Files inside a shared folder are not listed (shared link) - SAML

[andrem1987]

Steps to reproduce

1. Choose a folder with some files in it
2. Share the folder via link
3. Open the shared link with Firefox/Chrome/Edge

Expected behaviour

The files inside the shared folder should be listed

Actual behaviour

In Firefox you simply dont see any files listed. If you open the Shared Link with Chrome or Edge an authentication-Popup appears.
A login ist not possible. After canceling the popup you see an empty folder.

If you click the Download button in the top right edge
the zip file will be generated and downloaded. The zip file contains all files.

Server configuration

Operating system: Debian 9.2

Web server: Apache 2.4

Database: MySQL

PHP version: php7.0-fpm

Nextcloud version: 12.0.3

Updated from an older Nextcloud/ownCloud or fresh install: Updated from Version 12.0.2

Where did you install Nextcloud from: Website Download-Link

Signing status:

Signing status

No errors have been foun

List of activated apps:

App list

If you have access to your command line run e.g.:
  - activity: 2.5.2
  - comments: 1.2.0
  - dav: 1.3.0
  - deck: 0.2.4
  - federatedfilesharing: 1.2.0
  - federation: 1.2.0
  - files: 1.7.2
  - files_accesscontrol: 1.2.5
  - files_automatedtagging: 1.2.2
  - files_markdown: 2.0.1
  - files_pdfviewer: 1.1.1
  - files_retention: 1.1.2
  - files_sharing: 1.4.0
  - files_texteditor: 2.4.1
  - files_trashbin: 1.2.0
  - files_versions: 1.5.0
  - files_videoplayer: 1.1.0
  - gallery: 17.0.0
  - groupfolders: 1.1.0
  - logreader: 2.0.0
  - lookup_server_connector: 1.0.0
  - nextcloud_announcements: 1.1
  - notes: 2.3.1
  - notifications: 2.0.0
  - oauth2: 1.0.5
  - password_policy: 1.2.2
  - previewgenerator: 1.0.7
  - provisioning_api: 1.2.0
  - serverinfo: 1.2.0
  - sharebymail: 1.2.0
  - survey_client: 1.0.0
  - systemtags: 1.2.0
  - theming: 1.3.0
  - twofactor_backupcodes: 1.1.1
  - updatenotification: 1.2.0
  - user_ldap: 1.2.1
  - user_saml: 1.4.0
  - workflowengine: 1.2.0
Disabled:
  - admin_audit
  - encryption
  - files_external
  - firstrunwizard
  - user_external

from within your Nextcloud installation folder

Nextcloud configuration:

Config report

{
    "system": {
        "instanceid": "ocgxapsk7gd1",
        "passwordsalt": "***REMOVED SENSITIVE VALUE***",
        "secret": "***REMOVED SENSITIVE VALUE***",
        "trusted_domains": [
            "cloud.lklg.net"
        ],
        "datadirectory": "\/opt\/cloud-data",
        "overwrite.cli.url": "https:\/\/cloud.lklg.net",
        "dbtype": "mysql",
        "version": "12.0.3.3",
        "dbname": "***REMOVED SENSITIVE VALUE***",
        "dbhost": "***REMOVED SENSITIVE VALUE***",
        "dbport": "",
        "dbtableprefix": "oc_",
        "dbuser": "***REMOVED SENSITIVE VALUE***",
        "dbpassword": "***REMOVED SENSITIVE VALUE***",
        "installed": true,
        "ldapIgnoreNamingRules": false,
        "ldapProviderFactory": "\\OCA\\User_LDAP\\LDAPProviderFactory",
        "forcessl": true,
        "forceSSLforSubdomains": true,
        "memcache.local": "\\OC\\Memcache\\APCu",
        "mail_smtpmode": "smtp",
        "mail_smtpauthtype": "LOGIN",
        "mail_from_address": "***REMOVED SENSITIVE VALUE***",
        "mail_domain": "***REMOVED SENSITIVE VALUE***",
        "mail_smtphost": "***REMOVED SENSITIVE VALUE***",
        "maintenance": false,
        "loglevel": 2,
        "log_query": true,
        "theme": ""
    }
}

Are you using external storage, if yes which one: local/smb/sftp/...

Are you using encryption: yes/no

Are you using an external user-backend, if yes which one: LDAP/SAML_saml

Client configuration

Browser: Firefox/Chrome/Edge

Operating system: Windows 10, Windows Server 2016, Kubuntu 16.04

Logs

Web server error log

Web server error log

Insert your webserver log here

Nextcloud log (data/nextcloud.log)

Nextcloud log

Insert your Nextcloud log here

Browser log

Browser log

Insert your browser log here, this could for example include:

a) The javascript console log
b) The network log
c) ...

[blizzz]

@LukasReschke

[LukasReschke]

Can you share or email us an example link? Thanks a lot! :)

[andrem1987]

Hey Lukas,

tanks for your reply. Should i use the contact-form from the Nextcloud-Homepage or is there a public mail-address for this purpose?

[LukasReschke]

Judging from the URL you posted earlier, this is a setup issue and not related to the Nextcloud software. Also sending a GET request to curl https://cloud.*******.net/public.php/webdav/ -u test -v fails with:

<?xml version="1.0" encoding="utf-8"?>
<d:error xmlns:d="DAV:" xmlns:s="http://sabredav.org/ns">
  <s:exception>Sabre\DAV\Exception\NotAuthenticated</s:exception>
  <s:message>No 'Authorization: Basic' header found. Either the client didn't send one, or the server is misconfigured</s:message>
</d:error>
* Connection #0 to host cloud.******.net left intact

Try to enable the .htaccess using AllowOverride all as your web server is likely configured to not pass the basic authorization headers through. But this is a topic for our forum at https://help.nextcloud.com or alternatively a support subscription

In addition, you may want to configure your instance to properly detect the proxy in front:

server/config/config.sample.php

Lines 1424 to 1443 in 79c9439

	/**
	* List of trusted proxy servers
	*
	* If you configure these also consider setting `forwarded_for_headers` which
	* otherwise defaults to `HTTP_X_FORWARDED_FOR` (the `X-Forwarded-For` header).
	* Defaults to an empty array.
	*/
	'trusted_proxies' => array('203.0.113.45', '198.51.100.128'),
	/**
	* Headers that should be trusted as client IP address in combination with
	* `trusted_proxies`. If the HTTP header looks like 'X-Forwarded-For', then use
	* 'HTTP_X_FORWARDED_FOR' here.
	*
	* If set incorrectly, a client can spoof their IP address as visible to
	* Nextcloud, bypassing access controls and making logs useless!
	*
	* Defaults to ``'HTTP_X_FORWARED_FOR'``
	*/
	'forwarded_for_headers' => array('HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR'),

[andrem1987]

I'm ambarrassed. We configured AllowOverride to None. After changing it to All it runs like a charm. Many thanks!