Nextcloud version: 19.0.4.2
Operating system and version: Ubuntu LTS 18.04
Apache version: Apache/2.4.29 (Ubuntu)
PHP version: PHP 7.4
The issue you are facing:
My server experiences a total freeze (for every user in every browser) when somebody uses the ADFS (SAML) log in. It just loads with a blank screen and after maybe a minute returns to the login page. I’ve monitored logging for two weeks now and cannot get any further.
It also happens randomly, most times of the day ADFS log in works just fine and fast. It just gets stuck sometimes and that causes to freeze Apache (not sure?). The server backend stays responsive.
Is this the first time you’ve seen this error? N:
It has been happening for the past three weeks
Steps to replicate it:
- Use SAML login button.
- Wait to be federated into Nextcloud
- Blank screen with server freeze.
The output of your Nextcloud log in Admin > Logging:
Couldn’t mark the parts where it happened. It was at 07:38 (in Nextcloud log 06:38)
The apache access log may be interesting too.
Nextcloud log:
{"reqId":"N2kbjHkIk0GPloN7ZfCU","level":0,"time":"2020-11-18T06:35:01+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OC\\Log\\Rotate job with ID 20 in 0 seconds","userAgent":"--","version":"19.0.4.2"}
{"reqId":"N2kbjHkIk0GPloN7ZfCU","level":0,"time":"2020-11-18T06:35:01+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\DAV\\BackgroundJob\\EventReminderJob job with ID 22075","userAgent":"--","version":"19.0.4.2"}
{"reqId":"N2kbjHkIk0GPloN7ZfCU","level":0,"time":"2020-11-18T06:35:01+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\DAV\\BackgroundJob\\EventReminderJob job with ID 22075 in 0 seconds","userAgent":"--","version":"19.0.4.2"}
{"reqId":"TG60QVLmuaxkfPVUfTlz","level":0,"time":"2020-11-18T06:38:40+00:00","remoteAddr":"**REDACTED**","user":"--","app":"serverDI","method":"GET","url":"/index.php/apps/user_saml/saml/selectUserBackEnd?redirectUrl=","message":"The requested alias \"ControllerMethodReflector\" is depreacted. Please request \"OC$
{"reqId":"Knj9QlQRh6L9ByTP3svM","level":0,"time":"2020-11-18T06:38:42+00:00","remoteAddr":"**REDACTED**","user":"--","app":"serverDI","method":"GET","url":"/index.php/apps/user_saml/saml/login?originalUrl=&requesttoken=1T0i%2B2CUjgpa0m4doXkXIOjROhPw4AluGLE/Kk%2BK4vE%3D:nERltVbNv0FjoDlE9T9mS96nEWPFqTwPfYR0HxW5zZM%$
{"reqId":"XyWviEsG5UID2Od7WK3l","level":0,"time":"2020-11-18T06:38:42+00:00","remoteAddr":"**REDACTED**","user":"--","app":"serverDI","method":"POST","url":"/index.php/apps/user_saml/saml/acs","message":"The requested alias \"ControllerMethodReflector\" is depreacted. Please request \"OCP\\AppFramework\\Utility\\$
**{"reqId":"XyWviEsG5UID2Od7WK3l","level":0,"time":"2020-11-18T06:38:42+00:00","remoteAddr":"**REDACTED**","user":"--","app":"user_saml","method":"POST","url":"/index.php/apps/user_saml/saml/acs","message":"Attributes send by the IDP: {\"http:\\/\\/schemas.xmlsoap.org\\/ws\\/2005\\/05\\/identity\\/claims\\/givennam$**
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 2","userAgent":"--","version":"19.0.4.2"}
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Finished OCA\\Files_Trashbin\\BackgroundJob\\ExpireTrash job with ID 2 in 0 seconds","userAgent":"--","version":"19.0.4.2"}
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"cron","method":"","url":"--","message":"Run OCA\\Files\\BackgroundJob\\ScanFiles job with ID 9","userAgent":"--","version":"19.0.4.2"}
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"getUsers: Options: search limit 500 offset 3000 Filter: (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Ro$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"initializing paged search for filter (&(&(objectclass=organizationalPerson)(memberof=**REDACTED AD GROUP**,OU=Functions,OU=Groups,OU=Root,DC=**REDACTED DOMAIN**,DC=nl))(Di$
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"Ready for a paged search","userAgent":"--","version":"19.0.4.2"}
{"reqId":"gLEPGVtLQjgWl6eUjPVy","level":0,"time":"2020-11-18T06:40:03+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","message":"Ready for a paged search","userAgent":"--","version":"19.0.4.2"}
The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):
<?php
$CONFIG = array (
'remember_login_cookie_lifetime' => '60*60*24*15',
'session_lifetime' => '60*60*24',
'session_keepalive' => 'true',
'skeletondirectory' => '/var/www/nextcloud/standaardbestanden',
'instanceid' => 'REDACTED',
'passwordsalt' => 'REDACTED',
'secret' => 'REDACTED',
'trusted_domains' =>
array (
0 => 'REDACTED',
1 => 'REDACTED',
2 => 'REDACTED',
),
'datadirectory' => '/data',
'dbtype' => 'mysql',
'version' => '19.0.4.2',
'overwrite.cli.url' => 'http://REDACTED/REDACTED',
'dbname' => 'REDACTED',
'dbhost' => 'localhost:3306',
'dbport' => '',
'dbtableprefix' => 'oc_',
'mysql.utf8mb4' => true,
'dbuser' => 'REDACTED',
'dbpassword' => 'REDACTED',
'installed' => true,
'ldapIgnoreNamingRules' => false,
'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
'ldapUserCleanupInterval' => '30',
'mail_from_address' => 'REDACTED',
'mail_smtpmode' => 'smtp',
'mail_smtpauthtype' => 'LOGIN',
'mail_domain' => 'REDACTED',
'mail_smtphost' => 'REDACTED',
'mail_smtpport' => '25',
'theme' => '',
'loglevel' => '0',
'cron_log' => 'true',
'maintenance' => false,
'updater.release.channel' => 'stable',
'twofactor_enforced' => 'true',
'twofactor_enforced_groups' =>
array (
),
'twofactor_enforced_excluded_groups' =>
array (
0 => 'REDACTED',
),
'mail_sendmailmode' => 'smtp',
'app_install_overwrite' =>
array (
0 => 'group_everyone',
1 => 'limit_login_to_ip',
2 => 'dicomviewer',
3 => 'admin_notifications',
),
'filelocking.enabled' => true,
'memcache.locking' => '\OC\Memcache\Redis',
'memcache.local' => '\OC\Memcache\Redis',
'memcache.distributed' => '\OC\Memcache\Redis',
'redis' => [
'host' => '/run/redis/redis-server.sock',
'port' => 0,
'timeout' => 1.5,
],
);
Apache Errorlog: nothing
The output of /var/log/SYSLOG:
SYSLOG:
Nov 18 07:30:01 REDACTED SERVER CRON[7354]: (www-data) CMD (php -f /var/www/nextcloud/cron.php)
Nov 18 07:34:19 REDACTED SERVER clamd[1048]: Wed Nov 18 07:34:19 2020 -> SelfCheck: Database status OK.
**Nov 18 07:35:01 REDACTED SERVER CRON[7362]: (www-data) CMD (php -f /var/www/nextcloud/cron.php)**
**Nov 18 07:39:01 REDACTED SERVER CRON[7367]: (root) CMD ( [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)**
Nov 18 07:39:03 REDACTED SERVER systemd[1]: Starting Clean php session files...
Nov 18 07:39:03 REDACTED SERVER systemd[1]: Started Clean php session files.
Nov 18 07:39:23 REDACTED SERVER systemd[1]: Created slice User Slice of luc.
Nov 18 07:39:23 REDACTED SERVER systemd[1]: Started Session 256 of user luc.
Nov 18 07:39:23 REDACTED SERVER systemd[1]: Starting User Manager for UID 1000...
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Reached target Timers.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on GnuPG cryptographic agent and passphrase cache (access for web browsers).
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on GnuPG cryptographic agent and passphrase cache (restricted).
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on REST API socket for snapd user session agent.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Reached target Paths.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on GnuPG cryptographic agent and passphrase cache.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on GnuPG cryptographic agent (ssh-agent emulation).
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Listening on GnuPG network certificate management daemon.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Reached target Sockets.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Reached target Basic System.
Nov 18 07:39:23 REDACTED SERVER systemd[1]: Started User Manager for UID 1000.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Reached target Default.
Nov 18 07:39:23 REDACTED SERVER systemd[7473]: Startup finished in 98ms.
Nov 18 07:40:01 REDACTED SERVER CRON[7627]: (www-data) CMD (php -f /var/www/nextcloud/cron.php)
The output of /var/log/apache2/acces.log:
Apache Acceslog: may be interesting:
****REDACTED IP** - - [18/Nov/2020:07:38:39 +0100] "GET / HTTP/1.1" 302 4739 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:39 +0100] "GET /index.php/login HTTP/1.1" 302 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/user_saml/saml/selectUserBackEnd?redirectUrl= HTTP/1.1" 200 5470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/viewer.css?v=bf701dae-30 HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/bootstrap_accordion.css?v=bf701dae-30 HTTP/1.1" 200 1989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/sidebar.css?v=bf701dae-30 HTTP/1.1" 200 1470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/viewerMainDialog.css?v=bf701dae-30 HTTP/1.1" 200 2171 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/annotationDialogs.css?v=bf701dae-30 HTTP/1.1" 200 1023 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/captureImageDialog.css?v=bf701dae-30 HTTP/1.1" 200 1378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/viewerMain.css?v=bf701dae-30 HTTP/1.1" 200 3401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/files_pdfviewer/css/style.css?v=4fda350b-30 HTTP/1.1" 200 901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/css/external/font-awesome/font-awesome.min.css?v=bf701dae-30 HTTP/1.1" 200 7760 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/css/guest.css?v=b498ab96-30 HTTP/1.1" 200 6248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/user_saml/css/selectUserBackEnd.css?v=f2f87b58-30 HTTP/1.1" 200 975 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/search/js/search.js?v=b498ab96-30 HTTP/1.1" 200 2369 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/files_sharing/js/dist/main.js?v=b498ab96-30 HTTP/1.1" 200 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/css/core/4ddd-0aaa-server.css?v=c9493826adc733b83354dadec6f0d73e-b498ab96-30 HTTP/1.1" 200 20499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/files_pdfviewer/js/previewplugin.js?v=b498ab96-30 HTTP/1.1" 200 2940 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/files_videoplayer/js/main.js?v=b498ab96-30 HTTP/1.1" 200 3397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/search/js/searchprovider.js?v=b498ab96-30 HTTP/1.1" 200 4435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/js/files/fileinfo.js?v=b498ab96-30 HTTP/1.1" 200 1556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/js/files/client.js?v=b498ab96-30 HTTP/1.1" 200 6413 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/user_saml/js/selectUserBackEnd.js?v=b498ab96-30 HTTP/1.1" 200 822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/css/core/4ddd-0aaa-css-variables.css?v=c9493826adc733b83354dadec6f0d73e-b498ab96-30 HTTP/1.1" 200 1693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/css/core/4ddd-0aaa-results.css?v=c9493826adc733b83354dadec6f0d73e-b498ab96-30 HTTP/1.1" 200 1492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /core/js/dist/main.js?v=b498ab96-30 HTTP/1.1" 200 430188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/js/core/merged-template-prepend.js?v=b498ab96-30 HTTP/1.1" 200 3991 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/css/icons/icons-vars.css?v=1605525978 HTTP/1.1" 200 35841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/js/theming?v=30 HTTP/1.1" 200 1133 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/styles?v=30 HTTP/1.1" 200 1546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /apps/dicomviewer/js/app.bundle.js?v=b498ab96-30 HTTP/1.1" 200 650833 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/accessibility/js/accessibility?v=0 HTTP/1.1" 200 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/image/logo?useSvg=1&v=30 HTTP/1.1" 200 30736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/image/logo?v=30 HTTP/1.1" 200 30736 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/favicon?v=30 HTTP/1.1" 200 2296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:40 +0100] "GET /index.php/apps/theming/icon?v=30 HTTP/1.1" 200 2296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"**
****REDACTED IP** - - [18/Nov/2020:07:38:42 +0100] "GET /index.php/apps/user_saml/saml/login?originalUrl=&requesttoken=1T0i%2B2CUjgpa0m4doXkXIOjROhPw4AluGLE/Kk%2BK4vE%3D:nERltVbNv0FjoDlE9T9mS96nEWPFqTwPfYR0HxW5zZM%3D&idp=1 HTTP/1.1" 303 2084 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefo$**
****REDACTED IP** - - [18/Nov/2020:07:38:42 +0100] "POST /index.php/apps/user_saml/saml/acs HTTP/1.1" 303 966 "https://fs.*******.***/adfs/ls/wia?SAMLRequest=nZLNbtswEITvfoqAd4uilKQqYRtw4v4YcG0jdnvIJVhT65gARbJcqk369KWkJmkLNIfugQCXMx92FpwQNMbLeRtP9ga%2FtkhxdJbqoTGWZP84ZW2w0gFpkhYaJBmV3M0%2FrWSR5dIHF51yhv1le90FRBiidnawLRdTtl$**
**REDACTED IP** - - [18/Nov/2020:07:40:20 +0100] "GET / HTTP/1.1" 302 1979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"
**REDACTED IP** - - [18/Nov/2020:07:40:52 +0100] "GET /index.php/login HTTP/1.1" 302 1054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"
**REDACTED IP** - - [18/Nov/2020:07:40:52 +0100] "GET /index.php/apps/user_saml/saml/selectUserBackEnd?redirectUrl= HTTP/1.1" 200 5469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"
**REDACTED IP** - - [18/Nov/2020:07:40:52 +0100] "GET /apps/dicomviewer/css/viewer.css?v=bf701dae-30 HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"
**REDACTED IP** - - [18/Nov/2020:07:40:52 +0100] "GET /apps/dicomviewer/css/sidebar.css?v=bf701dae-30 HTTP/1.1" 200 1470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"
**REDACTED IP** - - [18/Nov/2020:07:40:52 +0100] "GET /apps/dicomviewer/css/bootstrap_accordion.css?v=bf701dae-30 HTTP/1.1" 200 1989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0"