"Storage temporarily not available" for shared folder in Federation

Steps to reproduce

  1. Upgrade 1st server Owncloud from 9.1.8 to 10.0.10
  2. Install fresh 2nd server Owncloud 10.0.10
  3. Activate federation

Expected behaviour

Creating a folder with user on the 1st server and sharing that with a user on the 2nd, the user on the 2nd can upload file like the user on the 1st

Actual behaviour

User on the 1st can upload file on the shared folder but the user on the 2nd can’t do it. When the user on the 2nd upload a file at the end of uploading appear the message “storage is temporarily not available”.

Server configuration

Operating system: 1st Debian 8.7, 2nd Debian 9

Web server: 1st Apache/2.4.10 through reverse proxy nginx/1.10.3 , 2nd Apache/2.4.25

Database: 1st Mysql 5.5.62, 2nd MariaDB 10.1.38

PHP version: 1st 5.6.40, 2nd 7.0.33

ownCloud version: (see ownCloud admin page) both 10.0.10

Updated from an older ownCloud or fresh install: 1st updated, 2nd fresh

Where did you install ownCloud from: downloaded installation files from Owncloud site

Signing status (ownCloud 9.0 and above):

1st

No errors have been found.

2nd

No errors have been found.

The content of config/config.php:

1st

{
    "system": {
        "instanceid": "",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "myipaddress",
            "owncloud1",
            "owncloud1.mydomain.it"
        ],
        "datadirectory": "\/myhomefolder",
        "overwrite.cli.url": "http:\/\/myipaddress",
        "dbtype": "mysql",
        "version": "10.0.10.4",
        "dbname": "mydb",
        "dbhost": "localhost",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "mail_smtpmode": "smtp",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "redis": {
            "host": "\/var\/run\/redis\/redis-server.sock",
            "port": 0
        },
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "ldapIgnoreNamingRules": false,
        "loglevel": 3,
        "theme": "",
        "maintenance": false,
        "trashbin_retention_obligation": "auto, 3",
        "mail_smtpport": "465",
        "mail_smtpauth": 1,
        "mail_smtpauthtype": "LOGIN",
        "mail_smtpsecure": "ssl",
        "singleuser": false
    }
}


2nd

{
    "system": {
        "instanceid": "",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "owncloud2.mydomain.it"
        ],
        "datadirectory": "\/var\/www\/html\/owncloud\/data",
        "overwrite.cli.url": "\/",
        "dbtype": "mysql",
        "version": "10.0.10.4",
        "dbname": "owncloud",
        "dbhost": "localhost",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "logtimezone": "UTC",
        "installed": true,
        "redis": {
            "host": "localhost",
            "port": 6379,
            "timeout": 0
        },
        "memcache.locking": "\\OC\\Memcache\\Redis",
        "loglevel": 0
    }
}

List of activated apps:

1st

Enabled:
  - activity: 2.4.2
  - comments: 0.3.0
  - configreport: 0.1.1
  - dav: 0.4.0
  - external: 1.2
  - federatedfilesharing: 0.3.1
  - federation: 0.1.0
  - files: 1.5.1
  - files_external: 0.7.1
  - files_pdfviewer: 0.11.0
  - files_sharing: 0.11.0
  - files_trashbin: 0.9.1
  - files_versions: 1.3.0
  - files_videoplayer: 0.9.8
  - firstrunwizard: 1.1
  - gallery: 16.1.1
  - market: 0.4.0
  - notifications: 0.3.5
  - provisioning_api: 0.5.0
  - systemtags: 0.3.0
  - templateeditor: 0.4.0
  - updatenotification: 0.2.1
  - user_external: 0.4
  - user_ldap: 0.13.0
Disabled:
  - encryption

2nd

Enabled:
  - comments: 0.3.0
  - configreport: 0.1.1
  - dav: 0.4.0
  - federatedfilesharing: 0.3.1
  - federation: 0.1.0
  - files: 1.5.1
  - files_external: 0.7.1
  - files_sharing: 0.11.0
  - files_trashbin: 0.9.1
  - files_versions: 1.3.0
  - files_videoplayer: 0.9.8
  - firstrunwizard: 1.1
  - market: 0.2.5
  - notifications: 0.3.5
  - provisioning_api: 0.5.0
  - systemtags: 0.3.0
  - updatenotification: 0.2.1
Disabled:
  - encryption
  - external
  - user_external

Are you using external storage, if yes which one: no

Are you using encryption: no

Are you using an external user-backend, if yes which one: no

Client configuration

Browser:
Chrome

Operating system:
Windows 10

Logs

Web server error log

1st

[:error] [pid 20139] python_init: Python version mismatch, expected '2.7.5+', found '2.7.9'.
[:error] [pid 20139] python_init: Python executable found '/usr/bin/python'.
[:error] [pid 20139] python_init: Python path being used '/usr/lib/python2.7/:/usr/lib/python2.7/plat-x86_64-linux-gnu:/usr/lib/python2.7/lib-tk:/usr/lib/python2.7/lib-old:/usr/lib/python2.7/lib-dynload'.
[:notice] [pid 20139] mod_python: Creating 8 session mutexes based on 150 max processes and 0 max threads.
[:notice] [pid 20139] mod_python: using mutex_directory /tmp 
[ssl:warn] [pid 20139] AH01906: owncloud1:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[mpm_prefork:notice] [pid 20139] AH00163: Apache/2.4.10 (Debian) mod_python/3.3.1 Python/2.7.9 OpenSSL/1.0.1t mod_perl/2.0.9dev Perl/v5.20.2 configured -- resuming normal operations
[core:notice] [pid 20139] AH00094: Command line: '/usr/sbin/apache2'

2nd

[mpm_prefork:notice] [pid 20749] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2r configured -- resuming normal operations
[core:notice] [pid 20749] AH00094: Command line: '/usr/sbin/apache2'
[mpm_prefork:notice] [pid 20749] AH00169: caught SIGTERM, shutting down
[mpm_prefork:notice] [pid 491] AH00163: Apache/2.4.25 (Debian) OpenSSL/1.0.2r configured -- resuming normal operations
[core:notice] [pid 491] AH00094: Command line: '/usr/sbin/apache2'

Owncloud log

Failed to check file size: GuzzleHttp\Exception\RequestException: Error creating resource: [message] fopen(): SSL operation failed with code 1. OpenSSL Error messages: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed [file] /var/www/owncloud/lib/composer/guzzlehttp/ringphp/src/Client/StreamHandler.php [line] 406 [message] fopen(): Failed to enable crypto [file] /var/www/owncloud/lib/composer/guzzlehttp/ringphp/src/Client/StreamHandler.php [line] 406 [message] fopen(https://owncloud1.mydomain.it/public.php/webdav/file.png): failed to open stream: operation failed [file] /var/www/owncloud/lib/composer/guzzlehttp/ringphp/src/Client/StreamHandler.php [line] 406 [message] Undefined variable: http_response_header [file] /var/www/owncloud/lib/composer/guzzlehttp/ringphp/src/Client/StreamHandler.php [line] 407

Hey,

this looks to me like a problem with the certificate setup of the SSL connection to the federated server.

1 Like

@tom42 thank you for your reply.
Both have the same star certificate on the same domain. Could be this the problem?

If your owncloud server is publicly available I would recommend using something like https://ssldecoder.org/
Just paste your URL in there and it will tell you whether your SSL is set up and configured correctly.

If it is not publicly available use openssl, the command should look something like this:

openssl s_client -connect domain.tld:443

This will output the installed certificate and if there is something wrong with intermediate certificates it will tell you something along the lines of:

verify error:num=20:unable to get local issuer certificate

and then

verify error:num=21:unable to verify the first certificate
1 Like

Hi @eneubauer. Below the result of tests you suggested:

openssl s_client -connect owncloud1.mydomain.it:port

CONNECTED(00000003)
depth=3 C = SE, O = ***, OU = ***, CN = ***
verify return:1
depth=2 C = GB, ST = ***, L = ***, O = ***, CN= ***
verify return:1
depth=1 C = GB, ST = ***, L = ***, O = ***, CN= ***
verify return:1
depth=0 OU = ***, OU = ***, CN = *.mydomain.it
verify return:1

openssl s_client -connect owncloud2.mydomain.it:port

CONNECTED(00000003)
depth=3 C = SE, O = ***, OU = ***, CN = ***
verify return:1
depth=2 C = GB, ST = ***, L = ***, O = ***, CN= ***
verify return:1
depth=1 C = GB, ST = ***, L = ***, O = ***, CN= ***
verify return:1
depth=0 OU = ***, OU = ***, CN = *.mydomain.it
verify return:1

Also in the web UI the check at the end of federation terminate rightly.

So, did you add both systems as trusted in the settings?

I associated them with each other

1 Like