Onedrive and Gnome Online Accounts

[HSB-collab]

AnduinOS is a great distro and as a long time Windows user I thank you for it.
However, I have an issue for which there is a workaround but it would really help to know where I am going wrong. I want to use Onedrive in Nautilus and have logged into Microsoft 365 in Gnome Online Accounts. I used the same setup in Ubuntu 26.04 and it worked well.
In AnduinOS it initially worked but then something happened (I can't correlate with anything I did but it almost certainly must be) and after that when I try and use Onedrive in Nautilus I get a message saying "Unable to access myemail@emailaddress. Database is read only".
I tried deleting the cache and config and onedrive keys and it set up the Microsoft 365 gnome online account and it worked again but shortly thereafter I started getting the above message again.
As I said there is a workaround - i set up Onedrive as a PWA and I can drag and drop from Nautilus to Onedrive, but I would really prefer to have Onedrive mounted in Nautilus. I have previously tried Onedriver but had problems with it.
I would appreciate any help. Thank you.

[Anduin2017]

Emmm.. Might be an issue to Gnome\Nautlus team.

[HSB-collab]

Dumb question but how do I bring it to the Gnome team's attention?
I spent 2 hours with Microsoft today and they claim it is something to do with the way the latest version of gnome implements the ms-graph api.

[Anduin2017]

The Microsoft 365 account is added through GNOME Online Accounts, but the actual OneDrive filesystem shown in Files is handled primarily by the OneDrive backend in GVfs. Nautilus is mostly the frontend displaying that mount. AnduinOS does not maintain a separate OneDrive implementation.

Therefore, the most appropriate upstream tracker is the GVfs issue tracker:

https://gitlab.gnome.org/GNOME/gvfs/-/issues

However, before concluding that this is a GNOME bug, it would be very useful to capture the actual backend response.

The literal message “Database Is Read Only” can also be returned by Microsoft Graph as an HTTP 403 response with:

code: accessDenied
innerError.code: serviceReadOnly

Therefore, this message does not necessarily mean that a local database on your computer has become read-only. It may be a OneDrive or SharePoint service/tenant state that GVfs is simply displaying. On the other hand, the fact that clearing the local state temporarily restores access means that a client-side caching or state-handling problem is still possible. We need the log to distinguish between them.

Please run the following command in Terminal:

G_MESSAGES_DEBUG=all GVFS_ONEDRIVE_DEBUG=1 \
  /usr/libexec/gvfsd -r -d 2>&1 | tee ~/gvfs-onedrive.log

Then:

1. Open Files.
2. Click the OneDrive entry.
3. Reproduce the error.
4. Return to Terminal and press Ctrl+C.

Please also collect the relevant package versions:

nautilus --version
gnome-shell --version

dpkg-query -W -f='${binary:Package}\t${Version}\n' \
  'gvfs*' 'gnome-online-accounts*' 'libmsgraph*' 2>/dev/null

Before publishing the log, please review and redact it carefully. It may contain your email address, file or folder names, Microsoft object IDs, or other account metadata.

If the log contains an HTTP 403 response with “accessDenied” and “serviceReadOnly”, please provide Microsoft support with:

• the exact timestamp;
• the affected Microsoft 365 account and tenant;
• the Graph endpoint, if shown;
• any request ID, client request ID, correlation ID, or diagnostic ID shown in the log.

In that case, the response itself was generated by Microsoft Graph, and Microsoft support would need to investigate why the drive or service was placed into that state.

If the log instead shows a local SQLite, filesystem permission, GVfs metadata, authentication, or cache error, please attach the sanitized log to a new GVfs issue.

Please post the upstream issue link here afterwards. I will keep this discussion open and track whether there is anything that needs to be changed or backported on the AnduinOS side.

[HSB-collab]

Thank you @Anduin2017 for such a detailed and quick response. I have the log but don't have time to sanitise it right now. I shall attach it when I do. But in summary, there is no HTTP 403 response. Also, Gemini's summary of the log is as follows:
"There are zero local SQLite locks, local cache failures, or Linux file permission denials present in this execution trace. The delay occurs during an active network session, proving that GVFS connects to the web, receives the "Database Is Read Only" string back from Microsoft's cloud infrastructure, and aborts the mount."

As I suspected, it looks like a Microsoft error but having spent 2 hours on a chat to them yesterday before I ran out of time, getting them to recognise it is a challenge. I shall try again (I don't know if I can do it before Monday)

[HSB-collab]

Here is the log
onedrive_log (1).txt

[Anduin2017]

Thank you for providing the log. I reviewed it against the exact GVfs 1.60.0 and libmsgraph 0.3.3 source code used by your system.

The log confirms that the mount reaches the network and fails during the initial Microsoft Graph drive-discovery operation. In this code path, GVfs calls:

GET https://graph.microsoft.com/v1.0/me/drives

libmsgraph then parses the returned JSON. If the response contains an error object, it copies only error.message into the GVfs error. Therefore, the message “Database Is Read Only” is not generated by a local SQLite database or by a local filesystem permission check. It comes from the error response received for the Microsoft Graph request.

There is one important correction: the current log does not prove that there was no HTTP 403 response. The previous diagnostic command did not enable libmsgraph’s HTTP logger, so neither the HTTP status nor the complete Graph error object was recorded.

Please run the following command once more:

MSG_DEBUG=1 G_MESSAGES_DEBUG=all GVFS_ONEDRIVE_DEBUG=1 \
  /usr/libexec/gvfsd -r -d 2>&1 | \
  tee ~/gvfs-onedrive-http-minimal.log

Then reproduce the mount failure and press Ctrl+C.

MSG_DEBUG=1 should record the request and HTTP status without recording the complete authorization headers or response body. Please do not publish raw logs created with MSG_DEBUG=2 or MSG_DEBUG=3, because those levels may expose the Microsoft OAuth bearer token and other private account data.

It would also be useful to sign in to Microsoft Graph Explorer with the same account and run:

GET /v1.0/me/drives

Please record only:

• the HTTP status;
• error.code;
• the most specific innerError.code;
• request-id;
• client-request-id, if present;
• the response date.

If Graph Explorer returns the same error, that independently reproduces the problem without GNOME, Nautilus, GVfs or AnduinOS being involved.

The fact that the OneDrive web application remains writable is also important. Please tell Microsoft support specifically that the web interface can still upload files while Microsoft Graph GET /v1.0/me/drives fails with “Database Is Read Only”.

There is also an upstream diagnostic limitation in libmsgraph: it currently discards the HTTP status and structured Graph error codes and exposes only the human-readable message. That should be reported separately upstream, but it does not appear to be the underlying cause of the Microsoft Graph failure.

[HSB-collab]

Thank you for sticking with this and the time and effort you have put in. I enclose the gvfs-onedrive-http-minimal.log. You are right - it has a 403 error.
The response from the Microsoft Graph Explorer is as follows:
the HTTP status; unauthorised
error.code; unauthenticated
the most specific innerError.code; The innerError just shows the date (2026-08-22 T20:14:12) and a request-id and client-request-id
request-id;
client-request-id, if present;
the response date.: 2026-08-22T20:14:12
I have not included the request-id or client-request-id because i am unclear whether these are confidential or not.

The problem certainly seems to be Microsoft. My challenge is now to get their support to recognise it. I have also noticed on my Android phone that a non-microsoft app (Solid Explorer) can't access my Onedrive, but the MS Onedrive can!

Once again thanks for all the help and for the best Linux distro of them all!

gvfs-onedrive-http-minimal.log