Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP/AD accounts: Files cannot be shared with users containing umlauts (ä,ö,ü) in their displayName #27958

Closed
m8ichael opened this issue Jul 14, 2021 · 2 comments
Labels
0. Needs triage Pending check for reproducibility or if it fits our roadmap bug needs info stale Ticket or PR with no recent activity

Comments

@m8ichael
Copy link

Steps to reproduce

  1. Create a new user in AD containing an umlaut in the distinguishedName (=User A)
  2. Create a second user in AD (=User B)
  3. Deactivate in the nextcloud settings the autocomplete function of usernames
  4. User B should try to share a file with User A
  5. Even if the name of user A is typed completely, you aren't able to share the file with user A

Expected behaviour

You should be able to select user A to share a file with him.

Actual behaviour

Nothing happens

Server configuration detail

Operating system: Linux 4.15.0-147-generic #151-Ubuntu SMP Fri Jun 18 19:21:19 UTC 2021 x86_64

Webserver: Apache (fpm-fcgi)

Database: mysql 10.5.8

PHP version:

7.4.21
Modules loaded: Core, date, libxml, openssl, pcre, zlib, filter, hash, Reflection, SPL, session, standard, sodium, cgi-fcgi, mysqlnd, PDO, xml, apcu, bcmath, bz2, calendar, ctype, curl, dom, mbstring, FFI, fileinfo, ftp, gd, gettext, gmp, iconv, igbinary, imagick, intl, json, ldap, exif, mysqli, PDO_Firebird, pdo_mysql, apc, posix, readline, redis, shmop, SimpleXML, sockets, ssh2, sysvmsg, sysvsem, sysvshm, tokenizer, xmlreader, xmlwriter, xsl, zip, Phar, Zend OPcache

Nextcloud version: 21.0.3 - 21.0.3.1

Updated from an older Nextcloud/ownCloud or fresh install:

Where did you install Nextcloud from: unknown

Signing status

Array
(
)

List of activated apps
Enabled:
 - accessibility: 1.7.0
 - activity: 2.14.3
 - admin_audit: 1.11.0
 - apporder: 0.13.0
 - bruteforcesettings: 2.2.0
 - calendar: 2.3.0
 - circles: 0.21.3
 - cloud_federation_api: 1.4.0
 - comments: 1.11.0
 - contacts: 4.0.0
 - dav: 1.17.1
 - drawio: 1.0.1
 - federatedfilesharing: 1.11.0
 - federation: 1.11.0
 - files: 1.16.0
 - files_external: 1.12.0
 - files_mindmap: 0.0.24
 - files_rightclick: 1.0.0
 - files_sharing: 1.13.1
 - files_trashbin: 1.11.0
 - files_versions: 1.14.0
 - groupfolders: 9.0.2
 - impersonate: 1.8.0
 - issuetemplate: 0.7.0
 - logreader: 2.6.0
 - lookup_server_connector: 1.9.0
 - notifications: 2.9.0
 - oauth2: 1.9.0
 - onlyoffice: 7.0.2
 - password_policy: 1.11.0
 - passwords: 2021.7.22
 - polls: 3.0.0
 - privacy: 1.5.0
 - provisioning_api: 1.11.0
 - recommendations: 1.0.0
 - serverinfo: 1.11.0
 - settings: 1.3.0
 - sharebymail: 1.11.0
 - tasks: 0.13.6
 - text: 3.2.0
 - theming: 1.12.0
 - twofactor_backupcodes: 1.10.0
 - twofactor_totp: 6.1.0
 - twofactor_u2f: 6.2.0
 - updatenotification: 1.11.0
 - user_ldap: 1.11.0
 - viewer: 1.5.0
 - workflowengine: 2.3.0
Disabled:
 - announcementcenter
 - contactsinteraction
 - dashboard
 - encryption
 - files_accesscontrol
 - files_automatedtagging
 - files_pdfviewer
 - files_videoplayer
 - firstrunwizard
 - mail
 - nextcloud_announcements
 - ocr
 - photos
 - spreed
 - support
 - survey_client
 - systemtags
 - talk_matterbridge
 - terms_of_service
 - twofactor_gateway
 - user_status
 - weather_status

Configuration (config/config.php)
{
    "instanceid": "***REMOVED SENSITIVE VALUE***",
    "passwordsalt": "***REMOVED SENSITIVE VALUE***",
    "secret": "***REMOVED SENSITIVE VALUE***",
    "trusted_domains": [
        "***REMOVED SENSITIVE VALUE***"
    ],
    "datadirectory": "***REMOVED SENSITIVE VALUE***",
    "dbtype": "mysql",
    "version": "21.0.3.1",
    "dbname": "***REMOVED SENSITIVE VALUE***",
    "dbhost": "***REMOVED SENSITIVE VALUE***",
    "dbport": "",
    "dbtableprefix": "oc_",
    "dbuser": "***REMOVED SENSITIVE VALUE***",
    "dbpassword": "***REMOVED SENSITIVE VALUE***",
    "default_language": "de",
    "default_locale": "de_DE",
    "installed": true,
    "remember_login_cookie_lifetime": 1296000,
    "session_lifetime": 86400,
    "session_keepalive": true,
    "skeletondirectory": "",
    "knowledgebaseenabled": false,
    "lost_password_link": "disabled",
    "ldapIgnoreNamingRules": false,
    "ldapProviderFactory": "\\OCA\\User_LDAP\\LDAPProviderFactory",
    "mail_from_address": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpmode": "smtp",
    "mail_smtpauthtype": "LOGIN",
    "mail_domain": "***REMOVED SENSITIVE VALUE***",
    "auth.bruteforce.protection.enabled": true,
    "maintenance": false,
    "updater.release.channel": "stable",
    "theme": "",
    "loglevel": 0,
    "forcessl": true,
    "forceSSLforSubdomains": true,
    "trashbin_retention_obligation": "7, 20",
    "has_internet_connection": true,
    "check_for_working_webdav": true,
    "check_for_working_wellknown_setup": true,
    "check_for_working_htaccess": true,
    "cron_log": true,
    "logtimezone": "Europe\/Berlin",
    "logdateformat": "F d, Y H:i:s",
    "ldapUserCleanupInterval": 51,
    "filelocking.enabled": "true",
    "mail_smtpsecure": "ssl",
    "mail_smtpauth": 1,
    "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
    "mail_smtpport": "465",
    "mail_smtpname": "***REMOVED SENSITIVE VALUE***",
    "mail_smtppassword": "***REMOVED SENSITIVE VALUE***",
    "overwrite.cli.url": "https:\/\/***REMOVED SENSITIVE VALUE***",
    "share_folder": "\/Mit mir geteilt",
    "app_install_overwrite": [
        "calendar",
        "circles",
        "groupfolders",
        "ocr",
        "impersonate",
        "bruteforcesettings",
        "twofactor_gateway",
        "issuetemplate"
    ],
    "twofactor_enforced": "false",
    "twofactor_enforced_groups": [
        "NC_EnablePasswords"
    ],
    "twofactor_enforced_excluded_groups": [],
    "mysql.utf8mb4": true,
    "default_phone_region": "DE",
    "memcache.local": "\\OC\\Memcache\\APCu",
    "memcache.locking": "\\OC\\Memcache\\Redis",
    "redis": {
        "host": "***REMOVED SENSITIVE VALUE***",
        "password": "***REMOVED SENSITIVE VALUE***",
        "port": 0,
        "timeout": 0
    },
    "preview_max_x": 1024,
    "preview_max_y": 768,
    "preview_max_scale_factor": 1
}

Are you using external storage, if yes which one: no

Are you using encryption: no

Are you using an external user-backend, if yes which one: ActiveDirectory

LDAP configuration (delete this par if not used)
background_sync_interval: 43200background_sync_offset: 0background_sync_prefix: s01cleanUpJobOffset: 0enabled: yesinstalled_version: 1.11.0s01_lastChange: 1626243279s01has_memberof_filter_support: 1s01home_folder_naming_rule: s01last_jpegPhoto_lookup: 0s01ldap_agent_password: VGVjaEFscGVuMjcqs01ldap_attributes_for_group_search: s01ldap_attributes_for_user_search: s01ldap_backup_host: ldaps://serverbackup.fa.locals01ldap_backup_port: 636s01ldap_base: DC=FA,DC=locals01ldap_base_groups: DC=FA,DC=locals01ldap_base_users: DC=FA,DC=locals01ldap_cache_ttl: 600s01ldap_configuration_active: 1s01ldap_default_ppolicy_dn: s01ldap_display_name: displaynames01ldap_dn: CN=Nextcloud,OU=Alle Nutzer,DC=FA,DC=locals01ldap_dynamic_group_member_url: s01ldap_email_attr: mails01ldap_experienced_admin: 0s01ldap_expert_username_attr: sAMAccountNames01ldap_expert_uuid_group_attr: s01ldap_expert_uuid_user_attr: s01ldap_gid_number: gidNumbers01ldap_group_display_name: cns01ldap_group_filter: (|(cn=...))s01ldap_group_filter_mode: 0s01ldap_group_member_assoc_attribute: members01ldap_groupfilter_groups: ..._rws01ldap_groupfilter_objectclass: s01ldap_host: ldaps://davserver.fa.locals01ldap_login_filter: (&(&(|(objectclass=person))(|(|(memberof=CN=Domänen-Benutzer,CN=Users,DC=FA,DC=local)(primaryGroupID=513))))(|(samaccountname=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid))))s01ldap_login_filter_mode: 1s01ldap_loginfilter_attributes: s01ldap_loginfilter_email: 1s01ldap_loginfilter_username: 1s01ldap_matching_rule_in_chain_state: availables01ldap_nested_groups: 1s01ldap_override_main_server: 0s01ldap_paging_size: 500s01ldap_port: 636s01ldap_quota_attr: s01ldap_quota_def: s01ldap_tls: 0s01ldap_turn_off_cert_check: 0s01ldap_turn_on_pwd_change: 0s01ldap_user_display_name_2: s01ldap_user_filter_mode: 0s01ldap_userfilter_groups: Domänen-Benutzers01ldap_userfilter_objectclass: persons01ldap_userlist_filter: (&(|(objectclass=person))(|(|(memberof=CN=Domänen-Benutzer,CN=Users,DC=FA,DC=local)(primaryGroupID=513))))s01use_memberof_to_detect_membership: 1types: authentication

Client configuration

Browser: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0

Operating system:

Logs

Web server error log
Insert your web server log here 
Nextcloud log
Insert your Nextcloud log here
Browser log
@m8ichael m8ichael added 0. Needs triage Pending check for reproducibility or if it fits our roadmap bug labels Jul 14, 2021
@szaimen
Copy link
Contributor

szaimen commented Aug 8, 2021

Hi, can you please share your Nextcloud log and browser log on this? Thank you!

@ghost
Copy link

ghost commented Sep 7, 2021

This issue has been automatically marked as stale because it has not had recent activity and seems to be missing some essential information. It will be closed if no further activity occurs. Thank you for your contributions.

@ghost ghost added the stale Ticket or PR with no recent activity label Sep 7, 2021
@ghost ghost closed this as completed Sep 21, 2021
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
0. Needs triage Pending check for reproducibility or if it fits our roadmap bug needs info stale Ticket or PR with no recent activity
Projects
None yet
Development

No branches or pull requests

2 participants