[NC 17] Loop login WebUI : connexion impossible

🌐 Non-english support đŸ‡«đŸ‡· Français (french)
1

Bonsoir,

IL y a quelques jours, j’ai fait la màj v17.0.1.
Tout s’est bien passĂ©. J’ai mĂȘme activĂ© le module de chiffrement.

Bref, ce soir, impossible de me connecter ; l’interface de connexion boucle et me redemande mes identifiants.

Pourtant les logs me semblent bons :

=> nginx/access.log:

88.136.16.221 - - [13/Dec/2019:19:09:53 +0100] "GET /login?redirect_url=/apps/files/ HTTP/2.0" 200 4320 "https://cld.stephane-huc.net/login" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
88.136.16.221 - - [13/Dec/2019:19:09:56 +0100] "GET /cron.php HTTP/2.0" 200 40 "https://cld.stephane-huc.net/login?redirect_url=/apps/files/" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
88.136.16.221 - - [13/Dec/2019:19:10:11 +0100] "POST /login HTTP/2.0" 303 0 "https://cld.stephane-huc.net/login?redirect_url=/apps/files/" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
88.136.16.221 - - [13/Dec/2019:19:10:11 +0100] "GET /apps/files/ HTTP/2.0" 303 0 "https://cld.stephane-huc.net/login?redirect_url=/apps/files/" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
88.136.16.221 - - [13/Dec/2019:19:10:12 +0100] "GET /login?redirect_url=/apps/files/ HTTP/2.0" 200 4323 "https://cld.stephane-huc.net/login?redirect_url=/apps/files/" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"
88.136.16.221 - - [13/Dec/2019:19:10:13 +0100] "GET /cron.php HTTP/2.0" 200 40 "https://cld.stephane-huc.net/login?redirect_url=/apps/files/" "Mozilla/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36"

=> nexctloud.log:

 {"reqId":"GIRinvnPkRNFdrq5nodq","level":3,"time":"2019-12-13T18:09:30+00:00","remoteAddr":"88.136.16.221","user":"--","app":"PHP","method":"GET","url":"\/apps\/theming\/js\/theming?v=7","message":"Zend OPcache can't be temporary enabled (it may be only disabled till the end of request) at Unknown#0","userAgent":"Mozilla\/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36","version":"17.0.1.1"}
{"reqId":"XzHmFOYY6NLpLwkBCxy1","level":3,"time":"2019-12-13T18:10:11+00:00","remoteAddr":"88.136.16.221","user":"--","app":"PHP","method":"POST","url":"\/login","message":"Zend OPcache can't be temporary enabled (it may be only disabled till the end of request) at Unknown#0","userAgent":"Mozilla\/5.0 (X11; OpenBSD amd64; Linux x86_64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/77.0.3865.90 Safari\/537.36","version":"17.0.1.1"}

Bizarre, bizarre. J’ai essayĂ© Ă  tout hasard de dĂ©sactiver le chiffrement, au cas oĂč cela viendrait de lĂ , mais problĂšme identique.

Quelqu’un a une suggestion/idĂ©e ?!

2

Bon, je continue dans l’investigation de mon problĂšme sans trop savoir oĂč chercher :

$ php-7.3 occ log:tail 
 --------- ------------------- -------------------------------------------------------------------------------------------------------- --------------------------- 
  Level     App                 Message                                                                                                  Time                       
 --------- ------------------- -------------------------------------------------------------------------------------------------------- --------------------------- 
  Error     PHP                 Zend OPcache can't be temporary enabled (it may be only disabled till the end of request) at Unknown#0   2019-12-14T20:39:53+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:43:20+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:43:27+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:44:53+00:00  
                                                                                                                                                                    
  Error     PHP                 Zend OPcache can't be temporary enabled (it may be only disabled till the end of request) at Unknown#0   2019-12-14T20:45:02+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:45:07+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:45:50+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:46:15+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:48:07+00:00  
                                                                                                                                                                    
  Warning   no app in context   Temporary directory /var/www/tmp is not present or writable                                              2019-12-14T20:48:23+00:00  
                                                                                                                                                                    
 --------- ------------------- -------------------------------------------------------------------------------------------------------- ---------------------------

Sauf que :

$ ls -al /var/www/ | grep tmp
drwxr-xr-x  14 www   www     2048 Nov 28 17:11 tmp

Donc, j’avoue, là, je sùche !

3

Si c’est simplement parce que j’ai activĂ© l’option de chiffrement, et que mĂȘme en la dĂ©sactivant, il n’y a plus de service
 boooo ! :frowning:

4

You have problems with PHP settings --> OPcache. Check the doku: https://docs.nextcloud.com/server/17/admin_manual/installation/server_tuning.html?highlight=opcache#enable-php-opcache

5

Sorry, but it’s configured!

$ grep opcache /etc/php-fpm.d/cld.stephane-huc.net.conf                                                                                                                                            
php_admin_value[opcache.enable] = 1
php_admin_value[opcache.enable_cli] = 1
php_admin_value[opcache.interned_strings_buffer] = 8
php_admin_value[opcache.max_accelerated_files] = 10000
php_admin_value[opcache.memory_consumption] = 128
php_admin_value[opcache.revalidate_freq] = 1
php_admin_value[opcache.save_comments] = 1

and, it worked fine until that change!

6

J’ai mĂȘme dĂ©sactivĂ© la directive ‘open_basedir’ dans la config PHP, histoire d’ĂȘtre sĂ»r !

Ce qui est bizarre est qu’il semble acceptĂ© l’identification, redirige vers l’url login?redirect_url=/apps/files/ ET lĂ , redemande l’identification !!!

J’essaye un compte avec 2FA activĂ©, un autre sans aucune 2FA, mĂȘme rĂ©sultat !
Pour le compte avec 2FA, je n’accĂšde pas Ă  la page d’authentification 2FA ; c’est pour cela que j’ai dĂ©sactivĂ© avec occ la 2FA, histoire de savoir.
Le login tourne en boucle !!!

D’autant plus bizarre qu’avec le client nextcloud sous Android, sur mon smartphone, je me connecte !!!
Et la synchronisation des calendriers et contacts, fonctionnent bien autant sous android avec mon smartphone, qu’avec Thunderbird sur mon pc

7

Salut,

J’ai eu un problĂšme d’identification moi aussi, jusqu’à ce que je comprenne : mon Firefox n’avait pas mis Ă  jour mon MDP en rapport avec le login, enfin je veux dire que j’avais plusieurs identifications pour la mĂȘme URL. Je suis allĂ© donc dans « Identifiants et mots de passe » dans le menu hamburger (Firefox Lockwise) et j’ai supprimĂ© les entrĂ©es qui n’étaient plus bonnes pour ne garder que mon identification « correcte ».

Du coup je peux me connecter, et apporter Ă©galement des modifs lorsqu’on me demande, selon l’action, de rentrer Ă  nouveau le MDP.

Donc ça tourne ! J’espùre que tu n’avais que ce petit souci, toi aussi :wink:

1 Like
8

Intéressant à savoir, - et je te remercie - sauf que :

  • je n’enregistre JAMAIS mes mots de passe, d’autant ceux qui sont sensibles, dans mes navigateurs web
  • et, le dysfonctionnement existe que ce soit avec Firefox, qu’avec Chrome !

Je vais quand mĂȘme vĂ©rifier dans la section ad hoc, tel que tu me le fais remarquer. :wink:

Capture%20d%E2%80%99%C3%A9cran_2019-12-18_19-54-38
Capture%20d%E2%80%99%C3%A9cran_2019-12-18_19-54-381078×543 37.4 KB

9

Bon, j’ai fait la màj vers 17.0.2, et j’ai toujours ce fichu problùme !!!

Grrr
.

maintenance:repair n’a rien Ă  rĂ©parer :

$ php-7.3 occ maintenance:repair
 - Repair MySQL collation
     - All tables already have the correct collation -> nothing to do
 - Repair mime types
 - Clean tags and favorites
     - 0 tags of deleted users have been removed.
     - 0 tags for delete files have been removed.
     - 0 tag entries for deleted tags have been removed.
     - 0 tags with no entries have been removed.
 - Repair invalid shares
 - Move .step file of updater to backup location
 - Fix potential broken mount points
     - No mounts updated
 - Add log rotate job
 - Clear frontend caches
     - Image cache cleared
     - SCSS cache cleared
     - JS cache cleared
 - Clear every generated avatar on major updates
 - Add preview background cleanup job
 - Queue a one-time job to cleanup old backups of the updater
 - Cleanup invalid photocache files for carddav
 - Add background job to cleanup login flow v2 tokens
 - Remove potentially over exposing share links
     - No need to remove link shares.
 - Clear access cache of projects
 - Cleanup cypress files from viewer app
 - Switches from deprecated "production" to "stable" update channel
 - Sets the enterprise logo
     - Repair step already executed
 - Add read permissions for existing announcements
    0 [>---------------------------]
 - Fix the share type of guest shares when migrating from ownCloud
 - Generate unique id on created circle
     - Generate unique id on circles
    0 [>---------------------------]
 - Using shorten unique id instead of circle id
 - Cleaning shares database of dead shares
 - Fix component of birthday calendars
     - 5 birthday calendars updated.
 - Regenerating birthday calendars to use new icons and fix old birthday events without year
     - Repair step already executed
 - Fix broken values of calendar objects
    0 [>---------------------------]
 - Registering building of calendar search index as background job
     - Repair step already executed
 - Registering background jobs to update cache for webcal calendars
     - Added 0 background jobs to update webcal calendars
 - Registering building of calendar reminder index as background job
     - Repair step already executed
 - Clean up orphan event and contact data
     - 0 events without a calendar have been cleaned up
     - 0 properties without an events have been cleaned up
     - 0 changes without a calendar have been cleaned up
     - 0 cached events without a calendar subscription have been cleaned up
     - 0 changes without a calendar subscription have been cleaned up
     - 0 contacts without an addressbook have been cleaned up
     - 0 properties without a contact have been cleaned up
     - 0 changes without an addressbook have been cleaned up
 - Remove activity entries of private events
     - Removed 0 activity entries
 - Delete orphaned ACL rules
 - Write default encryption module configuration to the database
 - Fix the share type of guest shares when migrating from ownCloud
 - Copy the share password into the dedicated column
 - Purify and migrate collected mail addresses
    0 [>---------------------------]
 - Migrate Mail provisioning config from config.php to the database
     - No old config found
 - Create or update provisioned Mail accounts
     - No Mail provisioning config set
 - Update OAuth token expiration times
 - Create help command
 - Invalidate access cache for projects conversation provider
     - Invalidation not required
 - Add background job to check for backup codes

Une recherche sur le forum “loop login” ne donne aucune rĂ©ponse constructive ; c’est le dĂ©lire, ce “bogue” !?

10

Bon, j’ai enfin trouvĂ© d’oĂč venait le problĂšme.
Lors de la derniĂšre mĂ j de PHP 7, les droits sur les rĂ©pertoires ont Ă©tĂ© “rĂ©initialisĂ©s” !

Bref, si jamais cela vous arrive, vérifiez :

  • les droits en lecture, Ă©criture sur les rĂ©pertoires de ‘nextcloud’, sur celui de ‘cache’, et celui des sessions php !
  • les droits utilisateurs sur les mĂȘmes rĂ©pertoires, cela dĂ©pend de votre configuration, tel que ‘www:www’, ‘www-data:www-data’, ou ‘utiilisateur-web:www’


VoilĂ  !