Nextcloud mal eine Datenbank-Reparatur und/oder add-missing-indices mit dem occ-Befehl aufgerufen?

3

Hallo,

danke für Deine Antwort.

Ja.

Bei meinen Stichproben nein.

Ja.

Gruß

Thomas

4

Ich hatte Dir oben noch weitere Datenbank-bezogene occ-Befehle verlinkt.
occ maintenace:repair wäre beispielsweise noch so ein Befehl, der Inkosistenzen/Fehler beseitigen kann.

Ich vermute, dass dieser Gruppen-Datensatz einen Fehler enthält, sonst würde das Hinzufügen anderer User klappen.
Letzte Hoffnung wäre, diese Gruppe zu löschen und unter einem geringügig anderen Gruppennamen neu zu erzeugen.

5

Hallo,

Danke für den Tipp. Ich habe das jetzt noch einmal laufen lassen, aber das Problem besteht immer noch.

Wenn ich die Doku richtig lese läuft das ohnehin automatisch während des Updates:

“… The maintenance:repair command runs automatically during upgrades to clean up the database …”

Ja, das ist auch mein Plan B, aber vielleicht kann man ja für’s nächste Mal lernen, was da schief gelaufen ist.

Gruß

Thomas

6

Da könnte vielleicht auch ein Vergleich der Inhalte der Gruppen helfen:

group:info und group:list

Auch könnte ein direkter Blick in die Nextcloud-Datenbank helfen, aber mit diesem Thema bin ich nicht wirklich vertraut.

7

Servus @pthomas,

kann es sein, dass der user ein externer user ist, also gar nicht per ldap angelegt und gruppenzugehörig ist?