You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Unhandled exception (in conjunction with silently incorrect file listing): Undefined array key "filesystem" at /nc/lib/private/Lockdown/LockdownManager.php#80
Steps to reproduce
do not use / clear cookies of sessions created in nextcloud versions before v28.0.7rc3
login via user_saml backend (read: no password)
try to access file
observe incorrectly empty file listing, observe warning in logs
Expected behavior
Expected to see all my files (which are still there, according to occ files:scan)
If that is impossible, I expect nextcloud to deal with whatever is wrong with my session, possibly resetting authentication.
If that is also impossible, I expect to see the internal server error page and find something in the logs that spells out what is wrong.
Installation method
Community Manual installation with Archive
Nextcloud Server version
28
Operating system
Debian/Ubuntu
PHP engine version
PHP 8.1
Web server
Nginx
Database engine version
PostgreSQL
Is this bug present after an update or on a fresh install?
Updated from a MINOR version (ex. 22.1 to 22.2)
Are you using the Nextcloud Server Encryption module?
accessing /settings/admin/richdocuments with an admin user does produce the internal server error page and slightly more verbose traceback:
2024-06-20T18:48:52+0000 nextcloud[7526]: {"reqId":"b33o2gNsLVvtkMeCrSZH","level":3,"time":"2024-06-20 18:48:52","remoteAddr":"2001:db8::4","user":"redacted","app":"index","method":"GET","url":"/settings/admin/richdocuments","message":"{"Exception":"OC\\ForbiddenException","Message":"This request is not allowed to access the filesystem","Code":0,"Trace":[{"file":"/nc/lib/private/Files/View.php","line":1167,"function":"mkdir","class":"OC\\Lockdown\\Filesystem\\NullStorage","type":"->"},{"file":"/nc/lib/private/Files/View.php","line":245,"function":"basicOperation","class":"OC\\Files\\View","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":58,"function":"mkdir","class":"OC\\Files\\View","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":132,"function":"getStorage","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":75,"function":"hasKey","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/apps/richdocuments/lib/Service/DemoService.php","line":45,"function":"get","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/apps/richdocuments/lib/Settings/Admin.php","line":68,"function":"fetchDemoServers","class":"OCA\\Richdocuments\\Service\\DemoService","type":"->"},{"file":"/nc/apps/settings/lib/Controller/CommonSettingsTrait.php","line":129,"function":"getForm","class":"OCA\\Richdocuments\\Settings\\Admin","type":"->"},{"file":"/nc/apps/settings/lib/Controller/AdminSettingsController.php","line":86,"function":"formatSettings","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/apps/settings/lib/Controller/CommonSettingsTrait.php","line":149,"function":"getSettings","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/apps/settings/lib/Controller/AdminSettingsController.php","line":71,"function":"getIndexResponse","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/lib/private/AppFramework/Http/Dispatcher.php","line":230,"function":"index","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/lib/private/AppFramework/Http/Dispatcher.php","line":137,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/nc/lib/private/AppFramework/App.php","line":184,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/nc/lib/private/Route/Router.php","line":315,"function":"main","class":"OC\\AppFramework\\App","type":"::"},{"file":"/nc/lib/base.php","line":1069,"function":"match","class":"OC\\Route\\Router","type":"->"},{"file":"/nc/index.php","line":39,"function":"handleRequest","class":"OC","type":"::"}],"File":"/nc/lib/private/Lockdown/Filesystem/NullStorage.php","Line":41,"message":"This request is not allowed to access the filesystem","exception":{},"CustomMessage":"This request is not allowed to access the filesystem"}","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0","version":"28.0.7.2"}
To properly validate the upgrade path, one needs to verify both old and new tokens - versions past the rc1 could appear to work.. until one clears cookies!
The text was updated successfully, but these errors were encountered:
Bug description
Unhandled exception (in conjunction with silently incorrect file listing):
Undefined array key "filesystem" at /nc/lib/private/Lockdown/LockdownManager.php#80
Steps to reproduce
user_saml
backend (read: no password)Expected behavior
Expected to see all my files (which are still there, according to
occ files:scan
)If that is impossible, I expect nextcloud to deal with whatever is wrong with my session, possibly resetting authentication.
If that is also impossible, I expect to see the internal server error page and find something in the logs that spells out what is wrong.
Installation method
Community Manual installation with Archive
Nextcloud Server version
28
Operating system
Debian/Ubuntu
PHP engine version
PHP 8.1
Web server
Nginx
Database engine version
PostgreSQL
Is this bug present after an update or on a fresh install?
Updated from a MINOR version (ex. 22.1 to 22.2)
Are you using the Nextcloud Server Encryption module?
Encryption is Disabled
What user-backends are you using?
Configuration report
List of activated Apps
Nextcloud Signing status
Nextcloud Logs
Additional info
accessing
/settings/admin/richdocuments
with an admin user does produce the internal server error page and slightly more verbose traceback:2024-06-20T18:48:52+0000 nextcloud[7526]: {"reqId":"b33o2gNsLVvtkMeCrSZH","level":3,"time":"2024-06-20 18:48:52","remoteAddr":"2001:db8::4","user":"redacted","app":"index","method":"GET","url":"/settings/admin/richdocuments","message":"{"Exception":"OC\\ForbiddenException","Message":"This request is not allowed to access the filesystem","Code":0,"Trace":[{"file":"/nc/lib/private/Files/View.php","line":1167,"function":"mkdir","class":"OC\\Lockdown\\Filesystem\\NullStorage","type":"->"},{"file":"/nc/lib/private/Files/View.php","line":245,"function":"basicOperation","class":"OC\\Files\\View","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":58,"function":"mkdir","class":"OC\\Files\\View","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":132,"function":"getStorage","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/lib/private/Cache/File.php","line":75,"function":"hasKey","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/apps/richdocuments/lib/Service/DemoService.php","line":45,"function":"get","class":"OC\\Cache\\File","type":"->"},{"file":"/nc/apps/richdocuments/lib/Settings/Admin.php","line":68,"function":"fetchDemoServers","class":"OCA\\Richdocuments\\Service\\DemoService","type":"->"},{"file":"/nc/apps/settings/lib/Controller/CommonSettingsTrait.php","line":129,"function":"getForm","class":"OCA\\Richdocuments\\Settings\\Admin","type":"->"},{"file":"/nc/apps/settings/lib/Controller/AdminSettingsController.php","line":86,"function":"formatSettings","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/apps/settings/lib/Controller/CommonSettingsTrait.php","line":149,"function":"getSettings","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/apps/settings/lib/Controller/AdminSettingsController.php","line":71,"function":"getIndexResponse","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/lib/private/AppFramework/Http/Dispatcher.php","line":230,"function":"index","class":"OCA\\Settings\\Controller\\AdminSettingsController","type":"->"},{"file":"/nc/lib/private/AppFramework/Http/Dispatcher.php","line":137,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/nc/lib/private/AppFramework/App.php","line":184,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->"},{"file":"/nc/lib/private/Route/Router.php","line":315,"function":"main","class":"OC\\AppFramework\\App","type":"::"},{"file":"/nc/lib/base.php","line":1069,"function":"match","class":"OC\\Route\\Router","type":"->"},{"file":"/nc/index.php","line":39,"function":"handleRequest","class":"OC","type":"::"}],"File":"/nc/lib/private/Lockdown/Filesystem/NullStorage.php","Line":41,"message":"This request is not allowed to access the filesystem","exception":{},"CustomMessage":"This request is not allowed to access the filesystem"}","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0","version":"28.0.7.2"}
scope
column comes from fix(Session): avoid password confirmation on SSO #43942 - that is why the auth backenduser_saml
matters.scope
column of theauthtoken
table is NULL without [stable28] fix(Session): avoid password confirmation on SSO #45704 (resulting behavior: looks good) and is{"password-unconfirmable":true}
with that patchset (resulting behavior: missing files).The text was updated successfully, but these errors were encountered: