All application labels and permissions missing after installing TheLounge

[kuba-orlik]

My YunoHost server

Hardware: VPS bought online
YunoHost version: 4.1.6
I have access to my server : Through SSH
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no

Description of my issue

I tried installing the TheLounge app, but it didn’t succeed for some reason.

After that, all applications are missing from my dashboard. Also, permissions don’t have labels, either. I cannot assign or change them. I’d like to restore them, but I don’t know how to…

TheLounge is visible on the second screenshot, because I tried installing it again and it did work.

Also, trying to add a permission results in an issue with LDAP now:

https://paste.yunohost.org/raw/izodiqoqix

[Aleks]

Uuuuh wokay do you have any of the app installation log (failed or succeeded) or removal as well maybe …

Also can you share the output of yunohost user permission list (or tell if looks like all expected permissions are there)

Edit: also what if you go in “Applications > … some app … > Change label and tile”, are you able to change the label of permissions (if they just happen to be empty)

[kuba-orlik]

@Aleks

do you have any of the app installation log (failed or succeeded) or removal as well maybe …

The log of the installation than mysteriously failed was not captured. Here’s a log from the later successful installation of TheLounge:

https://paste.yunohost.org/raw/utoxilejov

@Aleks

Also can you share the output of yunohost user permission list (or tell if looks like all expected permissions are there)

It seems that the expected permissions are there:

permissions: 
  bibliogram.main: 
    allowed: 
      - visitors
      - all_users
  etherpad_mypads.main: 
    allowed: 
      - visitors
      - all_users
  gitea.admin: 
    allowed: kuba
  gitea.main: 
    allowed: visitors
  mail.main: 
    allowed: 
      - milosz
      - kuba
  nextcloud.main: 
    allowed: 
      - visitors
      - kuba
  onlyoffice.main: 
    allowed: 
      - visitors
      - all_users
  opensondage.main: 
    allowed: 
      - visitors
      - all_users
  peertube.main: 
    allowed: 
      - visitors
      - all_users
  sogo.main: 
    allowed: 
      - visitors
      - all_users
  syncthing.main: 
    allowed: 
      - visitors
      - all_users
      - kuba
  xmpp.main: 
    allowed: all_users

@Aleks

what if you go in “Applications > … some app … > Change label and tile”, are you able to change the label of permissions (if they just happen to be empty

Trying to rename the permission label from that menu gives me

Could not update permission 'syncthing.main': 
error during LDAP update operation with: 
rdn='cn=syncthing.main,ou=permission',
attr_dict={'showTile': ['TRUE'], 'groupPermission':
['cn=visitors,ou=groups,dc=yunohost,dc=org',
 'cn=all_users,ou=groups,dc=yunohost,dc=org',
 'cn=kuba,ou=groups,dc=yunohost,dc=org'], 
 'label': ['Syncthing']}, 
new_rdn=False and exception: {
    'info': u"object class 'permissionYnh' requires attribute 'authHeader'", 
    'desc': u'Object class violation'
}

[Aleks]

Mokay then can we make sure that in Tools > Migrations you don’t have any pending migration (in particular migration 19)

[kuba-orlik]

Indeed there is:

But running it gives an error:

Migration 0019_extend_permissions_features did not complete, aborting. Error: Domain 'nyuno.kuba.orlik.name' unknown

[Aleks]

Then let’s find where that domain is mentioned (i’m guessing it’s the usual error of “the legacy permission contains dots instead of dashes or vice-versa” … )

So maybe this can help pinpointing the line causing the issue:

grep -nr 'nyuno.kuba.orlik.name' /etc/yunohost/apps/*/settings.yml

And if you know about editing file, you should fix the corresponding domain into the proper dot/dashes, then re-run the migration

[kuba-orlik]

@Aleks

grep -nr 'nyuno.kuba.orlik.name' /etc/yunohost/apps/*/settings.yml

It looks like this:

/etc/yunohost/apps/onlyoffice/settings.yml:3:checksum__etc_nginx_conf.d_nyuno.kuba-orlik.name.d_onlyoffice.conf: 6e3bab5da750e65b90689ce87e122582
/etc/yunohost/apps/onlyoffice/settings.yml:8:domain: nyuno.kuba-orlik.name
/etc/yunohost/apps/opensondage/settings.yml:3:checksum__etc_nginx_conf.d_nyuno.kuba-orlik.name.d_opensondage.conf: 6d52956c25c79b82f6dcaabd38b0e09a
/etc/yunohost/apps/opensondage/settings.yml:8:domain: nyuno.kuba-orlik.name
/etc/yunohost/apps/opensondage/settings.yml:21:protected_regex: nyuno.kuba.orlik.name/date/admin/
/etc/yunohost/apps/syncthing/settings.yml:2:checksum__etc_nginx_conf.d_nyuno.kuba-orlik.name.d_syncthing.conf: 91050425d525def6b6c5cbbfb94f5723
/etc/yunohost/apps/syncthing/settings.yml:6:domain: nyuno.kuba-orlik.name

Not sure how to correct it

[Aleks]

nano /etc/yunohost/apps/opensondage/settings.yml

then find the line with protected_regex: … make sure that the domain is kuba-orlik and not kuba.orlik

Save/exit with Ctrl+X, Y to validate, Enter

[kuba-orlik]

I used emacs instead of nano, but it worked anyway! Thanks