Public links asking for user and password

Scorp1337 · August 23, 2021, 9:34am

Hi there,

after upgrading to 10.8 external users experience an issue with a missing or wrong permission on a file or folder.
When opening a public link the browsers asks for username and password. Regardless of this prompt the site including the password field for the public share is displayed in the background.

Any ideas what the problem is or recommendations what to check first?

Another ownCloud I upgraded does not have this issue. File permissions were set again as documented:

sudo chown -R www-data:www-data /var/www/owncloud

Steps to reproduce

Create a public link
Open the link
Press ESC or the Cancel button and go ahead

Expected behaviour

A password field to open the public shared file or folder should appear.

Actual behaviour

The site loads almost as expected, except that the browser asks for username and password. When pressing Cancel or the ESC key the prompt disappear and the regular public share password needs to be entered.

Server configuration

Operating system: Ubuntu 18.04.5 LTS

Web server: apache 2.4.48

Database: mysql 5.7.35-0ubuntu0.18.04.1

PHP version: 7.4.21

ownCloud version: 10.8

Updated from an older ownCloud or fresh install: update from 10.7

Where did you install ownCloud from: oC tar

Signing status (ownCloud 9.0 and above): signed

The content of config/config.php:

    {
        "system": {
            "updatechecker": false,
            "instanceid": "123123ocdabcd1234",
            "passwordsalt": "***REMOVED SENSITIVE VALUE***",
            "secret": "***REMOVED SENSITIVE VALUE***",
            "trusted_domains": [
                "cloud.myreallycooldomain.de"
            ],
            "datadirectory": "\/owncloudData",
            "overwrite.cli.url": "https:\/\/cloud.myreallycooldomain.de",
            "dbtype": "mysql",
            "version": "10.8.0.4",
            "dbname": "ocstraki",
            "dbhost": "localhost",
            "dbtableprefix": "oc_",
            "mysql.utf8mb4": true,
            "dbuser": "***REMOVED SENSITIVE VALUE***",
            "dbpassword": "***REMOVED SENSITIVE VALUE***",
            "logtimezone": "UTC",
            "installed": true,
            "ldapIgnoreNamingRules": false,
            "maintenance": false,
            "loglevel": 2,
            "trashbin_retention_obligation": "14,60",
            "mail_domain": "***REMOVED SENSITIVE VALUE***",
            "mail_from_address": "***REMOVED SENSITIVE VALUE***",
            "mail_smtpmode": "smtp",
            "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
            "mail_smtpport": "25",
            "mail_smtpauth": 1,
            "mail_smtpauthtype": "LOGIN",
            "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
            "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
            "mail_smtpdebug": true,
            "memcache.local": "\\OC\\Memcache\\APCu",
            "memcache.locking": "\\OC\\Memcache\\Redis",
            "redis": {
                "host": "localhost",
                "port": 6379,
                "timeout": 0
            },
            "web.baseUrl": "https:\/\/cloud.myreallycooldomain.de\/index.php\/apps\/web",
            "web.rewriteLinks": true
        }
    }

List of activated apps:

      - activity:
        - Version: 2.6.1
        - Path: /var/www/owncloud/apps/activity
      - brute_force_protection:
        - Version: 1.1.0
        - Path: /var/www/owncloud/apps/brute_force_protection
      - comments:
        - Version: 0.3.0
        - Path: /var/www/owncloud/apps/comments
      - configreport:
        - Version: 0.2.0
        - Path: /var/www/owncloud/apps/configreport
      - dav:
        - Version: 0.6.0
        - Path: /var/www/owncloud/apps/dav
      - federatedfilesharing:
        - Version: 0.5.0
        - Path: /var/www/owncloud/apps/federatedfilesharing
      - federation:
        - Version: 0.1.0
        - Path: /var/www/owncloud/apps/federation
      - files:
        - Version: 1.5.2
        - Path: /var/www/owncloud/apps/files
      - files_external:
        - Version: 0.8.0
        - Path: /var/www/owncloud/apps/files_external
      - files_mediaviewer:
        - Version: 1.0.4
        - Path: /var/www/owncloud/apps/files_mediaviewer
      - files_pdfviewer:
        - Version: 0.12.2
        - Path: /var/www/owncloud/apps/files_pdfviewer
      - files_sharing:
        - Version: 0.14.0
        - Path: /var/www/owncloud/apps/files_sharing
      - files_trashbin:
        - Version: 0.9.1
        - Path: /var/www/owncloud/apps/files_trashbin
      - files_versions:
        - Version: 1.3.0
        - Path: /var/www/owncloud/apps/files_versions
      - firstrunwizard:
        - Version: 1.2.0
        - Path: /var/www/owncloud/apps/firstrunwizard
      - gallery:
        - Version: 16.1.1
        - Path: /var/www/owncloud/apps/gallery
      - market:
        - Version: 0.6.1
        - Path: /var/www/owncloud/apps/market
      - notifications:
        - Version: 0.5.4
        - Path: /var/www/owncloud/apps/notifications
      - oauth2:
        - Version: 0.4.4
        - Path: /var/www/owncloud/apps/oauth2
      - provisioning_api:
        - Version: 0.5.0
        - Path: /var/www/owncloud/apps/provisioning_api
      - systemtags:
        - Version: 0.3.0
        - Path: /var/www/owncloud/apps/systemtags
      - updatenotification:
        - Version: 0.2.1
        - Path: /var/www/owncloud/apps/updatenotification
      - web:
        - Version: 4.1.0
        - Path: /var/www/owncloud/apps/web

Are you using external storage, if yes which one: no

Are you using encryption: no

Are you using an external user-backend, if yes which one: no

Client configuration

Browser: Chrome/Firefox

Operating system: Windows 10

Logs

Web server access log

77.191.y.x - - [23/Aug/2021:11:37:43 +0200] "GET /index.php/apps/web/index.html HTTP/1.1" 200 7737 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:43 +0200] "GET /index.php/apps/web/css/web.css HTTP/1.1" 200 57206 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:43 +0200] "GET /index.php/apps/web/js/require.js HTTP/1.1" 200 27485 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:44 +0200] "GET /index.php/apps/web/js/web-runtime-b515b27d.js HTTP/1.1" 200 21252 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:44 +0200] "GET /index.php/apps/web/js/_chunks/encodePath-5ef8ca06.js HTTP/1.1" 200 1042 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:44 +0200] "GET /index.php/apps/web/js/_chunks/vendor-f81f7dc8.js HTTP/1.1" 200 728990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:45 +0200] "GET /index.php/apps/web/config.json HTTP/1.1" 200 1512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:45 +0200] "GET /index.php/apps/web/js/web-app-files-6d67c5ba.js HTTP/1.1" 200 51441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/js/_chunks/resources-57c772cc.js HTTP/1.1" 200 17842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/js/_chunks/index-a80cece2.js HTTP/1.1" 200 1138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/js/_chunks/constants-28c72d8d.js HTTP/1.1" 200 6841 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/js/web-app-media-viewer-3ff4dc5f.js HTTP/1.1" 200 4435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/js/web-app-draw-io-e1aba242.js HTTP/1.1" 200 2835 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/themes/owncloud/assets/logo.svg HTTP/1.1" 200 10756 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "GET /index.php/apps/web/themes/owncloud/assets/loginBackground.jpg HTTP/1.1" 200 89015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - - [23/Aug/2021:11:37:46 +0200] "PROPFIND /remote.php/dav/public-files/9JjbkipaAphsgfh HTTP/1.1" 401 1414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"
77.191.y.x - test [23/Aug/2021:11:37:56 +0200] "PROPFIND /remote.php/dav/public-files/9JjbkipaAphsgfh HTTP/1.1" 401 6548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0"

Web server error log

[Mon Aug 23 11:03:28.341555 2021] [mpm_prefork:notice] [pid 2378] AH00171: Graceful restart requested, doing restart
[Mon Aug 23 11:03:28.563153 2021] [mpm_prefork:notice] [pid 2378] AH00163: Apache/2.4.48 (Ubuntu) OpenSSL/1.1.1 configured -- resuming normal operations
[Mon Aug 23 11:03:28.563177 2021] [core:notice] [pid 2378] AH00094: Command line: '/usr/sbin/apache2'
[Mon Aug 23 11:15:02.077791 2021] [mpm_prefork:notice] [pid 2378] AH00171: Graceful restart requested, doing restart
[Mon Aug 23 11:15:02.176091 2021] [mpm_prefork:notice] [pid 2378] AH00163: Apache/2.4.48 (Ubuntu) OpenSSL/1.1.1 configured -- resuming normal operations
[Mon Aug 23 11:15:02.176110 2021] [core:notice] [pid 2378] AH00094: Command line: '/usr/sbin/apache2'

ownCloud log (data/owncloud.log)

    {"reqId":"7rKR4f2FspfgUHKof144","level":2,"time":"2021-08-23T09:12:08+00:00","remoteAddr":"77.191.y.x","user":"--","app":"core","method":"PROPFIND","url":"\/remote.php\/dav\/public-files\/9JjbkipaAphsgfh","message":"Login failed: 'fvsdfsdfsdfsd' (Remote IP: '77.191.y.x')"}
    {"reqId":"TvrIvBVA5FdlEMPlLfpz","level":2,"time":"2021-08-23T09:12:12+00:00","remoteAddr":"77.191.y.x","user":"--","app":"core","method":"PROPFIND","url":"\/remote.php\/dav\/public-files\/9JjbkipaAphsgfh","message":"Login failed: 'public' (Remote IP: '77.191.y.x')"}

alfredb · August 23, 2021, 11:47am

The login prompt comes rather from your browser than from ownCloud. Thus, I assume a config issue.

What I don’t understand: For me, any public link has the form

https://***/index.php/s/EjyU59Rxj4KBULX

in contrast to the link in your screenshot.

EDIT: Now I see. If I create a folder named /files/public-link it works with the web app.

mrow4a · August 23, 2021, 12:54pm

might be bug in new owncloud frontend (owncloud web). I think it might make sense to create issue in Issues · owncloud/web · GitHub

alfredb · August 23, 2021, 2:14pm

Maybe yes, but it works here.

For the classic files app:

https://***/index.php/s/EjyU59Rxj4KBULX

For using ownCloud web:

https://***/index.php/apps/web/index.html#/files/public-link/EjyU59Rxj4KBULX

Scorp1337 · August 23, 2021, 2:32pm

Yep, it is an issue of the new web app (oc frontend). Now I tested a second instance including a password for the public link and it turns obviously into the same problem.

#Update
Honestly I am too busy to create an issue at github. Writing it down here should be enough for oc to figure it out. Maybe this is is already known…
For now I just disable the new web frontend.

kulmann · August 24, 2021, 6:47am

Hey, sorry to hear that you had a bad experience. Thank you for providing such detailed information. I created a github ticket from it, which is tracked here: Public links asking for user and password · Issue #5727 · owncloud/web · GitHub
Will post any further questions + the solution to the issue here as well.

tom42 · August 26, 2021, 11:52am

Hey,

i think this is not the best / most reliable approach.

From what i have seen in the past the ownCloud team isn’t monitoring this community portal constantly. While it seems that it has worked in this case i think the chances are generally high that it issues get lost if not posted at the github issue tracker.

alfredb · August 26, 2021, 3:05pm

SCNR. But they really should. Remember, it’s “ownCloud’s main help desk.” And not everybody has or wants a GitHub account, what I fully understand.

Scorp1337 · August 26, 2021, 5:12pm

And let me mention the template for a post in ownCloud Central starts with

Thanks for reporting issues back to ownCloud! This is the issue tracker of ownCloud, if you have any support question please check out https://owncloud.org/support

After filling this very complicated template …I am expected to push the same information into another platform? …no thanks.

But thanks a lot @kulmann!

tom42 · August 26, 2021, 6:42pm

Hey,

i think this forums needs to be seen as a general help channel. And myself as a user of ownCloud would never expect that an ownCloud developer is trying (or even being able) to pick out “real” bug reports within all the other general support / installation problems posted in this forums

That’s why i personally think that issues (as it even got asked in Public links asking for user and password - #3 by mrow4a) belongs into the github issue tracker so that is guaranteed that these are getting noticed by some one of the ownCloud developers working on such issues and to avoid that information needs to be getting moved forward and backwards between both places.

But this is only my personal opinion as an ownCloud user, maybe some one of the ownCloud team as a different view on this topic and it could make sense to start a discussion with them in a new topic?

tom42 · August 26, 2021, 6:44pm

Hey,

i agree that this is not optimal and i just have remembered that i had reported this to the ownCloud people in Suggestions for the issue template on new threads but it seems i didn’t got noticed or solved in all these years.

dragotin · August 27, 2021, 9:52am

Hello,

let me give a bit of perspective of “the ownCloud developers” here.

Indeed this forum is intended for general discussion around all ownCloud components and for community support that users need to setup their installations, understand concepts, ask for best practices and such.

It should not be used as a general place to dump “real” bug reports. Bug reports are a very important form of contribution to any project and involve real work as most of us have experienced already. “Dumping” a bug report can be considered an incomplete contribution that others need to pick up to give it a value - which rarely happens.

That is why we would ask everybody to post bug reports to the Github issues rather than leaving them here, as that is where they belong to. There we have better ways of guiding the whole process, following up and in general make the contribution valuable and successful.

We all know there is a grey zone. And I am sure if somebody shows up here not being able to work with Github for whatever reasons (and there are reasons…) we as a community will be able to help along.

I hope that makes sense for people,

Klaas

system · November 25, 2021, 9:53am

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.