Sharing with LDAP group causes "Invalid recipient" for some users

stwo-aix commented 4 years ago

Steps to reproduce

Unsure. Could not find a common ground

Expected behaviour

After sharing with groups and users from LDAP directory all target users should see the folder on root. No errors in Logfile.

Actual behaviour

Some users don't have the shared folders in the root directory. Log is full of "Error while trying to create shared mount" and "Invalid Recipient" messages (repeated multiple times per minute)

Server configuration

Multiple servers: 1 database server, 1 fileserver mounted via smb on two Nextcloud instances behind haproxy server and one dedicated Redis cache server.

Operating system: Ubuntu 18.04 on all servers

Web server: Apache 2.4

Database: Mysql 5.7.31

PHP version: 7.2.24

Nextcloud version: (see Nextcloud admin page) 19.0.1.1

Updated from an older Nextcloud/ownCloud or fresh install: fresh install

Where did you install Nextcloud from: Downloaded from https://nextcloud.com/install/

Signing status:

Signing status

``` No errors have been found. ```

List of activated apps:

App list

``` Enabled: - accessibility: 1.5.0 - bruteforcesettings: 2.0.1 - calendar: 2.0.4 - circles: 0.19.5 - cloud_federation_api: 1.2.0 - comments: 1.9.0 - contactsinteraction: 1.0.0 - dav: 1.15.0 - deck: 1.0.5 - drawio: 0.9.7 - extract: 1.2.4 - federatedfilesharing: 1.9.0 - federation: 1.9.0 - files: 1.14.0 - files_fulltextsearch: 1.4.3 - files_fulltextsearch_tesseract: 1.4.2 - files_markdown: 2.3.0 - files_pdfviewer: 1.8.0 - files_rightclick: 0.16.0 - files_sharing: 1.11.0 - files_trashbin: 1.9.0 - files_versions: 1.12.0 - files_videoplayer: 1.8.0 - fulltextsearch: 1.4.2 - fulltextsearch_elasticsearch: 1.5.2 - logreader: 2.4.0 - lookup_server_connector: 1.7.0 - nextcloud_announcements: 1.8.0 - notifications: 2.7.0 - oauth2: 1.7.0 - onlyoffice: 5.0.0 - password_policy: 1.9.1 - photos: 1.1.0 - polls: 1.4.3 - privacy: 1.3.0 - provisioning_api: 1.9.0 - recommendations: 0.7.0 - serverinfo: 1.9.0 - settings: 1.1.0 - sharebymail: 1.9.0 - spreed: 9.0.3 - support: 1.2.1 - survey_client: 1.7.0 - systemtags: 1.9.0 - tasks: 0.13.3 - text: 3.0.1 - theming: 1.10.0 - twofactor_backupcodes: 1.8.0 - updatenotification: 1.9.0 - user_ldap: 1.9.0 - viewer: 1.3.0 - workflowengine: 2.1.0 Disabled: - activity - admin_audit - encryption - files_external - firstrunwizard - workflow_pdf_converter ```

Nextcloud configuration:

Config report

``` { "system": { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "web1vsac.aixzellent.com", "web2vsac.aixzellent.com", "ncvsac.aixzellent.com", "nextcloud.vs-ac.de" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "dbtype": "mysql", "version": "19.0.1.1", "overwrite.cli.url": "https:\/\/web1vsac.aixzellent.com", "trusted_proxies": "***REMOVED SENSITIVE VALUE***", "overwritehost": "nextcloud.vs-ac.de", "overwriteprotocol": "https", "overwritecondaddr": "^148\\.251\\.110\\.99$", "forwarded_for_headers": [ "HTTP_X_FORWARDED_FOR" ], "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "dbdriveroptions": { "1009": "\/home\/aixnext\/ssl\/ca_cert.pem", "1002": "SET wait_timeout = 28800" }, "mysql.utf8mb4": true, "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true, "memcache.local": "\\OC\\Memcache\\APCu", "filelocking.enabled": "true", "memcache.locking": "\\OC\\Memcache\\Redis", "memcache.distributed": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "port": 6380, "password": "***REMOVED SENSITIVE VALUE***", "timeout": 0 }, "ldapIgnoreNamingRules": false, "ldapProviderFactory": "OCA\\User_LDAP\\LDAPProviderFactory", "maintenance": false, "enable_avatars": false, "lost_password_link": "disabled" } } ```

Are you using external storage, if yes which one: local/smb/sftp/... smb, mounted via fstab as local storage

Are you using encryption: yes/no no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/... LDAP

LDAP configuration (delete this part if not used)

LDAP config

Client configuration

Browser: Mozilla/5.0 (Windows) mirall/3.0.1stable-Win64 (build 20200828) (Nextcloud)

Operating system:

Logs

Web server error log

``` Insert your webserver log here ```

Nextcloud log (data/nextcloud.log)

Nextcloud log

``` {"reqId":"fDImrKKqrfIvjr8amjhu","level":4,"time":"2020-10-08T12:33:23+00:00","remoteAddr":"137.226.11.21","user":"711a0214-f56e-4361-a9d1-a67ea7e90fa0","app":"files_sharing","method":"PROPFIND","url":"/remote.php/dav/files/711a0214-f56e-4361-a9d1-a67ea7e90fa0/","message":"Error while trying to create shared mount","userAgent":"Mozilla/5.0 (Windows) mirall/3.0.1stable-Win64 (build 20200828) (Nextcloud)","version":"19.0.1.1"} {"reqId":"VHWPpRxlgGqBKjYLkUBe","level":3,"time":"2020-10-08T12:33:28+00:00","remoteAddr":"","user":"--","app":"files_sharing","method":"","url":"--","message":{"Exception":"InvalidArgumentException","Message":"Invalid recipient","Code":0,"Trace":[{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedMount.php","line":136,"function":"moveShare","class":"OC\\Share20\\Manager","type":"->","args":[{"__class__":"OC\\Share20\\Share"},"711a0214-f56e-4361-a9d1-a67ea7e90fa0"]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedMount.php","line":118,"function":"updateFileTarget","class":"OCA\\Files_Sharing\\SharedMount","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedMount.php","line":79,"function":"verifyMountPoint","class":"OCA\\Files_Sharing\\SharedMount","type":"->","args":["*** sensitive parameter replaced ***",{"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ch GK1 HIN/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/EF_Spanisch_Keu/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ek wechselfewuchte zonen/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ch EF HIN/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/EF_Projekte/":{"__class__":"OCA\\Files_Sharing\\SharedMount"}},{"__class__":"OC\\Cache\\CappedMemoryCache"}]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/MountProvider.php","line":125,"function":"__construct","class":"OCA\\Files_Sharing\\SharedMount","type":"->","args":["\\OCA\\Files_Sharing\\SharedStorage",{"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ch GK1 HIN/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/EF_Spanisch_Keu/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ek wechselfewuchte zonen/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/Ch EF HIN/":{"__class__":"OCA\\Files_Sharing\\SharedMount"},"/711a0214-f56e-4361-a9d1-a67ea7e90fa0/files/EF_Projekte/":{"__class__":"OCA\\Files_Sharing\\SharedMount"}},{"user":"711a0214-f56e-4361-a9d1-a67ea7e90fa0","superShare":{"__class__":"OC\\Share20\\Share"},"groupedShares":[{"__class__":"OC\\Share20\\Share"}],"ownerView":{"__class__":"OC\\Files\\View"},"sharingDisabledForUser":false},{"__class__":"OC\\Files\\Storage\\StorageFactory"},{"__class__":"OC\\Files\\View"},{"__class__":"OC\\Cache\\CappedMemoryCache"}]},{"file":"/home/aixnext/nextcloud/lib/private/Files/Config/MountProviderCollection.php","line":115,"function":"getMountsForUser","class":"OCA\\Files_Sharing\\MountProvider","type":"->","args":[{"__class__":"OC\\User\\User"},{"__class__":"OC\\Files\\Storage\\StorageFactory"}]},{"file":"/home/aixnext/nextcloud/lib/private/Files/Filesystem.php","line":451,"function":"addMountForUser","class":"OC\\Files\\Config\\MountProviderCollection","type":"->","args":[{"__class__":"OC\\User\\User"},{"__class__":"OC\\Files\\Mount\\Manager"}]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedStorage.php","line":128,"function":"initMountPoints","class":"OC\\Files\\Filesystem","type":"::","args":["711a0214-f56e-4361-a9d1-a67ea7e90fa0"]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedStorage.php","line":483,"function":"init","class":"OCA\\Files_Sharing\\SharedStorage","type":"->","args":[]},{"file":"/home/aixnext/nextcloud/lib/private/Files/Storage/Wrapper/Wrapper.php","line":496,"function":"getWrapperStorage","class":"OCA\\Files_Sharing\\SharedStorage","type":"->","args":[]},{"file":"/home/aixnext/nextcloud/apps/files_sharing/lib/SharedStorage.php","line":167,"function":"instanceOfStorage","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["OC\\Files\\Storage\\FailedStorage"]},{"file":"/home/aixnext/nextcloud/lib/private/Files/Storage/Wrapper/Wrapper.php","line":496,"function":"instanceOfStorage","class":"OCA\\Files_Sharing\\SharedStorage","type":"->","args":["OC\\Files\\Storage\\FailedStorage"]},{"file":"/home/aixnext/nextcloud/lib/private/Files/Utils/Scanner.php","line":163,"function":"instanceOfStorage","class":"OC\\Files\\Storage\\Wrapper\\Wrapper","type":"->","args":["OC\\Files\\Storage\\FailedStorage"]},{"file":"/home/aixnext/nextcloud/apps/files/lib/BackgroundJob/ScanFiles.php","line":83,"function":"backgroundScan","class":"OC\\Files\\Utils\\Scanner","type":"->","args":[""]},{"file":"/home/aixnext/nextcloud/apps/files/lib/BackgroundJob/ScanFiles.php","line":111,"function":"runScanner","class":"OCA\\Files\\BackgroundJob\\ScanFiles","type":"->","args":[{"__class__":"OC\\User\\User"}]},{"file":"/home/aixnext/nextcloud/lib/private/BackgroundJob/Job.php","line":62,"function":"run","class":"OCA\\Files\\BackgroundJob\\ScanFiles","type":"->","args":[null]},{"file":"/home/aixnext/nextcloud/lib/private/BackgroundJob/TimedJob.php","line":57,"function":"execute","class":"OC\\BackgroundJob\\Job","type":"->","args":[{"__class__":"OC\\BackgroundJob\\JobList"},{"__class__":"OC\\Log"}]},{"file":"/home/aixnext/nextcloud/cron.php","line":126,"function":"execute","class":"OC\\BackgroundJob\\TimedJob","type":"->","args":[{"__class__":"OC\\BackgroundJob\\JobList"},{"__class__":"OC\\Log"}]}],"File":"/home/aixnext/nextcloud/lib/private/Share20/Manager.php","Line":1215,"CustomMessage":"--"},"userAgent":"--","version":"19.0.1.1"} ```

Others

Some users seem to be affected more than others

grep "shared mount" nextcloud.log | grep -o '\"user\":\"[0-9a-z-]*\"' | sort -n | uniq -c
    774 "user":"--"
     35 "user":"04eba61c-fbf9-41bb-8dba-ca0eee9c14f5"
     32 "user":"192c4162-d2dc-4a60-86e6-906e20732d92"
     48 "user":"1a2bef4f-4a46-4094-98ba-164002fcbc5b"
      4 "user":"1f044fee-e808-46b1-a994-b1b6b9d3418c"
      4 "user":"3fb78aa4-d890-41aa-a88c-75552d5738dd"
      1 "user":"492cc29b-4565-4302-94af-5ecf12ca01b3"
     21 "user":"6e6f4940-f534-44c8-b40c-eab20e573571"
   1272 "user":"711a0214-f56e-4361-a9d1-a67ea7e90fa0"
    171 "user":"801cfde9-fe37-485b-b6ae-30b59c745511"
      2 "user":"880f5156-a150-4fac-96b3-a0bdaf55a32b"
     88 "user":"9ba46978-09c2-40d2-9ddd-07b917694041"
      3 "user":"9d538230-e779-4c00-b117-4f833f63d4e8"
      4 "user":"a70d3cfc-eadb-4043-a3be-caee8b703ea0"
     36 "user":"b27b6409-6631-40b0-9655-159dc490c392"
    408 "user":"bb0fa050-0027-4ded-a76a-28e187dc9cb5"
      9 "user":"bd92f6e1-2915-4b39-8d92-afab3be6db42"
      8 "user":"befa197f-5bd2-4481-aae8-709ca876e57b"
      8 "user":"cc0d6732-3037-46ff-8dcc-8d6f1942e6c4"
     86 "user":"f585a5d5-028c-4d33-a596-3c59c846697e"

Edit: could this be probably a cache issue? Since two servers are using the same Redis cache?

stwo-aix commented 4 years ago

One thing to add which may be related: in the oc_shares table I have a lot of entries which are not "accepted" (17K from 26K), but nobody has the "accept shares" option set. Would it be safe to set all entries to "accepted" = 1?

felixfischer commented 3 years ago

SUBSCRIBE. I have the same issue.

stwo-aix commented 3 years ago

Now that this is 2 months old right now, I'd like to ask for an update or an official response... Or do I have to provide more information? If so, tell me please.

scroom commented 3 years ago

We are experiencing the same issue but everything is running on the same server, Nextcloud, Database, LDAP, Redis ...

vincenta commented 3 years ago

We are experiencing the same issue with Nextcould 20.0.8

I also noticed that when this happens, users are not able to accept the share... which is a very blocking point !

scroom commented 3 years ago

@blizzz Can you maybe take a look at this?

blizzz commented 3 years ago

Reproduction steps would be helpful. I have not seen this issue myself, and "Error while trying to create shared mount" is a bit little of info.

stwo-aix commented 3 years ago

I would have provided the reproduction steps if I'd know them.

"'Error while trying to create shared mount' is a bit little of info."

Exactly, it would be really helpful to get more information, wouldn't it?

szaimen commented 3 years ago

Is this Issue still valid in NC21.0.3? If not, please close this issue. Thanks! :)

ghost commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.

joergmschulz commented 4 months ago

can still happen in NC 29

blizzz commented 4 months ago

@joergmschulz this is closed and silenced for three years – please create a new issue. Thanks!

nextcloud / server