richdocuments NotPermittedException Invalid password #5199
Description
- External SHare links unable to open office documents such as .docx or .pptx. PDF is working fine.
Expected behavior
Open Document
Actual behavior
Infinite load of the document
Other information
Host OS
Ubuntu 24
Output of sudo docker info
sudo docker info
Client: Docker Engine - Community
Version: 28.5.2
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.29.1
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.40.3
Path: /usr/libexec/docker/cli-plugins/docker-compose
Server:
Containers: 13
Running: 12
Paused: 0
Stopped: 1
Images: 14
Server Version: 28.5.2
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Using metacopy: false
Native Overlay Diff: true
userxattr: false
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
CDI spec directories:
/etc/cdi
/var/run/cdi
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 442cb34bda9a6a0fed82a2ca7cade05c5c749582
runc version: v1.3.3-0-gd842d771
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.11.0-29-generic
Operating System: Ubuntu 24.10
OSType: linux
Architecture: x86_64
CPUs: 6
Total Memory: 15.25GiB
Name: OpenCloud
ID: 438c5de4-c3bb-466a-a2b2-8aa06362304e
Docker Root Dir: /var/lib/docker
Debug Mode: false
Experimental: false
Insecure Registries:
::1/128
127.0.0.0/8
Live Restore Enabled: false
Docker run command or docker-compose file that you used
Compose
Output of sudo docker logs nextcloud-aio-mastercontainer
Trying to fix docker.sock permissions internally...
Creating docker group internally with id 988
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
/usr/lib/python3.12/site-packages/supervisor/options.py:13: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
import pkg_resources
[Mon Nov 24 14:52:57.614831 2025] [mpm_event:notice] [pid 158:tid 158] AH00489: Apache/2.4.65 (Unix) OpenSSL/3.5.4 configured -- resuming normal operations
[Mon Nov 24 14:52:57.614902 2025] [core:notice] [pid 158:tid 158] AH00094: Command line: 'httpd -D FOREGROUND'
{"level":"info","ts":1763995977.6259384,"msg":"maxprocs: Leaving GOMAXPROCS=6: CPU quota undefined"}
{"level":"info","ts":1763995977.626238,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":9159557529,"previous":9223372036854775807}
{"level":"info","ts":1763995977.6263168,"msg":"using config from file","file":"/Caddyfile"}
[24-Nov-2025 14:52:57] NOTICE: fpm is running, pid 163
[24-Nov-2025 14:52:57] NOTICE: ready to handle connections
{"level":"info","ts":1763995977.628256,"msg":"adapted config to JSON","adapter":"caddyfile"}
{"level":"info","ts":1763995977.630761,"msg":"serving initial configuration"}
[24-Nov-2025 20:58:33] WARNING: [pool www] child 44071 exited on signal 9 (SIGKILL) after 13.237561 seconds from start
[24-Nov-2025 20:58:33] NOTICE: [pool www] child 44083 started
[24-Nov-2025 20:58:46] WARNING: [pool www] child 44083 exited on signal 9 (SIGKILL) after 12.560535 seconds from start
[24-Nov-2025 20:58:46] NOTICE: [pool www] child 44097 started
[24-Nov-2025 20:58:59] WARNING: [pool www] child 44097 exited on signal 9 (SIGKILL) after 13.656314 seconds from start
[24-Nov-2025 20:59:00] NOTICE: [pool www] child 44103 started
[24-Nov-2025 20:59:13] WARNING: [pool www] child 44103 exited on signal 9 (SIGKILL) after 13.393268 seconds from start
[24-Nov-2025 20:59:14] NOTICE: [pool www] child 44114 started
[24-Nov-2025 20:59:28] WARNING: [pool www] child 44114 exited on signal 9 (SIGKILL) after 13.653644 seconds from start
[24-Nov-2025 20:59:34] NOTICE: [pool www] child 44121 started
[24-Nov-2025 20:59:51] WARNING: [pool www] child 44121 exited on signal 9 (SIGKILL) after 17.612037 seconds from start
[24-Nov-2025 20:59:51] NOTICE: [pool www] child 44133 started
[24-Nov-2025 21:00:05] WARNING: [pool www] child 44133 exited on signal 9 (SIGKILL) after 14.363342 seconds from start
[24-Nov-2025 21:00:06] NOTICE: [pool www] child 44145 started
[24-Nov-2025 21:00:23] WARNING: [pool www] child 44145 exited on signal 9 (SIGKILL) after 17.465944 seconds from start
[24-Nov-2025 21:00:27] NOTICE: [pool www] child 44157 started
[24-Nov-2025 21:00:56] WARNING: [pool www] child 44157 exited on signal 9 (SIGKILL) after 29.397681 seconds from start
[24-Nov-2025 21:01:04] NOTICE: [pool www] child 44168 started
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
/usr/lib/python3.12/site-packages/supervisor/options.py:13: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
import pkg_resources
{"level":"info","ts":1764058643.2225015,"msg":"maxprocs: Leaving GOMAXPROCS=6: CPU quota undefined"}
{"level":"info","ts":1764058643.2228167,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":14735027404,"previous":9223372036854775807}
{"level":"info","ts":1764058643.2229104,"msg":"using config from file","file":"/Caddyfile"}
{"level":"info","ts":1764058643.229616,"msg":"adapted config to JSON","adapter":"caddyfile"}
{"level":"info","ts":1764058643.2424107,"msg":"serving initial configuration"}
[Tue Nov 25 08:17:23.247657 2025] [mpm_event:notice] [pid 144:tid 144] AH00489: Apache/2.4.65 (Unix) OpenSSL/3.5.4 configured -- resuming normal operations
[Tue Nov 25 08:17:23.247711 2025] [core:notice] [pid 144:tid 144] AH00094: Command line: 'httpd -D FOREGROUND'
[25-Nov-2025 08:17:23] NOTICE: fpm is running, pid 153
[25-Nov-2025 08:17:23] NOTICE: ready to handle connections
[25-Nov-2025 13:57:40] NOTICE: Terminating ...
[25-Nov-2025 13:57:40] NOTICE: exiting, bye-bye!
[Tue Nov 25 13:57:43.275717 2025] [mpm_event:notice] [pid 144:tid 144] AH00491: caught SIGTERM, shutting down
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
/usr/lib/python3.12/site-packages/supervisor/options.py:13: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
import pkg_resources
[Tue Nov 25 13:57:46.390311 2025] [mpm_event:notice] [pid 142:tid 142] AH00489: Apache/2.4.65 (Unix) OpenSSL/3.5.4 configured -- resuming normal operations
[Tue Nov 25 13:57:46.390373 2025] [core:notice] [pid 142:tid 142] AH00094: Command line: 'httpd -D FOREGROUND'
{"level":"info","ts":1764079066.4138217,"msg":"maxprocs: Leaving GOMAXPROCS=6: CPU quota undefined"}
{"level":"info","ts":1764079066.4141505,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":14735027404,"previous":9223372036854775807}
{"level":"info","ts":1764079066.4142308,"msg":"using config from file","file":"/Caddyfile"}
{"level":"info","ts":1764079066.4163554,"msg":"adapted config to JSON","adapter":"caddyfile"}
[25-Nov-2025 13:57:46] NOTICE: fpm is running, pid 147
[25-Nov-2025 13:57:46] NOTICE: ready to handle connections
{"level":"info","ts":1764079066.4193523,"msg":"serving initial configuration"}
[25-Nov-2025 14:13:13] NOTICE: Terminating ...
[25-Nov-2025 14:13:13] NOTICE: exiting, bye-bye!
[Tue Nov 25 14:13:15.037365 2025] [mpm_event:notice] [pid 142:tid 142] AH00491: caught SIGTERM, shutting down
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080
If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
/usr/lib/python3.12/site-packages/supervisor/options.py:13: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
import pkg_resources
{"level":"info","ts":1764080025.674169,"msg":"maxprocs: Leaving GOMAXPROCS=6: CPU quota undefined"}
{"level":"info","ts":1764080025.6749337,"msg":"GOMEMLIMIT is updated","package":"github.com/KimMachineGun/automemlimit/memlimit","GOMEMLIMIT":14735016345,"previous":9223372036854775807}
{"level":"info","ts":1764080025.675017,"msg":"using config from file","file":"/Caddyfile"}
{"level":"info","ts":1764080025.679739,"msg":"adapted config to JSON","adapter":"caddyfile"}
[Tue Nov 25 14:13:45.683954 2025] [mpm_event:notice] [pid 148:tid 148] AH00489: Apache/2.4.65 (Unix) OpenSSL/3.5.4 configured -- resuming normal operations
[Tue Nov 25 14:13:45.684112 2025] [core:notice] [pid 148:tid 148] AH00094: Command line: 'httpd -D FOREGROUND'
{"level":"info","ts":1764080025.691936,"msg":"serving initial configuration"}
[25-Nov-2025 14:13:45] NOTICE: fpm is running, pid 154
[25-Nov-2025 14:13:45] NOTICE: ready to handle connections
Other valuable info
{"reqId":"B3eHka9UNSJ0e4yTQlVR","level":3,"time":"2025-11-25T14:23:34+00:00","remoteAddr":"2401:4900:7c7d:324:ac51:38e6:7eb6:a440","user":"--","app":"richdocuments","method":"POST","url":"/apps/richdocuments/token","message":"Failed to generate token for file","userAgent":"Mozilla/5.0 (Android 16; Mobile; rv:145.0) Gecko/145.0 Firefox/145.0","version":"32.0.2.2","exception":{"Exception":"OCP\Files\NotPermittedException","Message":"Invalid password","Code":0,"Trace":[{"file":"/var/www/html/custom_apps/richdocuments/lib/Controller/DocumentController.php","line":390,"function":"getFileForShare","class":"OCA\Richdocuments\Controller\DocumentController","type":"->","args":[{"class":"OC\Share20\Share"},372720,null]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":204,"function":"token","class":"OCA\Richdocuments\Controller\DocumentController","type":"->","args":[372720,"tP5NcJTXMffCjY7",null,null]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":118,"function":"executeController","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Richdocuments\Controller\DocumentController"},"token"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":153,"function":"dispatch","class":"OC\AppFramework\Http\Dispatcher","type":"->","args":[{"class":"OCA\Richdocuments\Controller\DocumentController"},"token"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":321,"function":"main","class":"OC\AppFramework\App","type":"::","args":["OCA\Richdocuments\Controller\DocumentController","token",{"class":"OC\AppFramework\DependencyInjection\DIContainer"},{"_route":"richdocuments.document.token"}]},{"file":"/var/www/html/lib/base.php","line":1061,"function":"match","class":"OC\Route\Router","type":"->","args":["/apps/richdocuments/token"]},{"file":"/var/www/html/index.php","line":25,"function":"handleRequest","class":"OC","type":"::","args":[]}],"File":"/var/www/html/custom_apps/richdocuments/lib/Controller/DocumentController.php","Line":453,"message":"Failed to generate token for file","exception":[],"CustomMessage":"Failed to generate token for file"},"id":"6925bbf60eaa9"}