Login via Web interface issue - but ok by client (windows and linux)

Hello all !

I encounter an issue when I try to login via the web interface : “You took too long to login, please try again now”

The connection is ok via the client software.

I tried a lot of things but none corrected my issue
(update php to 7.2 ; to 7.3 ; give all access to php session folder ; deactivate the rewrite to 443 from 80 on apache vhost…).

So, I open this ticket with hope :slight_smile:

Steps to reproduce

  1. install owncloud 10.2.1.4 on debian 9 with apache2.4.25
  2. try to login via navigator

Expected behaviour

Log inside web interface

Actual behaviour

Got error message under login filed :
“You took too long to login, please try again now”

Server configuration

Operating system:
Linux srv1 4.9.0-9-686-pae #1 SMP Debian 4.9.168-1+deb9u4 (2019-07-19) i686 GNU/Linux

Web server:
Apache 2.4.25

Database:
MariaDB 10.1.38

PHP version:
PHP 7.0.33

(but I tried with 7.2 then 7.3 => worst)

ownCloud version: (see ownCloud admin page)
10.2.1.4

Updated from an older ownCloud or fresh install:
I installed in version 10.1.0.4 but directly upgrade after installation

Where did you install ownCloud from:

Signing status (ownCloud 9.0 and above):

Same issue (can’t login ; error : “You took too long to login, please try again now”)

The content of config/config.php:
{
“system”: {
“updatechecker”: false,
“instanceid”: “ocqvz3ioxjyr”,
“passwordsalt”: “REMOVED SENSITIVE VALUE”,
“secret”: “REMOVED SENSITIVE VALUE”,
“trusted_domains”: [
“192.168.1.101”,
“My.domain”
],
“datadirectory”: “/var/www/html/cloud/data”,
“overwrite.cli.url”: “https://My.domain”,
“dbtype”: “mysql”,
“version”: “10.2.1.4”,
“dbname”: “owncloud”,
“dbhost”: “localhost”,
“dbtableprefix”: “oc_”,
“dbuser”: “REMOVED SENSITIVE VALUE”,
“dbpassword”: “REMOVED SENSITIVE VALUE”,
“logtimezone”: “UTC”,
“installed”: true,
“theme”: “”,
“loglevel”: 2,
“maintenance”: false,
“forcessl”: true
}
}

List of activated apps:

Enabled:

  • comments: 0.3.0
  • configreport: 0.2.0
  • dav: 0.4.0
  • federatedfilesharing: 0.4.0
  • federation: 0.1.0
  • files: 1.5.2
  • files_external: 0.7.1
  • files_sharing: 0.11.0
  • files_trashbin: 0.9.1
  • files_versions: 1.3.0
  • files_videoplayer: 0.10.1
  • firstrunwizard: 1.2.0
  • market: 0.5.0
  • notifications: 0.5.0
  • provisioning_api: 0.5.0
  • systemtags: 0.3.0
  • updatenotification: 0.2.1
    Disabled:
  • encryption
  • external
  • user_external

Are you using external storage, if yes which one: local/smb/sftp/…

No

Are you using encryption: yes/no

no

Are you using an external user-backend, if yes which one: LDAP/ActiveDirectory/Webdav/…

No

LDAP configuration (delete this part if not used)

Not Applicable

Client configuration

Browser:
tested with firefox 68.0.1 and internet explorer 11

Operating system:
Windows (firefox 68.0.1 and internet explorer 11)
Linux debian 9 (firefox60.7.2esr)

Logs

I captured log with tail -f during my test :
NOTE: my client continues to sync during test

Web server error log

  • access.log

192.168.1.254 - Shrome [09/Aug/2019:16:00:43 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:00:47 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 1118 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:01:13 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:01:19 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2677 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:01:43 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:01:51 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2677 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:02:13 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:02:23 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2677 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:02:43 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - Shrome [09/Aug/2019:16:02:55 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2677 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”

192.168.1.254 - - [09/Aug/2019:16:03:12 +0200] “GET /index.php HTTP/1.1” 302 2476 “LINK TO MY DOMAIN/” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Ge cko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:12 +0200] “GET /index.php/login HTTP/1.1” 200 3002 “LINK TO MY DOMAIN/” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68 .0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:12 +0200] “GET /core/vendor/select2/select2.css?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3854 “-” “Mozilla/5.0 (Win dows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:12 +0200] “GET /core/css/inputs.css?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 2619 “-” “Mozilla/5.0 (Windows NT 10.0 ; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/css/header.css?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3112 “-” “Mozilla/5.0 (Windows NT 10.0 ; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/css/styles.css?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 6932 “-” “Mozilla/5.0 (Windows NT 10.0 ; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/oc-dialogs.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 7691 “-” “Mozilla/5.0 (Windows NT 10 .0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/oc-requesttoken.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 738 “-” “Mozilla/5.0 (Windows N T 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharescollection.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1100 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/backgroundjobs.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1155 “-” “Mozilla/5.0 (Windows N T 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharemodel.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1715 “-” “Mozilla/5.0 (Windows NT 10 .0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialogresharerinfoview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1617 “-” “Mozilla/5 .0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/shareconfigmodel.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1421 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialoglinksocialview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1733 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialoglinklistview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3530 “-” “Mozilla/5.0 ( Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialogmailview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3170 “-” “Mozilla/5.0 (Wind ows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/shareitemmodel.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 6691 “-” “Mozilla/5.0 (Windows N T 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialogexpirationview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 2530 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialogview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 4984 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialogshareelistview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 4266 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/sharedialoglinkshareview.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 4291 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /apps/files_videoplayer/js/viewer.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1766 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/share.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 5383 “-” “Mozilla/5.0 (Windows NT 10.0; W in64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /apps/firstrunwizard/js/firstrunwizard.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 828 “-” “Mozilla/ 5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/login.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1068 “-” “Mozilla/5.0 (Windows NT 10.0; W in64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /apps/firstrunwizard/js/jquery.colorbox.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 9489 “-” “Mozill a/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/vendor/jsTimezoneDetect/jstz.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 4508 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/lostpassword.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 2069 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/visitortimezone.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 841 “-” “Mozilla/5.0 (Windows N T 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/css/apps.css?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 4168 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /core/js/browser-update.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 1080 “-” “Mozilla/5.0 (Windows N T 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:13 +0200] “GET /index.php/core/js/oc.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3465 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - Shrome [09/Aug/2019:16:03:13 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2657 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”
192.168.1.254 - - [09/Aug/2019:16:03:14 +0200] “GET /core/vendor/browser-update/browser-update.js?=1565359394077 HTTP/1.1" 200 11503 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:14 +0200] “GET /core/img/favicon-touch.png HTTP/1.1” 200 4169 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko /20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:14 +0200] “GET /core/img/favicon.ico HTTP/1.1” 200 5511 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100 101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:14 +0200] “GET /cron.php HTTP/1.1” 200 879 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/6 8.0”
192.168.1.254 - - [09/Aug/2019:16:03:24 +0200] “POST /index.php/login HTTP/1.1” 200 3200 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:25 +0200] “GET /index.php/core/js/oc.js?v=43b8929c72344abfee15b1e7c48f09a7 HTTP/1.1” 200 3465 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:26 +0200] "GET /core/vendor/browser-update/browser-update.js?
=1565359405643 HTTP/1.1” 200 11656 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:26 +0200] “GET /core/img/favicon-touch.png HTTP/1.1” 200 4169 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko /20100101 Firefox/68.0”
192.168.1.254 - - [09/Aug/2019:16:03:26 +0200] “GET /cron.php HTTP/1.1” 200 879 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/6 8.0”
192.168.1.254 - Shrome [09/Aug/2019:16:03:27 +0200] “PROPFIND /remote.php/dav/files/Shrome/ HTTP/1.1” 207 2677 “-” “Mozilla/5.0 (Windows) mirall/2.5.4 (build 11 415)”

  • error.log

::1 - - [09/Aug/2019:16:03:20 +0200] “OPTIONS * HTTP/1.0” 200 110 “-” “Apache/2.4.25 (Debian) OpenSSL/1.0.2s (internal dummy connection)”

ownCloud log (data/owncloud.log)

No logs during the test

Browser log (NOTE: I modified all links in logs to be able to sent it)

JQMIGRATE: Migrate is installed, version 1.4.0 [jquery-migrate.min.js:2:552](LINK TO MY DOMAIN /core/vendor/jquery-migrate/jquery-migrate.min.js?v=43b8929c72344abfee15b1e7c48f09a7

nsLoginManager: searchLogins: formSubmitURL or httpRealm is recommended [LoginManager.jsm:392:13] (link to ressource LoginManager.jsm)

Deprecation warning: tipsy is deprecated. Use tooltip instead. [js.js:2311:10](LINK TO MY DOMAIN js.js )

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

[browser-update.js](LINK TO MY DOMAIN browser-update.js)

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

[cron.php](LINK TO MY DOMAIN cron.php)

nsLoginManager: searchLogins: formSubmitURL or httpRealm is recommended [LoginManager.jsm:392:13] (link to ressource LoginManager.jsm)

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

2 [login](LINK TO MY DOMAIN index login )

Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 2 [login:1:1](LINK TO MY DOMAIN index login )

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

[oc.js](LINK TO MY DOMAIN index core js oc.js)

JQMIGRATE: Migrate is installed, version 1.4.0 [jquery-migrate.min.js:2:552](LINK TO MY DOMAIN jquery-migrate.min)

nsLoginManager: searchLogins: formSubmitURL or httpRealm is recommended [LoginManager.jsm:392:13] (link to ressource LoginManager.jsm)

Deprecation warning: tipsy is deprecated. Use tooltip instead. [js.js:2311:10](LINK TO MY DOMAIN js.js)

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

[browser-update.js](LINK TO MY DOMAIN browser-update)

Strict-Transport-Security: The connection to the site is untrustworthy, so the specified header was ignored.

[cron.php](LINK TO MY DOMAIN cron.php)

There are tons of posts on that topic, can be found easily by using by the search function.

https://central.owncloud.org/search?expanded=true&q=took%20too%20long%20to%20login

1 Like

Hello,

Thanks for your answer.

I already make searches about this topic before post my ticket and tried all solution proposed that I found without success…