nextcloud / server

☁️ Nextcloud server, a safe home for all your data
https://nextcloud.com
GNU Affero General Public License v3.0
26.91k stars 4.02k forks source link

LDAP/AD accounts: Files cannot be shared with users containing umlauts (ä,ö,ü) in their displayName #27958

Closed m8ichael closed 3 years ago

m8ichael commented 3 years ago

Steps to reproduce

  1. Create a new user in AD containing an umlaut in the distinguishedName (=User A)
  2. Create a second user in AD (=User B)
  3. Deactivate in the nextcloud settings the autocomplete function of usernames
  4. User B should try to share a file with User A
  5. Even if the name of user A is typed completely, you aren't able to share the file with user A

Expected behaviour

You should be able to select user A to share a file with him.

Actual behaviour

Nothing happens

Server configuration detail

Operating system: Linux 4.15.0-147-generic #151-Ubuntu SMP Fri Jun 18 19:21:19 UTC 2021 x86_64

Webserver: Apache (fpm-fcgi)

Database: mysql 10.5.8

PHP version:

7.4.21 Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, cgi-fcgi, mysqlnd, PDO, xml, apcu, bcmath, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, gmp, iconv, igbinary, imagick, intl, json, ldap, exif, mysqli, PDO_Firebird, pdo_mysql, apc, posix, readline, redis, shmop, SimpleXML, sockets, ssh2, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Phar, Zend OPcache

Nextcloud version: 21.0.3 - 21.0.3.1

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status Array ( )
List of activated apps ``` Enabled: - accessibility: 1.7.0 - activity: 2.14.3 - admin_audit: 1.11.0 - apporder: 0.13.0 - bruteforcesettings: 2.2.0 - calendar: 2.3.0 - circles: 0.21.3 - cloud_federation_api: 1.4.0 - comments: 1.11.0 - contacts: 4.0.0 - dav: 1.17.1 - drawio: 1.0.1 - federatedfilesharing: 1.11.0 - federation: 1.11.0 - files: 1.16.0 - files_external: 1.12.0 - files_mindmap: 0.0.24 - files_rightclick: 1.0.0 - files_sharing: 1.13.1 - files_trashbin: 1.11.0 - files_versions: 1.14.0 - groupfolders: 9.0.2 - impersonate: 1.8.0 - issuetemplate: 0.7.0 - logreader: 2.6.0 - lookup_server_connector: 1.9.0 - notifications: 2.9.0 - oauth2: 1.9.0 - onlyoffice: 7.0.2 - password_policy: 1.11.0 - passwords: 2021.7.22 - polls: 3.0.0 - privacy: 1.5.0 - provisioning_api: 1.11.0 - recommendations: 1.0.0 - serverinfo: 1.11.0 - settings: 1.3.0 - sharebymail: 1.11.0 - tasks: 0.13.6 - text: 3.2.0 - theming: 1.12.0 - twofactor_backupcodes: 1.10.0 - twofactor_totp: 6.1.0 - twofactor_u2f: 6.2.0 - updatenotification: 1.11.0 - user_ldap: 1.11.0 - viewer: 1.5.0 - workflowengine: 2.3.0 Disabled: - announcementcenter - contactsinteraction - dashboard - encryption - files_accesscontrol - files_automatedtagging - files_pdfviewer - files_videoplayer - firstrunwizard - mail - nextcloud_announcements - ocr - photos - spreed - support - survey_client - systemtags - talk_matterbridge - terms_of_service - twofactor_gateway - user_status - weather_status ```
Configuration (config/config.php) ``` { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "***REMOVED SENSITIVE VALUE***" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "dbtype": "mysql", "version": "21.0.3.1", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "default_language": "de", "default_locale": "de_DE", "installed": true, "remember_login_cookie_lifetime": 1296000, "session_lifetime": 86400, "session_keepalive": true, "skeletondirectory": "", "knowledgebaseenabled": false, "lost_password_link": "disabled", "ldapIgnoreNamingRules": false, "ldapProviderFactory": "\\OCA\\User_LDAP\\LDAPProviderFactory", "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_smtpmode": "smtp", "mail_smtpauthtype": "LOGIN", "mail_domain": "***REMOVED SENSITIVE VALUE***", "auth.bruteforce.protection.enabled": true, "maintenance": false, "updater.release.channel": "stable", "theme": "", "loglevel": 0, "forcessl": true, "forceSSLforSubdomains": true, "trashbin_retention_obligation": "7, 20", "has_internet_connection": true, "check_for_working_webdav": true, "check_for_working_wellknown_setup": true, "check_for_working_htaccess": true, "cron_log": true, "logtimezone": "Europe\/Berlin", "logdateformat": "F d, Y H:i:s", "ldapUserCleanupInterval": 51, "filelocking.enabled": "true", "mail_smtpsecure": "ssl", "mail_smtpauth": 1, "mail_smtphost": "***REMOVED SENSITIVE VALUE***", "mail_smtpport": "465", "mail_smtpname": "***REMOVED SENSITIVE VALUE***", "mail_smtppassword": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "https:\/\/***REMOVED SENSITIVE VALUE***", "share_folder": "\/Mit mir geteilt", "app_install_overwrite": [ "calendar", "circles", "groupfolders", "ocr", "impersonate", "bruteforcesettings", "twofactor_gateway", "issuetemplate" ], "twofactor_enforced": "false", "twofactor_enforced_groups": [ "NC_EnablePasswords" ], "twofactor_enforced_excluded_groups": [], "mysql.utf8mb4": true, "default_phone_region": "DE", "memcache.local": "\\OC\\Memcache\\APCu", "memcache.locking": "\\OC\\Memcache\\Redis", "redis": { "host": "***REMOVED SENSITIVE VALUE***", "password": "***REMOVED SENSITIVE VALUE***", "port": 0, "timeout": 0 }, "preview_max_x": 1024, "preview_max_y": 768, "preview_max_scale_factor": 1 } ```

Are you using external storage, if yes which one: no

Are you using encryption: no

Are you using an external user-backend, if yes which one: ActiveDirectory

LDAP configuration (delete this par if not used) ``` background_sync_interval: 43200background_sync_offset: 0background_sync_prefix: s01cleanUpJobOffset: 0enabled: yesinstalled_version: 1.11.0s01_lastChange: 1626243279s01has_memberof_filter_support: 1s01home_folder_naming_rule: s01last_jpegPhoto_lookup: 0s01ldap_agent_password: VGVjaEFscGVuMjcqs01ldap_attributes_for_group_search: s01ldap_attributes_for_user_search: s01ldap_backup_host: ldaps://serverbackup.fa.locals01ldap_backup_port: 636s01ldap_base: DC=FA,DC=locals01ldap_base_groups: DC=FA,DC=locals01ldap_base_users: DC=FA,DC=locals01ldap_cache_ttl: 600s01ldap_configuration_active: 1s01ldap_default_ppolicy_dn: s01ldap_display_name: displaynames01ldap_dn: CN=Nextcloud,OU=Alle Nutzer,DC=FA,DC=locals01ldap_dynamic_group_member_url: s01ldap_email_attr: mails01ldap_experienced_admin: 0s01ldap_expert_username_attr: sAMAccountNames01ldap_expert_uuid_group_attr: s01ldap_expert_uuid_user_attr: s01ldap_gid_number: gidNumbers01ldap_group_display_name: cns01ldap_group_filter: (|(cn=...))s01ldap_group_filter_mode: 0s01ldap_group_member_assoc_attribute: members01ldap_groupfilter_groups: ..._rws01ldap_groupfilter_objectclass: s01ldap_host: ldaps://davserver.fa.locals01ldap_login_filter: (&(&(|(objectclass=person))(|(|(memberof=CN=Domänen-Benutzer,CN=Users,DC=FA,DC=local)(primaryGroupID=513))))(|(samaccountname=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid))))s01ldap_login_filter_mode: 1s01ldap_loginfilter_attributes: s01ldap_loginfilter_email: 1s01ldap_loginfilter_username: 1s01ldap_matching_rule_in_chain_state: availables01ldap_nested_groups: 1s01ldap_override_main_server: 0s01ldap_paging_size: 500s01ldap_port: 636s01ldap_quota_attr: s01ldap_quota_def: s01ldap_tls: 0s01ldap_turn_off_cert_check: 0s01ldap_turn_on_pwd_change: 0s01ldap_user_display_name_2: s01ldap_user_filter_mode: 0s01ldap_userfilter_groups: Domänen-Benutzers01ldap_userfilter_objectclass: persons01ldap_userlist_filter: (&(|(objectclass=person))(|(|(memberof=CN=Domänen-Benutzer,CN=Users,DC=FA,DC=local)(primaryGroupID=513))))s01use_memberof_to_detect_membership: 1types: authentication ```

Client configuration

Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Operating system:

Logs

Web server error log ``` Insert your web server log here ```
Nextcloud log ``` Insert your Nextcloud log here ```
Browser log
szaimen commented 3 years ago

Hi, can you please share your Nextcloud log and browser log on this? Thank you!

ghost commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.