Authentication issues with YunoHost 11.1.0 with new SSOwat version / Please upgrade to YunoHost 11.1.2 to fix

Now you speak about it it’s look same time or 'ear I update PHP with 8 version in graphic version
Because I don’t remember doing an upgrade of SSO or anything near to YunoHost heart before

1 Like

Same issue here
I just thinking is about my 2FA login but seems not
When I try to reconnect I’m able to enter login password and 2FA but it’s ask again and again these cred

In the log I see 401 error
and [

error] 2005398#2005398: *1863 [lua] helpers.lua:385: authenticate(): Connection failed

Someone did try a downgrade to 11.0.9 again ?

repo: testing
repo: testing
repo: stable
version: 11.0.9
repo: stable
version: 11.0.11


FYI, I tried this by stopping the service with sudo systemctl stop php8.0-fpm.service, then quit and restarted both my Linux and Android client, unfortunately without success.


Hi sssammm,
thank you for trying this.

I also tried
sudo yunohost service disable php8-fpm
and without php8-fpm, I get a “502 Bad Gateway” error message on my nextcloud web page.

Maybe Nginx needs to be reconfigured, but I don’t know how.
And I wonder if php8 has become mandatory with this version of Nextcloud.


1 Like

If I may ask, how can the deactivation be done? That may be useful until a proper fix is found.

You folks seem to all be running the 11.1.0 version for YunoHost, which is the infamous “YunoHost 11.1.x (testing) was incorrectly released on the stable channel instead of testing”

You should be running instead 11.1.2.x (testing) at least, which is more consistent with the fix published on SSOwat (it adds the use_remote_user_var_in_nginx_conf flag)

So I would advise using

curl | bash

to enable testing, to at least just to upgrade to 11.1.2.x, and then if you want remove the “testing” keyword from /etc/apt/sources.list.d/yunohost.list (though honestly I would advise keeping the testing channel enabled until we release 11.1 as stable …)

The alternative can be to downgrade ssowat but honestly meh, not even sure that’s easily possible


i think i have the same problem for the same reason.

how can i go back to the stable version instead?

@Aleks if I run the curl command, leave it in testing, that should solve our problem?

Just checking. Just to be sure.


Dunno what you mean by “leave it in testing”, but yes …

If reverting to the stable version was simple, we would advice this instead. There’s no way to go back to stable, there are major non-revertible changes between 11.0 and 11.1

ah, lol, got it.
thanks for sharing.

i didn’t understand this bit…

I mean if you want to “opt out” of the testing upgrades after upgrading to 11.1.2.x, then you should remove the “testing” keyword by editing the file with e.g. sudo nano /etc/apt/sources.list.d/yunohost.list and remove the testing keyword.

But as said, that’s not recommended because you wont benefit from possible bugfixes that may be published before 11.1 gets released as stable (in fact this is precisely what is happening right now). So I would stick with testing and only opt out of testing once 11.1 is really released as stable

1 Like


You mention about editing

and then if you want remove the “testing”

We understand each other so yes….

Now showing (testing) I will leave this as it is until stable is released…So the first part of your instructions worked. Thank you.

However, just tried a Nextcloud client (iOS) entered the credentials etc but failed with.

Access Denied State token does not match



Mokay so let’s double-check that grep use_remote_user_var_in_nginx_conf /etc/ssowat/conf.json now does show something

Hi… just run that and got

“use_remote_user_var_in_nginx_conf”: true,

But multiple times, about 20 lines with a mix of true and false


Yes, that’s expected

So are you experiencing the same symptoms as before upgrading, or did something change ?

@Aleks i didn’t change anything. What I did do is delete the Nextcloud app and try again with same result. I was just about to turn off Nextcloud 2FA to see if that was causing token issues?


I mean you said you’re now running YunoHost so I assume you just upgraded from 11.1.0 …

Yes sir. I did the fist part of your instructions then did nothing more than try to connect a Nextcloud client that failed with a new message regarding tokens.

See my earlier message for the correct message


Mokay, and does it work on your other devices ?