The library mcrypt is not available.

[Squirkiz]

Hello there, I'm dealing with an issue regarding the library mcrypt when activating app SSO/SAML. I hope this hasn't already been asked to death.
The only relevant information I found about my issue has been discussed in user_saml sub-github there but I failed to adapt the solution they offered (downgrading to php 7.0). So I was wondering if someone here ran into the issue and found a way to fix it in the official ova.
It used to work, I'd say before May (probably when the version upgraded from Ubuntu 16.04 to 18.04) but I can't make it work with my new fresh install.

Thanks in advance for your time !

Steps to reproduce

1. Fresh install of latest Ubuntu-Nextcloud OVA
2. Activate and setup LDAP
3. Activate "SSO & SAML authentification" app

Expected behaviour

The app should download itself.

Actual behaviour

Refuses to download and displays

"App "SSO & SAML authentication" cannot be installed because the following dependencies are not fulfilled: The library mcrypt is not available."

Server configuration

Server version:
Server version: 13.0.5
Installed from OVA from https://www.techandme.se/nextcloud-vm/

How did you install the VM?
I used the provided script

Logs / Screenshots

Log file (/mnt/ncdata/nextcloud.log)

https://hastebin.com/elofimukin.json

https://imgur.com/a/Zp7bPD8

[enoch85]

It's been deprecated in PHP 7.2.

Here's the first hit on Google: https://askubuntu.com/a/1037418

[enoch85]

But, maybe we should include it in the VM...

[Squirkiz]

Hi @enoch85, thanks for your reply :)
Yes, I've actually read the thread you linked me, I was wondering if there was a recommended way to fix the issue. For now, I'll try to downgrade php version manually.

I appreciate you labelled this as possible enhancement. Thanks for your work !

[enoch85]

For now, I'll try to downgrade php version manually. Not recommended.

Why not use PECL as instructed instead?

You can still install the mcrypt extension using pecl

[enoch85]

Had a look at mcrypt. We will not use it in the VM as it's considered abandonware and is no longer maintained.

I suggest you post an issue in repository for the SSO & SAML authentication App instead, asking them to implement a secure method, I suggest to use a key binding encryption just like OpenSSL. This also looks promising.

[Squirkiz]

Why not use PECL as instructed instead?

For some reason, PEAR doesn't work on my setup :
ncadmin@fridafs12:~$ sudo pecl install mcrypt-1.0.1 No releases available for package "pecl.php.net/mcrypt" install failed
I suspect name resolution configuration but I don't believe it has anything to do with the ova itself.

I suggest you post an issue in repository for the SSO & SAML authentication App instead, asking them to implement a secure method,

Nextcloud team seems to be aware of the situation as suggested here and there

[enoch85]

Nextcloud team seems to be aware of the situation as suggested here and there

Great! Then it's just a matter of time I guess. :)