Nextcloud 17 and user_ldap

olimaq · October 4, 2019, 10:32pm

HI,
I have a question regarding some issues with my nextcloud installation after upgrade from 15.0.4 to 16.0.8 to 17.0.0
I started with upgrading my existing and well running instance 15.0.4 to a newer version. After the upgrade all my users stored in an existing ldap directory are now lost, or nextcloud is not able to show it. In the Logging I only see tons of messages

TypeError: Argument 1 passed to OCA\User_LDAP\Group_LDAP::walkNestedGroups() must be of the type string, null given, called in /var/www/nextcloud_17.0.0/apps/user_ldap/lib/Group_LDAP.php on line 796

but if a look into the users config, no user is there. When I go to the ldap config, everything looks fine. nextcloud is able to connect to the ldap server and is able to find all users.

In a older thread I found a way to replace the whole user_ldap dir by an version fro 15.0.4 and indeed it works. After changing the version id in the info.xml file, I’m able to see all my users and they can login and work. But the error tables is flodded with messages like

InvalidArgumentException: Notifier LDAP Benutzer- und Gruppen-Backend (id: user_ldap) is not considered because it is using the old way to register.

I don’t know where my problem is and why it is not working. Maybe there is a better workarround to use my ldap users again.

tflidd · October 27, 2019, 1:02pm

For this error, I found something in the bugtracker:

github.com/nextcloud/server

Sabre\DAV\Exception\ServiceUnavailable: TypeError: Argument 1 passed to OCA\User_LDAP\Group_LDAP::walkNestedGroups() must be of the type string, null given

opened 06:37AM - 11 Apr 19 UTC

closed 11:40AM - 03 Dec 19 UTC

k0ste

bug feature: ldap 0. Needs triage

### Steps to reproduce 1. Nextcloud 15.0.4 2. Upgrade to 15.0.7 3. Users don'…t get files explorer. ### Expected behaviour Users get files explorer. ### Actual behaviour After login user can't do anything. ``` Sabre\DAV\Exception\ServiceUnavailable: TypeError: Argument 1 passed to OCA\User_LDAP\Group_LDAP::walkNestedGroups() must be of the type string, null given, called in /usr/share/webapps/nextcloud/apps/user_ldap/lib/Group_LDAP.php on line 796 <<closure>> {closure}("*** sensiti ... *") /usr/share/webapps/nextcloud/3rdparty/sabre/event/lib/EventEmitterTrait.php - line 105: call_user_func_array(Closure {}, [ "*** sensi ... "]) /usr/share/webapps/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php - line 466: Sabre\Event\EventEmitter->emit("beforeMethod", [ "*** sensi ... "]) /usr/share/webapps/nextcloud/3rdparty/sabre/dav/lib/DAV/Server.php - line 254: Sabre\DAV\Server->invokeMethod("*** sensiti ... *", "*** sensiti ... *") /usr/share/webapps/nextcloud/remote.php - line 72: Sabre\DAV\Server->exec() /usr/share/webapps/nextcloud/remote.php - line 168: handleException(TypeError {}) ``` ### Server configuration **Operating system**: Linux 5.0.7 **Web server:** nginx 1.15.11 **Database:** PostgreSQL 10.3 **PHP version:** 7.3.4 **Nextcloud version:** 15.0.7 **Updated from an older Nextcloud/ownCloud or fresh install:** Upgrade **Where did you install Nextcloud from:** 15.0.4 **Signing status:** <details> <summary>Signing status</summary> ``` No errors have been found. ``` </details> **List of activated apps:** <details> <summary>App list</summary> ``` Enabled: - accessibility: 1.1.0 - activity: 2.8.2 - admin_audit: 1.5.0 - bookmarks: 0.17.0 - calendar: 1.6.4 - cloud_federation_api: 0.1.0 - comments: 1.5.0 - dav: 1.8.1 - federatedfilesharing: 1.5.0 - files: 1.10.0 - files_external: 1.6.0 - files_pdfviewer: 1.4.0 - files_sharing: 1.7.0 - files_texteditor: 2.7.0 - files_trashbin: 1.5.0 - files_versions: 1.8.0 - files_videoplayer: 1.4.0 - firstrunwizard: 2.4.0 - gallery: 18.2.0 - logreader: 2.0.0 - lookup_server_connector: 1.3.0 - nextcloud_announcements: 1.4.0 - notes: 2.5.1 - notifications: 2.3.0 - oauth2: 1.3.0 - password_policy: 1.5.0 - provisioning_api: 1.5.0 - serverinfo: 1.5.0 - sharebymail: 1.5.0 - spreed: 5.0.2 - support: 1.0.0 - survey_client: 1.3.0 - systemtags: 1.5.0 - tasks: 0.9.8 - theming: 1.6.0 - twofactor_backupcodes: 1.4.1 - updatenotification: 1.5.0 - user_ldap: 1.5.0 - workflowengine: 1.5.0 Disabled: - contacts - encryption - federation - mail - user_ldap_rem ``` </details> **Nextcloud configuration:** <details> <summary>Config report</summary> ``` { "system": { "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "***REMOVED SENSITIVE VALUE***" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "***REMOVED SENSITIVE VALUE***", "dbtype": "pgsql", "version": "15.0.7.0", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbtableprefix": "oc_", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "logtimezone": "Asia\/Novosibirsk", "memcache.local": "\\OC\\Memcache\\APCu", "installed": true, "mail_smtpmode": "smtp", "mail_smtpsecure": "tls", "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpport": "25", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_domain": "***REMOVED SENSITIVE VALUE***", "ldapIgnoreNamingRules": false, "preview_libreoffice_path": "\/usr\/bin\/libreoffice", "loglevel": 0, "theme": "", "default_language": "ru", "maintenance": false, "ldapProviderFactory": "\\OCA\\User_LDAP\\LDAPProviderFactory", "data-fingerprint": "d35197cf75e4fb1d948048fb3f1d578e", "instanceid": "***REMOVED SENSITIVE VALUE***", "mail_sendmailmode": "smtp", "mail_smtpauthtype": "PLAIN", "mail_smtpauth": 1 } } ``` </details> **Are you using external storage, if yes which one:** local + s3 **Are you using encryption:** no **Are you using an external user-backend, if yes which one:** OpenLDAP #### LDAP configuration (delete this part if not used) <details> <summary>LDAP config</summary> ``` +-------------------------------+---------------------------------------------+ | Configuration | | +-------------------------------+---------------------------------------------+ | hasMemberOfFilterSupport | | | homeFolderNamingRule | | | lastJpegPhotoLookup | 0 | | ldapAgentName | cn=***,ou=people,dc=opentech,dc=local | | ldapAgentPassword | *** | | ldapAttributesForGroupSearch | | | ldapAttributesForUserSearch | | | ldapBackupHost | | | ldapBackupPort | | | ldapBase | dc=opentech,dc=local | | ldapBaseGroups | dc=opentech,dc=local | | ldapBaseUsers | dc=opentech,dc=local | | ldapCacheTTL | 600 | | ldapConfigurationActive | 1 | | ldapDefaultPPolicyDN | | | ldapDynamicGroupMemberURL | | | ldapEmailAttribute | mail | | ldapExperiencedAdmin | 1 | | ldapExpertUUIDGroupAttr | | | ldapExpertUUIDUserAttr | | | ldapExpertUsernameAttr | | | ldapGidNumber | gidNumber | | ldapGroupDisplayName | cn | | ldapGroupFilter | (&(objectClass=posixGroup)(description=*)) | | ldapGroupFilterGroups | | | ldapGroupFilterMode | 1 | | ldapGroupFilterObjectclass | | | ldapGroupMemberAssocAttr | memberUid | | ldapHost | ldap.opentech.local | | ldapIgnoreNamingRules | | | ldapLoginFilter | (&(|(objectclass=inetOrgPerson))(uid=%uid)) | | ldapLoginFilterAttributes | | | ldapLoginFilterEmail | 0 | | ldapLoginFilterMode | 0 | | ldapLoginFilterUsername | 1 | | ldapNestedGroups | 0 | | ldapOverrideMainServer | | | ldapPagingSize | 500 | | ldapPort | 389 | | ldapQuotaAttribute | | | ldapQuotaDefault | | | ldapTLS | 0 | | ldapUserAvatarRule | default | | ldapUserDisplayName | displayname | | ldapUserDisplayName2 | | | ldapUserFilter | (|(objectclass=inetOrgPerson)) | | ldapUserFilterGroups | | | ldapUserFilterMode | 0 | | ldapUserFilterObjectclass | inetOrgPerson | | ldapUuidGroupAttribute | auto | | ldapUuidUserAttribute | auto | | turnOffCertCheck | 0 | | turnOnPasswordChange | 0 | | useMemberOfToDetectMembership | 1 | +-------------------------------+---------------------------------------------+ ``` </details> ### Client configuration **Browser:** Firefox 66.0.2 **Operating system:** Linux 5.0.7 ### Logs #### Web server error log <details> <summary>Web server error log</summary> ``` Insert your webserver log here ``` </details> #### Nextcloud log (data/nextcloud.log) <details> <summary>Nextcloud log</summary> ``` {"reqId":"qteqG1KBolg5R2h2uLYE","level":0,"time":"2019-04-11T13:08:38+07:00","remoteAddr":"192.168.2.251","user":"51f545b4-8838-4b0c-8f40-13bae8d0ce2f","app":"user_ldap","method":"PROPFIND","url":"\/remote.php\/d av\/files\/51f545b4-8838-4b0c-8f40-13bae8d0ce2f\/","message":"Ready for a paged search","userAgent":"Mozilla\/5.0 (Linux) mirall\/2.3.2 (Nextcloud)","version":"15.0.7.0"} {"reqId":"qteqG1KBolg5R2h2uLYE","level":4,"time":"2019-04-11T13:08:38+07:00","remoteAddr":"192.168.2.251","user":"51f545b4-8838-4b0c-8f40-13bae8d0ce2f","app":"webdav","method":"PROPFIND","url":"\/remote.php\/dav\ /files\/51f545b4-8838-4b0c-8f40-13bae8d0ce2f\/","message":{"Exception":"Sabre\\DAV\\Exception\\ServiceUnavailable","Message":"TypeError: Argument 1 passed to OCA\\User_LDAP\\Group_LDAP::walkNestedGroups() must be of the type string, null given, called in \/usr\/share\/webapps\/nextcloud\/apps\/user_ldap\/lib\/Group_LDAP.php on line 796","Code":0,"Trace":[{"function":"{closure}","args":["*** sensitive parameters replaced ***"]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/event\/lib\/EventEmitterTrait.php","line":105,"function":"call_user_func_array","args":[{"__class__":"Closure"},["*** sensitive parameter replace d ***","*** sensitive parameter replaced ***"]]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":466,"function":"emit","class":"Sabre\\Event\\EventEmitter","type":"-> ","args":["beforeMethod",["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]]},{"file":"\/usr\/share\/webapps\/nextcloud\/3rdparty\/sabre\/dav\/lib\/DAV\/Server.php","line":254,"functi on":"invokeMethod","class":"Sabre\\DAV\\Server","type":"->","args":["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]},{"file":"\/usr\/share\/webapps\/nextcloud\/remote.php","line":72 ,"function":"exec","class":"Sabre\\DAV\\Server","type":"->","args":[]},{"file":"\/usr\/share\/webapps\/nextcloud\/remote.php","line":168,"function":"handleException","args":[{"__class__":"TypeError"}]}],"File":"\ /usr\/share\/webapps\/nextcloud\/remote.php","Line":70,"CustomMessage":"--"},"userAgent":"Mozilla\/5.0 (Linux) mirall\/2.3.2 (Nextcloud)","version":"15.0.7.0"} ``` </details>

If this does not help and an update like this breaks your setup, consider opening a bug report at github.