Frequent session timeouts when using External users (OC_User_IMAP)
还没有人认领这个 Issue。
- #20757 来自 @sshambar —— 已关闭,未合并
评估
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 新手友好度
- 35/100
- Issue 类型
- 缺陷
- 描述清晰度
- 基本清楚
- 活跃度
- 停滞
- 技术栈
- php
调研方向
Start by reproducing the five-minute timeout with the provided OC_User_IMAP configuration and compare it with a non-IMAP account. Inspect the OC_User_IMAP external-user backend and session keepalive behavior; done means an active IMAP-backed user remains signed in while browsing, without the reported 401 responses.
由索引模型根据 Issue 内容生成。
描述
Steps to reproduce
- Enable External Users
- Set user backends
'user_backends' =>
array (
0 =>
array (
'class' => 'OC_User_IMAP',
'arguments' =>
array (
0 => '{:993/imap/ssl/novalidate-cert}',
),
),
), - Log in with an IMAP backed account, and even if you keep browsing the folders and files continuously, the session expires after 5 minutes.
- Use a non-IMAP user, do the same and the session does not expire after 5 minutes.
Expected behaviour
Session should not expire while user is active, regardless if user is backed by IMAP.
Actual behaviour
Session expires for IMAP users after 5 minutes, even if they are being active all the time.
Server configuration
Operating system: FreeBSD 11.2
Web server: Apache 2.4.34
Database: mysql 5.6.41
PHP version: 5.6.37
Nextcloud version: 13.0.6
Updated from an older Nextcloud/ownCloud or fresh install: Updated from 13.0.4 (freshly installed 13.0.4 had the same behaviour)
Where did you install Nextcloud from: Downloaded from nextcloud.com, updated with built-in updater.
Signing status:
Signing status
No errors have been found.
List of activated apps:
App list
The process control (PCNTL) extensions are required in case you want to interrupt long running commands - see http://php.net/manual/en/book.pcntl.php Enabled: - activity: 2.6.1 - calendar: 1.6.1 - comments: 1.3.0 - contacts: 2.1.5 - dav: 1.4.7 - federatedfilesharing: 1.3.1 - files: 1.8.0 - files_external: 1.4.1 - files_pdfviewer: 1.2.1 - files_sharing: 1.5.0 - files_texteditor: 2.5.1 - files_trashbin: 1.3.0 - files_versions: 1.6.0 - files_videoplayer: 1.2.0 - gallery: 18.0.0 - groupfolders: 1.3.3 - logreader: 2.0.0 - lookup_server_connector: 1.1.0 - nextcloud_announcements: 1.2.0 - notes: 2.4.1 - notifications: 2.1.2 - oauth2: 1.1.1 - password_policy: 1.3.0 - polls: 0.8.3 - provisioning_api: 1.3.0 - serverinfo: 1.3.0 - survey_client: 1.1.0 - systemtags: 1.3.0 - tasks: 0.9.7 - theming: 1.4.5 - twofactor_backupcodes: 1.2.3 - updatenotification: 1.3.0 - user_external: 0.4 - workflowengine: 1.3.0 Disabled: - admin_audit - bruteforcesettings - deck - encryption - federation - files_fulltextsearch - firstrunwizard - fulltextsearch - impersonate - mail - ojsxc - rainloop - ransomware_protection - sharebymail - spreed - unsplash - user_ldapNextcloud configuration:
Config report
The process control (PCNTL) extensions are required in case you want to interrupt long running commands - see http://php.net/manual/en/book.pcntl.php { "system": { "instanceid": "***REMOVED SENSITIVE VALUE***", "passwordsalt": "***REMOVED SENSITIVE VALUE***", "secret": "***REMOVED SENSITIVE VALUE***", "trusted_domains": [ "***REMOVED SENSITIVE VALUE***" ], "datadirectory": "***REMOVED SENSITIVE VALUE***", "overwrite.cli.url": "***REMOVED SENSITIVE VALUE***", "dbtype": "mysql", "version": "13.0.6.1", "dbname": "***REMOVED SENSITIVE VALUE***", "dbhost": "***REMOVED SENSITIVE VALUE***", "dbport": "", "dbtableprefix": "oc_", "dbuser": "***REMOVED SENSITIVE VALUE***", "dbpassword": "***REMOVED SENSITIVE VALUE***", "installed": true, "mail_from_address": "***REMOVED SENSITIVE VALUE***", "mail_smtpmode": "php", "mail_smtpauthtype": "LOGIN", "mail_domain": "***REMOVED SENSITIVE VALUE***", "theme": "", "loglevel": 0, "maintenance": false, "session_lifetime": 3600, "session_keepalive": true, "apps_paths": [ { "path": "\/usr\/local\/www\/nextcloud\/apps", "url": "\/apps", "writable": true }, { "path": "\/usr\/local\/www\/nextcloud\/apps-pkg", "url": "\/apps-pkg", "writable": false } ], "user_backends": [ { "class": "OC_User_IMAP", "arguments": [ "{server:993\/imap\/ssl\/novalidate-cert}" ] } ], "updater.secret": "***REMOVED SENSITIVE VALUE***" } }Are you using external storage, if yes which one: NONE
Are you using encryption: no
Are you using an external user-backend, if yes which one: OC_User_IMAP
Client configuration
Browser: Firefox, Chrome
Operating system: Linux, Windows
Logs
Web server error log
Web server error log
[Sat Sep 08 15:24:26.306389 2018] [authz_core:error] [pid 41778] [client CLIENT_IP:41192] AH01630: client denied by server configuration: /usr/local/www/nextcloud/data/.ocdata [Sat Sep 08 15:43:46.530126 2018] [authz_core:error] [pid 71617] [client CLIENT_IP:42956] AH01630: client denied by server configuration: /usr/local/www/nextcloud/data/.ocdataNextcloud log (data/nextcloud.log)
Nextcloud log
[nextcloud.log](https://github.com/nextcloud/server/files/2363378/nextcloud.log)Browser log
Browser log
Navigated to https://fqdn.net/nextcloud/index.php/login?redirect_url=/nextcloud/index.php/apps/files/%3Fdir%3D/Eln%25C3%25B6ks%25C3%25A9g/Ki%25C3%25A1ll%25C3%25ADt%25C3%25A1sok/2018%2520Orsz%25C3%25A1gos%2520Ki%25C3%25A1ll%25C3%25ADt%25C3%25A1s%26fileid%3D1705
Content Security Policy: Directive ‘child-src’ has been deprecated. Please use directive ‘worker-src’ to control workers, or directive ‘frame-src’ to control frames respectively.
JQMIGRATE: Migrate is installed, version 1.4.0 core.js:7:542
window.controllers/Controllers is deprecated. Do not use it for UA detection. merged.js:2171
Source map error: TypeError: NetworkError when attempting to fetch resource.
Resource URL: https://fqdn.net.hu/nextcloud/core/vendor/core.js?v=97481833-10
Source Map URL: purify.min.js.map[Learn More]
Shutting down notifications: [401] Unauthorized merged.js:285:5
_onFetchError
https://fqdn.net/nextcloud/index.php/js/notifications/merged.js:285:5
j
https://fqdn.net/nextcloud/core/vendor/core.js:2:26920
fireWith
https://fqdn.net/nextcloud/core/vendor/core.js:2:27738
x
https://fqdn.net/nextcloud/core/vendor/core.js:4:11276
b/<
https://fqdn.net/nextcloud/core/vendor/core.js:4:14765
Navigated to https://fqdn.net/nextcloud/index.php/apps/files/?dir=/Eln%C3%B6ks%C3%A9g/Ki%C3%A1ll%C3%ADt%C3%A1sok/2018%20Orsz%C3%A1gos%20Ki%C3%A1ll%C3%ADt%C3%A1s&fileid=1705
- 主要语言
- JavaScript
- 星标
- 120
- 派生
- 72
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
nextcloud/user_external 的其他 Issue
-
0. Needs triage bug
难度 2/5 1-3 小时 新手友好度 78/100
nextcloud/user_external#298 · 1 个 reaction ·
-
0. Needs triage enhancement
难度 3/5 1-2 天 新手友好度 35/100
nextcloud/user_external#311 · 6 条评论 · 5 个 reaction ·
-
0. Needs triage bug
难度 3/5 1-2 天 新手友好度 68/100
nextcloud/user_external#310 · 2 条评论 ·
-
v4.0.0 released!未关闭
难度 1/5 1 小时以内 新手友好度 20/100
nextcloud/user_external#295 · 3 个 reaction ·
-
0. Needs triage bug
难度 3/5 1-2 天 新手友好度 52/100
nextcloud/user_external#281 · 6 条评论 · 3 个 reaction ·
查看 nextcloud/user_external 的全部 Issue
相似的 Issue
-
BUG
难度 2/5 1-3 小时 新手友好度 74/100
维护者通常 1 天内回复
-
type/bug
难度 1/5 1 小时以内 新手友好度 75/100
flarum/framework#5231 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 82/100
apache/rocketmq-dashboard#6896 ·
维护者通常 3 天内回复
-
bug good first issue
难度 2/5 1-3 小时 新手友好度 84/100
维护者通常 1 天内回复
-
[workshop-sync] workshop/side-quest-17-06-output-injection.md: stale add_comment.cjs line references未关闭documentation
难度 2/5 1-3 小时 新手友好度 78/100
githubnext/gh-aw-workshop#4679 ·
维护者通常 1 天内回复