Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP user not able to delete folder #4017

Closed
abhilekh opened this issue Mar 23, 2017 · 1 comment
Closed

LDAP user not able to delete folder #4017

abhilekh opened this issue Mar 23, 2017 · 1 comment

Comments

@abhilekh
Copy link

Folder/sub-folder which resides on external storage(dropbox) cannot be deleted by ldap authenticated user. Even folder creation is throwing warning yet gets created.

Steps to reproduce

  1. Allow LDAP authentication
  2. Add some external storage folder.
  3. From LDAP user(non-admin) try to delete a sub-folder in externally mapped storage

Expected behaviour

The folder should get deleted

Actual behaviour

The folder is not getting deleted

Server configuration

Ubuntu 16.04

Web server:
apache

Database:
mysql Ver 15.1 Distrib 5.5.54-MariaDB

PHP version:
PHP 5.6.30-7+deb.sury.org~trusty+1

Nextcloud version:
11.0.2 (stable)

**Updated from an older Nextcloud/ownCloud or fresh install: **
Updated

Where did you install Nextcloud from:
Nextcloud download page

Signing status:

Signing status No errors have been found.

List of activated apps:

App list

Enabled:

  • activity: 2.4.1
  • admin_audit: 1.1.0
  • comments: 1.1.0
  • dav: 1.1.1
  • federatedfilesharing: 1.1.1
  • federation: 1.1.1
  • files: 1.6.1
  • files_external: 1.1.2
  • files_pdfviewer: 1.0.1
  • files_sharing: 1.1.1
  • files_texteditor: 2.2
  • files_trashbin: 1.1.0
  • files_versions: 1.4.0
  • files_videoplayer: 1.0.0
  • firstrunwizard: 2.0
  • gallery: 16.0.0
  • lookup_server_connector: 1.0.0
  • notifications: 1.0.1
  • password_policy: 1.1.0
  • provisioning_api: 1.1.0
  • systemtags: 1.1.3
  • templateeditor: 0.2
  • theming: 1.1.1
  • twofactor_backupcodes: 1.0.0
  • updatenotification: 1.1.1
  • user_ldap: 1.1.2
  • workflowengine: 1.1.1
    Disabled:
  • encryption
  • external
  • files_accesscontrol
  • files_automatedtagging
  • files_retention
  • logreader
  • nextcloud_announcements
  • serverinfo
  • sharebymail
  • survey_client
  • user_external
  • user_saml

The content of config/config.php:

Config report

{
"system": {
"instanceid": "ocihozljgmj8",
"passwordsalt": "REMOVED SENSITIVE VALUE",
"secret": "REMOVED SENSITIVE VALUE",
"trusted_domains": [
#ip,
#host
],
"datadirectory": "/var/www/nextcloud/data",
"overwrite.cli.url": "#ip/nextcloud",
"dbtype": "mysql",
"version": "11.0.2.7",
"dbname": "owncloud",
"dbhost": "localhost",
"dbtableprefix": "oc_",
"dbuser": "REMOVED SENSITIVE VALUE",
"dbpassword": "REMOVED SENSITIVE VALUE",
"logtimezone": "UTC",
"installed": true,
"ldapIgnoreNamingRules": false,
"loglevel": 3,
"maintenance": false,
"updatechecker": false,
"theme": "",
"ldapProviderFactory": "\OCA\User_LDAP\LDAPProviderFactory"
}
}

**Are you using external storage, if yes which one: dropbox

**Are you using encryption: no

Are you using an external user-backend, if yes which one: LDAP

LDAP configuration (delete this part if not used)

LDAP config

+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Configuration | |
+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| hasMemberOfFilterSupport | |
| hasPagedResultSupport | |
| homeFolderNamingRule | |
| lastJpegPhotoLookup | 0 |
| ldapAgentName | cn=admin,dc=x,dc=y,dc=com |
| ldapAgentPassword | *** |
| ldapAttributesForGroupSearch | |
| ldapAttributesForUserSearch | |
| ldapBackupHost | |
| ldapBackupPort | |
| ldapBase | dc=x,dc=y,dc=com |
| ldapBaseGroups | dc=x,dc=y,dc=com |
| ldapBaseUsers | dc=x,dc=y,dc=com |
| ldapCacheTTL | 600 |
| ldapConfigurationActive | 1 |
| ldapDynamicGroupMemberURL | |
| ldapEmailAttribute | mail |
| ldapExperiencedAdmin | 1 |
| ldapExpertUUIDGroupAttr | |
| ldapExpertUUIDUserAttr | |
| ldapExpertUsernameAttr | |
| ldapGroupDisplayName | cn |
| ldapGroupFilter | (&(|(objectclass=posixGroup))(|(cn=#gp1)(cn=#gp2)...)) |
| ldapGroupFilterGroups | #gp1;#gp2;..... |
| ldapGroupFilterMode | 0 |
| ldapGroupFilterObjectclass | posixGroup |
| ldapGroupMemberAssocAttr | uniqueMember |
| ldapHost | #ip |
| ldapIgnoreNamingRules | |
| ldapLoginFilter | (&(|(objectclass=inetOrgPerson)(objectclass=posixAccount))(|(uid=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid))(|(uid=%uid)))) |
| ldapLoginFilterAttributes | uid |
| ldapLoginFilterEmail | 1 |
| ldapLoginFilterMode | 0 |
| ldapLoginFilterUsername | 1 |
| ldapNestedGroups | 0 |
| ldapOverrideMainServer | |
| ldapPagingSize | 500 |
| ldapPort | 389 |
| ldapQuotaAttribute | |
| ldapQuotaDefault | |
| ldapTLS | 0 |
| ldapUserDisplayName | cn |
| ldapUserDisplayName2 | |
| ldapUserFilter | (|(objectclass=inetOrgPerson)) |
| ldapUserFilterGroups | |
| ldapUserFilterMode | 0 |
| ldapUserFilterObjectclass | inetOrgPerson |
| ldapUuidGroupAttribute | auto |
| ldapUuidUserAttribute | auto |
| turnOffCertCheck | 0 |
| turnOnPasswordChange | 0 |
| useMemberOfToDetectMembership | 1 |
+-------------------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

Client configuration

Chrome 56.0.2924.87 (64-bit)

Operating system:
MacOSX 10.12.3 (16D32)

Logs

Web server error log

Web server error log [Thu Mar 23 14:40:27.709660 2017] [:error] [pid 16786] [client #IP:PORT] PHP Fatal error: Call to a member function getCache() on null in /var/www/nextcloud/apps/files_sharing/lib/Cache.php on line 69 [Thu Mar 23 14:41:04.910350 2017] [:error] [pid 16784] [client #IP:PORT] PHP Fatal error: Call to a member function getCache() on null in /var/www/nextcloud/apps/files_sharing/lib/Cache.php on line 69 [Thu Mar 23 14:41:18.964139 2017] [:error] [pid 16784] [client #IP:PORT] PHP Fatal error: Call to a member function getCache() on null in /var/www/nextcloud/apps/files_sharing/lib/Cache.php on line 69 [Thu Mar 23 14:41:58.288474 2017] [:error] [pid 16530] [client #IP:PORT] PHP Fatal error: Call to a member function getCache() on null in /var/www/nextcloud/apps/files_sharing/lib/Cache.php on line 69 [Thu Mar 23 14:43:53.762110 2017] [authz_core:error] [pid 16629] [client #IP:PORT] AH01630: client denied by server configuration: /var/www/nextcloud/data/.ocdata [Thu Mar 23 14:43:59.477556 2017] [authz_core:error] [pid 16629] [client #IP:PORT] AH01630: client denied by server configuration: /var/www/nextcloud/data/.ocdata [Thu Mar 23 14:45:45.040012 2017] [authz_core:error] [pid 16621] [client #IP:PORT] AH01630: client denied by server configuration: /var/www/nextcloud/data/.ocdata [Thu Mar 23 15:29:23.522434 2017] [authz_core:error] [pid 19542] [client #IP:PORT] AH01630: client denied by server configuration: /var/www/nextcloud/data/.ocdata [Thu Mar 23 15:29:40.227171 2017] [authz_core:error] [pid 16669] [client #IP:PORT] AH01630: client denied by server configuration: /var/www/nextcloud/data/.ocdata

Nextcloud log (data/nextcloud.log)

Nextcloud log
Insert your Nextcloud log here

Browser log

Browser log
Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...
@MorrisJobke
Copy link
Member

@abhilekh Is this also the case with non-LDAP users? Because I guess it is only the Dropbox implementation and has nothing to do with LDAP.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants