Repeated update of passwords in oc_authtoken table

Support intro

Sorry to hear you’re facing problems :slightly_frowning_face:

help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.

In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:

example

Or for longer, use three backticks above and below the code snippet:

longer
example
here

Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can :heart:

Nextcloud version (eg, 20.0.5): 24.0.6
Operating system and version (eg, Ubuntu 20.04): Debian 11
Apache or nginx version (eg, Apache 2.4.25): Apache/2.4.53 (Debian)
PHP version (eg, 7.4): 7.4.28

The issue you are facing:

Since August 2022 there has been excessive database activity. It appears to be constant updates of the form UPDATE oc_authtoken SET password = ‘******’ WHERE id = nnnn

These repeat many times, cycling through the set of ID numbers, of which there are 60. I am not doing anything, although Nextcloud is storing things like diary and contact data. The updates continue day and night.

Is this the first time you’ve seen this error? (Y/N): It appears to have been happening since August 2022 and resulted in the database binary log files almost filling the available storage.

Steps to replicate it:

The output of your Nextcloud log in Admin > Logging:

Nothing other than a number of entries like Warning	core	Trusted domain error. "192.241.67.109" tried to access.....

The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):

<?php
$CONFIG = array (
  'instanceid' => 'oc87p9izs7i8',
  'passwordsalt' => '+GinwaVBqmlcLor0pzDU2HS3Lk1JDv',
  'secret' => 'Exg89aUsw7Ov9lqOOhmNWGWK+zoGLS9gkyHL0ElMzSuIY2BI',
  'trusted_domains' => 
  array (
    0 => 'example.com',
  ),
  'datadirectory' => '/var/lib/nextcloud',
  'dbtype' => 'mysql',
  'version' => '24.0.6.1',
  'overwrite.cli.url' => 'https://example.com',
  'dbname' => 'nextcloud',
  'dbhost' => 'localhost',
  'dbport' => '',
  'dbtableprefix' => 'oc_',
  'mysql.utf8mb4' => true,
  'dbuser' => 'nextcloud',
  'dbpassword' => '????????',
  'installed' => true,
  'memcache.local' => '\\OC\\Memcache\\APCu',
  'filelocking.enabled' => true,
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' => 
  array (
    'host' => 'localhost',
    'port' => 6379,
  ),
  'loglevel' => 2,
  'logfile' => '/var/log/nextcloud/nextcloud.log',
  'updater.release.channel' => 'stable',
  'auth.bruteforce.protection.enabled' => false,
  'maintenance' => false,
  'theme' => '',
  'default_phone_region' => 'GB',
  'mail_smtpmode' => 'sendmail',
  'mail_sendmailmode' => 'smtp',
  'mail_from_address' => 'nextcloud',
  'mail_domain' => 'example.com',
  'mail_smtphost' => 'localhost',
  'mail_smtpport' => '25',
  'twofactor_enforced' => 'false',
  'twofactor_enforced_groups' => 
array (
    0 => 'admin',
  ),
  'twofactor_enforced_excluded_groups' => 
  array (
  ),
);

The output of your Apache/nginx/system log in /var/log/____:

PASTE HERE

PASTE HERE


Output errors in nextcloud.log in /var/www/ or as admin user in top right menu, filtering for errors. Use a pastebin service if necessary.

PASTE HERE