`user_oidc` broken in NC33?

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 33.0.0
  • Operating system and version (e.g., Ubuntu 24.04):
    • FreeBSD 14.3
  • Web server and version (e.g, Apache 2.4.25):
    • nginx 1.28.2
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • haproxy 3.2.13
  • PHP version (e.g, 8.3):
    • 8.5
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • After the upgrade to 33.0.0
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • System package manager
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

After upgrading, login via OIDC is not possible anymore. I am getting an “Internal Server Error”, an info that the request could not be finished, and a request id. I grepped the log for that request id and have put the output onto termbin (link below).

Steps to replicate it (hint: details matter!):

  1. Upgrade from OC32 to OC33

  2. Try to login

  3. Face error message

Log entries

Nextcloud

Log entries: https://termbin.com/abt2

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

{
    "system": {
        "allow_local_remote_servers": true,
        "apps_paths": [
            {
                "path": "\/usr\/local\/www\/nextcloud\/apps",
                "url": "\/apps",
                "writable": true
            },
            {
                "path": "\/usr\/local\/www\/nextcloud\/apps-pkg",
                "url": "\/apps-pkg",
                "writable": false
            }
        ],
        "logfile": "\/var\/log\/nextcloud\/nextcloud.log",
        "memcache.local": "\\OC\\Memcache\\APCu",
        "memcache.distributed": "\\OC\\Memcache\\APCu",
        "memcache.locking": "\\OC\\Memcache\\APCu",
        "instanceid": "***REMOVED SENSITIVE VALUE***",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "nextcloud.jail.lyrion.ch",
            "nextcloud.lyrion.ch"
        ],
        "trusted_proxies": "***REMOVED SENSITIVE VALUE***",
        "datadirectory": "***REMOVED SENSITIVE VALUE***",
        "dbtype": "pgsql",
        "version": "33.0.0.16",
        "overwrite.cli.url": "https:\/\/nextcloud.lyrion.ch\/",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "5432",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "mail_smtpmode": "smtp",
        "mail_smtpauth": true,
        "mail_sendmailmode": "smtp",
        "tempdirectory": "\/tmp\/nextcloud",
        "theme": "",
        "loglevel": 0,
        "maintenance": false,
        "maintenance_window_start": 3,
        "check_data_directory_permissions": false,
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "mail_smtpport": "465",
        "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
        "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
        "memories.exiftool_no_local": true,
        "memories.vod.path": "\/usr\/local\/www\/nextcloud\/apps\/memories\/bin-ext\/go-vod-amd64",
        "memories.vod.ffmpeg": "\/usr\/local\/bin\/ffmpeg",
        "memories.vod.ffprobe": "\/usr\/local\/bin\/ffprobe",
        "enabledPreviewProviders": {
            "0": "OC\\Preview\\Image",
            "1": "OC\\Preview\\HEIC",
            "2": "OC\\Preview\\TIFF",
            "3": "OC\\Preview\\AVIF",
            "4": "OC\\Preview\\JXL",
            "20": "OC\\Preview\\Movie"
        },
        "preview_max_x": 1024,
        "preview_max_y": 1024,
        "preview_max_memory": 1024,
        "preview_max_filesize_image": 100,
        "app_install_overwrite": [
            "camerarawpreviews",
            "news",
            "maps",
            "nextframe",
            "mediadc"
        ],
        "memories.db.triggers.fcu": true,
        "mail_smtpsecure": "ssl",
        "allow_user_to_change_display_name": false,
        "lost_password_link": "disabled",
        "user_oidc": {
            "auto_provision": true,
            "soft_auto_provision": true,
            "enrich_login_id_token_with_userinfo": true
        },
        "files.chunked_upload.max_size": 10737418240,
        "memories.gis_type": 2
    }
}

Apps

Enabled:
  - activity: 6.0.0-dev.0
  - admin_audit: 1.23.0
  - announcementcenter: 7.3.0
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0-dev.0
  - calendar: 6.2.1
  - camerarawpreviews: 0.8.8
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contacts: 8.4.0
  - contactsinteraction: 1.14.1
  - cookbook: 0.11.6
  - cospend: 4.0.0
  - dashboard: 7.13.0
  - dav: 1.36.0
  - dav_push: 1.0.1
  - deck: 1.17.0
  - event_update_notification: 2.8.0
  - external: 8.0.0
  - federatedfilesharing: 1.23.0
  - federation: 1.23.0
  - files: 2.5.0
  - files_downloadlimit: 5.1.0-dev.0
  - files_external: 1.25.1
  - files_pdfviewer: 6.0.0-dev.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - fileslibreofficeedit: 2.0.1
  - firstrunwizard: 6.0.0-dev.0
  - forms: 5.2.5
  - gpoddersync: 3.16.0
  - groupfolders: 21.0.6
  - integration_dropbox: 4.1.0
  - integration_paperless: 1.0.11
  - intros: 1.2.1
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - mail: 5.7.2
  - maps: 1.6.0
  - music: 3.0.0
  - news: 28.0.0
  - nextcloud_announcements: 5.0.0
  - nextframe: 0.0.7
  - nextpod: 0.7.10
  - notes: 4.13.0
  - notifications: 6.0.0
  - notify_push: 1.3.0
  - oauth2: 1.21.0
  - ownershiptransfer: 1.4.0
  - password_policy: 5.0.0-dev.0
  - photos: 6.0.0-dev.0
  - polls: 8.6.3
  - previewgenerator: 5.13.0
  - privacy: 5.0.0-dev.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0-dev.0
  - related_resources: 4.0.0-dev.0
  - serverinfo: 5.0.0-dev.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - side_menu: 5.2.1
  - spreed: 23.0.1
  - support: 5.0.0
  - survey_client: 5.0.0-dev.0
  - suspicious_login: 11.0.0-dev.0
  - systemtags: 1.23.0
  - tables: 2.0.1
  - tasks: 0.17.1
  - text: 7.0.0-dev.3
  - theming: 2.8.0
  - twofactor_backupcodes: 1.22.0
  - twofactor_totp: 15.0.0-dev.0
  - updatenotification: 1.23.0
  - user_oidc: 8.6.1
  - user_status: 1.13.0
  - viewer: 6.0.0-dev.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflowengine: 2.15.0
Disabled:
  - chores: 0.0.8 (installed 0.0.8)
  - cloud_py_api: 0.2.0 (installed 0.2.0)
  - encryption: 2.21.0 (installed 2.19.0)
  - externalpassword: 1.1.2 (installed 1.1.2)
  - files_versions: 1.26.0 (installed 1.24.0)
  - memories: 7.8.2 (installed 7.8.2)
  - ownpad: 0.13.2 (installed 0.13.2)
  - twofactor_nextcloud_notification: 7.0.0 (installed 5.0.0)
  - unsplash: 3.1.0 (installed 3.1.0)
  - user_ldap: 1.24.0 (installed 1.22.0)

You have these apps force enabled which bypasses compatibility checks at upgrade time. Disable maps as a first step.

1 Like