Authentication issues with YunoHost 11.1.0 with new SSOwat version / Please upgrade to YunoHost 11.1.2 to fix

Support
1

My YunoHost server

Hardware: VPS bought online / Old laptop or computer / Raspberry Pi at home / Internet Cube with VPN / Other ARM board / …
YunoHost version: 11.1.0.2 (testing).
I have access to my server : Through SSH | through the webadmin | direct access via keyboard / screen | …
Are you in a special context or did you perform some particular tweaking on your YunoHost instance ? : no
If yes, please explain:
If your request is related to an app, specify its name and version: Nextcloud

Description of my issue

Bit of a strange one this…

Yesterday I accepted an update to the ssowat during a routine system update.

I have two Nextcloud instances in my server. Coincidence maybe, but now none of my devices, laptop or iPhones can connect using the Nextcloud app. I get the message “Connection Error - Internal Server Error” on an iPhone and no connection on my MAC laptop. Before the ssowat update it definitely worked as I created work shares for a job, something I do almost everyday.

If I try through a web browser I have no problems logging into the server(s)

I have restarted the devices but not the server yet as it handles email and I don’t want to reboot to a dud!

I’d like to provide a log but I don’t know where to start and the system diagnostics doesn’t have any errors.

Any help please would be appreciated]

Dj

1 Like
2

Can you run the following command in the CLI, and try again?

sudo yunohost app ssowatconf
3

I’m experiencing the same problem. My nextcloud clients can’t connect since ssowat updated to version 11.0.11.

I have no problem connecting with my browser though.

Under visitors permissions, nextcloud (api) is now in light grey and can’t be removed.

image

sudo yunohost app ssowatconf doesn’t return anything and doesn’t fix the problem.

4

Same problem here. Using yunohost 2x local and 1x vps. Both hosts with nextcloud on it (local + vps) are affected. Tried to inveatigate myself, but had no luck. Some apps try to connect to the servers till they get banned via fail2ban. I cant reach NC, neither unbanned by APPs or Browser.

5

Same here. My desktop clients are not working anymore, the only thing that changed during the night is the ssowat upgrade (i can’t seem to be able to rollback to the old version).

Edit : disabling ssowat in the nginx conf for Nextcloud act as a temp fix, but this is not what we want.

6

Do you all confirm that the command I mentioned above does NOT fix the issue?

Issue opened on Github: Authentication error for Nextcloud client - 401 Authorization Required · Issue #545 · YunoHost-Apps/nextcloud_ynh (github.com)

7 
sudo yunohost app ssowatconf

I can confirm, still: 401 Authorization Required

8

@tituspijean thanks very much for for your quick reply. Sadly no change and seeing that others are having the same issue then clearly there is an issue with the recent ssowat update.

I’m sure it’ll get sorted. In the meantime I’m doing everything on the web browsers.

Again thanks for the help

Dj

9

Hello

Same situation here. I confirm too the command line don’t do anything I’m able to see.

I try to clic on desktop on “se connecter” then it open the internet and ask me to log and confirm I accept and then say can close tab but nothing else just stay grey icon

But I’m able to log in or see my files with webdav.

Thank a lot for your work

10

@tituspijean I can confirm that the command

sudo yunohost app ssowatconf

didn’t work for me either. Also I’ve found that I can’t log in using the PIWIGO mobile app either, but ok via a web browser.

Best wishes

Dj

11

Mokay then let’s check what grep -A6 nextcloud /etc/ssowat/conf.json returns ? (feel free to anonymize the domain or user that may show up in the output)

12

Hi, for me it do this

    "nextcloud.api": {
        "auth_header": false,
        "label": "Nuage (api)",
        "public": true,
        "show_tile": false,
        "uris": [
            "re:nuage.domaine.tld\\/.well-known\\/.*"

–

            "auth_header": true,
            "label": "Nuage",
            "public": true,
            "show_tile": true,
            "uris": [
                "nuage.domaine.tld"

That’s all :blush:

PS : is it normal it don’t show for me the user and for other yes ?

13

grep -A6 nextcloud /etc/ssowat/conf.json

        "nextcloud.api": {
            "auth_header": false,
            "label": "Nextcloud (api)",
            "public": true,
            "show_tile": false,
            "uris": [
                "re:domain.tld\\/.well-known\\/.*"
--
        "nextcloud.main": {
            "auth_header": true,
            "label": "Nextcloud",
            "public": true,
            "show_tile": true,
            "uris": [
                "domain.tld/nextcloud"
            ],
            "users": [
                "user1",
                "user2",
                "user3",
                "user4"
14

@Aleks Yes my result is the same:

“nextcloud.api”: {
“auth_header”: false,
“label”: “Nextcloud - domain name (api)”,
“public”: true,
“show_tile”: false,
“uris”: [
“re:domain.name.tdl\/.well-known\/.*”
–
“nextcloud.main”: {
“auth_header”: true,
“label”: “Nextcloud - domain name”,
“public”: true,
“show_tile”: false,
“uris”: [
“domain.name.tdl/nextcloud”
],
“users”: [
“user1”,
“user2”,
“user3”,
“user4”,

15

My results are quite the same as previous users, but don’t contain the users key.

16

It’s a really dumb question right, but how easy would it be to roll back to the previous ssowat?

Getting the Nextcloud client back up and working is becoming an issue especially the lack of shared contact access, which also doesn’t work and shared calendars are offline.

For now we are all keeping things ticking over locally, using local notes for contact and new appointments.

I have a full backup from two days ago, just before the update. Could I recover from that, system settings etc?

Just asking…

Best wishes

Dj

1 Like
17

Could you say if you have tried to run this command after the upgrade as @tituspijean suggested it ?

You should have

    "use_remote_user_var_in_nginx_conf": false,

in your nextcloud permission in /etc/ssowat/conf.json

18

Hi @ljf and @tituspijean indeed I did, and I have just done it again just in case I missed something somewhere. Sorry @tituspijean for not replying. Doh!

After running:

sudo yunohost app ssowatconf

and then doing:

sudo nano etc/ssowat/conf.json

The file opens. I can see everything there including my 3 Nextcloud instances. If I look through them line by line I don’t see:

"use_remote_user_var_in_nginx_conf": false,

Here is a redacted snippet from one of the nextcloud instances.

 "nextcloud.api": {
            "auth_header": false,
            "label": "Nextcloud - xxxxxxxxxxxx (api)",
            "public": true,
            "show_tile": false,
            "uris": [
                "re:xxxxxxxxxxxxxx.co.uk\\/.well-known\\/.*"
            ],
            "users": [
                "list",
                "of",
                "all",
                "the",
                "users",
                "on",
                "this",
                "server",
            ]

The other two instances are exactly the same except the domain names.

I had a good look and search in the file for anything like:

"use_remote_user_var_in_nginx_conf": false,

but couldn’t see anything.

I tried a reconnect with my clients and ZERO!

Help or harm?

Thanks very much, I do appreciate your time on this…

dj

19

Pareil pour moi. Je fais cette commande en premier.

sudo yunohost app ssowatconf

Ensuite celle-ci,

sudo nano etc/ssowat/conf.json

Et, j’obtiens : oups rien du tout, mon fichier est vide. Avec en commentaire en bas le répertoire etc/ssowat n'existe pas.

Et, le résultat n’est pas changé si j’utilise la commande de @Aleks

20

@Guillermo

Désolé pour mon mauvais français ici. Je fais de mon mieux.
Très étrange que vous n’ayez aucun répertoire ssowat affiché?
avant de ne pas nano pouvez-vous déplacer l’arbre à l’emplacement de ssowat ?

Everything that you have should be showing there. Do you have applications installed other than Nextcloud?

en cli
cd…
ls
cd, etc.
ls
vous ne voyez pas dir ssowat? tellement bizzare…

OK, vous pouvez arrêter de rire maintenant de mon français :laughing: :laughing:

dj

1 Like