richdocumentscode icon indicating copy to clipboard operation
richdocumentscode copied to clipboard

Blank page and "loolmount incorrect user-name, other than 'lool'"

Open gcommit opened this issue 3 years ago • 31 comments

Installed: Ubuntu 18.04 Nextcloud 21.0.3 PHP 7.4 Apache2 2.4.48 Collabora Online (richdocuments) 4.1.2 Collabora Online CODE 6.4.1003

When i start a Nextcloud, go to App Store and install the two Collabora apps, everything is fine. In the settings i see a "Connected"

Bildschirmfoto 2021-07-12 um 15 56 55

But as soon as i want to open a document (or to reload my view of the document) the following output is generated:

web_1  | ==> /var/log/apache2/error.log <==
web_1  | [Mon Jul 12 13:52:51.973187 2021] [php7:notice] [pid 1147] [client 127.0.0.1:57640] richdocumentscode (proxy.php) error exit, PID: 1147, Message: Timed out opening local socket: 99 - Cannot assign requested address
web_1  | Security: loolforkit incorrect user-name, other than 'lool'
web_1  | Security: Check for the 'lool' username overridden on the command line.
web_1  | Init vcl
web_1  | preload: merged unordf ucpchelp1 msforms vbaobj pcr vbaswobj sw animcore hwp flash chartcore solver sc wpftcalc xof ucpcmis1 wpftdraw sd svgfilter evtatt graphicfilter wpftimpress sdfilt sm pdffilter PresentationMinimizer protocolhandler ucpdav1 wpftwriter msword writerfilter t602filter xmlfa basctl binaryurp uuresolver scd chartcontroller ldapbe2 dba sdbt deploymentgui migrationoo2 migrationoo3 xsltfilter sdd embobj emboleobj log expwrap odfflatxml textfd storagefd xmlfd frm fwl fwm io textconversiondlgs smd mozbootstrap oox scfilt slideshow proxyfac vclcanvas canvasfactory mtfrenderer simplecanvas dlgprov basprov stringresource dbaxml calc dbase flat writer reflection bootstrap introspection invocation invocadapt namingservice stocservices cached1 ucppkg1 srtrs1 ucptdoc1 xsltdlg swd cui bib guesslang numbertext offacc scn scriptframe dbpool2 xmlsecurity analysis date pricing fps_office i18nsearch xsec_xmlsec emfio vbaevents pdfimport mysql_jdbc ucpext hyphen spell lnth for ctl passwordcontainer svgio
web_1  | Absent (often optional): sm sm sm sm sm sm sm sm sm sm sm smd
web_1  | Disabled: ucpftp1 rptxml dbu rptui rpt mork odbc sdbc2 cmdmail syssh ucphier1 ucpimage PresenterScreen abp dbp updatefeed
web_1  | Whitelisted languages: de_DE el en_GB en_US es_ES fr_FR hu it nl pt_BR pt_PT ru
web_1  | Preloading dictionaries: de_DE en_US fr_FR it_IT nl_NL pt_BR [Mon Jul 12 13:52:54.588700 2021] [php7:warn] [pid 1145] [client 172.25.0.1:61196] PHP Warning:  file_get_contents(http://localhost:9983/hosting/capabilities): failed to open stream: HTTP request failed! in /var/www/nextcloud/apps/richdocumentscode/proxy.php on line 260
web_1  | ru_RU en_GB nl_BE pt_PT es_ES
web_1  | Preloading thesauri: de_DE en_US fr_FR it_IT nl_NL pt_BR ru_RU en_GB nl_BE pt_PT es_ES
web_1  | Preload icons
web_1  | Preload languages
web_1  | Preload fonts
web_1  | Ready to accept connections on port 9983.
web_1  |
web_1  |
web_1  | ==> /var/log/nextcloud.log <==
web_1  | {"reqId":"oU411yb5DWbdjVHA2kYL","level":2,"time":"2021-07-12T13:53:00+00:00","remoteAddr":"172.25.0.1","user":"admin","app":"no app in context","method":"GET","url":"/index.php/core/preview?fileId=101&c=60ec46878b41c&x=250&y=250&forceIcon=0&a=0","message":"Host localhost was not connected to because it violates local access rules","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15","version":"21.0.3.1"}
web_1  | {"reqId":"MSP4fR2bpi7Wh7qzVYG8","level":2,"time":"2021-07-12T13:53:00+00:00","remoteAddr":"172.25.0.1","user":"admin","app":"no app in context","method":"GET","url":"/index.php/core/preview?fileId=88&c=60ec466f7ba42&x=250&y=250&forceIcon=0&a=0","message":"Host localhost was not connected to because it violates local access rules","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.1.1 Safari/605.1.15","version":"21.0.3.1"}
web_1  |
web_1  | ==> /var/log/apache2/error.log <==
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.
web_1  | [Mon Jul 12 13:53:33.365271 2021] [php7:notice] [pid 157] [client 172.25.0.1:61474] richdocumentscode (proxy.php) error exit, PID: 157, Message: No content in reply from loolwsd. Is SSL enabled in error ?

Followed by

web_1  | ==> /var/log/apache2/error.log <==
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.
web_1  | Security: loolmount incorrect user-name, other than 'lool'
web_1  | Aborting.

with every try to open a document. It is running inside of docker container and the ports 80 and 443 are open.

What can i do? :(

gcommit avatar Jul 12 '21 13:07 gcommit

This issue still exists with 6.4.1004.

bb avatar Jul 16 '21 11:07 bb

I started a new Nextcloud (22.0.0). Installed "Collabora Online - Built-in CODE Server" and "Collabora Online" in newest Versions

Instant blank page

gcommit avatar Jul 16 '21 12:07 gcommit

Same problem here!

jman0815 avatar Jul 16 '21 12:07 jman0815

I've been searching for a solution, bug remains.

jhartmann44 avatar Jul 16 '21 12:07 jhartmann44

Can anyone say something? At least "Hello" ?

gcommit avatar Jul 19 '21 09:07 gcommit

Collabora 4.2.0 not working either.

pwojcieszonek avatar Jul 19 '21 18:07 pwojcieszonek

Same here on: Ubuntu 18.04.5 NC 20.0.9 PHP 7.4 Apache2 2.4.29 Collabora Online - Built-in CODE Server 6.4.806 (too many bugs with 6.4.10!) Collabora Online 3.8.3

manu-p avatar Jul 22 '21 09:07 manu-p

any news here?

gcommit avatar Jul 28 '21 13:07 gcommit

Can please someone answer? Not being able to open files is kind of critical in such a tool ...

gcommit avatar Jul 29 '21 13:07 gcommit

HELLO?

gcommit avatar Aug 04 '21 15:08 gcommit

Sorry, no insight on my side. I assume that some that may have, are on holidays..

cornouws avatar Aug 04 '21 20:08 cornouws

So we ... wait?

gcommit avatar Aug 13 '21 09:08 gcommit

Same for me. The editor opens, but I cannot save anything.

dmanea28 avatar Aug 16 '21 11:08 dmanea28

Same problem

EnderArchery avatar Sep 05 '21 13:09 EnderArchery

same problem! Is there any hint to fix this?

craiq avatar Sep 07 '21 19:09 craiq

unfortunately not .... sorry

gcommit avatar Sep 08 '21 14:09 gcommit

I have the same problem.

Is there a solution?

Michael-81 avatar Oct 11 '21 08:10 Michael-81

I edited proxy.php's launch cmd so that the AppImage is started with "--disable-lool-user-checking", but it gives me an error message "Option must not be given more than once: disable-lool-user-checking" and even segfaults from time to time. Pretty weird.

ssmid avatar Nov 12 '21 00:11 ssmid

After several reboots, server restarts, cleanups, ever changing logs, error messages and behaviour, I'm giving up. I was able to get an instance running one single time but the next time it's gone once more without having changed anything. I won't try anymore. Nextcloud is great; PHP, Javascript and web dev in general are certainly not. And AppImages seem to be just another mess.

ssmid avatar Nov 12 '21 01:11 ssmid

Well this issue still exists in Nextcloud 22. I think we will need to run our own colabra online server. This is the only solution I can think of. I was able to work properly in one of my install earlier but I don't remember how I did it.

pawanrai9999 avatar Nov 12 '21 02:11 pawanrai9999

I hit probably same issue. I am running nextcloud in the official docker container, installed both plugins from store and since I saw some missing libraries in logs, I installed them manually in the container (I think libfuse2 and libcap2). It didn't help.

[Sat Apr 02 15:58:45.516660 2022] [php:notice] [pid 35] [client 172.17.0.1:42922] richdocumentscode (proxy.php) error exit, PID: 35, Message: Timed out opening local socket: 99 - Cannot assign requested address
Security: coolforkit incorrect user-name, other than 'cool'
Security: --disable-cool-user-checking failed, coolforkit has some capabilities set.
Aborting.

mnn avatar Apr 02 '22 14:04 mnn

on Nextcloud 22.2.8 the error message still exist, but it seem to have no negative symptoms. Doc/Xls opening and saving works.

fds2610 avatar Jun 10 '22 13:06 fds2610

On Nextcloud Server 24.0.6 this still occurs.

dg1sek avatar Oct 11 '22 11:10 dg1sek

It seems to work fine now! -> Collabora Online - Built-in CODE Server 22.5.702 and Nextcloud Office 6.3.1. (Nextcloud Server 24.0.6)

juliennicouleaud avatar Oct 28 '22 08:10 juliennicouleaud

I had the same problem with Nextcloud 25.0.1. If this can help, I resolved the problem by allowing TSLv1.2 in apache. I planned to only accept v1.3 but it seems that it's a problem for the app (curl errors in Logging).

Stef976 avatar Nov 18 '22 15:11 Stef976

I was having this issue with nextcloud docker 25.0.1, CODE 22.5.802, NC Office 7.0.1 when it was working before on the same versions. My error is slightly different in that it says cool instead of lool

Logging at warning level to file: /tmp/coolwsd.4hwBvUCWJL/coolwsd.log
172.16.176.4 -  23/Nov/2022:21:42:25 +0000 "GET /custom_apps/richdocumentscode/proxy.php" 200
172.16.176.4 -  23/Nov/2022:21:42:30 +0000 "GET /custom_apps/richdocumentscode/proxy.php" 200
172.16.176.4 -  23/Nov/2022:21:42:31 +0000 "GET /custom_apps/richdocumentscode/proxy.php" 200
NOTICE: PHP message: richdocumentscode (proxy.php) error exit, PID: 56, Message: Timed out opening local socket: 99 - Cannot assign requested address
172.16.176.4 -  23/Nov/2022:21:42:31 +0000 "GET /custom_apps/richdocumentscode/proxy.php" 400
172.16.176.4 -  23/Nov/2022:21:42:30 +0000 "GET /index.php" 200
172.16.176.4 -  23/Nov/2022:21:42:31 +0000 "GET /index.php" 200
172.16.176.4 -  23/Nov/2022:21:42:39 +0000 "GET /ocs/v2.php" 200
172.16.176.4 -  23/Nov/2022:21:42:40 +0000 "GET /index.php" 302
172.16.176.4 -  23/Nov/2022:21:42:40 +0000 "GET /index.php" 200
Security: coolforkit incorrect user-name, other than 'cool'
Init vcl

Oddly enough, I was able to fix this by navigating to /settings/admin/richdocuments and spam clicking the "Use built in code" radio button. When I had issues before, usually clicking this radio button once would often fix it, but this is the first time I needed to click it many times quickly to resolve the issue.

stephen304 avatar Nov 23 '22 21:11 stephen304

Is this ever getting fixed? Version 22.5.802 + Nextcloud 25.0.4 , I mean real fix, not just some random sudden work thing.

nextcloud_web.1.y10dropjdghm@homelab    | Forced Exit with code: 70
nextcloud_web.1.y10dropjdghm@homelab    | Security: coolmount incorrect user-name, other than 'cool'
nextcloud_web.1.y10dropjdghm@homelab    | Aborting.
nextcloud_web.1.y10dropjdghm@homelab    | Security: coolmount incorrect user-name, other than 'cool'
nextcloud_web.1.y10dropjdghm@homelab    | Aborting.
nextcloud_web.1.y10dropjdghm@homelab    | Security: coolmount incorrect user-name, other than 'cool'
nextcloud_web.1.y10dropjdghm@homelab    | Aborting.

martadinata666 avatar Mar 11 '23 09:03 martadinata666

Also getting the coolmount incorrect user-name, other than 'cool' error on Nextcloud version 26.0.0 using the following deployment script: https://github.com/tomMoulard/make-my-server/blob/master/nextcloud/docker-compose.nextcloud.yml

But the strange this is on a different server using the same deployment file it works as expected :thinking:

SailReal avatar Mar 30 '23 14:03 SailReal

This is really discouraging that this still isn't working.

SysEngDan avatar Apr 29 '23 16:04 SysEngDan

Security: coolmount incorrect user-name, other than 'cool' – Aborting. is expexted, because it is a security check. In case of richdocumentscode the service is running by the user of the webserver (e.g. www-data) not by cool. I wonder why coolmount is invoked though, I would think it's a mistake, because we pass the --o:mount_jail_tree="false" in command line, when we start coolwsd. Having said that, I think it's still a red herring, because if bind mount fails, we fall back to link/copy, and it should work. It works for many people. So it's hard to tell what exactly should be fixed.

timar avatar May 02 '23 09:05 timar