pollopolea
commented
6 years ago
I have two server working with owncloud and a database.
I tried to configure a redis server to avoid some file locks (row contention) in the database.
to test this scenario, I set up a new server with owncloud and a new server with remote redis (single master).
Following the setup instructions, I changed the config. php file. I cleaned the "oc_file_locks"table, cleaned the redis server (flushdb) and restarted the web server.
Unexpectedly, there were no changes in REDIS (command KEYS *) but there were new entries in the file_locks table of the database.
In case there was a problem with the network server, I tested the communication with redis-cli, and everything was correct.
Giving a step further I changed the config. php to use redis as memcache file again:
Memcache. distributed' =>' Ooh, Memcache Redis',
Memcache. local' =>' Oct' Memcache Redis,
Now there was information on the Redis server (I assume it will be session information). But there were also new entries in the oc_file_locks table.
My conclusions are that:
my redis server works and communication is correct
Redis is working to store session information.
Redis is not being used for file blocking.
### Steps to reproduce
1. Configure remote Redis Server
2. Configure owncloud to use Redis filelocking [admin_manual](https://doc.owncloud.org/server/10.0/admin_manual/configuration/server/caching_configuration.htm) :
"filelocking.enabled" => true,
"memcache.locking" => "\OC\Memcache\Redis",
"redis": {
"host": "172.18.221.141",
"port": 6379,
"timeout": 0,
"password": "***REMOVED SENSITIVE VALUE***"
}
3. stop Webserver.
4. truncate table oc_filelocks
5. flush redis
6. Start Apache
### Expected behaviour
Some locks or any Key in Redis server.
### Actual behaviour
No data in redis Server.
New entries in oc_filelocks.
### Server configuration
**Operating system**:
Centos 7
**Web server:**
Apache 2.4
**PHP version:**
7.1.8
**ownCloud version:** (see ownCloud admin page)
10.0.6
**Updated from an older ownCloud or fresh install:**
uldate from 10.0
**Where did you install ownCloud from:**
tar file
**Signing status (ownCloud 9.0 and above):**
```
Login as admin user into your ownCloud and access
http://example.com/index.php/settings/integrity/failed
paste the results into https://gist.github.com/ and puth the link here.
```
**The content of config/config.php:**
{
"system": {
"instanceid": "ocbew9vgyenp",
"passwordsalt": "***REMOVED SENSITIVE VALUE***",
"secret": "***REMOVED SENSITIVE VALUE***",
"datadirectory": "\/var\/www\/html\/owncloud-data",
"version": "10.0.6.1",
"installed": true,
"dbtype": "oci",
"dbname": "***REMOVED SENSITIVE VALUE***",
"dbhost": "",
"dbuser": "***REMOVED SENSITIVE VALUE***",
"dbpassword": "***REMOVED SENSITIVE VALUE***",
"dbtableprefix": "oc_",
"dbtablespace": "USERS",
"logtimezone": "Europe\/Madrid",
"loglevel": 0,
"log_type": "owncloud",
"logfile": "\/var\/log\/owncloud.log",
"mail_smtpmode": "smtp",
"mail_smtpsecure": "ssl",
"mail_from_address": "***REMOVED SENSITIVE VALUE***",
"mail_domain": "***REMOVED SENSITIVE VALUE***",
"mail_smtphost": "***REMOVED SENSITIVE VALUE***",
"mail_smtpauth": 1,
"mail_smtpport": "465",
"mail_smtpname": "***REMOVED SENSITIVE VALUE***",
"mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
"filesystem_check_changes": 1,
"trashbin_retention_obligation": "auto",
"lost_password_link": "disabled",
"ldapIgnoreNamingRules": false,
"maintenance": false,
"filelocking.enabled": true,
"memcache.locking": "\\OC\\Memcache\\Redis",
"memcache.distributed": "\\OC\\Memcache\\Redis",
"memcache.local": "\\OC\\Memcache\\Redis",
"redis": {
"host": "172.18.221.141",
"port": 6379,
"timeout": 0,
"password": "***REMOVED SENSITIVE VALUE***"
}
}
}
```
Log in to the web-UI with an administrator account and click on
'admin' -> 'Generate Config Report' -> 'Download ownCloud config report'
This report includes the config.php settings, the list of activated apps
and other details in a well sanitized form.
or
If you have access to your command line run e.g.:
sudo -u www-data php occ config:list system
from within your ownCloud installation folder
*ATTENTION:* Do not post your config.php file in public as is. Please use one of the above
methods whenever possible. Both, the generated reports from the web-ui and from occ config:list
consistently remove sensitive data. You still may want to review the report before sending.
If done manually then it is critical for your own privacy to dilligently
remove *all* host names, passwords, usernames, salts and other credentials before posting.
You should assume that attackers find such information and will use them against your systems.
```
**List of activated apps:**
```
If you have access to your command line run e.g.:
sudo -u www-data php occ app:list
from within your ownCloud installation folder.
```
**Are you using external storage, if yes which one:** local/smb/sftp/...
**Are you using encryption:** yes/no
**Are you using an external user-backend, if yes which one:** LDAP/ActiveDirectory/Webdav/...
#### LDAP configuration (delete this part if not used)
```
With access to your command line run e.g.:
sudo -u www-data php occ ldap:show-config
from within your ownCloud installation folder
Without access to your command line download the data/owncloud.db to your local
computer or access your SQL server remotely and run the select query:
SELECT * FROM `oc_appconfig` WHERE `appid` = 'user_ldap';
Eventually replace sensitive data as the name/IP-address of your LDAP server or groups.
```
### Client configuration
**Browser:**
**Operating system:**
### Logs
#### Web server error log
```
Insert your webserver log here
```
#### ownCloud log (data/owncloud.log)
```
Insert your ownCloud log here
```
#### Browser log
```
Insert your browser log here, this could for example include:
a) The javascript console log
b) The network log
c) ...
```
PVince81
tomneedham
lock[bot]