Repository navigation
LDAP User Groups are sometimes missing #15065
Description
Steps to reproduce
It comes and goes. Not clear on how to repeat it.
Expected behaviour
The assigned Groups from AD (Active Directory LDAP) should be consistent.
Actual behaviour
The assigned Groups sometimes disappear. Its not clear what causes this, but one thing is curious in the admin GUI -> Users list: On the left side (organized by user groups) the number of the users per group and if clicked also the containing users are correct. But in the Dropdown of the user entry directly in the users list, the groups are sometimes missing. Sometimes all groups, sometimes only some or even none missing. It is changing randomly. I think this causes us much trouble, because we can now not share a share to 2 groups if users are in both of the groups. It might cause that the users get the share twice, added with "(2)" in the client. Also sometimes they are able to upload with edit rights and sometimes not. I think this is because the server sometimes tells the client that it can write to the folder but another time not. We currently share only to one group per share, which is not really usable.
Server configuration
Debian Linux Wheezy (current stable) / Kernel 3.2.65-1+deb7u1 x86_64 GNU/Linux
Apache/2.2.22 (Debian)
mysql Ver 14.14 Distrib 5.5.41, for debian-linux-gnu (x86_64) using readline 6.2
PHP 5.4.36-0+deb7u3
ownCloud 8.0.2 (stable) (the problem exists since at least 7.2!)
Updated from 8.0 and the latest V7 version before
Files, Activity, Documents, Pictures, Calendar, Contacts
The content of config/config.php:
<?php
$CONFIG = array (
'instanceid' => '51ef71db78491',
'passwordsalt' => '*** Removed for security reasons',
'datadirectory' => '/secret-acceleris',
'dbtype' => 'mysql',
'version' => '8.0.2.0',
'dbname' => 'secret',
'dbhost' => 'localhost',
'dbtableprefix' => 'oc_',
'dbuser' => 'secret',
'dbpassword' => '*** Removed for security reasons',
'installed' => true,
'forcessl' => true,
'maxZipInputSize' => 838860800,
'allowZipDownload' => true,
'ldapIgnoreNamingRules' => false,
'loglevel' => '1',
'theme' => 'acceleris',
'maintenance' => false,
'mail_domain' => 'acceleris.ch',
'default_language' => 'en_formal',
'trusted_domains' =>
array (
0 => 'secret',
),
'trashbin_retention_obligation' => '30',
'share_folder' => '/Shared',
'secret' => '*** Removed for security reasons',
);
(The theme only replaces the logo...)
Are you using external storage, if yes which one:
No external storage
Are you using encryption:
No
Are you using an external user-backend, if yes which one:
Active Directory (On Sernet Samba v4)
LDAP configuration (delete this part if not used)
mysql> select * from oc_appconfig where appid='user_ldap';
+-----------+-----------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| appid | configkey | configvalue |
+-----------+-----------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| user_ldap | bgjUpdateGroupsLastRun | 1384781222 |
| user_ldap | cleanUpJobOffset | 50 |
| user_ldap | enabled | yes |
| user_ldap | has_memberof_filter_support | 1 |
| user_ldap | home_folder_naming_rule | |
| user_ldap | installed_version | 0.5.0 |
| user_ldap | last_jpegPhoto_lookup | 0 |
| user_ldap | ldap_agent_password | secret |
| user_ldap | ldap_attributes_for_group_search | cn
description
distinguishedName |
| user_ldap | ldap_attributes_for_user_search | |
| user_ldap | ldap_backup_host | ldap://secret |
| user_ldap | ldap_backup_port | 389 |
| user_ldap | ldap_base | DC=acceleris,DC=ch |
| user_ldap | ldap_base_groups | OU=Groups,OU=acceleris,DC=acceleris,DC=ch |
| user_ldap | ldap_base_users | OU=Users,OU=acceleris,DC=acceleris,DC=ch |
| user_ldap | ldap_cache_ttl | 299 |
| user_ldap | ldap_configuration_active | 1 |
| user_ldap | ldap_display_name | displayname |
| user_ldap | ldap_dn | CN=proxyagent,CN=Users,DC=acceleris,DC=ch |
| user_ldap | ldap_email_attr | mail |
| user_ldap | ldap_experienced_admin | 1 |
| user_ldap | ldap_expert_username_attr | |
| user_ldap | ldap_expert_uuid_attr | |
| user_ldap | ldap_expert_uuid_group_attr | objectGUID |
| user_ldap | ldap_expert_uuid_user_attr | objectGUID |
| user_ldap | ldap_group_display_name | cn |
| user_ldap | ldap_group_filter | (&(objectclass=group)(!(MsExchResourceMetaData=ResourceType:Room))) |
| user_ldap | ldap_group_filter_mode | 1 |
| user_ldap | ldap_group_member_assoc_attribute | member |
| user_ldap | ldap_groupfilter_groups | |
| user_ldap | ldap_groupfilter_objectclass | group |
| user_ldap | ldap_host | ldap://secret |
| user_ldap | ldap_login_filter | (&(&(ObjectClass=Person)(ObjectCategory=User)(memberof=CN=ACservices,OU=Services,OU=acceleris,DC=acceleris,DC=ch)(!(MsExchResourceMetaData=ResourceType:Room)))(samaccountname=%uid)) |
| user_ldap | ldap_login_filter_mode | 1 |
| user_ldap | ldap_loginfilter_attributes | |
| user_ldap | ldap_loginfilter_email | 0 |
| user_ldap | ldap_loginfilter_username | 1 |
| user_ldap | ldap_nested_groups | 1 |
| user_ldap | ldap_nocase | 1 |
| user_ldap | ldap_override_main_server | 0 |
| user_ldap | ldap_paging_size | 500 |
| user_ldap | ldap_port | 389 |
| user_ldap | ldap_quota_attr | |
| user_ldap | ldap_quota_def | |
| user_ldap | ldap_tls | |
| user_ldap | ldap_turn_off_cert_check | 1 |
| user_ldap | ldap_user_filter_mode | 1 |
| user_ldap | ldap_userfilter_groups | |
| user_ldap | ldap_userfilter_objectclass | |
| user_ldap | ldap_userlist_filter | (&(ObjectClass=Person)(ObjectCategory=User)(memberof=CN=ACservices,OU=Services,OU=acceleris,DC=acceleris,DC=ch)(!(MsExchResourceMetaData=ResourceType:Room))) |
| user_ldap | ldap_uuid_attribute | auto |
| user_ldap | ldap_uuid_group_attribute | auto |
| user_ldap | ldap_uuid_user_attribute | auto |
| user_ldap | ocsid | 166061 |
| user_ldap | types | authentication |
+-----------+-----------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
Client configuration
Browser:
Chrome Stable
Operating system:
OS X Yosemite 10.10.2
Logs
Web server error log
Repeated:
[Fri Mar 20 12:46:27 2015] [error] [client secret] Negotiation: discovered file(s) matching request: /secret-owncloud/settings/ajax/checksetup (None could be negotiated)., referer: https://secret/index.php/settings/admin
ownCloud log (data/owncloud.log)
Repeated:
{"reqId":"effcf443c084b59432a9773f6a0cd9f4","remoteAddr":"","app":"PHP","message":"Undefined index: REQUEST_URI at \/secret-owncloud\/apps\/calendar\/appinfo\/app.php#41","level":3,"time":"2015-03-20T11:57:01+00:00"}
Browser log
Insert your browser log here, this could for example include:
a) The javascript console log
GET https://secret/core/vendor/jquery/dist/jquery-migrate.min.map 404 (Not Found)
Activity
oxivanisher commentedon Mar 20, 2015
Also it might also has to do with #12306 ... Its just a possibility.
DeepDiver1975 commentedon Mar 20, 2015
@blizzz
blizzz commentedon Apr 15, 2015
Are you talking directly to AD or do you have some balancer or proxy inbetween?
oxivanisher commentedon Apr 15, 2015
We talk directly to the AD (Samba Server).
blizzz commentedon Mar 1, 2016
It might be fixed in the upcoming ownCloud version (8.1.6, 8.2.3, 9.0), I'd like to ask you to try with one of them when they are out.
lchigami commentedon Mar 29, 2016
This issue (i think) still persists in Owncloud 9.0...
I don't know exactly if this issue is related with #13426. If not, I will open new issue related to this bug...
BTW, the only solution I've encountered was to apply the workaround described in the above issue (#13426).
blizzz commentedon Mar 29, 2016
@lchigami not the same. In #13426 it is consistently not working, in this case here it sometimes did not. Due to a decode glitch from caching.
blizzz commentedon Mar 29, 2016
Closing this as fixed by #21999
lock commentedon Aug 2, 2019
This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.