File cannot be found after user password change

user_management
encryption

#1

I'm using an old version: owncloud-7.0.4-17.1.noarch on CentOS6. Encryption is set. I've recorded a password for recovery but never use it.
One user has changed his password. Since this he can still connect to owncloud but some of his files cannot be download any more. When he click on the download icon of the file he gets the message:
The file https://xxxxxxxx/index.php/apps/files/ajax/download.php?dir=/&files=contrat.pdf cannot be found. Please check the location and try again.

Looking at the encryption documentation does not help me to provide a solution (I'm the administrator of this small owncloud server

Thanks for your advices

Patrick


#2

Hi,

ownCloud 7.0.4 is end-of-life since a longer time [1] and contains various bugs, especially in the encryption topic. This version is something you really shouldn't use on a productive system. Please upgrade first to a still supported version (e.g. 8.1.12 or up, see [2]) and try again.

[1]

[2] https://owncloud.org/changelog/


#3

It might be also possible that these files are now gone due to the mentioned bugs. There are only few users / developers with knowledge about the old encryption left so you're mostly on your own with such issues. :confused:

Depending on the size of your installation / user base the cleanest way is probably to do a fresh installation of 9.1.4 and let your users re-upload their files.

Then you should also reconsider the usage of the encryption app. The following documentation at [1] provides some notes about the use case of the encryption app. If you don't use external storages the encryption app brings just another layer of complexity without any security benefit:

Encryption keys are stored only on the ownCloud server, eliminating exposure of your data to third-party storage providers. The encryption application does not protect your data if your ownCloud server is compromised, and it does not prevent ownCloud administrators from reading users’ files. This would require client-side encryption, which this application does not provide. If your ownCloud server is not connected to any external storage services, it is better to use other encryption tools, such as file-level or whole-disk encryption.

[1] https://doc.owncloud.org/server/latest/admin_manual/configuration_files/encryption_configuration.html


#4

Thanks for your very quick answer!
This owncloud service was initially a testing platform. Every users (I've less than 20 users) adopted this tool and it become in prod without being previously designed for this. As it is an old server (out of support), I'm building since a few weeks a new virtualized solution with high availability to install safely owncloud. This old testing platform has never been updated...

CentOS provides 8.1.9-12.1 owncloud rpm. Can I update safely ?

(subsidiary question is it easy to move an old owncloud content to a new fresh install ?)

Patrick


#5

Hi,

this won't be an easy task. An upgrade of 7.0.4 to e.g. 9.1.4 would need a following upgrade path step by step:

7.0.4 -> latest 7.0.x -> latest 8.0.x -> latest 8.1.x -> latest 8.2.x -> latest 9.0.x -> latest 9.1.x

as you can't directly upgrade from 7.0.4 to the latest version. Additional to this you would need to do two encryption migrations like seen in [1] and [2].

And if you would do such a migration, its still not sure if this will work. So the cleanest way would be, that you're setting up a fresh installation of 9.1.4 with one of the installation ways mentioned in [3]. Then the users needs to back their data on their clients and re-import that data to the fresh installation.

[1] https://doc.owncloud.org/server/latest/admin_manual/configuration_files/encryption_configuration.html#encryption-migration-to-owncloud-8-0

[2] https://doc.owncloud.org/server/latest/admin_manual/configuration_files/encryption_configuration.html#encryption-migration-to-owncloud-8-1

[3] https://owncloud.org/install/#edition


#6

I saw your mail too late....:disappointed:
I launched a "yum update" on CentOS6 wich install 8.1.9-12.1 over 7.0.4-17. No intermediate releases where available with "yum list avail owncloud". And migration fails.
The server is down now.
But I've done a full backup just before and I'll start restore the old state.

I also would like to mention an error in :https://doc.owncloud.org/server/8.1/admin_manual/installation/php_54_installation.html as php must be migrated to. This is restricted to x86_64 architecture and it is not specified. My VM is i686 based so the install process needs a special reposit (also available for x86_64). To switch to latest CentOS version of owncloud with php 5.4 I used:

wget https://rpms.remirepo.net/enterprise/remi-release-6.rpm
yum install remi-release-6.rpm
yum --enablerepo=remi-php54 update

But database migration fails after.


#7

I would like to try the migration process from 7.0 to 8.0 and then to 8.1 while setting up a new fresh install later but where can I download older owncloud rpm versions for centos6 ? Looking for them for 1 h with google but nothing found


#8

There is a documentation available at [1] explaining the needed steps how to upgrade if you have skipped major releases. This also contains the info where to find repositories containing older releases.

Not quite sure if those are compatible with the one you have previously installed from CentOS directly. Might be possible that they are putting their files on different locations or similar.

[1] https://doc.owncloud.org/server/latest/admin_manual/maintenance/package_upgrade.html#upgrading-across-skipped-releases