search

nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
27.21k stars 4.04k forks source link

"An unknown error has occurred" when upload any files with extensions. #16575

Closed mrxenoquaten closed 5 years ago

mrxenoquaten commented 5 years ago

Hi,

I installed nextcloud. I cannot upload files. But I can upload files by deleting extensions. Interesting.

How can i fix this problem? I love nextcloud. Please help. Sorry for my bad English. Thanks.

PHP version: 7.3 Nextcloud version: 16.0.3

upload

OverlOrDGT commented 5 years ago

having the same problem :(

1ndahous3 commented 5 years ago

The same error occurs after I cancel uploading process (even if it's single file) image

wiswedel commented 5 years ago

Plaeas provide some more technical information. How have you installed Nextcloud? On what kind of server? What apps have you activated? You may use the system report button on the Support page in your admin settings to generate the necessary information automatically.

mrxenoquaten commented 5 years ago

Hi,

I tried with both softaculous and upload via ftp but I failed. I haven't activated any App by myself. I have reviewed the support page but could not find a solution.

SERVER INFO: cPanel Version | 80.0 (build 22) Apache Version | 2.4.39 PHP Version | 7.3.7 MySQL Version | 10.3.16-MariaDB Architecture | x86_64 Operating System | linux Kernel Version | 3.10.0-962.3.2.lve1.5.26.1.el7.x86_64

ACTIVE SERVICES: apache_php_fpm | up |   clamd | up |   cpanellogd | up |   cpdavd | up |   cphulkd | up |   cpsrvd | up |   crond | up |   cxswatch | up |   dnsadmin | up |   exim (exim-4.92-1.cp1180.x86_64) | up |   exim-587 | up |   ftpd | up |   httpd (2.4.39 (cPanel)) | up |   imap | up |   ipaliases | up |   letsencrypt-cpanel | up |   lfd | up |   lmtp | up |   mailman | up |   mysql (10.3.16-MariaDB) | up |   nscd | up |   pop | up |   rsyslogd | up |   spamd | up |   sshd | up |   queueprocd | up |  

PHP EXTENSIONS: php extensions

wiswedel commented 5 years ago

You may use the system report button on the Support page in your admin settings to generate the necessary information automatically.

I have reviewed the support page but could not find a solution.

image

stoneubi commented 5 years ago

Exactly same issue here.

I deleted everything and started from scratch, as users where not able to upload any files. Users can create folders but cannot upload any files. If the extension gets deleted, the file can be uploaded.

Operating system: Linux 3.10.0-957.21.3.el7.x86_64 #1 SMP Tue Jun 18 16:35:19 UTC 2019 x86_64 Webserver: Apache (fpm-fcgi) Database: mysql 5.7.27 PHP version: 7.3.7 Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, cgi-fcgi, bcmath, calendar, ctype, curl, dom, ftp, gd, iconv, imap, intl, json, mbstring, mysqlnd, PDO, Phar, posix, SimpleXML, soap, sockets, sqlite3, tokenizer, xml, xmlwriter, xsl, zip, mysqli, pdo_mysql, pdo_sqlite, wddx, xmlreader, Zend OPcache Nextcloud version: 16.0.3 - 16.0.3.0 Updated from an older Nextcloud/ownCloud or fresh install: Where did you install Nextcloud from: unknown Signing status List of activated apps Configuration (config/config.php) { "instanceid": "REMOVED SENSITIVE VALUE", "passwordsalt": "REMOVED SENSITIVE VALUE", "secret": "REMOVED SENSITIVE VALUE", "trusteddomains": [ "xxx" ], "datadirectory": "REMOVED SENSITIVE VALUE", "dbtype": "mysql", "version": "16.0.3.0", "overwrite.cli.url": "https:\/\/xxx\/nextcloud", "dbname": "REMOVED SENSITIVE VALUE", "dbhost": "REMOVED SENSITIVE VALUE", "dbport": "", "dbtableprefix": "oc", "mysql.utf8mb4": true, "dbuser": "REMOVED SENSITIVE VALUE", "dbpassword": "REMOVED SENSITIVE VALUE", "installed": true } External storages: files_external is disabled Encryption: no User-backends: • OC\User\Database Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

I hope this issue can be solved quickly as nextcloud cannot be used at all for the moment.

mrxenoquaten commented 5 years ago

Server configuration detail Operating system: Linux 3.10.0-962.3.2.lve1.5.26.1.el7.x86_64 #1 SMP Fri Jun 28 06:30:57 EDT 2019 x86_64

Webserver: LiteSpeed (litespeed)

Database: mysql 10.3.17

PHP version: 7.1.30

Modules loaded: Core, date, libxml, openssl, pcre, sqlite3, zlib, bz2, calendar, ctype, curl, hash, filter, ftp, gettext, gmp, SPL, iconv, pcntl, readline, Reflection, session, standard, shmop, SimpleXML, mbstring, tokenizer, xml, litespeed, bcmath, dom, fileinfo, gd, imagick, imap, intl, json, exif, mcrypt, mysqlnd, mysqli, PDFlib, PDO, pdo_mysql, pdo_sqlite, Phar, posix, rar, soap, sockets, tidy, wddx, xmlreader, xmlrpc, xmlwriter, xsl, zip, ionCube Loader, Zend OPcache

Nextcloud version: 16.0.3 - 16.0.3.0

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status Array ( )

List of activated apps Enabled:

Encryption: no

User-backends:

OC\User\Database Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36

kesselb commented 5 years ago

Anything in the logs?

stoneubi commented 5 years ago

No nothing. Checked every nextcloud and server log. Absolutely nothing. No permission errors. I deleted the whole installation including the database and started from scratch 2 times with a fresh source download from nextcloud website. Still the same. The only spelling error message I get is in the latest android app. The error “you don’t have Permission to upload files to this folder” is displayed. The user, who tries to upload files do have Admin permission. Again, if the extension of the file gets deleted e.g. test.pdf renamed to test then the files can easily be uploaded via the web interface as also with the android app.

kesselb commented 5 years ago

Mind to try a test instance: https://try.nextcloud.com?

wiswedel commented 5 years ago

I deleted the whole installation including the database and started from scratch 2 times with a fresh source download from nextcloud website. Still the same.

That really looks like something's wrong on your infrastructure side.

When you add 'loglevel' => 0, to the config.php, the log gets way more verbose and might tell us more.

Also, please note:

stoneubi commented 5 years ago

Finally I solved the error by disabling ModSecurity in cpanel. (Found this tipp on nextcloud help). The qeustion is how to have a working solution for netcloud with ModSecurity enabled.

mritzmann commented 5 years ago

The qeustion is how to have a working solution for netcloud with ModSecurity enabled.

Nextcloud has nothing to do with that, you have to configure it in ModSecurity.

kesselb commented 5 years ago

Finally I solved the error by disabling ModSecurity in cpanel. (Found this tipp on nextcloud help). The qeustion is how to have a working solution for netcloud with ModSecurity enabled.

Thanks for your feedback :+1:

mrxenoquaten commented 5 years ago

Finally I solved the error by disabling ModSecurity in cpanel. (Found this tipp on nextcloud help). The qeustion is how to have a working solution for netcloud with ModSecurity enabled.

Disabling ModSecurity solved the problem.

Thank you stoneubi thank you all.

1

KW4NP commented 4 years ago

This issue is also affecting me, and I'm not able to disable/remove modsecurity. Files under ~10 MB upload fine, but files over 10 MB with extensions will not upload, giving a "Unknown Error" message with no other error messages that I can find. The same file with extension removed works fine. Is there no solution for those who cannot remove or disable modsecurity? What causes this behavior?

KW4NP commented 4 years ago

This seems to be relevant: https://help.nextcloud.com/t/cant-upload-file-size-more-than-10mb/86266/3 Wordpress on the same host has no trouble with uploads over 10 MB, so it seems like this is a fixable issue.

mritzmann commented 4 years ago

This issue is also affecting me, and I'm not able to disable/remove modsecurity.

It also makes no sense that a software should be able to directly influence ModSecurity Rules (ModSecurity would be worthless). Nextcloud really can't do anything about it. So I don't understand what you expect from nextcloud now.

KW4NP commented 4 years ago

I'm wondering if it might be possible for nextcloud to handle file uploads slightly differently to avoid hitting this limit in modsecurity.

I understand that nextcloud cannot change the behavior of modsecurity, but wordpress and flow upload both upload files that do not upload using the standard nextcloud process in the same environment. It follows that nextcloud could work with modsecurity as well.

I'd like to understand what modsecurity is flagging, and if it would be possible to change the behavior to avoid triggering modsecurity. The software cannot change the rules, but it can work within the rules to avoid problems.

So, to summarize, I'd like for nextcloud to work with common modsecurity settings as that seems like a reasonable request and something that would benefit the nextcloud community.

On Wed, Sep 30, 2020, 9:02 AM Markus Ritzmann notifications@github.com wrote:

This issue is also affecting me, and I'm not able to disable/remove modsecurity.

  • Nextcloud cannot influence the behaviour of ModSecurity.
  • It is not possible for a PHP software like Nextcloud to access the underlying ModSecurity.
  • It also makes no sense that a software should be able to directly influence ModSecurity Rules (ModSecurity would be worthless).

Nextcloud really can't do anything about it. So I don't understand what you expect from nextcloud now.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/nextcloud/server/issues/16575#issuecomment-701375723, or unsubscribe https://github.com/notifications/unsubscribe-auth/AIQYQZOKWVEBZEOHZ4ECBW3SIMT45ANCNFSM4IHGXKOA .

magdesign commented 4 years ago

Having the same problem and still stuck since there is no "ModSecurity" to disable. Nextcloud worked for a long time and the issue is pretty new and it really only appears when file is bigger than 10MB.

Do I need to change a firewall rule? What do I need to change server side that it will work again?

thanks for any hints.

KW4NP commented 4 years ago

@magdesign, Just to clarify, can you upload files over 10MB if the extension is removed?

On Thu, Oct 1, 2020, 4:57 AM magdesign notifications@github.com wrote:

Having the same problem and still stuck since there is no "ModSecurity" to disable. Nextcloud worked for a long time and the issue is pretty new and it really only appears when file is bigger than 10MB.

Do I need to change a firewall rule? What do I need to change server side that it will work again?

thanks for any hints.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/nextcloud/server/issues/16575#issuecomment-701993205, or unsubscribe https://github.com/notifications/unsubscribe-auth/AIQYQZLPMZZ3CYHNJUO2RGLSIQ757ANCNFSM4IHGXKOA .

mritzmann commented 4 years ago

The software cannot change the rules, but it can work within the rules to avoid problems.

A few years ago cpanel introduced a ModSecurity addon. The add-on could only be switched on or off, because most webhosters did not have the possibility to create individual rules or whitelists. As a consequence, many WordPress plugin and theme authors have received many support requests. To prevent support requests there are many WordPress Addons that include mega ugly workarounds for only this problem. For the code quality this is quite ugly and causes problems in the long run. So I think it's an extremely bad idea to adapt Nextcloud to a WAF just because you can't edit WAF rules.

And I also think that "it works with Wordpress" is not an argument.

This must be approached in reverse: The best known rule set for ModSecurity offers predefined exceptions for WordPress, Nextcloud and many other CMS systems. See: https://github.com/coreruleset/coreruleset/tree/v3.4/dev/rules

KW4NP commented 4 years ago

I can't see the logs of modsecurity, and I can't change any of the rules as I am on shared hosting. In fact, I'm not even 100% sure if this is an issue with modsecurity as I don't have any direct evidence that it is. However, the only references to this issue that have been solved have to do with disabling or changing modsecurity, and as far as I can see everything else is in order. What can I look for in nextcloud logs to find out what "Unknown Error" means? At the very least it should give an intelligible error.

magdesign commented 4 years ago

@KW4NP : when the file ending e.g. *.blend is removed, I still get the error if file is bigger than 10MB:

limit

under /etc/php/7.2/fpm/php.ini the limit is set to 128M

KW4NP commented 4 years ago

Ok, you are dealing with a different issue. It sounds like your problem might be php settings. I can upload the same file that fails with an extension if I remove the extension. Could still be modsecurity.

On Fri, Oct 2, 2020, 9:03 AM magdesign notifications@github.com wrote:

@KW4NP https://github.com/KW4NP : when the file ending e.g. *.blend is removed, I still get the error if file is bigger than 10MB:

[image: limit] https://user-images.githubusercontent.com/5273166/94925975-5cacea00-04c0-11eb-99d8-559699ac07b4.png

under /etc/php/7.2/fpm/php.ini the limit is set to 128M

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/nextcloud/server/issues/16575#issuecomment-702721583, or unsubscribe https://github.com/notifications/unsubscribe-auth/AIQYQZKUZZGVZP4GHPCBDNDSIXFRRANCNFSM4IHGXKOA .

KW4NP commented 3 years ago

Maybe we can see what is going on now. Do you have any logs? Also, is the limit for a file with extension around 10mb? In other words, have you tried uploading a file smaller than 10 mb with an extension?

On Mon, Nov 16, 2020, 13:49 uqlel notifications@github.com wrote:

I have this same error, i don't have mod_security, and the limit is also set to 128M

Operating system: Linux 5.4.0-52-generic #57-Ubuntu SMP Thu Oct 15 10:57:00 UTC 2020 x86_64

Webserver: Apache/2.4.41 (Ubuntu) (apache2handler)

Database: mysql 10.1.47

PHP version: 7.4.12

Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, apache2handler, mysqlnd, PDO, xml, bcmath, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, gmp, iconv, imagick, intl, json, ldap, exif, mysqli, pdo_mysql, Phar, posix, readline, shmop, SimpleXML, sockets, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, ionCube Loader, Zend OPcache

Nextcloud version: 20.0.1 - 20.0.1.1

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status Array ( )
List of activated apps Enabled: - accessibility: 1.6.0 - activity: 2.13.2 - bruteforcesettings: 2.0.1 - cloud_federation_api: 1.3.0 - comments: 1.10.0 - contactsinteraction: 1.1.0 - dashboard: 7.0.0 - dav: 1.16.0 - federatedfilesharing: 1.10.1 - federation: 1.10.1 - files: 1.15.0 - files_pdfviewer: 2.0.1 - files_rightclick: 0.17.0 - files_sharing: 1.12.0 - files_trashbin: 1.10.1 - files_versions: 1.13.0 - files_videoplayer: 1.9.0 - firstrunwizard: 2.9.0 - logreader: 2.5.0 - lookup_server_connector: 1.8.0 - nextcloud_announcements: 1.9.0 - notifications: 2.8.0 - oauth2: 1.8.0 - password_policy: 1.10.1 - photos: 1.2.0 - privacy: 1.4.0 - provisioning_api: 1.10.0 - recommendations: 0.8.0 - serverinfo: 1.10.0 - settings: 1.2.0 - sharebymail: 1.10.0 - support: 1.3.0 - survey_client: 1.8.0 - systemtags: 1.10.0 - text: 3.1.0 - theming: 1.11.0 - twofactor_backupcodes: 1.9.0 - updatenotification: 1.10.0 - user_status: 1.0.0 - viewer: 1.4.0 - weather_status: 1.0.0 - workflowengine: 2.2.0 Disabled: - admin_audit - encryption - files_external - user_ldap
Configuration (config/config.php) { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "cloud.yourcraft.pl" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "dbtype": "mysql", "version": "20.0.1.1", "overwrite.cli.url": "http:\/\/cloud.yourcraft.pl", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true }

External storages: files_external is disabled

Encryption: no

User-backends:

OC\User\Database

Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:83.0) Gecko/20100101 Firefox/83.0

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/nextcloud/server/issues/16575#issuecomment-727957862, or unsubscribe https://github.com/notifications/unsubscribe-auth/AIQYQZK3P33UQO5OXLYEPATSQENXNANCNFSM4IHGXKOA .

barart commented 3 years ago

Same here, i resolved the problem disabling the rule "920420" of the vendor OWASP3, i already reported it to them, maybe it would be good if everyone facing this problem with this modsecurity rule report it too to owasp3

Bh0di commented 2 years ago

For those people who have this Issue and use an reverse Proxy (nginx in my case), check your reverse Proxy config .

If not present, add client_max_body_size 1G; in the server section of your /etc/nginx/sites-available/nextcloud.conf. That resolved the problem for me.

It took me a while to find the issue because I was looking at the wrong place.

dark-swordsman commented 2 years ago

I'd like to add: The issue for me was also my NGINX reverse proxy. However, it was because I hosted it in an alpine LXC with minimal disk space. There wasn't enough space to write the temporary chunks in /var/nginx/tmp/ because of some other things I wrote to that disk.

I did increase the disk size for safety, but I actually created a ramdisk in /tmp/ramdisk and then added client_body_temp_path /tmp/ramdisk/nginx_cache 1 2 3; under the server section of my config. So now my temp files are hosted on a very fast ramdisk.

israelosiris commented 2 years ago

OMG to much information about this issue, as all you: have the same problem!!!, and i love nextcloud. Im new user, im student so i have not to much experience in this kind of situations.

Please if someone has solved, share it us.

Sorry my bad English, regards from Mexico. Thanks.

ayonoaduo commented 2 years ago

Hey @israelosiris,

This actually worked for me. I have a reverse proxy sitting in front of my Nextcloud server and I found this to solve my problem.

https://github.com/nextcloud/server/issues/16575#issuecomment-1008513159

tharukan commented 1 year ago

For those people who have this Issue and use an reverse Proxy (nginx in my case), check your reverse Proxy config .

If not present, add client_max_body_size 1G; in the server section of your /etc/nginx/sites-available/nextcloud.conf. That resolved the problem for me.

It took me a while to find the issue because I was looking at the wrong place.

Thanks and this has done the trick for me. Now it's uploading more than 10MB files. When you use a reverse proxy (Eg-Nginx default upload size is 1MB) you should use this in the virtual conf file or change the default config in nginx.