Login followed by immediate logout

A successfull logon is followed by an automatic logout. The following is in the log:

83.97.87.43 - - [03/Sep/2025:23:08:01 +0200] "POST /login HTTP/1.1" 303 2043 "https://office.kingma.ch/login?redirect_url=%2Fapps%2Factivity%2Fall" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:02 +0200] "GET /login?redirect_url=/apps/activity/all&direct=1&user=johannes HTTP/1.1" 200 10081 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:07 +0200] "GET /login?redirect_url=/apps/activity/all&direct=1&user=johannes HTTP/1.1" 200 10145 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:10 +0200] "POST /login HTTP/1.1" 303 1324 "https://office.kingma.ch/login?redirect_url=/apps/activity/all&direct=1&user=johannes" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:13 +0200] "GET /apps/activity/all HTTP/1.1" 200 13509 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
103.69.224.13 - johannes [03/Sep/2025:23:08:14 +0200] "PROPFIND /remote.php/dav/files/johannes/ HTTP/1.1" 207 995 "-" "Mozilla/5.0 (Linux) mirall/3.17.1daily (Nextcloud, org.kde.Platform-6.15.10-200.fc42.x86_64 ClientArchitecture: x86_64 OsArchitecture: x86_64)"
83.97.87.43 - - [03/Sep/2025:23:08:14 +0200] "GET /ocs/v2.php/apps/activity/api/v2/activity/all?format=json&previews=true&since=0 HTTP/1.1" 401 1221 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:14 +0200] "GET /ocs/v2.php/apps/user_status/api/v1/user_status HTTP/1.1" 401 1221 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "PUT /ocs/v2.php/apps/user_status/api/v1/heartbeat?format=json HTTP/1.1" 401 1221 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:14 +0200] "GET /apps/theming/icon/activity?v=8d971e53 HTTP/1.1" 200 16018 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" 401 1221 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "GET /ocs/v2.php/apps/activity/api/v2/activity/all?format=json&previews=true&since=0 HTTP/1.1" 401 1023 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "GET /apps/files HTTP/1.1" 401 1157 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "GET /login?redirect_url=%2Fapps%2Factivity%2Fall HTTP/1.1" 200 10032 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:15 +0200] "GET /ocs/v2.php/apps/activity/api/v2/activity/all?format=json&previews=true&since=0 HTTP/1.1" 401 1221 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"
83.97.87.43 - - [03/Sep/2025:23:08:14 +0200] "GET /apps/theming/favicon/activity?v=8d971e53 HTTP/1.1" 200 91532 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0"

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can. :heart:

  • Nextcloud Server version:
    • Nextcloud 31.0.8
  • Operating system and version:
    • #1 SMP PREEMPT Debian 1:6.12.34-1+rpt1~bookworm (2025-06-26)
  • Web server and version:
    • Server version: Apache/2.4.65 (Debian)
  • Reverse proxy and version:
    • nginx version: openresty/1.27.1.2
  • PHP version:
    • PHP 8.3.24 (cli) (built: Aug 13 2025 04:19:56) (NTS)
  • Is this the first time you’ve seen this error? (Yes / No):
    • yes
  • When did this problem seem to first start?
    • prob direct after installation
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • OMV Container
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • nope

Configuration

Nextcloud

{
    "system": {
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "version": "31.0.8.1",
        "loglevel": 2,
        "log_rotate_size": 1048576,
        "maintenance": false,
        "maintenance_window_start": 3,
        "default_locale": "DE_CH",
        "default_phone_region": "CH",
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\Redis",
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "redis": {
            "host": "***REMOVED SENSITIVE VALUE***",
            "password": "***REMOVED SENSITIVE VALUE***",
            "port": 6379
        },
        "upgrade.disable-web": true,
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "mysql",
        "mysql.utf8mb4": true,
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "dbtableprefix": "oc_",
        "htaccess.RewriteBase": "\/",
        "trusted_domains": [
            "srv-nas-pi.kingma:8080",
            "office.kingma.ch",
            "office.king.ma"
        ],
        "overwrite.cli.url": "https:\/\/office.kingma.ch",
        "overwriteprotocol": "https",
        "apps_paths": [
            {
                "path": "\/var\/www\/html\/apps",
                "url": "\/apps",
                "writable": false
            },
            {
                "path": "\/var\/www\/html\/custom_apps",
                "url": "\/custom_apps",
                "writable": true
            }
        ],
        "mail_smtpmode": "smtp",
        "mail_sendmailmode": "smtp",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "mail_smpttimeout": 30,
        "installed": true,
        "mail_smtpauth": true,
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpsecure": "ssl",
        "app_install_overwrite": []
    }
}

Apps

Enabled:

  • activity: 4.0.0
  • admin_audit: 1.21.0
  • app_api: 5.0.2
  • bruteforcesettings: 4.0.0
  • calendar: 5.5.1
  • circles: 31.0.0
  • cloud_federation_api: 1.14.0
  • comments: 1.21.0
  • contacts: 7.2.6
  • contactsinteraction: 1.12.0
  • cookbook: 0.11.3
  • dashboard: 7.11.0
  • dav: 1.33.0
  • documentserver_community: 0.2.0
  • federatedfilesharing: 1.21.0
  • federation: 1.21.0
  • files: 2.3.1
  • files_downloadlimit: 4.0.0
  • files_pdfviewer: 4.0.0
  • files_reminders: 1.4.0
  • files_sharing: 1.23.1
  • files_trashbin: 1.21.0
  • files_versions: 1.24.0
  • firstrunwizard: 4.0.0
  • fulltextsearch: 31.0.0
  • groupfolders: 19.1.3
  • logcleaner: 1.1.8
  • logreader: 4.0.0
  • lookup_server_connector: 1.19.0
  • nextcloud_announcements: 3.0.0
  • notes: 4.12.3
  • notifications: 4.0.0
  • oauth2: 1.19.1
  • password_policy: 3.0.0
  • photos: 4.0.0
  • privacy: 3.0.0
  • profile: 1.0.0
  • provisioning_api: 1.21.0
  • recommendations: 4.0.0
  • related_resources: 2.0.0
  • richdocuments: 8.7.4
  • serverinfo: 3.0.0
  • settings: 1.14.0
  • sharebymail: 1.21.0
  • support: 3.0.0
  • survey_client: 3.0.0
  • suspicious_login: 9.0.1
  • systemtags: 1.21.1
  • text: 5.0.0
  • theming: 2.6.1
  • twofactor_backupcodes: 1.20.0
  • twofactor_nextcloud_notification: 5.0.0
  • twofactor_totp: 13.0.0-dev.0
  • updatenotification: 1.21.0
  • user_status: 1.11.0
  • viewer: 4.0.0
  • weather_status: 1.11.0
  • webhook_listeners: 1.2.0
  • workflowengine: 2.13.0
    Disabled:
  • encryption: 2.19.0 (installed 2.19.0)
  • files_external: 1.23.0 (installed 1.23.0)
  • user_ldap: 1.22.0 (installed 1.22.0)

Summary of the issue you are facing:

[…]

Steps to replicate it (hint: details matter!):

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

PASTE HERE