{"action":"created","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/28061","repository_url":"https://api.github.com/repos/owncloud/core","labels_url":"https://api.github.com/repos/owncloud/core/issues/28061/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/28061/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/28061/events","html_url":"https://github.com/owncloud/core/issues/28061","id":232844962,"number":28061,"title":"\"OCP\\Files\\NotFoundException\" when logging in","user":{"login":"AdamReece-WebBox","id":16222407,"avatar_url":"https://avatars1.githubusercontent.com/u/16222407?v=4","gravatar_id":"","url":"https://api.github.com/users/AdamReece-WebBox","html_url":"https://github.com/AdamReece-WebBox","followers_url":"https://api.github.com/users/AdamReece-WebBox/followers","following_url":"https://api.github.com/users/AdamReece-WebBox/following{/other_user}","gists_url":"https://api.github.com/users/AdamReece-WebBox/gists{/gist_id}","starred_url":"https://api.github.com/users/AdamReece-WebBox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AdamReece-WebBox/subscriptions","organizations_url":"https://api.github.com/users/AdamReece-WebBox/orgs","repos_url":"https://api.github.com/users/AdamReece-WebBox/repos","events_url":"https://api.github.com/users/AdamReece-WebBox/events{/privacy}","received_events_url":"https://api.github.com/users/AdamReece-WebBox/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":13,"created_at":"2017-06-01T11:11:57Z","updated_at":"2018-02-28T07:35:43Z","closed_at":"2017-12-20T01:01:00Z","author_association":"NONE","body":"### Steps to reproduce\r\nLogin as an LDAP user.\r\n_(Does not occur if I login as the root user.)_\r\n\r\n### Expected behaviour\r\nLogin completed with index view.\r\n\r\n### Actual behaviour\r\nInternal server error without an exception message.\r\n\r\nMy only thoughts would be:\r\n\r\n- \"www-data\" user can't read the home folder contents brought from the LDAP user, but then session authentication should be used like for SMB/CIFS external mounts.\r\n- Skeleton directory is empty, because I don't want those sample files being put in everyone's home folder.\r\n\r\nTechnical details\r\n\r\n> Remote Address: 172.29.x.x\r\n> Request ID: DXi878HN1UFNp0KfkUPp\r\n> Type: OCP\\Files\\NotFoundException\r\n> Code: 0\r\n> Message:\r\n> File: /var/www/cloud/lib/private/legacy/helper.php\r\n> Line: 570\r\n\r\nTrace\r\n\r\n> #0 /var/www/cloud/apps/files/lib/Controller/ViewController.php(132): OC_Helper::getStorageInfo('/', false)\r\n> #1 /var/www/cloud/apps/files/lib/Controller/ViewController.php(203): OCA\\Files\\Controller\\ViewController->getStorageInfo()\r\n> #2 [internal function]: OCA\\Files\\Controller\\ViewController->index('', '', NULL)\r\n> #3 /var/www/cloud/lib/private/AppFramework/Http/Dispatcher.php(159): call_user_func_array(Array, Array)\r\n> #4 /var/www/cloud/lib/private/AppFramework/Http/Dispatcher.php(89): OC\\AppFramework\\Http\\Dispatcher->executeController(Object(OCA\\Files\\Controller\\ViewController), 'index')\r\n> #5 /var/www/cloud/lib/private/AppFramework/App.php(98): OC\\AppFramework\\Http\\Dispatcher->dispatch(Object(OCA\\Files\\Controller\\ViewController), 'index')\r\n> #6 /var/www/cloud/lib/private/AppFramework/Routing/RouteActionHandler.php(46): OC\\AppFramework\\App::main('ViewController', 'index', Object(OC\\AppFramework\\DependencyInjection\\DIContainer), Array)\r\n> #7 [internal function]: OC\\AppFramework\\Routing\\RouteActionHandler->__invoke(Array)\r\n> #8 /var/www/cloud/lib/private/Route/Router.php(299): call_user_func(Object(OC\\AppFramework\\Routing\\RouteActionHandler), Array)\r\n> #9 /var/www/cloud/lib/base.php(918): OC\\Route\\Router->match('/apps/files/')\r\n> #10 /var/www/cloud/index.php(49): OC::handleRequest()\r\n> #11 {main}\r\n\r\n### Server configuration\r\n**Operating system**: Debian Linux 9 \"Stretch\"\r\n\r\n**Web server:** Apache 2.4.25 (Debian)\r\n\r\n**Database:** mysql  Ver 15.1 Distrib 10.1.23-MariaDB, for debian-linux-gnu (x86_64) using readline 5.2\r\n\r\n**PHP version:** PHP 7.0.19-1 (cli) (built: May 11 2017 14:04:47) ( NTS )\r\n\r\n**ownCloud version:** ownCloud 10.0.1.5 (production)\r\n\r\n**Updated from an older ownCloud or fresh install:** Fresh\r\n\r\n**Where did you install ownCloud from:** Manual through shell. (Not using apt/yum.)\r\n\r\n**Signing status (ownCloud 9.0 and above):** https://gist.github.com/AdamReece-WebBox/7a1e3eb17573daac4c9079dca6c6679b\r\n\r\n**The content of config/config.php:** https://gist.github.com/AdamReece-WebBox/e1d79c950e4ea95a71b94841f4f8de39\r\n\r\n**List of activated apps:**\r\n\r\nEnabled:\r\n  - calendar: 1.4.2\r\n  - comments: 0.3.0\r\n  - configreport: 0.1.1\r\n  - contacts: 1.5.2\r\n  - dav: 0.2.9\r\n  - external: 1.2\r\n  - federatedfilesharing: 0.3.0\r\n  - federation: 0.1.0\r\n  - files: 1.5.1\r\n  - files_antivirus: 0.10.0.0\r\n  - files_external: 0.7.0\r\n  - files_external_ftp: 0.2.0\r\n  - files_pdfviewer: 0.8.2\r\n  - files_sharing: 0.10.0\r\n  - files_texteditor: 2.2\r\n  - files_trashbin: 0.9.0\r\n  - files_versions: 1.3.0\r\n  - files_videoplayer: 0.9.8\r\n  - firstrunwizard: 1.1\r\n  - market: 0.1.0\r\n  - notifications: 0.3.0\r\n  - provisioning_api: 0.5.0\r\n  - systemtags: 0.3.0\r\n  - templateeditor: 0.1\r\n  - updatenotification: 0.2.1\r\n  - user_external: 0.4\r\n  - user_ldap: 0.9.1\r\nDisabled:\r\n  - encryption\r\n  - theme-example\r\n\r\n**Are you using external storage, if yes which one:** SMB/CIFS\r\n\r\n**Are you using encryption:** No\r\n\r\n**Are you using an external user-backend, if yes which one:** LDAP\r\n\r\n#### LDAP configuration (delete this part if not used)\r\n\r\n```\r\n+-------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\r\n| Configuration                 |                                                                                                                                                                         |\r\n+-------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\r\n| hasMemberOfFilterSupport      |                                                                                                                                                                         |\r\n| hasPagedResultSupport         |                                                                                                                                                                         |\r\n| homeFolderNamingRule          | attr:homeDirectory                                                                                                                                                      |\r\n| lastJpegPhotoLookup           | 0                                                                                                                                                                       |\r\n| ldapAgentName                 | ***REMOVED SENSITIVE VALUE*** (but this works OK)                                                                                                                       |\r\n| ldapAgentPassword             | ***                                                                                                                                                                     |\r\n| ldapAttributesForGroupSearch  |                                                                                                                                                                         |\r\n| ldapAttributesForUserSearch   |                                                                                                                                                                         |\r\n| ldapBackupHost                |                                                                                                                                                                         |\r\n| ldapBackupPort                |                                                                                                                                                                         |\r\n| ldapBase                      | ***REMOVED SENSITIVE VALUE*** (but this works OK)                                                                                                                       |\r\n| ldapBaseGroups                | ***REMOVED SENSITIVE VALUE*** (but this works OK)                                                                                                                       |\r\n| ldapBaseUsers                 | ***REMOVED SENSITIVE VALUE*** (but this works OK)                                                                                                                       |\r\n| ldapCacheTTL                  | 600                                                                                                                                                                     |\r\n| ldapConfigurationActive       | 1                                                                                                                                                                       |\r\n| ldapDynamicGroupMemberURL     |                                                                                                                                                                         |\r\n| ldapEmailAttribute            | mail                                                                                                                                                                    |\r\n| ldapExperiencedAdmin          | 0                                                                                                                                                                       |\r\n| ldapExpertUUIDGroupAttr       |                                                                                                                                                                         |\r\n| ldapExpertUUIDUserAttr        |                                                                                                                                                                         |\r\n| ldapExpertUsernameAttr        | uid                                                                                                                                                                     |\r\n| ldapGroupDisplayName          | cn                                                                                                                                                                      |\r\n| ldapGroupFilter               | (&(|(objectclass=posixGroup))(|(cn=Account Managers)(cn=Administrators)(cn=Developers)(cn=Staff)(cn=Users)))                                                            |\r\n| ldapGroupFilterGroups         | Account Managers;Administrators;Developers;Staff;Users                                                                                                                  |\r\n| ldapGroupFilterMode           | 0                                                                                                                                                                       |\r\n| ldapGroupFilterObjectclass    | posixGroup                                                                                                                                                              |\r\n| ldapGroupMemberAssocAttr      | memberUid                                                                                                                                                               |\r\n| ldapHost                      | ldap://172.29.x.x                                                                                                                                                       |\r\n| ldapIgnoreNamingRules         |                                                                                                                                                                         |\r\n| ldapLoginFilter               | (&(|(objectclass=inetOrgPerson)(objectclass=posixAccount)(objectclass=sambaSamAccount)(objectclass=shadowAccount))(|(uid=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid)))) |\r\n| ldapLoginFilterAttributes     |                                                                                                                                                                         |\r\n| ldapLoginFilterEmail          | 1                                                                                                                                                                       |\r\n| ldapLoginFilterMode           | 0                                                                                                                                                                       |\r\n| ldapLoginFilterUsername       | 1                                                                                                                                                                       |\r\n| ldapNestedGroups              | 0                                                                                                                                                                       |\r\n| ldapOverrideMainServer        |                                                                                                                                                                         |\r\n| ldapPagingSize                | 500                                                                                                                                                                     |\r\n| ldapPort                      | 389                                                                                                                                                                     |\r\n| ldapQuotaAttribute            |                                                                                                                                                                         |\r\n| ldapQuotaDefault              |                                                                                                                                                                         |\r\n| ldapTLS                       | 0                                                                                                                                                                       |\r\n| ldapUserDisplayName           | displayname                                                                                                                                                             |\r\n| ldapUserDisplayName2          |                                                                                                                                                                         |\r\n| ldapUserFilter                | (|(objectclass=inetOrgPerson)(objectclass=posixAccount)(objectclass=sambaSamAccount)(objectclass=shadowAccount))                                                        |\r\n| ldapUserFilterGroups          |                                                                                                                                                                         |\r\n| ldapUserFilterMode            | 0                                                                                                                                                                       |\r\n| ldapUserFilterObjectclass     | inetOrgPerson;posixAccount;sambaSamAccount;shadowAccount                                                                                                                |\r\n| ldapUuidGroupAttribute        | auto                                                                                                                                                                    |\r\n| ldapUuidUserAttribute         | auto                                                                                                                                                                    |\r\n| turnOffCertCheck              | 0                                                                                                                                                                       |\r\n| useMemberOfToDetectMembership | 1                                                                                                                                                                       |\r\n+-------------------------------+-------------------------------------------------------------------------------------------------------------------------------------------------------------------------+\r\n```\r\n\r\n### Client configuration\r\n**Browser:** Happens on any (Chrome/Edge/...)\r\n\r\n**Operating system:** Happens on any (Windows/OSX/...)\r\n\r\n### Logs\r\n#### Web server error log\r\nIrrelevant, same as stack trace posted above.\r\n\r\n#### ownCloud log (data/owncloud.log)\r\nIrrelevant, same as stack trace posted above.\r\n\r\n#### Browser log\r\nIrrelevant, server side issue."},"comment":{"url":"https://api.github.com/repos/owncloud/core/issues/comments/369147442","html_url":"https://github.com/owncloud/core/issues/28061#issuecomment-369147442","issue_url":"https://api.github.com/repos/owncloud/core/issues/28061","id":369147442,"user":{"login":"AdamReece-WebBox","id":16222407,"avatar_url":"https://avatars1.githubusercontent.com/u/16222407?v=4","gravatar_id":"","url":"https://api.github.com/users/AdamReece-WebBox","html_url":"https://github.com/AdamReece-WebBox","followers_url":"https://api.github.com/users/AdamReece-WebBox/followers","following_url":"https://api.github.com/users/AdamReece-WebBox/following{/other_user}","gists_url":"https://api.github.com/users/AdamReece-WebBox/gists{/gist_id}","starred_url":"https://api.github.com/users/AdamReece-WebBox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AdamReece-WebBox/subscriptions","organizations_url":"https://api.github.com/users/AdamReece-WebBox/orgs","repos_url":"https://api.github.com/users/AdamReece-WebBox/repos","events_url":"https://api.github.com/users/AdamReece-WebBox/events{/privacy}","received_events_url":"https://api.github.com/users/AdamReece-WebBox/received_events","type":"User","site_admin":false},"created_at":"2018-02-28T07:35:43Z","updated_at":"2018-02-28T07:35:43Z","author_association":"NONE","body":"@coco3271 as discussed the issue is simply a Linux FS permissions one. Your web server is likely running as user \"www-data\" or similar, thus won't have permission to read/write to the home folder of the user you're logging in as.\r\n\r\n> I've got passed the exception by manually changing the \"home\" property in the accounts table from \"/home/adam_reece\" to \"/var/www/cloud/data/root\".\r\n>\r\n> I guess what's happening here is that the real home folder \"/home/adam_reece\" is trying to be looked at as the \"www-data\" user, whereas what should be happening is session pass-through authentication in the same way that the SMB/CIFS mounts work.\r\n>\r\n> This makes the setting to specify a home folder \"homeFolderNamingRule\" useless in the LDAP authentication module if it's not going to use the right credentials to access the underlying file system."}}
{"actor":{"display_login":"AdamReece-WebBox"}}