Comments (6)
Did you configure a file_accesscontrol rule using remote address?
I did not, I don't use workflows
So you're trying to use Apache's header overrides and Nextcloud's trusted_proxies support simultaneously? Is that really what you want? Those would seem to be in conflict (or at least redundant).
I think that depends. If mod_remoteip rewrites the REMOTE_ADDR header, then it's not possible anymore to use the trusted proxies feature because it's already handled before.
So before doing anything in nextcloud's config file I tried with apache only and had the same issue but regardless of if you have both, only apache or nextcloud's config, the result is exactly the same.
UPDATE, I just tried it out and its partially working but I'm still getting errors in the logs, here is one
{"reqId":"Zk5R9mejtkTAmSoG5zq0jAAAAAA","level":3,"time":"2024-05-22T20:13:42+00:00","remoteAddr":"*RECACTED*","user":"Leo","app":"PHP","method":"PROPFIND","url":"/remote.php/dav/files/Leo/Cours","message":"Optional parameter $userId declared before required parameter $path is implicitly treated as a required parameter at /var/www/next.cloud.com/apps/deck/lib/Service/ConfigService.php#234","userAgent":"Mozilla/5.0 (Windows) mirall/3.13.0stable-Win64 (build 20240423) (Nextcloud, windows-10.0.22631 ClientArchitecture: x86_64 OsArchitecture: x86_64)","version":"29.0.0.19","data":{"app":"PHP"},"id":"664e51fb7db20"}
so I only have the CF headers thingy in my nextcloud's config and its showing the right ips as expected and shares started working again ! But I'm still having logs entries like the one above and to my knowledge it doesn't make any sense...
from server.
I see several apps in app_install_overwrite. That means those apps are enabled even if they are not declared as compatible with Nextcloud 29. You may want to go over the list and see if the apps are really compatible. There is a log message about files_accesscontrol. Is there maybe a rule configured to block access for a given file?
from server.
I know the log line is about file access controls but with the same link and without making any modifications to access controls of the file when I remove the config to get the read clients IPs, it starts to show the files and there's no error in the logs. This is caused by the server getting IPs moved around in the header. I don't understand why it's doing this.
from server.
RemoteIPHeader CF_CONNECTING_IP
RemoteIPTrustedProxy 127.0.0.1 ::1
'forwarded_for_headers' =>
array (
0 => 'HTTP_CF_CONNECTING_IP',
),
So you're trying to use Apache's header overrides and Nextcloud's trusted_proxies
support simultaneously? Is that really what you want? Those would seem to be in conflict (or at least redundant).
from server.
I know the log line is about file access controls but with the same link and without making any modifications to access controls of the file when I remove the config to get the read clients IPs, it starts to show the files and there's no error in the logs.
Did you configure a file_accesscontrol rule using remote address? 1
If Nextcloud was seeing the internal IP address before and now the right one, then you may have to update existing rules.
Those would seem to be in conflict (or at least redundant).
I think that depends. If mod_remoteip rewrites the REMOTE_ADDR header, then it's not possible anymore to use the trusted proxies feature because it's already handled before.
Footnotes
from server.
The last message will be fixed by an upcoming deck ap p update.
from server.
Related Issues (20)
- Can development Kkfileviwer plug HOT 1
- Add expire mechanism for preview images HOT 7
- [Bug]: Temporary Error on Login. Even after update to NC 29 HOT 1
- [Bug]: "Temporary Error" on Login, even after Upgrade to NC 29 HOT 15
- Resolving references from public share HOT 2
- Last login date (user:lastseen) does not work for desktop clients
- [Bug]: TypeError: r is not a function logreader-main.mjs HOT 1
- [Bug]: Drag'n'Drop to a folder not correctly detected on safari
- Public webdav does full filesystem setup of share owners
- [Bug]: rename file action is not possible and loads document instead HOT 7
- oc_filecache: optimization structure > UNSIGNED!
- [Bug]: Missing index for oc_appconfig.lazy HOT 3
- [Bug]: Missing database index for dav_shares resourceid, type and access HOT 4
- NC30 UI refresh cleanup HOT 5
- Allow resizing of the columns in the files view
- [Bug]: Undefined array key "filesystem" at LockdownManager.php#80 HOT 1
- [Bug]: Some Korean translations on Transifex are not being reflected anymore. HOT 3
- [Bug]: Federated share broken, received folder is empty
- [Bug]: Problem with special chars using `forbidden_chars`
- [Bug]: S3 ObjectStorage putObject rate limit HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from server.