nextcloud / user_saml

:lock: App for authenticating Nextcloud users using SAML https://apps.nextcloud.com/apps/user_saml
https://portal.nextcloud.com/article/configuring-single-sign-on-10.html
GNU Affero General Public License v3.0
96 stars 76 forks source link

SAML login on Nextcloud 28 does not work anymore #865

Closed RuTHlessBEat200 closed 4 months ago

RuTHlessBEat200 commented 4 months ago

Steps to reproduce

  1. Install Nextcloud 28.0.7
  2. Install user_saml app (6.1.3)
  3. Configure SAML
  4. Login wih SAML User

Expected behaviour

The user should be logged in and see their data

Actual behaviour

After logging in, the user does not see any data. The message “Problem loading page, reloading in X seconds” appears several times at the top right. It then starts a timer which counts down from 5 seconds and then reloads the page. As soon as this message no longer appears, the user still does not see his data. However, it can display how much storage the user has used at the bottom left. After pressing F5 the data is visible again. In the DevTools of the browser 401 Unauthorized & 412 Precondition Failed appears repeatedly.

Server configuration

Operating system: Kubernetes on Linux 5.15.154-flatcar x86_64 Web server: Nginx (Docker image nextcloud:28.0.7-fpm) Database: mysql 10.6.17 PHP version: 8.2.21 Nextcloud version: (see Nextcloud admin page) nextcloud:28.0.7-fpm Where did you install Nextcloud from: https://github.com/nextcloud/helm/tree/main/charts/nextcloud

List of activated apps:

If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your Nextcloud installation folder

Enabled:

Nextcloud configuration:

If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your Nextcloud installation folder

{ "system": { "htaccess.RewriteBase": "\/", "memcache.local": "\OC\Memcache\APCu", "apps_paths": [ { "path": "\/var\/www\/html\/apps", "url": "\/apps", "writable": false }, { "path": "\/var\/www\/html\/custom_apps", "url": "\/custom_apps", "writable": true } ], "default_phone_region": "ch", "proxy": { "host": "REMOVED SENSITIVE VALUE", "port": REMOVED SENSITIVE VALUE }, "trusted_proxies": "REMOVED SENSITIVE VALUE", "forwarded_for_headers": [ "HTTP_X_FORWARDED_FOR" ], "memcache.distributed": "\OC\Memcache\Redis", "memcache.locking": "\OC\Memcache\Redis", "redis": { "host": "REMOVED SENSITIVE VALUE", "port": "6379", "password": "REMOVED SENSITIVE VALUE" }, "mail_smtpmode": "smtp", "mail_smtphost": "REMOVED SENSITIVE VALUE", "mail_smtpport": "587", "mail_smtpsecure": "tls", "mail_smtpauth": true, "mail_smtpauthtype": "LOGIN", "mail_smtpname": "REMOVED SENSITIVE VALUE", "mail_smtppassword": "REMOVED SENSITIVE VALUE", "mail_from_address": "REMOVED SENSITIVE VALUE", "mail_domain": "REMOVED SENSITIVE VALUE", "mail_smtpstreamoptions": { "ssl": { "allow_self_signed": true, "verify_peer": false, "verify_peer_name": false } }, "passwordsalt": "REMOVED SENSITIVE VALUE", "secret": "REMOVED SENSITIVE VALUE", "trusteddomains": [ "localhost", "REMOVED SENSITIVE VALUE" ], "datadirectory": "REMOVED SENSITIVE VALUE", "dbtype": "mysql", "version": "28.0.7.4", "overwrite.cli.url": "http:\/\/localhost", "dbname": "REMOVED SENSITIVE VALUE", "dbhost": "REMOVED SENSITIVE VALUE", "dbuser": "REMOVED SENSITIVE VALUE", "dbpassword": "REMOVED SENSITIVE VALUE", "installed": true, "dbport": "", "dbtableprefix": "oc", "instanceid": "REMOVED SENSITIVE VALUE", "theme": "", "loglevel": 2, "log_rotate_size": "5242880000", "maintenance": false, "skeletondirectory": "", "ldapUserCleanupInterval": "20", "ldapProviderFactory": "OCA\User_LDAP\LDAPProviderFactory", "updater.release.channel": "stable" } }

Client configuration

Browser: google-chrome 126.0.6478.182-1 Operating system: EndeavourOS

Logs

Nextcloud log (data/owncloud.log)

Insert your Nextcloud log here

nothing useful in here

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

devtools_output.json

arno4000 commented 4 months ago

I also have the same problem, would really appreciate a fix

blizzz commented 4 months ago

Not a SAML issue. Fixed on the server with https://github.com/nextcloud/server/pull/46398 and will be released with next maintenance release, expected today.