LDAP/AD broken - nextcloud inaccessible

local-hosting · December 4, 2025, 9:59am

Support intro

Sorry to hear you’re facing problems.

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

Official documentation (searchable and regularly updated)
How to topics and FAQs
Forum search

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

The Basics

Nextcloud Server version (e.g., 29.x.x):
- 30.0.17
Operating system and version (e.g., Ubuntu 24.04):
- ubuntu 24.04
Web server and version (e.g, Apache 2.4.25):
- apachee
Reverse proxy and version _(e.g. nginx 1.27.2)
- none
PHP version (e.g, 8.3):
- replace me

Summary of the issue you are facing:

During an domain controller replacement (2019=>2025) my working nextcloud instance lost connection to my active directory.
Nextcloud is not accessible by users and only with administrator account with manually deactivated ldap interfaces s01 & s02.
My nextcloud instance is less than 2 years old and updated peridodically.

Steps to replicate it (hint: details matter!):

adding two new Domain Controller 2025 to domain (~3 weeks ago), having two old DC and the new versions running paralell without any issues
On Monday we removed the 2 old 2019 DCs. The new DCs received as a second IP adress the IP address of an old DC additionally. Any AD-client configuration showing to an IP adress should find a new DC.
Next day I noticed that nextcloud is inaccessible by users, and even the administrator account could not access “Administrationseinstellungen”.
Yesterday we spent several hours, trying to regain access:
- We manually switched off the s01 and s02 ldap interfaces “ldapConfigurationActive”, then =>
- Administrationseinstellungen became accessible through admin acount
- We tested many many LDAP/AD Integration configurations, without success
  uncomplete configuration
- We tried using the old parameters and later other methods, adding CN=, OU=, …
- We tried the configuration with a new user account

Log entries

Nextcloud

derCollection.php",“line”:121,“function”:“getMountsFromProvider”,“class”:“OC\Files\Config\MountProviderCollection”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/SetupManager.php”,“line”:204,“function”:“addMountForUser”,“class”:“OC\Files\Config\MountProviderCollection”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/SetupManager.php”,“line”:311,“function”:“OC\Files\{closure}”,“class”:“OC\Files\SetupManager”,“type”:“->”,“args”:[“*** sensitive parameters replaced “]},{“file”:”/var/www/nextcloud/lib/private/Files/SetupManager.php",“line”:203,“function”:“setupForUserWith”,“class”:“OC\Files\SetupManager”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/SetupManager.php”,“line”:495,“function”:“setupForUser”,“class”:“OC\Files\SetupManager”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/Mount/Manager.php”,“line”:209,“function”:“setupForProvider”,“class”:“OC\Files\SetupManager”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/Node/Root.php”,“line”:454,“function”:“getMountsByMountProvider”,“class”:“OC\Files\Mount\Manager”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/Node/Root.php”,“line”:406,“function”:“getByIdInPath”,“class”:“OC\Files\Node\Root”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Files/Node/LazyFolder.php”,“line”:479,“function”:“getFirstNodeByIdInPath”,“class”:“OC\Files\Node\Root”,“type”:“->”},{“file”:“/var/www/nextcloud/apps/text/lib/Service/DocumentService.php”,“line”:517,“function”:“getFirstNodeById”,“class”:“OC\Files\Node\LazyFolder”,“type”:“->”},{“file”:“/var/www/nextcloud/apps/text/lib/Service/DocumentService.php”,“line”:464,“function”:“getFileById”,“class”:“OCA\Text\Service\DocumentService”,“type”:“->”},{“file”:“/var/www/nextcloud/apps/text/lib/Service/ApiService.php”,“line”:231,“function”:“getFileForSession”,“class”:“OCA\Text\Service\DocumentService”,“type”:“->”},{“file”:“/var/www/nextcloud/apps/text/lib/Controller/SessionController.php”,“line”:74,“function”:“sync”,“class”:“OCA\Text\Service\ApiService”,“type”:“->”,“args”:[" sensitive parameters replaced “]},{“file”:”/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php",“line”:208,“function”:“sync”,“class”:“OCA\Text\Controller\SessionController”,“type”:“->”,“args”:[" sensitive parameters replaced ***”]},{“file”:“/var/www/nextcloud/lib/private/AppFramework/Http/Dispatcher.php”,“line”:114,“function”:“executeController”,“class”:“OC\AppFramework\Http\Dispatcher”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/AppFramework/App.php”,“line”:161,“function”:“dispatch”,“class”:“OC\AppFramework\Http\Dispatcher”,“type”:“->”},{“file”:“/var/www/nextcloud/lib/private/Route/Router.php”,“line”:303,“function”:“main”,“class”:“OC\AppFramework\App”,“type”:“::”},{“file”:“/var/www/nextcloud/lib/base.php”,“line”:1032,“function”:“match”,“class”:“OC\Route\Router”,“type”:“->”},{“file”:“/var/www/nextcloud/index.php”,“line”:24,“function”:“handleRequest”,“class”:“OC”,“type”:“::”}],“File”:“/var/www/nextcloud/lib/private/DB/QueryBuilder/ExpressionBuilder/ExpressionBuilder.php”,“Line”:87,“message”:“Calling OCP\DB\QueryBuilder\IQueryBuilder::orX without parameters is deprecated and will throw soon.”,“exception”:{},“CustomMessage”:“Calling OCP\DB\QueryBuilder\IQueryBuilder::orX without parameters is deprecated and will throw soon.”}}
{“reqId”:“eKFzvKJF3RirereUfdWh”,“level”:0,“time”:“2025-12-04T09:15:06+00:00”,“remoteAddr”:“192.168.2.105”,“user”:“administrator”,“app”:“workflowengine”,“method”:“POST”,“url”:“/index.php/apps/text/session/45/sync”,“message”:“Flow activation: rules were requested for operation Zugriff auf Datei verhindern”,“userAgent”:“Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0”,“version”:“30.0.17.2”,“data”:{“app”:“workflowengine”,“level”:“0”}}
{“reqId”:“eKFzvKJF3RirereUfdWh”,“level”:0,“time”:“2025-12-04T09:15:06+00:00”,“remoteAddr”:“192.168.2.105”,“user”:“administrator”,“app”:“workflowengine”,“method”:“POST”,“url”:“/index.php/apps/text/session/45/sync”,“message”:“No flow configurations is going to run Zugriff auf Datei verhindern”,“userAgent”:“Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:145.0) Gecko/20100101 Firefox/145.0”,“version”:“30.0.17.2”,“data”:{“app”:“workflowengine”,“level”:“0”}}

Web Browser

If the problem is related to the Web interface, open your browser inspector Console and Network tabs while refreshing (reloading) and reproducing the problem. Provide any relevant output/errors here that appear.


Interner Serverfehler

Der Server konnte die Anfrage nicht fertig stellen.

Sollte dies erneut auftreten, sende bitte die nachfolgenden technischen Einzelheiten an deine Serveradministration.

Weitere Details können im Serverprotokoll gefunden werden.
Technische Details

    Entfernte Adresse: 192.168.2.xxx
    Anfragekennung: a0KUVHKn9eoYITusSCYk

Configuration

±------------------------------±--------------------------------+

Any help is appreciated.
Is there a way to completly reset the LDAP and restart configuration? I fear having old data, security keys that are invalid now
Or to install a new version, integrate in AD, migrate the old data without data loss to the new instance?