CalDAV calender log in issue

Workspace
1

Docker installed self hosted version using the bundled scripts.

I’ve done a clean install and then ported existing calendars and documents across.

Third party CalDAV apps can no long log in, looking at the log on the community server I see:

ERROR: Error login response: {‘value’: ‘false’, ‘message’: ‘Error: TrustFailure (Authentication failed, see inner exception.)’}

For each attempt to log in (radicale.log)

I’ve tried both the old and new passwords without luck. The strange thing is that it very occasionally does sync (or at least the client doesn’t error out) but the vast majority of times it fails. That could be a red herring.

As clients trried Evolution, Thunderbird’s calendar and an Android CalDAV sync app all show the same issue.

2

Hello DigNZ.

Please make a screenshot of an error which appears when you are trying to synchronize calendars via CalDAV.

Also please go to portal settings > Customization > DNS Settings > set here your portal domain name via https://yourdomain.com. Please reproduce the issue and send us entire radicale.log file.

3

Hi, Thanks for looking into this.

There is no specific error shown in Thunderbird, it just asks for the password again. My CalDAV app on android say Authentication Error.

The domain was already set up on the portal settings.

Here is the radicale logs with my domain and my email replaced with *s.

I picked a calendar from the web interface and got the CalDAV link and then added that to Thunderbird and the log in failed, I then checked the same password in an incognito window to log into the web interface again successfully.

These are all the entries in the radicale.log from doing that.

2021-10-26 19:32:43,872 - [7fadfffff700] INFO: GET request for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f' received from '172.18.0.1' (forwarded by 127.0.0.1)

2021-10-26 19:32:43,875 - [7fadfffff700] INFO: Auth token: 'ASC radicale:20211026193243:ACkscjTwbF/yluu70hkqpNc+e/M='

2021-10-26 19:32:43,878 - [7fadfffff700] INFO: Remote host: 'docs.************.**.**'

2021-10-26 19:32:43,901 - [7fadfffff700] INFO: Successful login: 'nick@************.**.**' -> 'nick@************.**.**@docs.************.**.**'

2021-10-26 19:32:48,064 - [7fadfffff700] INFO: GET response status for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f' in 4.193 seconds: 200 OK

2021-10-26 19:33:29,751 - [7fadfffff700] INFO: PROPFIND request for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' received from '103.242.25.144' (forwarded by 127.0.0.1) using 'Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0'

2021-10-26 19:33:29,755 - [7fadfffff700] INFO: Rights: '':'nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f' doesn't match any section

2021-10-26 19:33:29,757 - [7fadfffff700] INFO: Rights: '':'nick@************.**.**@docs.************.**.**' doesn't match any section

2021-10-26 19:33:29,760 - [7fadfffff700] INFO: Access to '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' denied for anonymous user

2021-10-26 19:33:29,763 - [7fadfffff700] INFO: PROPFIND response status for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' in 0.012 seconds: 401 Unauthorized

2021-10-26 19:33:40,524 - [7fadfffff700] INFO: PROPFIND request for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' received from '103.242.25.144' (forwarded by 127.0.0.1) using 'Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0'

2021-10-26 19:33:40,528 - [7fadfffff700] INFO: Auth token: 'ASC radicale:20211026193340:CG29PSsGsyHWzz8yiiCmDaH18KE='

2021-10-26 19:33:40,531 - [7fadfffff700] INFO: Remote host: 'docs.************.**.**'

2021-10-26 19:33:40,547 - [7fadfffff700] ERROR: Error login response: {'value': 'false', 'message': 'Error: TrustFailure (Authentication failed, see inner exception.)'}

2021-10-26 19:33:40,550 - [7fadfffff700] INFO: Failed login attempt: 'nick@************.**.**'

2021-10-26 19:33:41,055 - [7fadfffff700] INFO: PROPFIND response status for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' in 0.531 seconds: 401 Unauthorized

2021-10-26 19:33:41,102 - [7fadfffff700] INFO: PROPFIND request for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' received from '103.242.25.144' (forwarded by 127.0.0.1) using 'Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0'

2021-10-26 19:33:41,106 - [7fadfffff700] INFO: Auth token: 'ASC radicale:20211026193341:jgvrUN7+OW9knFWLkrezz9VGWvA='

2021-10-26 19:33:41,109 - [7fadfffff700] INFO: Remote host: 'docs.************.**.**'

2021-10-26 19:33:41,124 - [7fadfffff700] ERROR: Error login response: {'value': 'false', 'message': 'Error: TrustFailure (Authentication failed, see inner exception.)'}

2021-10-26 19:33:41,128 - [7fadfffff700] INFO: Failed login attempt: 'nick@************.**.**'

2021-10-26 19:33:42,111 - [7fadfffff700] INFO: PROPFIND response status for '/nick@************.**.**@docs.************.**.**/62417450-a36d-4109-8036-143a24e7af8f/' with depth '0' in 1.009 seconds: 401 Unauthorized
4

Please let us know your installation type (docker, exe, package) and portal components versions. Could you please double check that Custom domain name is set like https://yourdomain.com

5

Hi,

Its Docker,

The interface shows:
Version 11.5.4.1582

Docker builds:
communityserver: 11.5.4.1582
controlpanel: 3.0.2.395
documentserver: 6.4.0.121

The custom domain was NOT set like that (with a protocol) I’ve added that and saved but still have the same problem.

6

Hello DigNZ.
Please reproduce the issue and send us whole Community server logs folder (/app/onlyoffice/CommunityServer/logs/). Also point us to exact time of the issue reproducing so we are able to quick search it in the logs.

8

Thank you for provided logs. It looks like your server cannot get access to his own external address. The server makes a request for this address, but cannot reach it: https://docs.************nz/api/2.0/authentication/login
(I blurred the portal address a little. If you want, you can edit your last post and remove the link to your logs, I have already downloaded it)

Probably this issue is related to installation process. Did you use totally clean server? I mean no other apps are installed on the server? Also please double check that firewall\proxy doesn’t interrupt portal work.

9

Totally clean server but then restored data from an older onlyoffice installation in order preserve documents etc.,

I’ve updated today (it just updated the documentserver) and restarted and it hasn’t fixed it. Getting a 404 error with the hidden error messages page if I visit that authentication link directly, some other api end points seem to be working fine. I tried accessing the external address from the server and from inside the community server docker container and it seemed to work (i.e., wget the home page returned the html I would expect) in both cases.

Should that link /api/2.0/authentication/login be returning something other than an error if accessed directly?

10

Hello DigNZ.
Could you please reproduce the issue and provide us with Community server logs folder one more time.

11

Thank you for valuable data. We started fix creating for this issue. We are planning to release the fix as part of next Community Server version by the end of this year.